Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
File: QCAZkETFTCN5A_ZW-DsmQMLR30U.mft (raw, json)
Hash identifier: 4DMFfVcNXW8AkxrKOvFeCLbjR2FrZvhyl7rtJEU9v88=
Subject key identifier: 3A:5B:BB:B4:16:B7:45:44:5E:4E:7F:52:FF:13:35:97:BF:2A:D0:62
Authority key identifier: 40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
Certificate issuer: /CN=4020199044c54c237903f656f83b2640c2d1df45
Certificate serial: 01965801EAC93DA0AE0AA0C370D836EC2380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
Manifest number: 095A
Signing time: Mon 21 Apr 2025 11:00:42 +0000
Manifest this update: Mon 21 Apr 2025 11:00:42 +0000
Manifest next update: Tue 22 Apr 2025 11:00:42 +0000
Files and hashes: 1: QCAZkETFTCN5A_ZW-DsmQMLR30U.crl (hash: iPJzvDFFEXCHJVt4oMWxj+Ul09WQfj87n2tq9pgD360=)
2: i1vQfq5K6A-H06YMbg-F_fjtfl4.roa (hash: +8kYxsIrdCv4MUOM8YLp4u35KK9tvU6LHvc0dzsNKRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:ea:c9:3d:a0:ae:0a:a0:c3:70:d8:36:ec:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4020199044c54c237903f656f83b2640c2d1df45
Validity
Not Before: Apr 21 11:00:42 2025 GMT
Not After : Apr 22 11:00:42 2025 GMT
Subject: CN=3a5bbbb416b745445e4e7f52ff133597bf2ad062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:ac:e0:e6:dd:9f:55:84:78:ad:a7:b9:04:
2e:15:a0:2b:2d:50:06:af:10:3c:0c:fc:dc:b7:40:
ef:2a:96:65:36:a6:a7:a2:25:10:47:bc:a8:1e:b1:
ee:ab:54:10:c2:f1:34:46:5a:2f:59:19:11:dc:96:
09:b2:58:29:06:f1:78:86:4c:74:62:0b:40:f8:83:
c9:dc:ad:34:1d:04:9a:27:b3:04:70:7c:6c:8f:25:
b5:43:f5:33:ac:6a:22:93:5a:1c:5f:26:f5:5d:48:
74:72:8d:d2:f8:b5:6d:62:d2:60:20:94:d9:32:f2:
e8:69:f1:ac:0c:d2:f7:d4:43:ff:88:98:5b:9d:c8:
65:18:17:d5:22:5d:5a:37:82:51:f2:0d:f6:eb:28:
c0:c0:99:b9:c7:7b:47:c9:45:e0:97:e4:84:a5:05:
cd:4a:f2:34:04:89:66:4c:78:9a:dc:ee:ac:a8:20:
51:93:76:c3:34:1a:4d:9a:d9:f2:84:99:ab:43:76:
37:ae:1a:8a:5d:18:23:08:a1:e1:87:e4:20:cd:da:
7e:9c:9d:56:3a:f0:c6:a2:2a:cf:fd:10:b5:8b:c0:
1a:98:c8:f8:e8:12:a5:af:37:7f:a4:58:0a:bc:b4:
ae:9c:60:53:db:b1:11:4f:55:6d:de:25:7c:a5:e4:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:BB:B4:16:B7:45:44:5E:4E:7F:52:FF:13:35:97:BF:2A:D0:62
X509v3 Authority Key Identifier:
keyid:40:20:19:90:44:C5:4C:23:79:03:F6:56:F8:3B:26:40:C2:D1:DF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCAZkETFTCN5A_ZW-DsmQMLR30U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4ba0dc-4702-47c1-ba9e-4b750bbc6167/1/QCAZkETFTCN5A_ZW-DsmQMLR30U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ae:f1:e7:94:d1:ae:1c:53:36:e5:15:91:ec:5e:0c:2f:1b:
34:24:b0:b1:1e:87:5a:bf:d0:c6:83:12:96:47:c2:23:5d:87:
83:16:cf:63:aa:78:fa:8d:5f:cc:09:55:5c:2d:dc:cf:f1:45:
ca:13:6b:3e:e0:81:73:b7:dd:dd:58:1b:5b:23:9b:fd:b0:9c:
40:07:5b:e8:f4:b8:75:1c:b4:b6:9e:78:0a:28:1a:c8:9b:8b:
f1:63:e8:6e:4b:df:a4:c2:e0:4c:16:3d:00:23:5d:30:70:52:
c5:d2:82:50:e8:e8:6f:f2:51:fe:5a:4c:75:62:bc:e0:23:31:
dc:2f:25:80:6b:6d:3a:d8:af:25:4a:ef:6f:d9:19:1e:d5:e7:
b8:ad:ab:50:89:ba:ec:97:b8:ef:1e:58:e1:e6:52:e4:b1:64:
95:27:c8:ae:c2:25:af:89:67:09:91:df:20:8d:50:f2:ab:b7:
38:3f:34:6a:ab:d2:61:5b:81:73:79:3e:f0:e5:0f:a8:cb:93:
0a:1d:98:be:ae:b4:88:17:7a:22:39:f6:e7:8a:f3:13:f3:46:
53:20:d1:95:1b:24:c5:f5:79:a2:d7:6e:c2:46:e4:71:ad:97:
89:9f:9f:bd:a0:56:06:4d:b5:43:9c:d2:80:9f:59:d3:16:46:
68:82:81:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAerJPaCuCqDDcNg27COAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjAxOTkwNDRjNTRjMjM3OTAzZjY1NmY4M2IyNjQwYzJk
MWRmNDUwHhcNMjUwNDIxMTEwMDQyWhcNMjUwNDIyMTEwMDQyWjAzMTEwLwYDVQQD
EygzYTViYmJiNDE2Yjc0NTQ0NWU0ZTdmNTJmZjEzMzU5N2JmMmFkMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjqs4Obdn1WEeK2nuQQuFaArLVAG
rxA8DPzct0DvKpZlNqanoiUQR7yoHrHuq1QQwvE0RlovWRkR3JYJslgpBvF4hkx0
YgtA+IPJ3K00HQSaJ7MEcHxsjyW1Q/UzrGoik1ocXyb1XUh0co3S+LVtYtJgIJTZ
MvLoafGsDNL31EP/iJhbnchlGBfVIl1aN4JR8g326yjAwJm5x3tHyUXgl+SEpQXN
SvI0BIlmTHia3O6sqCBRk3bDNBpNmtnyhJmrQ3Y3rhqKXRgjCKHhh+Qgzdp+nJ1W
OvDGoirP/RC1i8AamMj46BKlrzd/pFgKvLSunGBT27ERT1Vt3iV8peStiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpbu7QWt0VEXk5/Uv8TNZe/KtBiMB8GA1UdIwQY
MBaAFEAgGZBExUwjeQP2Vvg7JkDC0d9FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUt
NGI3NTBiYmM2MTY3LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80YmEwZGMtNDcwMi00N2MxLWJhOWUtNGI3NTBiYmM2MTY3
LzEvUUNBWmtFVEZUQ041QV9aVy1Ec21RTUxSMzBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAha7x55TR
rhxTNuUVkexeDC8bNCSwsR6HWr/QxoMSlkfCI12HgxbPY6p4+o1fzAlVXC3cz/FF
yhNrPuCBc7fd3VgbWyOb/bCcQAdb6PS4dRy0tp54CigayJuL8WPobkvfpMLgTBY9
ACNdMHBSxdKCUOjob/JR/lpMdWK84CMx3C8lgGttOtivJUrvb9kZHtXnuK2rUIm6
7Je47x5Y4eZS5LFklSfIrsIlr4lnCZHfII1Q8qu3OD80aqvSYVuBc3k+8OUPqMuT
Ch2Yvq60iBd6Ijn254rzE/NGUyDRlRskxfV5otduwkbkca2XiZ+fvaBWBk21Q5zS
gJ9Z0xZGaIKBYQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 17:12:07 2025 by rpki-client