Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json)
Hash identifier: ky03VJ0MMOibjOknXFFyE5+hk1zqjxsBy3tbkNbk0F4=
Subject key identifier: 9B:02:42:BC:C9:06:BA:91:12:CE:D6:6A:3D:B6:20:E4:0C:D0:99:95
Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Certificate serial: 019620DC9D38B3E6191D6366E61EAC76CA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
Manifest number: 1508
Signing time: Thu 10 Apr 2025 18:00:51 +0000
Manifest this update: Thu 10 Apr 2025 18:00:51 +0000
Manifest next update: Fri 11 Apr 2025 18:00:51 +0000
Files and hashes: 1: 1-5Fi3WM50atp2DkB7673qszYGEU.roa (hash: kN65NB/E7sHscyK55wK1hzazTC32+9Bs5gcTM4gjKMo=)
2: 1bGM56MEcLFHsgzDo3baYK4aCMQ.roa (hash: oVXVqg3b1Z1hACKH4hIRJE0IPfCRY+hMDc2k4VQe4XU=)
3: 9qoftOkUQubHrr_5Y0O0OEB0jsk.roa (hash: NpXUbKfrAE82THRrSEt65m3odGmwe5q6Rv8hzF4EGTU=)
4: AFOcU_w_QN-XxQkkQfgesDtPy4Q.roa (hash: vuDPxy3QeT/X/Z21aASlCY+NXDSblPQKGqB5xLpgpdQ=)
5: Cdz1li8VqIIJV-m5kmfKj99Y7vo.roa (hash: Injt2qVEYstD1CFDA2RDhQ4n71XCzIHna09I/6r+g6s=)
6: ITP65m-ELAYrIziT1mqhAaKmFKI.roa (hash: TA6Lz6SPSkTI7bhEP+cVZ388px4lL7fPEARYK+dRI9A=)
7: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: EKfTFDsL3nq58lsYGjJYsC37V9bFAzxMT2punkSjLls=)
8: M10xggNFEiYKiCOpaRSr9Q_E5jI.roa (hash: or9G2RnVnC9nrrlnpNuQsb0VwFoCXmXB+b6uwP7Zhns=)
9: OFoxo4tSb8S4WTnb9Arp2ooyRvw.roa (hash: RZrf7jypWJt6TvS7MztBYdDEvw+Yp5dHCbAbuiSrNfs=)
10: PxE0dP6xcqVNoXMtC1a5Dmb6n-s.roa (hash: Ybvp2SkTVaVfqhDzUmHlRC82UcW4sX3toG9HthgZ+Es=)
11: RFQq8CL00Iuq4i_jx3Jd0iwOLHI.roa (hash: +y+KD8Sa0MVn4eIucYiZ7dhXT2uIb+hoC3jKlQ4uUUg=)
12: TI9rtNLD66XYwxwHXpdPJetrLYc.roa (hash: ujb2Pqco4C4UTnNLYGJAf0pytP8/IiyRIp98qQq1a6Y=)
13: U8lnC6TG0pv6pWZXKVHzbslUv7Y.roa (hash: en2pnR7bb0v314EN8AtTeDNZJOdRSB9qKOFTcoTcCf0=)
14: ULfjtaXZKeO21K8lDdoLHe5Lbts.roa (hash: Ky4d9tu18NCNsNUD91GQmMhDdLCi4CgvFfPWYH5+Qp4=)
15: WUnk7TNpoMRbrcKaZRtURt3p4fo.roa (hash: PjPxGwGWGX727ceFQzedXW06Hv7b8nuKhbmV/9bEQCI=)
16: X8iQP860aal3YLOybxReqwSyPWU.roa (hash: 8p2TloT9N3iJXhSo+Uh11LexFFF6Vzvsu6ANvx+UWDA=)
17: XvUgOjjL99J51pC_sC90Y2oxW38.roa (hash: c2LYASTNBV0y11dbQezPYJYqj9am3X4y+DmSJidna/c=)
18: cT-m8k4SDtvWHlQKpD65GuRYzTQ.roa (hash: r6RkMNZjMfYtE9PPmCf0mAK1eFJX+kttY3BaDf/aAME=)
19: tvd71H71vKZmhl1lUI4Wfg7oqjo.roa (hash: e5ndVp+pna8lqdjnskWIAOqf7gaAH2YiQgOHVw4SZNM=)
20: vS5j-9f_l8NB8D0F1O7CDV1036U.roa (hash: R1R99GD9Fbi68eCqK84dzkbtSynzzus+WGLpYqyYhxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:dc:9d:38:b3:e6:19:1d:63:66:e6:1e:ac:76:ca:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4
Validity
Not Before: Apr 10 18:00:51 2025 GMT
Not After : Apr 11 18:00:51 2025 GMT
Subject: CN=9b0242bcc906ba9112ced66a3db620e40cd09995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:12:5e:d0:f0:ea:03:61:6e:0e:8a:4a:0c:29:
c1:07:3f:29:54:35:07:2e:37:31:32:5b:81:a2:47:
03:c4:a4:57:ea:3d:a1:0f:6a:ee:03:6d:65:bf:41:
00:76:4e:25:4f:d6:6e:e5:19:33:c4:c3:9d:cd:24:
e7:13:67:26:0d:d1:ff:de:fd:91:f5:2f:b8:2b:2c:
e1:51:64:70:07:2e:21:88:b3:a0:b0:3a:6e:96:a9:
4d:16:3b:20:9d:14:e0:ac:0e:c9:6f:fc:53:2a:ad:
9a:8d:96:26:ca:84:d5:29:4c:3b:94:d2:f5:37:b7:
2d:7d:09:9f:ec:85:d2:b6:2f:c9:cf:3d:d6:57:1c:
ba:1d:4a:c2:98:49:b7:fe:7a:63:96:ca:9b:e2:80:
d9:1e:f3:8f:e0:c6:18:62:f7:b2:61:1d:42:e7:2d:
68:79:a3:4d:11:6c:92:a0:f7:3d:3a:84:94:6a:3a:
12:58:75:d2:55:14:a0:f3:2b:39:67:c7:d6:04:b6:
4f:10:82:3e:c5:69:bb:14:85:fa:01:38:b7:0c:92:
8f:45:d1:59:33:3c:66:81:fb:71:6a:c1:b5:25:85:
55:ed:19:06:5b:3a:5e:c9:78:d9:48:d1:22:9d:2a:
35:c9:6d:6b:71:ab:00:d1:94:ae:fe:cf:fc:22:f7:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:02:42:BC:C9:06:BA:91:12:CE:D6:6A:3D:B6:20:E4:0C:D0:99:95
X509v3 Authority Key Identifier:
keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:c6:1f:53:f5:b1:3e:46:d7:9f:0b:5c:32:6b:8b:c0:cc:
6a:96:7f:11:23:06:29:2d:f8:b4:5b:86:86:98:73:7e:a2:62:
85:41:77:9e:41:31:7a:ae:28:fa:bc:86:ba:a7:19:18:5b:bc:
76:a6:11:72:d3:bd:15:53:9f:11:b0:01:31:ba:9c:a4:e0:bb:
de:25:53:bf:0b:91:38:43:6b:0d:61:fe:14:3b:1d:48:a1:99:
c9:8e:1c:37:62:71:6b:ad:5d:f2:e8:04:10:ea:d9:70:48:0c:
8b:f7:4d:8b:38:6e:8d:dc:33:49:81:c8:fc:e4:0a:ba:3e:53:
65:86:af:31:87:d0:ff:ef:e2:e5:3a:85:1a:50:41:66:fa:a5:
8b:44:d6:d8:f5:3a:c1:ae:58:cf:b6:85:03:66:55:b7:bb:2f:
77:af:71:7e:92:10:16:5c:4a:84:77:3e:b2:f5:ce:d5:7d:61:
17:dd:ba:98:b2:37:de:d9:db:66:dc:99:c2:35:32:3d:f9:31:
46:5f:6e:6f:42:44:8a:8e:a5:82:1e:16:2f:b3:b8:2f:ec:d3:
34:30:8f:6d:0b:35:20:6b:34:cc:e9:d5:57:7e:14:6d:31:62:
66:d5:9c:3f:9b:ce:24:62:2f:16:8f:df:79:5f:c1:d4:34:02:
12:13:70:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYg3J04s+YZHWNm5h6sdsqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1
ZjBmZTQwHhcNMjUwNDEwMTgwMDUxWhcNMjUwNDExMTgwMDUxWjAzMTEwLwYDVQQD
Eyg5YjAyNDJiY2M5MDZiYTkxMTJjZWQ2NmEzZGI2MjBlNDBjZDA5OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBJe0PDqA2FuDopKDCnBBz8pVDUH
LjcxMluBokcDxKRX6j2hD2ruA21lv0EAdk4lT9Zu5RkzxMOdzSTnE2cmDdH/3v2R
9S+4KyzhUWRwBy4hiLOgsDpulqlNFjsgnRTgrA7Jb/xTKq2ajZYmyoTVKUw7lNL1
N7ctfQmf7IXSti/Jzz3WVxy6HUrCmEm3/npjlsqb4oDZHvOP4MYYYveyYR1C5y1o
eaNNEWySoPc9OoSUajoSWHXSVRSg8ys5Z8fWBLZPEII+xWm7FIX6ATi3DJKPRdFZ
MzxmgftxasG1JYVV7RkGWzpeyXjZSNEinSo1yW1rcasA0ZSu/s/8IvdBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsCQrzJBrqREs7Waj22IOQM0JmVMB8GA1UdIwQY
MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt
ZjJhZTdiYzdlY2M1LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1
LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcjGH1P1
sT5G158LXDJri8DMapZ/ESMGKS34tFuGhphzfqJihUF3nkExeq4o+ryGuqcZGFu8
dqYRctO9FVOfEbABMbqcpOC73iVTvwuROENrDWH+FDsdSKGZyY4cN2Jxa61d8ugE
EOrZcEgMi/dNizhujdwzSYHI/OQKuj5TZYavMYfQ/+/i5TqFGlBBZvqli0TW2PU6
wa5Yz7aFA2ZVt7svd69xfpIQFlxKhHc+svXO1X1hF926mLI33tnbZtyZwjUyPfkx
Rl9ub0JEio6lgh4WL7O4L+zTNDCPbQs1IGs0zOnVV34UbTFiZtWcP5vOJGIvFo/f
eV/B1DQCEhNwOA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:39:16 2025 by rpki-client