Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: FFm4gld3DdYcgf9KQZvU7tn8XCsx+wj9j3YnWCoP12c=
Subject key identifier: F4:85:74:0F:84:9D:28:DD:D2:F8:31:07:A0:34:09:3A:87:13:F1:C6
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 0196545BF6DE2598CCA349A4E62FFC9564CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 18:00:35 +0000
Manifest this update: Sun 20 Apr 2025 18:00:35 +0000
Manifest next update: Mon 21 Apr 2025 18:00:35 +0000
Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: V/CUyXpl4v3sAWRXOFY1Y8iY784fQJyK3hHXjdJ1t5E=)
2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:f6:de:25:98:cc:a3:49:a4:e6:2f:fc:95:64:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Apr 20 18:00:35 2025 GMT
Not After : Apr 21 18:00:35 2025 GMT
Subject: CN=f485740f849d28ddd2f83107a034093a8713f1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:a2:7e:9f:43:c7:c8:15:7a:6c:eb:75:12:
de:d7:85:9d:ec:dd:10:c7:cd:63:e4:08:0f:6a:36:
3c:69:10:99:31:c7:c2:fc:f0:7f:c1:2a:87:03:a6:
2e:f2:a1:f9:5a:dc:76:4e:51:3c:b4:14:e8:fa:ab:
c1:5e:ab:b5:69:47:ca:67:b7:c5:fc:0b:e9:b4:dc:
92:27:a3:29:cd:32:c2:c8:59:96:c3:42:95:ce:2b:
5d:0e:7b:f2:ed:18:b3:40:f8:22:3a:89:4b:36:f8:
67:4a:70:bd:2f:8a:a2:ce:7b:c3:b0:68:09:84:26:
d3:e7:f3:d9:ce:b2:a0:1a:78:9c:2e:01:b9:4a:b7:
25:fd:c2:e9:df:0a:c8:95:3b:ee:54:32:d3:8f:3f:
dc:c0:f7:a2:c9:ab:8b:99:87:34:14:89:75:8f:e6:
f8:e5:ad:7a:27:16:41:be:20:74:3b:af:5f:1b:68:
ff:da:3a:18:e3:b6:6f:a3:48:03:37:ce:b2:e5:4b:
38:4f:0d:5b:c4:73:3e:09:8f:cf:3a:cd:e3:0f:8b:
6a:63:f8:71:7e:79:50:66:e6:c5:d2:f6:3e:a9:a0:
a5:38:40:17:f7:5b:1b:80:4d:d7:5a:4e:73:5b:4a:
19:38:f6:2e:9d:25:04:a0:d3:6e:6d:93:2d:ac:72:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:85:74:0F:84:9D:28:DD:D2:F8:31:07:A0:34:09:3A:87:13:F1:C6
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4f:e2:0e:34:ca:44:87:9d:66:b1:56:9a:81:fe:a8:5d:04:
31:57:58:9e:6b:e8:61:c4:e7:27:b7:46:d7:65:ed:68:f4:c6:
1b:d6:34:97:f0:02:9b:b1:67:60:f4:07:0a:cb:db:35:a6:61:
b4:b7:4e:6e:a0:f8:59:00:af:ee:46:ef:42:bf:79:5c:88:31:
2c:a7:9f:1e:f4:90:58:ac:f9:2c:f8:d1:37:61:ac:56:bf:9f:
ce:06:b4:d1:1f:12:70:d9:9f:b5:df:b9:66:5d:5e:8b:ce:9d:
2c:e6:b2:06:76:c7:e3:b7:4a:c1:80:03:d1:6e:89:a0:b6:aa:
af:45:0e:30:a3:ae:1b:92:1e:84:96:e6:f3:43:f7:7d:14:c4:
21:e6:93:20:d6:7c:57:91:dc:d4:d7:63:1e:78:c5:28:d0:e4:
96:20:ca:56:58:b0:5e:f6:67:d3:23:28:5f:78:d6:5d:40:30:
11:f4:b3:28:14:2c:d8:30:ed:d3:8e:85:e4:96:3b:b4:d8:f9:
a1:61:9a:15:0b:b1:12:9e:5e:92:50:63:78:74:01:d5:31:e4:
07:8f:3e:c7:fd:8c:6a:a2:c4:a4:52:2c:41:45:33:ae:c7:43:
b8:26:85:2e:50:d5:ab:41:c3:0e:5c:22:59:97:05:de:09:83:
c9:20:5a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUW/beJZjMo0mk5i/8lWTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZWY2MWJkYzAzNGZiNTYzOGJjZjE5ZTA3ZWMyMWQ5MDAx
OWQ0MmMwHhcNMjUwNDIwMTgwMDM1WhcNMjUwNDIxMTgwMDM1WjAzMTEwLwYDVQQD
EyhmNDg1NzQwZjg0OWQyOGRkZDJmODMxMDdhMDM0MDkzYTg3MTNmMWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB2ifp9Dx8gVemzrdRLe14Wd7N0Q
x81j5AgPajY8aRCZMcfC/PB/wSqHA6Yu8qH5Wtx2TlE8tBTo+qvBXqu1aUfKZ7fF
/AvptNySJ6MpzTLCyFmWw0KVzitdDnvy7RizQPgiOolLNvhnSnC9L4qiznvDsGgJ
hCbT5/PZzrKgGnicLgG5Srcl/cLp3wrIlTvuVDLTjz/cwPeiyauLmYc0FIl1j+b4
5a16JxZBviB0O69fG2j/2joY47Zvo0gDN86y5Us4Tw1bxHM+CY/POs3jD4tqY/hx
fnlQZubF0vY+qaClOEAX91sbgE3XWk5zW0oZOPYunSUEoNNubZMtrHLixwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSFdA+EnSjd0vgxB6A0CTqHE/HGMB8GA1UdIwQY
MBaAFKjvYb3ANPtWOLzxngfsIdkAGdQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYt
MWY0OWJjN2ZkM2JkLzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYtMWY0OWJjN2ZkM2Jk
LzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE/iDjTK
RIedZrFWmoH+qF0EMVdYnmvoYcTnJ7dG12XtaPTGG9Y0l/ACm7FnYPQHCsvbNaZh
tLdObqD4WQCv7kbvQr95XIgxLKefHvSQWKz5LPjRN2GsVr+fzga00R8ScNmftd+5
Zl1ei86dLOayBnbH47dKwYAD0W6JoLaqr0UOMKOuG5IehJbm80P3fRTEIeaTINZ8
V5Hc1NdjHnjFKNDkliDKVliwXvZn0yMoX3jWXUAwEfSzKBQs2DDt046F5JY7tNj5
oWGaFQuxEp5eklBjeHQB1THkB48+x/2MaqLEpFIsQUUzrsdDuCaFLlDVq0HDDlwi
WZcF3gmDySBaSA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:40:20 2025 by rpki-client