Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: n7MmDnC3fyuIfaHU/fDy1dc0/cVhjGc9O857onlWq6U=
Subject key identifier: 19:82:AC:FE:C0:93:21:32:99:48:89:85:F1:54:2D:72:DC:A3:80:3D
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 01964632BE5D0C28F5A2ABBF3EC20B8C90CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 14F1
Signing time: Fri 18 Apr 2025 00:00:52 +0000
Manifest this update: Fri 18 Apr 2025 00:00:52 +0000
Manifest next update: Sat 19 Apr 2025 00:00:52 +0000
Files and hashes: 1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: IlY2GmO3uJYKu4hc0KGujqHc6o36uKgVLhS3gTV/hDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:be:5d:0c:28:f5:a2:ab:bf:3e:c2:0b:8c:90:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Apr 18 00:00:52 2025 GMT
Not After : Apr 19 00:00:52 2025 GMT
Subject: CN=1982acfec093213299488985f1542d72dca3803d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:03:8f:cc:ae:33:15:a0:63:b3:46:d4:e2:
00:11:6b:34:a3:3d:06:55:2e:9c:c3:27:c5:c9:69:
a5:e7:a0:c5:7e:dc:01:d4:9c:f2:5d:12:b7:f5:fb:
92:3d:41:4a:52:2c:35:ec:08:36:7f:d3:ee:c0:ae:
d0:40:22:c3:be:e6:19:eb:a8:af:4f:a7:e7:0e:c4:
fa:39:c9:d2:94:ce:92:e9:50:a9:09:a9:3c:a1:37:
49:7a:89:42:b5:62:9e:d7:07:0e:21:5a:90:f7:cd:
cb:1c:4b:3b:db:de:dd:ee:5d:54:84:3f:21:c2:84:
34:46:9a:7e:b1:92:c9:7a:bd:92:4f:a6:bc:5a:fc:
f2:9d:f9:59:33:9a:61:fd:c2:e0:4a:ec:8d:50:ca:
1e:c8:fd:f7:e6:93:b7:27:d5:c9:7e:76:ba:36:98:
be:46:d4:aa:da:9b:52:fe:98:6b:c9:c4:6f:7e:24:
f3:66:c9:59:a1:70:ff:7e:2d:4f:49:54:01:24:a2:
b9:20:83:e8:16:9c:44:df:2f:b8:21:6a:d8:34:cc:
a0:6a:c6:a9:95:62:56:6f:9e:75:40:33:1a:70:9d:
9d:08:12:92:e9:11:fd:c5:24:a2:99:4e:90:a4:44:
3a:f6:5a:9b:90:91:85:47:ff:83:07:16:8e:ca:c0:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:82:AC:FE:C0:93:21:32:99:48:89:85:F1:54:2D:72:DC:A3:80:3D
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:40:aa:a0:7e:2c:0d:83:6c:32:0f:b7:df:3b:0c:7f:a2:ae:
9c:d6:d7:12:02:ec:30:7f:20:2b:7f:f3:ee:cd:87:46:d6:8f:
2d:d7:7f:33:18:45:ca:dd:2c:2e:40:8c:d6:6c:db:d4:ce:22:
82:03:f8:a0:88:fd:7e:7b:e5:3d:d3:13:e9:75:eb:7f:97:a3:
76:88:ac:49:08:e4:9d:49:e6:91:fe:3b:fd:42:36:d7:08:57:
6b:00:a2:37:d7:be:76:5f:b3:5a:85:81:cf:bb:6a:61:a0:4d:
77:f3:78:19:57:0f:5f:28:47:ec:6c:7d:63:f1:0f:ab:0b:be:
8e:4a:91:d5:c8:7e:85:11:af:77:8b:89:4f:18:f8:b4:f5:4f:
ef:38:54:37:84:12:75:9d:93:e9:37:af:63:91:01:ac:34:6a:
ff:33:75:85:87:bf:2b:9a:3a:b2:5e:70:5c:11:8f:00:43:41:
73:53:1b:21:8d:80:f4:fc:46:43:ad:5e:fe:1f:54:b7:32:97:
31:89:37:b8:84:46:76:d3:0c:c6:63:75:a1:16:07:ec:21:28:
d9:b4:9f:95:43:ba:ec:5b:77:77:e5:29:0f:e3:85:4a:15:73:
ae:7d:be:7b:04:53:a9:ea:c8:08:68:36:6a:46:ca:31:9b:d5:
e0:9c:e0:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZGMr5dDCj1oqu/PsILjJDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YWMxZjg1OTViYWQ1NTgyNDBkNzQwNjgwMDBhMWNmNzA4
YmExYTUwHhcNMjUwNDE4MDAwMDUyWhcNMjUwNDE5MDAwMDUyWjAzMTEwLwYDVQQD
EygxOTgyYWNmZWMwOTMyMTMyOTk0ODg5ODVmMTU0MmQ3MmRjYTM4MDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst4Dj8yuMxWgY7NG1OIAEWs0oz0G
VS6cwyfFyWml56DFftwB1JzyXRK39fuSPUFKUiw17Ag2f9PuwK7QQCLDvuYZ66iv
T6fnDsT6OcnSlM6S6VCpCak8oTdJeolCtWKe1wcOIVqQ983LHEs7297d7l1UhD8h
woQ0Rpp+sZLJer2ST6a8WvzynflZM5ph/cLgSuyNUMoeyP335pO3J9XJfna6Npi+
RtSq2ptS/phrycRvfiTzZslZoXD/fi1PSVQBJKK5IIPoFpxE3y+4IWrYNMygasap
lWJWb551QDMacJ2dCBKS6RH9xSSimU6QpEQ69lqbkJGFR/+DBxaOysAs6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmCrP7AkyEymUiJhfFULXLco4A9MB8GA1UdIwQY
MBaAFKmsH4WVutVYJA10BoAAoc9wi6GlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWF3ZmhaVzYxVmdrRFhRR2dBQ2h6M0NMb2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80ZWRjMzYtNGQ1My00N2NmLWE2ZmMt
YjUxMTU0NjI4ZmIzLzEvcWF3ZmhaVzYxVmdrRFhRR2dBQ2h6M0NMb2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80ZWRjMzYtNGQ1My00N2NmLWE2ZmMtYjUxMTU0NjI4ZmIz
LzEvcWF3ZmhaVzYxVmdrRFhRR2dBQ2h6M0NMb2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkCqoH4s
DYNsMg+33zsMf6KunNbXEgLsMH8gK3/z7s2HRtaPLdd/MxhFyt0sLkCM1mzb1M4i
ggP4oIj9fnvlPdMT6XXrf5ejdoisSQjknUnmkf47/UI21whXawCiN9e+dl+zWoWB
z7tqYaBNd/N4GVcPXyhH7Gx9Y/EPqwu+jkqR1ch+hRGvd4uJTxj4tPVP7zhUN4QS
dZ2T6TevY5EBrDRq/zN1hYe/K5o6sl5wXBGPAENBc1MbIY2A9PxGQ61e/h9UtzKX
MYk3uIRGdtMMxmN1oRYH7CEo2bSflUO67Ft3d+UpD+OFShVzrn2+ewRTqerICGg2
akbKMZvV4JzgpA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 01:25:49 2025 by rpki-client