Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: 0qMVNL+D3mtsflteM/EmeHwRmHTX24nRYnGLePTlQ0I=
Subject key identifier: AA:FF:81:C9:64:56:F3:C0:AC:BD:76:E0:9A:B4:4E:DD:D1:C6:08:EB
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 01974742DDFF3A192275C99BD12CFE3B5A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 1584
Signing time: Fri 06 Jun 2025 22:00:53 +0000
Manifest this update: Fri 06 Jun 2025 22:00:53 +0000
Manifest next update: Sat 07 Jun 2025 22:00:53 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: FZ+UKswxuOLmUgTkWRaNfGdnULefFzM5k86kvPoUzao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:dd:ff:3a:19:22:75:c9:9b:d1:2c:fe:3b:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Jun 6 22:00:53 2025 GMT
Not After : Jun 7 22:00:53 2025 GMT
Subject: CN=aaff81c96456f3c0acbd76e09ab44eddd1c608eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:a5:57:14:9c:59:28:fc:b9:ad:ef:32:ed:
2e:86:05:b5:19:f1:27:41:4b:77:60:fe:62:ae:fa:
b9:2a:89:47:17:ec:26:29:4a:fb:0e:84:a2:0b:99:
10:00:14:5f:76:8d:06:da:e2:af:0b:b0:b4:c9:95:
a7:a0:8a:d4:e0:a1:5d:e6:2c:2f:fe:fb:c9:99:73:
ac:ee:d7:39:a8:db:ef:77:50:4f:b7:72:be:02:c5:
48:68:8b:aa:d2:9c:d3:41:36:da:b6:21:f1:37:92:
84:6d:e7:61:ab:4e:a6:65:99:9c:fe:d4:f4:d4:c8:
44:71:3f:81:7e:fa:d6:5d:63:df:39:96:c2:a1:de:
83:1c:63:db:59:ab:25:0d:fc:14:67:a2:f7:8d:1c:
34:fa:7e:d4:b3:49:0d:f1:8a:42:14:0c:8b:f1:84:
26:5f:c6:fe:09:15:bb:98:24:f0:6d:a1:eb:c0:c2:
e5:71:06:b9:d6:b3:9c:cc:f5:40:c4:8a:a3:2c:74:
f5:e1:d3:60:53:c6:db:69:56:b9:b7:a0:e3:3a:40:
80:df:75:dd:6a:e2:c2:ce:7f:a7:75:d7:66:11:8a:
9c:16:68:f1:98:94:c4:d9:00:b5:2d:1e:8f:be:00:
14:0e:7f:8d:a1:3f:54:5d:1e:2f:35:6a:6c:5b:43:
9d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FF:81:C9:64:56:F3:C0:AC:BD:76:E0:9A:B4:4E:DD:D1:C6:08:EB
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:99:1f:64:52:89:3c:bb:d8:29:37:35:cb:38:1c:8c:fc:94:
27:28:0b:81:94:18:52:fb:8e:ff:90:bb:73:e5:a9:24:07:48:
e4:1f:85:cd:16:92:8d:97:c6:6d:cd:4d:f0:eb:ef:7c:5e:0f:
3e:7c:36:98:2b:2f:a2:46:34:19:3f:9b:a2:db:6f:3a:ca:40:
54:fa:fb:5b:0f:8d:79:ae:5a:57:75:a1:e3:59:c9:e0:07:f4:
c2:f4:93:8e:da:ed:c9:63:9d:11:fc:24:85:94:14:a0:c4:ce:
3a:4c:95:13:ec:0d:2f:3c:a8:ef:a1:89:14:5a:1f:7c:2e:61:
21:53:37:02:e7:7a:7f:b4:ac:40:db:22:77:5d:2f:b2:d7:03:
b1:12:23:da:3c:6f:a8:df:9d:9b:7c:c7:cc:c4:bc:73:95:c0:
40:1b:b3:b8:20:2f:8d:c9:22:b7:2e:96:a9:af:5c:4e:7b:fb:
56:49:80:43:de:b7:6f:0c:f8:76:3b:47:ab:a9:d2:f6:e0:b1:
2e:29:d6:65:ad:18:42:25:16:f4:51:c8:3f:7e:f2:05:fc:3a:
67:83:54:a4:40:3d:f2:59:70:8b:3b:79:66:95:d1:bc:63:f6:
dc:e3:fe:40:6a:82:9e:18:5f:1b:ef:dd:b1:e1:e8:72:81:9a:
0c:01:33:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQt3/Ohkidcmb0Sz+O1p5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2ExYTFlM2QwOTI1NDIzMzEwYzE1NGI1MDJjMjg0Mjg4
OGU2MTIwHhcNMjUwNjA2MjIwMDUzWhcNMjUwNjA3MjIwMDUzWjAzMTEwLwYDVQQD
EyhhYWZmODFjOTY0NTZmM2MwYWNiZDc2ZTA5YWI0NGVkZGQxYzYwOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVmlVxScWSj8ua3vMu0uhgW1GfEn
QUt3YP5irvq5KolHF+wmKUr7DoSiC5kQABRfdo0G2uKvC7C0yZWnoIrU4KFd5iwv
/vvJmXOs7tc5qNvvd1BPt3K+AsVIaIuq0pzTQTbatiHxN5KEbedhq06mZZmc/tT0
1MhEcT+BfvrWXWPfOZbCod6DHGPbWaslDfwUZ6L3jRw0+n7Us0kN8YpCFAyL8YQm
X8b+CRW7mCTwbaHrwMLlcQa51rOczPVAxIqjLHT14dNgU8bbaVa5t6DjOkCA33Xd
auLCzn+ndddmEYqcFmjxmJTE2QC1LR6PvgAUDn+NoT9UXR4vNWpsW0OdZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr/gclkVvPArL124Jq0Tt3RxgjrMB8GA1UdIwQY
MBaAFELKGh49CSVCMxDBVLUCwoQoiOYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEt
NDM2YmZiOWU3N2VkLzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEtNDM2YmZiOWU3N2Vk
LzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZkfZFKJ
PLvYKTc1yzgcjPyUJygLgZQYUvuO/5C7c+WpJAdI5B+FzRaSjZfGbc1N8OvvfF4P
Pnw2mCsvokY0GT+bottvOspAVPr7Ww+Nea5aV3Wh41nJ4Af0wvSTjtrtyWOdEfwk
hZQUoMTOOkyVE+wNLzyo76GJFFoffC5hIVM3Aud6f7SsQNsid10vstcDsRIj2jxv
qN+dm3zHzMS8c5XAQBuzuCAvjckity6Wqa9cTnv7VkmAQ963bwz4djtHq6nS9uCx
LinWZa0YQiUW9FHIP37yBfw6Z4NUpEA98llwizt5ZpXRvGP23OP+QGqCnhhfG+/d
seHocoGaDAEzPA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:14 2025 by rpki-client