Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: dHuMASE8DHP9PlGH6Rr/VxLhiOogwP2FVhtTBygLUAc=
Subject key identifier: C0:8F:69:B2:48:39:AC:03:A4:30:21:3E:B2:39:FD:E4:FD:4C:B1:EB
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 01960FB2F1438AE78E7D0C96F26DE0023EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0DB1
Signing time: Mon 07 Apr 2025 10:01:47 +0000
Manifest this update: Mon 07 Apr 2025 10:01:47 +0000
Manifest next update: Tue 08 Apr 2025 10:01:47 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: JaY5NpOZldixOZpeWT2HFrWT5ECeSwpMdkoDOZKX7VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b2:f1:43:8a:e7:8e:7d:0c:96:f2:6d:e0:02:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Apr 7 10:01:47 2025 GMT
Not After : Apr 8 10:01:47 2025 GMT
Subject: CN=c08f69b24839ac03a430213eb239fde4fd4cb1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:6a:1d:bc:7a:de:f6:5d:bf:90:75:b8:5e:
a1:52:7b:c9:f6:14:45:a4:d3:48:4f:fa:25:92:eb:
aa:82:85:ea:e1:96:91:e8:cb:09:b8:8c:88:a4:80:
3f:1b:df:82:b6:62:76:ad:8a:8d:d1:a0:d7:fe:6f:
5f:2a:66:c8:94:60:50:a2:77:4a:96:f5:ae:1e:a5:
83:f8:5f:48:de:57:8b:3b:68:97:42:40:95:a9:f1:
bf:6b:4c:2b:1b:40:24:4e:f7:04:21:d5:9a:32:93:
be:94:0d:ae:a9:b5:d9:9a:c5:89:05:77:67:c3:8e:
db:06:fb:1b:44:5c:21:9d:1f:91:c5:0c:c2:13:c7:
5e:f9:55:4c:2c:7e:5f:06:81:22:83:fd:b6:ca:81:
0b:7c:b0:51:0b:83:1b:64:e4:68:c5:f4:64:fa:26:
f3:75:b2:43:f9:70:af:29:4e:70:67:8b:fb:9b:2c:
7c:96:8c:2e:06:88:b3:58:22:a2:8e:13:bc:ed:c4:
46:ff:f9:f5:59:fd:f2:65:6e:8d:58:4f:56:ed:37:
3a:e7:68:da:d3:14:47:ff:ba:b3:31:a3:2f:a1:5f:
01:b2:15:66:37:70:cb:25:12:6c:3b:d0:ce:c2:c8:
76:b5:6a:e3:da:a2:5e:76:49:5d:ce:c0:e5:8d:23:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8F:69:B2:48:39:AC:03:A4:30:21:3E:B2:39:FD:E4:FD:4C:B1:EB
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3d:e2:62:dc:cb:3c:b0:d8:8a:34:7d:cb:ce:b2:75:03:38:
f5:d7:1f:e8:40:de:23:ba:64:53:d6:9c:98:6c:f0:23:d1:cd:
43:b3:8a:8f:3b:c7:04:c9:21:19:94:10:9d:1a:ca:f4:23:28:
30:11:e8:63:64:b3:75:13:9c:36:d5:0e:f1:6b:b0:4a:9e:cf:
59:72:ac:3c:88:9f:9d:d9:1c:a4:3b:e5:26:43:b4:0a:91:32:
bb:f3:af:c9:3f:29:0a:bf:19:f4:fc:e5:37:93:fa:69:48:73:
23:54:af:78:ec:bb:8b:9d:74:df:9e:47:b9:ed:08:d3:b1:ce:
23:e8:28:36:62:e6:2e:8f:08:e1:8f:b2:7e:1e:f9:c9:bf:4b:
13:99:39:b6:4d:14:68:b7:6a:eb:07:e2:94:71:99:f6:71:6f:
c3:08:1c:82:05:6f:fb:34:9a:8b:e3:fc:dc:85:1f:bd:90:25:
98:6a:f4:4d:a2:d0:36:00:32:bf:43:0f:4f:19:71:ce:9b:df:
45:ed:6d:df:5e:6f:57:82:d7:34:ae:14:e0:b9:85:8d:6a:3b:
43:c3:06:a7:a8:5a:df:f1:44:29:7f:bc:31:77:9c:87:0a:aa:
b2:e6:cc:f9:ae:f9:07:e8:79:0a:19:47:80:e6:71:ee:00:d9:
0a:b7:5f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYPsvFDiueOfQyW8m3gAj7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjg3MmU0Y2RiMDdkNjgzOTE0N2U0M2E0YTQxOWJjODRi
YTMyMTQwHhcNMjUwNDA3MTAwMTQ3WhcNMjUwNDA4MTAwMTQ3WjAzMTEwLwYDVQQD
EyhjMDhmNjliMjQ4MzlhYzAzYTQzMDIxM2ViMjM5ZmRlNGZkNGNiMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hBqHbx63vZdv5B1uF6hUnvJ9hRF
pNNIT/olkuuqgoXq4ZaR6MsJuIyIpIA/G9+CtmJ2rYqN0aDX/m9fKmbIlGBQondK
lvWuHqWD+F9I3leLO2iXQkCVqfG/a0wrG0AkTvcEIdWaMpO+lA2uqbXZmsWJBXdn
w47bBvsbRFwhnR+RxQzCE8de+VVMLH5fBoEig/22yoELfLBRC4MbZORoxfRk+ibz
dbJD+XCvKU5wZ4v7myx8lowuBoizWCKijhO87cRG//n1Wf3yZW6NWE9W7Tc652ja
0xRH/7qzMaMvoV8BshVmN3DLJRJsO9DOwsh2tWrj2qJedkldzsDljSOz+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCPabJIOawDpDAhPrI5/eT9TLHrMB8GA1UdIwQY
MBaAFED4cuTNsH1oORR+Q6SkGbyEujIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTkt
ZGExMzhhZGUyMjJiLzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTktZGExMzhhZGUyMjJi
LzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmj3iYtzL
PLDYijR9y86ydQM49dcf6EDeI7pkU9acmGzwI9HNQ7OKjzvHBMkhGZQQnRrK9CMo
MBHoY2SzdROcNtUO8WuwSp7PWXKsPIifndkcpDvlJkO0CpEyu/OvyT8pCr8Z9Pzl
N5P6aUhzI1SveOy7i510355Hue0I07HOI+goNmLmLo8I4Y+yfh75yb9LE5k5tk0U
aLdq6wfilHGZ9nFvwwgcggVv+zSai+P83IUfvZAlmGr0TaLQNgAyv0MPTxlxzpvf
Re1t315vV4LXNK4U4LmFjWo7Q8MGp6ha3/FEKX+8MXechwqqsubM+a75B+h5ChlH
gOZx7gDZCrdfGg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:14:40 2025 by rpki-client