Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: f2/JBF3mIx7g9qC2phu4bCdIUzooDQ4nwLyZgVZtnEc=
Subject key identifier: 1C:E9:A6:2C:A0:CD:E3:6A:B6:7C:3A:68:AD:5E:7E:22:79:F9:A9:82
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019654934AD2D9700BBA12926A473E9FD2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 19:01:01 +0000
Manifest this update: Sun 20 Apr 2025 19:01:01 +0000
Manifest next update: Mon 21 Apr 2025 19:01:01 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: 31tls2YGrjnc8nfdQkNQbvt4ByMHBZyCri+dIbObcPU=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:4a:d2:d9:70:0b:ba:12:92:6a:47:3e:9f:d2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Apr 20 19:01:01 2025 GMT
Not After : Apr 21 19:01:01 2025 GMT
Subject: CN=1ce9a62ca0cde36ab67c3a68ad5e7e2279f9a982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:31:89:1e:1c:94:0f:ae:dd:65:c6:69:e4:
0f:94:f3:27:3f:45:f4:27:72:32:77:3f:53:0b:24:
db:35:88:06:50:a6:e8:e5:89:01:44:d2:41:ff:10:
35:e8:2f:4e:52:78:15:fe:ab:70:56:39:01:38:48:
7b:4c:8f:c7:5e:7d:3a:42:fa:61:b9:b3:c9:67:eb:
04:92:45:f9:f6:75:28:df:8d:5e:0e:e5:c7:7e:58:
51:9a:0a:89:1d:b3:07:62:1d:d0:d5:a5:93:32:c6:
02:39:da:d4:93:98:a9:59:f1:7b:b7:6e:61:8e:14:
05:9a:bf:ba:e0:54:66:f6:c4:22:9b:92:19:af:f5:
56:c9:ee:25:6d:97:7d:ba:73:89:ba:8b:3f:01:61:
33:e1:63:f5:30:5b:a3:dc:fe:71:7d:08:b5:f8:51:
cc:5a:a8:db:ff:b7:ae:2b:ee:36:84:9a:f9:f6:a0:
e6:2f:5e:38:fd:a7:3a:db:56:03:d8:7c:f4:41:a4:
d3:d1:23:89:76:dc:e2:68:97:a5:3c:cd:52:90:4f:
cc:08:db:08:16:15:4c:20:91:4b:20:7d:42:59:8a:
3c:94:8a:c0:63:ec:b0:8b:bd:67:b3:09:41:82:6f:
68:1f:8b:e2:83:24:a8:7b:8f:aa:23:66:52:d2:ec:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:A6:2C:A0:CD:E3:6A:B6:7C:3A:68:AD:5E:7E:22:79:F9:A9:82
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8b:93:85:34:a0:57:51:70:1d:8f:41:95:40:54:6a:c1:ac:
e4:0c:8d:bf:b6:7d:83:be:bf:d5:fa:aa:50:ff:56:b9:fc:ec:
d8:a9:8a:b8:50:6c:43:9f:4b:5e:f3:9b:de:66:59:aa:11:d6:
fa:aa:38:dd:7c:6c:83:7c:1d:a0:65:96:22:45:95:e9:1c:25:
93:90:42:cd:d3:ec:4f:48:13:f3:dc:01:c4:bf:0a:51:eb:8a:
7f:75:83:bf:0e:cb:6c:69:25:54:f6:f5:d8:7a:82:e4:5e:5d:
12:f4:61:6c:ab:ff:d0:10:1f:20:e6:64:dc:23:37:ec:44:cc:
ab:df:55:88:c3:ba:84:7d:a5:f5:b5:fc:3e:81:8e:03:e1:1b:
27:d7:87:fa:e3:da:96:fe:12:0c:e4:8b:02:9d:19:f2:0b:a0:
10:9d:a9:e7:6f:a7:6f:c9:3d:65:86:7c:24:3c:6b:6a:12:25:
2e:03:ee:58:e3:3f:b9:82:b1:2e:62:f5:46:e9:29:60:b8:d8:
de:e9:58:47:16:c6:b0:ad:eb:fa:a9:bd:da:15:f9:00:01:92:
1f:a7:f1:fb:34:d3:9d:77:b3:d2:0a:5b:da:12:4b:e6:d3:4a:
b8:1b:3d:73:1d:96:32:e2:eb:06:01:c8:70:82:e9:54:62:13:
a1:5f:43:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUk0rS2XALuhKSakc+n9LuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0
MjFhNzIwHhcNMjUwNDIwMTkwMTAxWhcNMjUwNDIxMTkwMTAxWjAzMTEwLwYDVQQD
EygxY2U5YTYyY2EwY2RlMzZhYjY3YzNhNjhhZDVlN2UyMjc5ZjlhOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgUxiR4clA+u3WXGaeQPlPMnP0X0
J3Iydz9TCyTbNYgGUKbo5YkBRNJB/xA16C9OUngV/qtwVjkBOEh7TI/HXn06Qvph
ubPJZ+sEkkX59nUo341eDuXHflhRmgqJHbMHYh3Q1aWTMsYCOdrUk5ipWfF7t25h
jhQFmr+64FRm9sQim5IZr/VWye4lbZd9unOJuos/AWEz4WP1MFuj3P5xfQi1+FHM
Wqjb/7euK+42hJr59qDmL144/ac621YD2Hz0QaTT0SOJdtziaJelPM1SkE/MCNsI
FhVMIJFLIH1CWYo8lIrAY+ywi71nswlBgm9oH4vigySoe4+qI2ZS0uwoewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzppiygzeNqtnw6aK1efiJ5+amCMB8GA1UdIwQY
MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt
YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy
LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4uThTSg
V1FwHY9BlUBUasGs5AyNv7Z9g76/1fqqUP9Wufzs2KmKuFBsQ59LXvOb3mZZqhHW
+qo43Xxsg3wdoGWWIkWV6Rwlk5BCzdPsT0gT89wBxL8KUeuKf3WDvw7LbGklVPb1
2HqC5F5dEvRhbKv/0BAfIOZk3CM37ETMq99ViMO6hH2l9bX8PoGOA+EbJ9eH+uPa
lv4SDOSLAp0Z8gugEJ2p52+nb8k9ZYZ8JDxrahIlLgPuWOM/uYKxLmL1RukpYLjY
3ulYRxbGsK3r+qm92hX5AAGSH6fx+zTTnXez0gpb2hJL5tNKuBs9cx2WMuLrBgHI
cILpVGIToV9DAg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:55 2025 by rpki-client