Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json)
Hash identifier: 9TsjBg4pINArSHBPu7KMDXfMZGQLOXOFtYAstTNBylo=
Subject key identifier: 95:74:F6:9A:0D:D7:62:C4:6B:04:7E:AA:33:92:E5:91:32:79:AF:4A
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 0195127E8F3527900E4550D74C7D22B497BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
Manifest number: 136B
Signing time: Mon 17 Feb 2025 06:00:38 +0000
Manifest this update: Mon 17 Feb 2025 06:00:38 +0000
Manifest next update: Tue 18 Feb 2025 06:00:38 +0000
Files and hashes: 1: 19IQx82rzsiCoBb7iKS7zS0gXio.roa (hash: TEyMe4x0yj15nmcDqFTTZyRV6sHl2P5CCSlpIqh9COU=)
2: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: CO9q6Nz4uww/LXF560V3WzZyGODwmUmJNmkBGE8MU1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:8f:35:27:90:0e:45:50:d7:4c:7d:22:b4:97:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Feb 17 06:00:38 2025 GMT
Not After : Feb 18 06:00:38 2025 GMT
Subject: CN=9574f69a0dd762c46b047eaa3392e5913279af4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:a6:33:58:5e:11:0c:1a:e6:bf:18:3b:49:
ea:48:1b:51:fc:0a:00:da:a0:3f:d2:86:f1:a9:5b:
21:e6:0d:24:f5:ac:54:d4:f1:d5:ba:af:f2:8b:2c:
14:85:f0:45:56:a0:d2:ce:85:f8:54:f1:1b:a3:80:
85:30:9f:62:df:fe:93:3d:de:13:b3:0e:5c:7f:07:
f9:cf:ed:84:d7:a4:2e:fd:0a:a6:0c:06:54:01:c7:
7d:50:40:5a:9f:4b:2b:9a:bc:cd:2c:95:db:10:51:
32:43:45:70:32:00:65:b3:fd:02:e7:49:7e:8b:43:
ac:be:64:c9:48:78:a0:de:d6:cf:b8:bf:1c:f7:02:
24:e8:40:41:db:4b:42:63:b8:de:cc:4c:e4:2d:88:
65:b8:33:3f:fa:41:db:92:0b:d5:59:60:f5:1d:d8:
82:76:70:81:06:cf:7b:f0:03:20:56:3e:a7:05:1c:
cb:10:59:b2:47:1c:44:84:a3:5c:3c:16:fe:89:a3:
4b:82:f8:b7:53:09:48:18:d6:83:e9:d1:18:4f:81:
d8:82:84:f3:11:24:1c:b8:f9:bc:19:5c:a9:77:96:
e2:17:a4:a5:89:e5:a3:04:b8:5f:64:3c:0c:ba:01:
6a:05:ce:82:31:29:e6:88:86:5c:a6:74:a0:17:e7:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:74:F6:9A:0D:D7:62:C4:6B:04:7E:AA:33:92:E5:91:32:79:AF:4A
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:86:b1:97:3d:ff:eb:fa:00:f1:12:96:d1:51:a8:bf:96:62:
de:38:4f:5d:62:07:33:f6:ea:ea:e4:4f:ec:1d:85:f0:5b:64:
ea:81:e3:fa:01:7b:91:59:bd:8d:6e:fc:84:8c:96:13:3b:12:
69:23:86:83:2c:03:d5:c8:fa:40:aa:44:fc:96:80:76:5d:57:
18:81:33:b5:f9:7d:a2:53:70:b8:39:c9:88:07:31:50:97:0f:
88:ed:b0:4c:fe:3c:7c:5c:09:bf:1c:ca:49:03:91:a6:a8:d1:
d9:64:24:3b:35:1b:90:5c:7e:b4:26:84:6d:cc:4f:ce:5a:ff:
52:e1:f6:41:73:eb:87:3c:81:b2:c6:e5:ee:8e:cd:d8:70:8c:
a9:df:0e:3c:16:68:be:bc:13:83:ae:d9:08:2e:e0:ea:9a:1e:
68:52:5a:f2:8a:8f:4f:ce:67:ac:b0:26:dc:08:02:e9:fd:b4:
19:b1:b7:f8:ca:f0:a6:13:6c:d1:1b:ed:a0:72:05:94:b9:bb:
81:7c:f8:9f:ab:f7:99:37:00:e9:a6:9f:3e:e2:34:7f:58:e7:
a5:61:05:60:d6:2d:b7:1c:18:52:8e:b6:37:46:a7:39:e6:55:
52:4a:f4:13:6b:1f:12:ce:93:0b:d1:6d:d4:d6:d7:b2:f7:b5:
13:85:e0:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfo81J5AORVDXTH0itJe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNTBiY2EyOWMxODEzYWUzYjExZjM4MWYwNDQyYWEyYThh
OTMxYmYwHhcNMjUwMjE3MDYwMDM4WhcNMjUwMjE4MDYwMDM4WjAzMTEwLwYDVQQD
Eyg5NTc0ZjY5YTBkZDc2MmM0NmIwNDdlYWEzMzkyZTU5MTMyNzlhZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBGmM1heEQwa5r8YO0nqSBtR/AoA
2qA/0obxqVsh5g0k9axU1PHVuq/yiywUhfBFVqDSzoX4VPEbo4CFMJ9i3/6TPd4T
sw5cfwf5z+2E16Qu/QqmDAZUAcd9UEBan0srmrzNLJXbEFEyQ0VwMgBls/0C50l+
i0OsvmTJSHig3tbPuL8c9wIk6EBB20tCY7jezEzkLYhluDM/+kHbkgvVWWD1HdiC
dnCBBs978AMgVj6nBRzLEFmyRxxEhKNcPBb+iaNLgvi3UwlIGNaD6dEYT4HYgoTz
ESQcuPm8GVypd5biF6SlieWjBLhfZDwMugFqBc6CMSnmiIZcpnSgF+cJkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV09poN12LEawR+qjOS5ZEyea9KMB8GA1UdIwQY
MBaAFEBQvKKcGBOuOxHzgfBEKqKoqTG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80NmQ4OTEtMjQ5Yi00YTRjLWEzNWQt
N2ZlOWVkN2Q2NDdkLzEvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80NmQ4OTEtMjQ5Yi00YTRjLWEzNWQtN2ZlOWVkN2Q2NDdk
LzEvUUZDOG9wd1lFNjQ3RWZPQjhFUXFvcWlwTWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoaxlz3/
6/oA8RKW0VGov5Zi3jhPXWIHM/bq6uRP7B2F8Ftk6oHj+gF7kVm9jW78hIyWEzsS
aSOGgywD1cj6QKpE/JaAdl1XGIEztfl9olNwuDnJiAcxUJcPiO2wTP48fFwJvxzK
SQORpqjR2WQkOzUbkFx+tCaEbcxPzlr/UuH2QXPrhzyBssbl7o7N2HCMqd8OPBZo
vrwTg67ZCC7g6poeaFJa8oqPT85nrLAm3AgC6f20GbG3+MrwphNs0RvtoHIFlLm7
gXz4n6v3mTcA6aafPuI0f1jnpWEFYNYttxwYUo62N0anOeZVUkr0E2sfEs6TC9Ft
1NbXsve1E4Xg8A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:43 2025 by rpki-client