Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: LjqnoW2Fu/1xIVz/QbRIVK6UqAOedJVW4QrF7XfGQSA=
Subject key identifier: 7C:C2:3B:47:51:C9:A7:C1:10:5E:4C:75:88:4E:50:3F:DF:B4:7B:01
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 019649A169A571596464831C1F4D9E8E51DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1502
Signing time: Fri 18 Apr 2025 16:00:37 +0000
Manifest this update: Fri 18 Apr 2025 16:00:37 +0000
Manifest next update: Sat 19 Apr 2025 16:00:37 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: 6honzZbdf+BOW5fHulah23Jc4Yt0Qw+nzenw2reKhtk=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:69:a5:71:59:64:64:83:1c:1f:4d:9e:8e:51:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Apr 18 16:00:37 2025 GMT
Not After : Apr 19 16:00:37 2025 GMT
Subject: CN=7cc23b4751c9a7c1105e4c75884e503fdfb47b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:40:7f:c5:cb:75:67:f6:db:73:ae:82:54:
25:75:49:f8:4f:57:45:da:9f:a0:12:e3:5c:68:ce:
2d:e8:23:3a:d9:63:5e:fa:17:90:e0:ba:f8:20:b5:
90:61:55:be:ba:92:0e:50:21:63:2f:55:fc:1a:ce:
ef:d2:6b:e5:0c:ee:4e:ff:51:ba:b2:81:1f:76:15:
8d:fc:bc:8a:11:1f:17:d6:f8:88:04:bb:b9:7f:93:
3c:bc:87:39:c5:b9:fe:30:59:e0:a2:1d:c0:a6:42:
9c:6b:a1:16:84:2f:99:88:be:34:1e:81:45:36:aa:
27:6c:43:b1:11:f7:9f:3a:8b:00:24:2a:a2:2e:15:
11:a9:77:99:ed:7d:9e:d6:87:b3:7e:f3:27:ed:d4:
e9:21:3a:6f:87:2f:db:00:e7:14:79:d0:cc:ce:16:
2f:8b:04:ff:50:52:b1:0d:25:8c:6c:a0:e7:ac:8d:
2c:a1:52:e0:71:30:e3:5d:20:6c:73:ea:1b:80:a0:
11:e6:84:25:a5:6b:8b:d9:4c:c0:14:97:84:76:6f:
a3:60:2d:b1:06:af:50:94:34:74:84:b2:0c:95:4d:
f6:a3:59:c8:3a:2a:c4:f5:65:99:1e:f4:e7:48:13:
08:46:2f:0e:e3:e0:dd:67:81:2b:31:3c:81:53:9d:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:3B:47:51:C9:A7:C1:10:5E:4C:75:88:4E:50:3F:DF:B4:7B:01
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3d:b5:21:70:b0:fe:35:1f:80:05:7a:e4:45:9e:65:a8:97:
e5:32:3e:a0:ad:0c:3e:41:ee:73:41:11:5b:a7:64:98:42:bd:
c7:21:cf:0e:bd:87:8d:8e:3e:44:d1:c1:af:b0:18:19:50:fa:
40:fa:17:4f:23:2a:01:fa:5a:10:48:10:bc:70:a0:b2:dc:fc:
3e:be:15:d2:8f:6f:28:a5:02:0d:a6:01:89:47:33:62:29:87:
2d:3e:34:7e:ab:17:af:56:21:02:71:e7:7a:3c:97:40:39:d9:
ed:4b:83:89:90:8c:7c:66:b8:75:dd:44:3a:b0:8d:1d:5c:be:
87:ba:fa:f1:75:5f:69:0a:38:22:d0:1e:81:3f:6e:48:d5:8f:
60:b2:7f:37:a3:c5:74:f2:5c:f3:89:8e:0e:e8:04:c2:d4:af:
75:b2:10:3f:06:ef:f7:6c:28:d7:52:53:ec:1a:24:44:2f:38:
e8:e8:3c:33:23:93:d4:4e:5e:44:2a:06:8f:69:e4:37:32:94:
3f:41:9f:eb:61:37:75:9f:78:a0:62:09:cf:5d:01:68:05:9c:
4c:73:a6:1d:96:ee:b7:67:6d:3a:b3:d7:a6:25:07:c8:b6:eb:
18:21:91:7f:af:fe:c2:ec:dd:0c:10:f0:72:18:6b:a2:6c:06:
44:9a:0a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJoWmlcVlkZIMcH02ejlHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjUwNDE4MTYwMDM3WhcNMjUwNDE5MTYwMDM3WjAzMTEwLwYDVQQD
Eyg3Y2MyM2I0NzUxYzlhN2MxMTA1ZTRjNzU4ODRlNTAzZmRmYjQ3YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtVAf8XLdWf223OuglQldUn4T1dF
2p+gEuNcaM4t6CM62WNe+heQ4Lr4ILWQYVW+upIOUCFjL1X8Gs7v0mvlDO5O/1G6
soEfdhWN/LyKER8X1viIBLu5f5M8vIc5xbn+MFngoh3ApkKca6EWhC+ZiL40HoFF
NqonbEOxEfefOosAJCqiLhURqXeZ7X2e1oezfvMn7dTpITpvhy/bAOcUedDMzhYv
iwT/UFKxDSWMbKDnrI0soVLgcTDjXSBsc+obgKAR5oQlpWuL2UzAFJeEdm+jYC2x
Bq9QlDR0hLIMlU32o1nIOirE9WWZHvTnSBMIRi8O4+DdZ4ErMTyBU502sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzCO0dRyafBEF5MdYhOUD/ftHsBMB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWz21IXCw
/jUfgAV65EWeZaiX5TI+oK0MPkHuc0ERW6dkmEK9xyHPDr2HjY4+RNHBr7AYGVD6
QPoXTyMqAfpaEEgQvHCgstz8Pr4V0o9vKKUCDaYBiUczYimHLT40fqsXr1YhAnHn
ejyXQDnZ7UuDiZCMfGa4dd1EOrCNHVy+h7r68XVfaQo4ItAegT9uSNWPYLJ/N6PF
dPJc84mODugEwtSvdbIQPwbv92wo11JT7BokRC846Og8MyOT1E5eRCoGj2nkNzKU
P0Gf62E3dZ94oGIJz10BaAWcTHOmHZbut2dtOrPXpiUHyLbrGCGRf6/+wuzdDBDw
chhromwGRJoK9Q==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:10 2025 by rpki-client