Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
File: QiW1cPRt5cbosrZO0JCtE4XatzE.mft (raw, json)
Hash identifier: c0xXZoYKspySXGGV27izIBr7uD+qzG/3BNYRaeND074=
Subject key identifier: BA:74:54:6D:17:16:AD:B2:E1:D3:D5:E2:C6:27:2A:F1:A0:0F:C9:1C
Authority key identifier: 42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
Certificate issuer: /CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Certificate serial: 01964E59B0D1641C5F2387454319D61EF36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 14:00:22 +0000
Manifest this update: Sat 19 Apr 2025 14:00:22 +0000
Manifest next update: Sun 20 Apr 2025 14:00:22 +0000
Files and hashes: 1: Ad__4Mw9qH40aKjCCd6U7wn1LE8.roa (hash: XmUspE3wSTnFZCF/0+RPTjtSL/Xtm1GMKSxL+nI/8po=)
2: QiW1cPRt5cbosrZO0JCtE4XatzE.crl (hash: LH+V8ep1F0/P6cKXB1UYdkyP/4ll3+e0DO7nzc2wWI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:59:b0:d1:64:1c:5f:23:87:45:43:19:d6:1e:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Validity
Not Before: Apr 19 14:00:22 2025 GMT
Not After : Apr 20 14:00:22 2025 GMT
Subject: CN=ba74546d1716adb2e1d3d5e2c6272af1a00fc91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b7:94:3f:89:ee:28:3e:05:aa:66:c4:05:20:
6a:d9:a8:12:86:14:3d:cf:e8:72:ff:f3:31:dd:8a:
a0:9d:08:e0:03:cd:06:58:75:27:c2:55:26:55:5c:
70:74:9a:e4:66:2f:09:1f:a0:ec:b7:03:f3:6e:61:
84:fe:62:03:4d:7b:2d:d4:ea:4c:a3:93:ec:ba:7c:
b8:07:9d:c3:d0:cc:88:09:9a:06:66:79:d9:cb:a0:
13:ec:76:2a:e7:fe:80:e9:b9:21:27:8e:26:88:c0:
d0:44:d8:3e:94:dd:86:01:84:9f:4f:24:28:c1:a1:
57:8a:7e:c8:43:ec:fc:8c:2d:2f:7c:2f:9e:ec:37:
e2:66:19:2f:f9:27:99:ba:62:67:7a:36:bf:98:6f:
e6:ba:e3:dd:70:85:08:67:36:3b:97:fc:28:4e:98:
86:a7:85:cc:be:13:7e:4a:43:f0:c2:bf:d2:69:12:
b4:ab:bb:0e:dc:0f:ad:d6:7c:54:55:fb:8c:a4:85:
9a:05:d7:44:dd:d6:f6:e0:e4:33:da:7c:a3:05:45:
e8:0d:b5:33:3f:bd:7a:ef:dd:4f:40:79:a8:59:04:
f2:e2:97:1e:fa:ab:82:b7:14:76:53:21:c7:67:22:
55:0a:76:6e:75:27:cf:71:37:e2:28:79:61:78:61:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:74:54:6D:17:16:AD:B2:E1:D3:D5:E2:C6:27:2A:F1:A0:0F:C9:1C
X509v3 Authority Key Identifier:
keyid:42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ae:ff:97:34:8d:75:f4:f1:dd:40:d9:8e:06:ba:a7:14:07:
e1:ea:8e:b1:ae:18:05:e4:c1:4a:00:23:4e:7f:8b:21:8c:73:
42:1a:6b:e9:9a:02:dd:d3:a1:19:b8:b5:82:ee:45:f0:f4:cd:
fb:90:e7:a8:f2:52:f6:42:20:76:6e:e7:05:08:5d:bf:c3:89:
07:27:0c:20:f4:2c:e0:ff:96:c7:a1:2e:1f:9a:3e:7f:7f:d0:
e7:63:d9:31:ee:94:5e:45:47:20:bd:70:ed:4f:5e:30:55:5e:
39:53:5e:bf:94:19:d9:0e:3b:e9:76:aa:08:d3:31:4b:fd:be:
a8:5d:71:9d:49:4c:08:14:de:72:98:b9:c0:78:73:f5:ec:8b:
66:3d:a2:5b:7f:51:8b:07:66:15:7d:27:37:34:e2:ac:18:54:
01:e0:a9:5a:77:5c:0a:33:b6:89:97:61:8f:f8:26:c6:27:c7:
38:88:2e:5f:e9:8f:49:78:29:78:4b:0e:32:ef:b9:5d:b3:34:
b8:20:e2:78:82:30:5f:1b:2e:8c:1c:94:67:ae:94:07:3e:dc:
07:2f:95:23:33:97:ed:a2:d0:58:9c:1f:3b:ae:4c:6f:5f:1b:
54:a1:51:6d:6c:02:bf:87:d6:3f:20:ba:e5:00:7f:08:e2:a7:
c1:73:9a:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOWbDRZBxfI4dFQxnWHvNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjViNTcwZjQ2ZGU1YzZlOGIyYjY0ZWQwOTBhZDEzODVk
YWI3MzEwHhcNMjUwNDE5MTQwMDIyWhcNMjUwNDIwMTQwMDIyWjAzMTEwLwYDVQQD
EyhiYTc0NTQ2ZDE3MTZhZGIyZTFkM2Q1ZTJjNjI3MmFmMWEwMGZjOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2beUP4nuKD4FqmbEBSBq2agShhQ9
z+hy//Mx3YqgnQjgA80GWHUnwlUmVVxwdJrkZi8JH6DstwPzbmGE/mIDTXst1OpM
o5Psuny4B53D0MyICZoGZnnZy6AT7HYq5/6A6bkhJ44miMDQRNg+lN2GAYSfTyQo
waFXin7IQ+z8jC0vfC+e7DfiZhkv+SeZumJneja/mG/muuPdcIUIZzY7l/woTpiG
p4XMvhN+SkPwwr/SaRK0q7sO3A+t1nxUVfuMpIWaBddE3db24OQz2nyjBUXoDbUz
P716791PQHmoWQTy4pce+quCtxR2UyHHZyJVCnZudSfPcTfiKHlheGF7PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp0VG0XFq2y4dPV4sYnKvGgD8kcMB8GA1UdIwQY
MBaAFEIltXD0beXG6LK2TtCQrROF2rcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGIt
MzkwYjg1Mzk0YmViLzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGItMzkwYjg1Mzk0YmVi
LzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh67/lzSN
dfTx3UDZjga6pxQH4eqOsa4YBeTBSgAjTn+LIYxzQhpr6ZoC3dOhGbi1gu5F8PTN
+5DnqPJS9kIgdm7nBQhdv8OJBycMIPQs4P+Wx6EuH5o+f3/Q52PZMe6UXkVHIL1w
7U9eMFVeOVNev5QZ2Q476XaqCNMxS/2+qF1xnUlMCBTecpi5wHhz9eyLZj2iW39R
iwdmFX0nNzTirBhUAeCpWndcCjO2iZdhj/gmxifHOIguX+mPSXgpeEsOMu+5XbM0
uCDieIIwXxsujByUZ66UBz7cBy+VIzOX7aLQWJwfO65Mb18bVKFRbWwCv4fWPyC6
5QB/COKnwXOaNQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:33:40 2025 by rpki-client