Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: DN7kBq7cZY7rNAY8nZQxyM+P3cTbLRMUHibfId0TeJg=
Subject key identifier: 57:FC:DA:75:1B:E6:21:A4:83:03:CA:83:69:E9:C0:FD:AC:11:C6:C8
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 0196556E6770EC37BF6E925B53B00290C164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 0460
Signing time: Sun 20 Apr 2025 23:00:20 +0000
Manifest this update: Sun 20 Apr 2025 23:00:20 +0000
Manifest next update: Mon 21 Apr 2025 23:00:20 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: 1wyEw0/UO96LvsJ/6jswbjPHBGvsxCwSq0+OcGg1TyM=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:67:70:ec:37:bf:6e:92:5b:53:b0:02:90:c1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Apr 20 23:00:20 2025 GMT
Not After : Apr 21 23:00:20 2025 GMT
Subject: CN=57fcda751be621a48303ca8369e9c0fdac11c6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:75:fb:35:9a:d8:6a:1a:94:36:cd:15:15:
6d:ea:e0:89:6e:c4:89:48:da:fb:1a:ef:00:ef:06:
88:01:ad:79:88:3c:b5:fa:be:98:b6:ad:cb:dc:ed:
86:e3:fe:20:82:62:9c:32:51:ea:a5:66:bb:1d:42:
ce:c2:51:15:17:a6:70:28:74:a3:02:e0:ce:60:71:
8e:78:de:4e:62:5d:c7:92:7f:1b:ad:e9:2c:bd:ba:
a1:a0:e9:a7:09:40:85:1a:ab:63:c6:d8:26:cb:28:
03:d7:6c:74:7f:ec:9f:69:14:6f:31:29:fd:e1:22:
db:9a:8f:9d:40:7c:e2:81:dc:84:74:47:7a:e5:0f:
73:dc:c3:28:9c:6d:98:72:1a:71:40:de:34:73:59:
d9:1a:31:2a:d5:90:f0:af:7f:a5:ee:cc:d0:1a:05:
27:64:65:e0:5a:31:d3:38:d1:c2:09:a0:f6:80:91:
8e:ee:e2:af:51:2a:76:85:5b:b8:bf:12:ae:06:02:
20:a0:74:8d:3b:32:73:a9:26:87:51:08:c7:83:55:
e6:0d:d9:7e:a3:9b:dc:e3:a3:ae:e4:ea:40:9a:0b:
db:f8:a0:3a:d8:6c:a6:75:9e:8b:64:88:bb:5b:cc:
87:dd:a3:ac:33:e3:9d:b5:72:9d:04:6d:8a:35:a1:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FC:DA:75:1B:E6:21:A4:83:03:CA:83:69:E9:C0:FD:AC:11:C6:C8
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b8:2a:53:fc:e5:cc:4c:f1:51:94:6e:1a:d1:95:fb:78:6c:
d4:43:dc:aa:d8:2e:82:c3:6e:e5:ed:71:02:fb:da:38:3f:a2:
bf:dc:14:13:58:6c:7f:15:81:ef:f8:fb:03:d3:28:a3:84:c9:
fe:45:93:d3:5c:35:3b:1e:2e:f7:35:b7:af:81:4c:95:b4:75:
6f:59:c1:fc:36:98:96:c7:6b:5a:34:82:70:51:4d:37:19:91:
4d:8a:7f:e5:76:e6:6d:2c:ae:a8:8e:53:ef:f7:f0:52:e2:20:
da:de:ed:fc:5a:1f:d5:0a:1a:e2:35:56:53:8c:f9:d8:bc:f8:
42:bd:db:92:ee:5e:ed:62:46:cd:12:f3:f0:18:13:56:bc:2d:
2c:90:38:33:d2:0c:1f:9c:1f:80:55:8b:63:12:12:fd:e8:1c:
0a:5c:aa:22:34:62:33:e7:7a:59:d4:ac:88:22:11:11:5f:85:
ea:08:8e:72:80:0d:5c:e1:67:5b:7e:37:63:9b:77:16:52:49:
6f:a0:4d:9c:b8:61:2d:b0:68:8a:a0:6c:b4:dc:8c:a5:19:9c:
c1:2e:be:58:ab:c3:04:52:a8:26:ad:70:53:e6:6e:fd:8b:54:
bd:c3:ca:bb:73:d3:48:b0:05:11:75:a0:84:60:0b:ce:54:ee:
8b:af:b3:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbmdw7De/bpJbU7ACkMFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjYyOTIwNDM4MjMxZjMyMWUzYjgxMDEwODhiMjBmOTBj
MDhkNDYwHhcNMjUwNDIwMjMwMDIwWhcNMjUwNDIxMjMwMDIwWjAzMTEwLwYDVQQD
Eyg1N2ZjZGE3NTFiZTYyMWE0ODMwM2NhODM2OWU5YzBmZGFjMTFjNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttp1+zWa2GoalDbNFRVt6uCJbsSJ
SNr7Gu8A7waIAa15iDy1+r6Ytq3L3O2G4/4ggmKcMlHqpWa7HULOwlEVF6ZwKHSj
AuDOYHGOeN5OYl3Hkn8breksvbqhoOmnCUCFGqtjxtgmyygD12x0f+yfaRRvMSn9
4SLbmo+dQHzigdyEdEd65Q9z3MMonG2YchpxQN40c1nZGjEq1ZDwr3+l7szQGgUn
ZGXgWjHTONHCCaD2gJGO7uKvUSp2hVu4vxKuBgIgoHSNOzJzqSaHUQjHg1XmDdl+
o5vc46Ou5OpAmgvb+KA62GymdZ6LZIi7W8yH3aOsM+OdtXKdBG2KNaEnSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf82nUb5iGkgwPKg2npwP2sEcbIMB8GA1UdIwQY
MBaAFEImKSBDgjHzIeO4EBCIsg+QwI1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jOWI3MzMtM2JiNC00YmJiLTk2MzYt
NzRlNjIwYjE4MDFiLzEvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jOWI3MzMtM2JiNC00YmJiLTk2MzYtNzRlNjIwYjE4MDFi
LzEvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7gqU/zl
zEzxUZRuGtGV+3hs1EPcqtgugsNu5e1xAvvaOD+iv9wUE1hsfxWB7/j7A9Moo4TJ
/kWT01w1Ox4u9zW3r4FMlbR1b1nB/DaYlsdrWjSCcFFNNxmRTYp/5XbmbSyuqI5T
7/fwUuIg2t7t/Fof1Qoa4jVWU4z52Lz4Qr3bku5e7WJGzRLz8BgTVrwtLJA4M9IM
H5wfgFWLYxIS/egcClyqIjRiM+d6WdSsiCIREV+F6giOcoANXOFnW343Y5t3FlJJ
b6BNnLhhLbBoiqBstNyMpRmcwS6+WKvDBFKoJq1wU+Zu/YtUvcPKu3PTSLAFEXWg
hGALzlTui6+z5g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:34:30 2025 by rpki-client