Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: kj7pL26YnFEcFhx7E/WtNjwm0sKGHxKdDy1+ZTiWqGQ=
Subject key identifier: B8:76:8D:A0:8D:21:5E:2C:A8:E0:A7:4B:C4:6F:3B:4D:63:2F:27:C0
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 01964C34CB3F6DAEEF437B9950B3C7BD78F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 04:00:50 +0000
Manifest this update: Sat 19 Apr 2025 04:00:50 +0000
Manifest next update: Sun 20 Apr 2025 04:00:50 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: 45PeP2DBYb27oOlSMuioQXtlq9MlZQo47HsuvUQFSVs=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:cb:3f:6d:ae:ef:43:7b:99:50:b3:c7:bd:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Apr 19 04:00:50 2025 GMT
Not After : Apr 20 04:00:50 2025 GMT
Subject: CN=b8768da08d215e2ca8e0a74bc46f3b4d632f27c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:83:90:70:f3:f2:62:e5:99:f4:5f:00:a0:
2e:22:67:74:3a:d8:2d:a4:36:75:7b:05:c9:8e:fe:
04:cb:f1:0a:99:a9:92:f5:3f:0d:9a:51:8a:5f:bd:
9f:fc:fc:0b:da:e5:61:2a:19:7f:8f:0a:f8:a2:b3:
83:7e:f0:2c:40:a7:94:96:a4:dc:76:de:75:76:09:
8e:bc:df:a6:e4:30:11:47:5d:33:9e:28:77:a1:f8:
5e:a1:01:6f:ed:5a:ac:3b:36:dc:ec:6f:a7:7e:db:
c6:a2:11:a8:54:d3:69:c9:ca:c9:c9:53:b5:9d:15:
3c:ca:03:2a:7b:8f:d2:76:17:5e:1c:b6:6c:53:60:
cb:72:5f:21:89:87:73:f1:50:f3:e6:96:ef:83:83:
4f:43:b3:63:a5:6d:78:00:5c:c1:aa:4c:b4:c0:98:
f8:87:a9:eb:f6:e3:15:60:51:9c:91:09:5b:5d:e9:
14:97:0c:48:07:94:60:b1:94:b9:49:49:22:96:6b:
a5:3f:9b:e3:14:e0:87:32:40:5e:65:84:f1:0f:b6:
2b:d8:ef:e5:7e:a1:f1:38:80:40:57:fd:3c:33:9e:
c4:60:58:92:99:da:03:ad:1f:fa:6c:e9:ae:2c:c8:
1a:ff:42:0c:65:d2:d8:87:c9:0f:03:9f:df:da:f7:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:8D:A0:8D:21:5E:2C:A8:E0:A7:4B:C4:6F:3B:4D:63:2F:27:C0
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:02:44:a3:22:15:31:19:dc:91:b6:d4:ea:61:95:ca:53:ee:
9b:a8:6a:39:76:96:42:66:b3:1d:63:eb:c3:39:7e:bd:01:e8:
ac:3b:cc:10:34:87:21:8f:ab:8d:4e:8a:3d:3e:49:4a:16:d6:
1d:57:71:33:96:ac:8e:02:0b:71:b4:5a:3d:77:b9:ec:f8:f0:
94:ed:f0:ed:dc:b3:84:76:42:4f:b1:40:9f:d8:fa:97:00:37:
2b:d2:92:24:02:fc:20:b3:86:34:e3:e0:1b:5d:5f:91:d1:4f:
55:53:26:ac:ac:65:69:9e:45:f2:1f:89:f9:90:d4:07:93:8b:
a6:91:a8:bf:c1:6f:5e:36:57:13:68:ab:86:06:f1:96:5c:eb:
e4:23:2d:04:4f:f8:e0:0b:98:1a:f6:f1:f0:ca:b0:ee:26:59:
ec:28:f5:c5:d0:c7:07:b4:ab:07:b6:83:08:4a:1d:6e:79:46:
fc:c1:22:63:68:e7:00:9e:12:06:5b:35:26:10:29:59:59:bd:
fe:f1:2a:61:f6:08:23:ae:f3:1a:53:63:76:3c:99:2b:83:f8:
86:07:e7:41:28:35:c7:73:7c:28:5c:b2:8c:d2:c9:a1:d0:30:
0e:36:2e:c0:c4:0e:69:0f:1a:1c:bf:16:06:61:34:16:d0:b3:
1e:c9:49:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMNMs/ba7vQ3uZULPHvXj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZjRiZTQxMDU0ZWFmNzg3ZWFhMzgzM2ZmY2FlOGYxZWQ3
ZmFhODAwHhcNMjUwNDE5MDQwMDUwWhcNMjUwNDIwMDQwMDUwWjAzMTEwLwYDVQQD
EyhiODc2OGRhMDhkMjE1ZTJjYThlMGE3NGJjNDZmM2I0ZDYzMmYyN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxWDkHDz8mLlmfRfAKAuImd0Otgt
pDZ1ewXJjv4Ey/EKmamS9T8NmlGKX72f/PwL2uVhKhl/jwr4orODfvAsQKeUlqTc
dt51dgmOvN+m5DARR10znih3ofheoQFv7VqsOzbc7G+nftvGohGoVNNpycrJyVO1
nRU8ygMqe4/SdhdeHLZsU2DLcl8hiYdz8VDz5pbvg4NPQ7NjpW14AFzBqky0wJj4
h6nr9uMVYFGckQlbXekUlwxIB5RgsZS5SUkilmulP5vjFOCHMkBeZYTxD7Yr2O/l
fqHxOIBAV/08M57EYFiSmdoDrR/6bOmuLMga/0IMZdLYh8kPA5/f2vfwNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLh2jaCNIV4sqOCnS8RvO01jLyfAMB8GA1UdIwQY
MBaAFLj0vkEFTq94fqo4M//K6PHtf6qAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2Mt
NzFjZDZhZjA3MmE1LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2MtNzFjZDZhZjA3MmE1
LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwJEoyIV
MRnckbbU6mGVylPum6hqOXaWQmazHWPrwzl+vQHorDvMEDSHIY+rjU6KPT5JShbW
HVdxM5asjgILcbRaPXe57PjwlO3w7dyzhHZCT7FAn9j6lwA3K9KSJAL8ILOGNOPg
G11fkdFPVVMmrKxlaZ5F8h+J+ZDUB5OLppGov8FvXjZXE2irhgbxllzr5CMtBE/4
4AuYGvbx8Mqw7iZZ7Cj1xdDHB7SrB7aDCEodbnlG/MEiY2jnAJ4SBls1JhApWVm9
/vEqYfYII67zGlNjdjyZK4P4hgfnQSg1x3N8KFyyjNLJodAwDjYuwMQOaQ8aHL8W
BmE0FtCzHslJzw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:05:55 2025 by rpki-client