Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: mCG2h9lOLeYcaQaoFEx73wm9WxT04Ab+KkodSTdhMeY=
Subject key identifier: 31:AC:01:48:D3:CA:ED:9E:E0:72:76:A3:A4:CD:FC:39:47:E1:FB:0D
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 01964857DEC7F7EC3FC1E0C56FD2CF613B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 13EC
Signing time: Fri 18 Apr 2025 10:00:40 +0000
Manifest this update: Fri 18 Apr 2025 10:00:40 +0000
Manifest next update: Sat 19 Apr 2025 10:00:40 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: LRkz6IS3bpMpWz/fF/K6pBogq67rlT884aX/gx3fD5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:57:de:c7:f7:ec:3f:c1:e0:c5:6f:d2:cf:61:3b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Apr 18 10:00:40 2025 GMT
Not After : Apr 19 10:00:40 2025 GMT
Subject: CN=31ac0148d3caed9ee07276a3a4cdfc3947e1fb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:40:05:d3:eb:54:12:b1:0b:cf:c9:a6:0e:
44:3a:73:7d:d9:a8:d5:32:a9:4a:07:de:fa:aa:d1:
34:f3:0b:f6:1a:cd:1e:8d:b9:07:76:d3:a4:ca:7e:
0f:ae:3e:52:1f:cf:3f:d6:d5:c1:99:d7:b4:7a:ee:
98:f1:ad:04:5e:c0:f2:b6:f5:d5:14:b7:dc:fd:ba:
09:9d:87:e4:bb:a1:1e:e4:1a:af:78:cb:47:74:db:
4c:e0:d2:41:80:92:e5:d1:66:be:7a:be:d0:83:59:
87:1b:f0:16:75:5d:54:12:bf:31:12:d8:7d:5c:fc:
38:96:59:17:ec:d3:5f:1c:63:4e:9c:1e:7b:25:9a:
ca:1d:6c:18:62:d4:5f:ba:c0:9e:61:56:ef:db:06:
d3:2c:cb:12:c4:0e:21:7e:07:7b:83:6b:65:d0:4a:
86:33:a5:51:49:1b:a8:f7:a1:d2:fc:1f:30:3c:8c:
b7:b0:60:c8:b5:f5:d9:2c:6c:40:3c:cc:be:c1:7f:
98:cf:76:32:74:57:f8:b9:8c:1c:85:90:8a:22:d3:
e6:96:d1:47:e2:9d:22:05:17:74:48:e2:85:98:cf:
d4:4e:b4:6e:a6:ef:37:36:0d:13:07:cd:d3:02:d9:
a3:ad:02:8e:8b:35:89:04:39:00:d0:99:91:eb:73:
69:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:01:48:D3:CA:ED:9E:E0:72:76:A3:A4:CD:FC:39:47:E1:FB:0D
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:5a:9c:8c:c5:f5:de:3a:38:ce:29:a4:c6:00:01:b2:a6:
97:fd:81:46:a1:20:5d:09:98:ee:be:fd:fe:9a:eb:73:57:c7:
4c:d6:45:df:6c:7e:8e:46:3b:ce:1b:14:24:f2:ba:52:a0:89:
84:6b:67:ef:3e:70:21:a2:24:9e:8b:a5:e7:e8:bd:b7:b6:27:
4d:ef:58:37:86:20:a0:ae:af:00:d7:00:74:72:d7:48:3e:c6:
a7:db:b2:bd:36:42:de:0d:88:c8:f0:ee:06:04:65:0d:8b:ef:
01:35:7f:96:61:20:b4:72:19:82:b3:89:d5:62:4e:4e:11:df:
15:6d:f2:50:6a:db:c4:21:4d:fb:38:dc:21:61:df:4e:9e:b0:
a8:4b:ee:e6:c5:b7:78:5f:4a:52:4f:5e:f1:27:ba:e7:07:55:
76:0c:de:bd:13:c5:90:94:9d:33:c1:60:ab:d2:33:59:a4:6e:
de:b6:30:3c:f6:37:8c:b7:9c:43:ce:03:6b:c3:1d:93:80:ac:
66:1d:e0:2f:6f:87:4f:61:fe:b2:ce:87:d4:87:32:d5:11:2d:
51:c8:59:2c:ec:b2:1f:11:ff:85:5f:5f:63:18:c9:1f:0c:ad:
35:87:07:23:6b:bf:93:b9:52:2b:76:c8:e3:27:fa:3b:09:a1:
6c:3a:3f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIV97H9+w/weDFb9LPYTueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjAyMzE4ZjJjZTk3MmU3MjQwOGNjY2M3ZDMyMGFmMzBj
ZDJiMGQwHhcNMjUwNDE4MTAwMDQwWhcNMjUwNDE5MTAwMDQwWjAzMTEwLwYDVQQD
EygzMWFjMDE0OGQzY2FlZDllZTA3Mjc2YTNhNGNkZmMzOTQ3ZTFmYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQdABdPrVBKxC8/Jpg5EOnN92ajV
MqlKB976qtE08wv2Gs0ejbkHdtOkyn4Prj5SH88/1tXBmde0eu6Y8a0EXsDytvXV
FLfc/boJnYfku6Ee5BqveMtHdNtM4NJBgJLl0Wa+er7Qg1mHG/AWdV1UEr8xEth9
XPw4llkX7NNfHGNOnB57JZrKHWwYYtRfusCeYVbv2wbTLMsSxA4hfgd7g2tl0EqG
M6VRSRuo96HS/B8wPIy3sGDItfXZLGxAPMy+wX+Yz3YydFf4uYwchZCKItPmltFH
4p0iBRd0SOKFmM/UTrRupu83Ng0TB83TAtmjrQKOizWJBDkA0JmR63NpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGsAUjTyu2e4HJ2o6TN/DlH4fsNMB8GA1UdIwQY
MBaAFKjwIxjyzpcuckCMzMfTIK8wzSsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgt
NzU0NGRmMzAwNGIyLzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgtNzU0NGRmMzAwNGIy
LzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABelanIzF
9d46OM4ppMYAAbKml/2BRqEgXQmY7r79/prrc1fHTNZF32x+jkY7zhsUJPK6UqCJ
hGtn7z5wIaIknoul5+i9t7YnTe9YN4YgoK6vANcAdHLXSD7Gp9uyvTZC3g2IyPDu
BgRlDYvvATV/lmEgtHIZgrOJ1WJOThHfFW3yUGrbxCFN+zjcIWHfTp6wqEvu5sW3
eF9KUk9e8Se65wdVdgzevRPFkJSdM8Fgq9IzWaRu3rYwPPY3jLecQ84Da8Mdk4Cs
Zh3gL2+HT2H+ss6H1Icy1REtUchZLOyyHxH/hV9fYxjJHwytNYcHI2u/k7lSK3bI
4yf6OwmhbDo/Ag==
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:01:11 2025 by rpki-client