Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: GkJXdy7+P4hYbVi5fL7i3F+ay0+O0h5YOutqy+xAN98=
Subject key identifier: 18:9C:AC:05:60:E8:43:5A:DB:DE:C5:F6:3D:C0:18:37:D5:3F:BA:AD
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 01958F2AB5275BD77E54CBD418A3E0A1A390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 1496
Signing time: Thu 13 Mar 2025 11:01:35 +0000
Manifest this update: Thu 13 Mar 2025 11:01:35 +0000
Manifest next update: Fri 14 Mar 2025 11:01:35 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: w/deWvfGf2HPLKZX7/3MOJ67V/B/6Zd2pffkfbVCyxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:b5:27:5b:d7:7e:54:cb:d4:18:a3:e0:a1:a3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Mar 13 11:01:35 2025 GMT
Not After : Mar 14 11:01:35 2025 GMT
Subject: CN=189cac0560e8435adbdec5f63dc01837d53fbaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d3:18:da:f2:92:fc:4f:97:21:97:de:c1:e9:
71:45:ac:63:5a:f9:ea:80:af:e7:56:75:ef:21:c0:
bf:0a:86:2d:ed:dc:c1:43:9c:bc:4f:72:7b:8a:8c:
14:07:e4:00:5f:c8:02:a2:c1:4b:ef:f5:06:4f:c2:
5d:60:79:c7:1b:1d:09:b1:9d:02:14:c3:df:cc:07:
53:e5:14:ac:bc:4d:0b:92:76:16:5c:fe:89:1e:45:
f9:a9:98:4b:89:95:e9:05:e9:25:9a:59:de:f7:82:
0c:c4:9f:7d:8a:35:79:86:f0:ae:7a:1d:a7:55:1f:
15:6e:83:94:aa:0f:87:c2:a3:07:f6:3f:44:5e:67:
df:4d:03:d3:47:76:2d:6a:bb:59:6f:da:ee:16:d7:
cf:14:4d:ba:66:1b:6d:70:3c:96:cb:c1:34:54:e0:
c4:94:e9:5c:9a:e0:7d:22:72:0a:7e:58:70:93:5e:
d0:b6:b8:e2:ef:fd:6f:fe:0b:b0:c9:82:36:dc:cf:
38:97:6e:3f:06:e1:c8:03:8a:66:f0:82:47:d2:35:
ed:27:87:5a:1f:b4:92:03:7e:ee:bb:df:c5:6d:4f:
8d:46:20:6c:6a:a3:0b:ef:7f:6c:7d:66:3e:61:83:
d2:69:dd:6b:cd:2e:9c:bb:60:f0:37:4d:ea:6b:ef:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9C:AC:05:60:E8:43:5A:DB:DE:C5:F6:3D:C0:18:37:D5:3F:BA:AD
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a8:db:b2:29:f2:28:31:a4:ed:31:4e:71:5f:15:3a:ad:5f:
bb:d8:7f:e8:fd:4e:b6:d2:67:1e:3e:a3:84:68:ae:78:2a:ed:
b6:2c:5e:a1:05:bd:0a:1b:2b:81:2d:f0:5c:ed:a2:0f:d9:aa:
50:86:64:6c:96:9f:c7:28:90:f7:85:94:c9:ff:d9:30:0d:02:
fb:6a:4f:46:1f:15:50:d3:5d:75:71:55:be:74:5a:80:ae:a1:
7c:43:9a:1f:6b:f3:bc:17:5b:1b:ef:d2:89:a8:a8:93:48:11:
50:e5:b9:cb:67:5e:3d:13:88:ad:a6:1a:11:cc:05:22:53:9e:
70:ed:27:41:25:75:e5:27:c5:b6:04:0c:87:c4:05:e6:61:4d:
79:5d:4c:42:d7:e8:bf:df:74:6e:c9:33:78:7f:cd:f9:d7:2e:
d1:21:6f:d1:60:07:41:5d:6f:5e:3e:98:e3:78:26:54:7c:ac:
24:f6:5e:df:78:cf:50:b4:10:fc:78:08:bd:4f:d9:f7:d7:3c:
15:0f:29:2f:89:24:51:a5:92:7f:ea:b4:91:09:5b:c7:a3:2e:
e8:f8:e8:6e:58:7b:17:dc:80:7d:82:c4:6b:7f:2a:26:41:36:
0f:64:77:64:27:94:0a:16:80:c1:18:00:f5:dd:48:43:ea:1a:
f8:eb:d1:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPKrUnW9d+VMvUGKPgoaOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxM2ZmYTEwNmFlM2ZlZTZiZTg3YmFjMDZhODdiYTU3ZWQx
YzExNDAwHhcNMjUwMzEzMTEwMTM1WhcNMjUwMzE0MTEwMTM1WjAzMTEwLwYDVQQD
EygxODljYWMwNTYwZTg0MzVhZGJkZWM1ZjYzZGMwMTgzN2Q1M2ZiYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtMY2vKS/E+XIZfewelxRaxjWvnq
gK/nVnXvIcC/CoYt7dzBQ5y8T3J7iowUB+QAX8gCosFL7/UGT8JdYHnHGx0JsZ0C
FMPfzAdT5RSsvE0LknYWXP6JHkX5qZhLiZXpBeklmlne94IMxJ99ijV5hvCueh2n
VR8VboOUqg+HwqMH9j9EXmffTQPTR3YtartZb9ruFtfPFE26ZhttcDyWy8E0VODE
lOlcmuB9InIKflhwk17Qtrji7/1v/guwyYI23M84l24/BuHIA4pm8IJH0jXtJ4da
H7SSA37uu9/FbU+NRiBsaqML739sfWY+YYPSad1rzS6cu2DwN03qa++mzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBicrAVg6ENa297F9j3AGDfVP7qtMB8GA1UdIwQY
MBaAFEE/+hBq4/7mvoe6wGqHulftHBFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMt
ZmEyNmVjMzlmYWJhLzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMtZmEyNmVjMzlmYWJh
LzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtajbsiny
KDGk7TFOcV8VOq1fu9h/6P1OttJnHj6jhGiueCrttixeoQW9ChsrgS3wXO2iD9mq
UIZkbJafxyiQ94WUyf/ZMA0C+2pPRh8VUNNddXFVvnRagK6hfEOaH2vzvBdbG+/S
iaiok0gRUOW5y2dePROIraYaEcwFIlOecO0nQSV15SfFtgQMh8QF5mFNeV1MQtfo
v990bskzeH/N+dcu0SFv0WAHQV1vXj6Y43gmVHysJPZe33jPULQQ/HgIvU/Z99c8
FQ8pL4kkUaWSf+q0kQlbx6Mu6Pjoblh7F9yAfYLEa38qJkE2D2R3ZCeUChaAwRgA
9d1IQ+oa+OvRlg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:27 2025 by rpki-client