Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: eBY5P/pKzfZ8pzIvkbz/lVo6v5ecmK8MO8nGE9RzLbU=
Subject key identifier: 81:C3:B0:63:7F:10:EA:67:E8:17:AB:B9:AC:35:8A:87:5A:06:D1:24
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 01966104CDC9BB6E6D7A985409A618E938C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 120A
Signing time: Wed 23 Apr 2025 05:00:26 +0000
Manifest this update: Wed 23 Apr 2025 05:00:26 +0000
Manifest next update: Thu 24 Apr 2025 05:00:26 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: b9Wq7tFXNa3U2RywgM+3Eh2xgT94ln/TcAazoDYaFec=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:04:cd:c9:bb:6e:6d:7a:98:54:09:a6:18:e9:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Apr 23 05:00:26 2025 GMT
Not After : Apr 24 05:00:26 2025 GMT
Subject: CN=81c3b0637f10ea67e817abb9ac358a875a06d124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:eb:f8:a0:a2:26:f2:c3:57:86:29:c6:00:
22:0d:a7:29:ce:c8:5e:84:0b:83:b1:45:e5:54:16:
f1:6b:33:f4:cc:f6:b5:33:09:5e:0d:93:71:47:4d:
cb:79:3a:48:82:b1:6e:48:70:b1:ff:3a:a2:3a:08:
78:28:25:7e:1d:73:ae:3b:7c:41:e6:63:74:76:12:
5f:75:d5:44:9a:09:b4:08:51:14:8f:79:c6:66:1c:
ac:bb:45:6c:83:09:8b:e7:91:a7:1d:62:1e:d3:55:
05:4b:9a:1e:39:c4:6c:96:02:56:b9:60:fa:cb:fe:
ef:3f:98:e9:a8:06:ec:a7:ba:f7:fa:b7:43:8d:65:
27:9b:c8:de:bd:d3:fb:35:2d:e2:84:ac:d9:bd:50:
28:f7:9a:28:1c:00:0e:db:e1:d0:e2:f0:fe:3a:19:
b9:b1:2a:db:16:d9:0a:2a:1b:7b:c2:2a:6f:cb:fc:
27:f0:ef:6b:51:b7:65:59:d3:fc:b6:75:bc:29:e1:
6b:16:85:f1:2e:43:d5:7b:23:9f:2b:ff:be:99:3b:
7e:39:29:f7:97:c8:ec:dc:73:24:7f:50:f5:4b:2d:
a6:b3:f2:d4:e9:1b:05:03:23:95:1b:f4:f2:01:18:
6f:44:fb:e3:08:c7:1c:86:95:41:3a:1c:f5:34:26:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:B0:63:7F:10:EA:67:E8:17:AB:B9:AC:35:8A:87:5A:06:D1:24
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:78:2e:64:cc:02:47:b3:b5:32:ba:cb:d2:54:0e:03:cb:0d:
76:4a:af:64:f6:d2:4d:43:bf:fa:01:25:aa:8e:6c:e7:47:07:
c0:a2:fb:22:09:8d:a6:b0:4d:a3:f8:b8:7c:65:5a:b3:9c:af:
8a:cb:7d:19:54:9a:f2:5a:60:68:66:91:f5:9f:34:cc:21:61:
f7:e3:02:d4:6c:de:2b:36:64:68:f8:2d:f4:6e:a7:6c:20:79:
4e:f0:2e:22:ec:fc:92:95:e5:bb:5d:00:4a:32:c8:c3:54:3d:
35:a6:98:4f:dd:14:68:1c:e0:a9:0f:47:15:1c:79:ef:11:4c:
a7:b6:a0:af:50:91:c5:37:8c:14:8a:a0:57:14:7e:13:6f:21:
05:8a:59:cd:e5:7b:3f:eb:2c:a5:a1:f8:56:01:e8:35:1d:22:
5e:7a:64:7e:34:91:96:5f:c2:ef:e3:57:99:e5:32:25:a2:7a:
c4:69:16:7b:8f:6f:e3:35:6a:57:9a:28:fe:0e:ff:2b:01:6c:
23:5b:ea:3e:d6:c0:4b:b1:aa:d0:ff:bd:b3:5e:0c:d8:7b:5d:
ad:d7:54:af:85:09:b8:ac:b2:54:47:0e:7c:bf:68:c9:0f:11:
f0:f1:fd:ea:47:e9:52:d5:17:43:3b:5d:25:d6:cd:a1:81:13:
ae:c6:56:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZhBM3Ju25tephUCaYY6TjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi
YjgwOTIwHhcNMjUwNDIzMDUwMDI2WhcNMjUwNDI0MDUwMDI2WjAzMTEwLwYDVQQD
Eyg4MWMzYjA2MzdmMTBlYTY3ZTgxN2FiYjlhYzM1OGE4NzVhMDZkMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxPr+KCiJvLDV4YpxgAiDacpzshe
hAuDsUXlVBbxazP0zPa1MwleDZNxR03LeTpIgrFuSHCx/zqiOgh4KCV+HXOuO3xB
5mN0dhJfddVEmgm0CFEUj3nGZhysu0VsgwmL55GnHWIe01UFS5oeOcRslgJWuWD6
y/7vP5jpqAbsp7r3+rdDjWUnm8jevdP7NS3ihKzZvVAo95ooHAAO2+HQ4vD+Ohm5
sSrbFtkKKht7wipvy/wn8O9rUbdlWdP8tnW8KeFrFoXxLkPVeyOfK/++mTt+OSn3
l8js3HMkf1D1Sy2ms/LU6RsFAyOVG/TyARhvRPvjCMcchpVBOhz1NCbD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHDsGN/EOpn6Beruaw1iodaBtEkMB8GA1UdIwQY
MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt
Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj
LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3guZMwC
R7O1MrrL0lQOA8sNdkqvZPbSTUO/+gElqo5s50cHwKL7IgmNprBNo/i4fGVas5yv
ist9GVSa8lpgaGaR9Z80zCFh9+MC1GzeKzZkaPgt9G6nbCB5TvAuIuz8kpXlu10A
SjLIw1Q9NaaYT90UaBzgqQ9HFRx57xFMp7agr1CRxTeMFIqgVxR+E28hBYpZzeV7
P+sspaH4VgHoNR0iXnpkfjSRll/C7+NXmeUyJaJ6xGkWe49v4zVqV5oo/g7/KwFs
I1vqPtbAS7Gq0P+9s14M2HtdrddUr4UJuKyyVEcOfL9oyQ8R8PH96kfpUtUXQztd
JdbNoYETrsZWyg==
-----END CERTIFICATE-----
Generated at Wed Apr 23 13:53:05 2025 by rpki-client