Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: uqsiHnxAZ+e3BxdzuY6YJf2tLEH4Tq36AIJpTvIlicU=
Subject key identifier: 10:82:0A:5C:91:CE:1F:12:A1:C0:CC:A3:25:98:15:5F:59:9C:D7:AD
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 01965613BBAE32D0345652500676ACAC2D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0872
Signing time: Mon 21 Apr 2025 02:00:55 +0000
Manifest this update: Mon 21 Apr 2025 02:00:55 +0000
Manifest next update: Tue 22 Apr 2025 02:00:55 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: exQGkTGkQcrd9wRXf3vcPDYTcndFA+pyKynAQBYiU5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:bb:ae:32:d0:34:56:52:50:06:76:ac:ac:2d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Apr 21 02:00:55 2025 GMT
Not After : Apr 22 02:00:55 2025 GMT
Subject: CN=10820a5c91ce1f12a1c0cca32598155f599cd7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:19:8c:f6:f0:e8:39:69:45:ff:12:50:1e:
1f:37:06:2c:6f:1e:f7:14:53:2f:c6:a6:af:54:68:
98:f3:4b:4c:62:49:6f:41:1e:8b:6e:44:68:1b:b9:
4a:8b:91:8f:9d:c7:d8:e3:3a:b0:80:0d:11:20:c8:
fd:f2:36:64:81:07:0d:37:b3:88:1b:95:2c:f4:38:
ee:10:00:79:d6:54:76:46:5f:c9:0b:6d:27:7d:c1:
a6:7d:1e:51:35:1e:e7:58:ac:65:e0:da:b1:d0:54:
e1:d1:09:09:bc:fa:de:9b:b3:e8:68:f2:09:02:aa:
27:dd:14:16:be:63:3a:af:80:3d:86:58:3f:ca:ee:
37:17:14:e7:4f:2b:4e:a5:c3:21:b6:56:cb:90:a7:
f8:e7:af:2b:bb:c1:15:62:01:77:94:64:ba:79:a8:
b7:01:52:97:59:2e:b0:e1:9c:7f:83:43:45:80:3c:
ae:50:d4:40:a3:85:f1:56:9b:4e:b4:6a:87:be:c5:
0c:c0:57:36:eb:0c:82:ae:75:cb:08:48:96:51:e2:
e1:16:98:e9:de:72:4a:ec:9a:35:74:09:fa:af:ee:
c8:75:ed:05:74:a5:3a:89:41:7d:0c:25:d2:34:1a:
39:82:e6:a0:7d:e9:ce:ac:36:a2:d5:a1:9a:87:0e:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:82:0A:5C:91:CE:1F:12:A1:C0:CC:A3:25:98:15:5F:59:9C:D7:AD
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c8:00:f2:46:5f:7d:ae:5e:38:11:09:e5:17:8b:f2:5b:35:
09:0f:85:a4:cc:09:9a:34:8b:ed:4b:e7:57:2e:dc:f5:5f:93:
8f:a0:2d:f7:36:7a:a1:e8:6f:34:e1:84:b5:31:24:ef:f1:5d:
19:67:3e:58:e0:e2:86:05:0a:97:1b:e6:00:f4:b3:64:c5:e1:
b2:c9:fd:a5:67:b0:0b:19:da:72:3a:78:47:f0:75:3c:1c:b6:
24:35:04:c1:73:6f:dd:a9:ce:79:07:39:b7:57:1c:43:6a:de:
55:99:94:51:89:19:94:ad:76:bf:4a:6e:25:ee:c7:82:02:c6:
ee:2c:83:ae:b3:07:ed:a4:4b:b1:06:4c:65:db:e9:75:c1:cf:
d9:8c:8f:6d:4f:3e:df:01:3f:7a:a9:71:5a:d1:8c:b0:df:94:
9f:81:88:02:72:03:0f:ad:6f:51:6d:13:49:7e:70:8d:4f:e5:
f6:55:5f:98:3f:66:1a:6b:1d:9a:fc:66:33:16:cd:81:51:ca:
9c:16:46:f9:e5:e2:2b:a6:ae:50:17:23:32:84:6c:32:27:8c:
9f:65:8d:00:1e:15:b3:88:18:a3:54:a0:26:16:ca:f7:34:a8:
96:3b:05:33:f0:80:b2:f8:bb:af:92:50:cc:63:1f:31:e9:7c:
31:16:17:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE7uuMtA0VlJQBnasrC0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmYzYTczODY4ZGMxMWNkOGRiZjVlMWMzODBiYmI3MTA2
MDJmYjQwHhcNMjUwNDIxMDIwMDU1WhcNMjUwNDIyMDIwMDU1WjAzMTEwLwYDVQQD
EygxMDgyMGE1YzkxY2UxZjEyYTFjMGNjYTMyNTk4MTU1ZjU5OWNkN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdwZjPbw6DlpRf8SUB4fNwYsbx73
FFMvxqavVGiY80tMYklvQR6LbkRoG7lKi5GPncfY4zqwgA0RIMj98jZkgQcNN7OI
G5Us9DjuEAB51lR2Rl/JC20nfcGmfR5RNR7nWKxl4Nqx0FTh0QkJvPrem7PoaPIJ
Aqon3RQWvmM6r4A9hlg/yu43FxTnTytOpcMhtlbLkKf4568ru8EVYgF3lGS6eai3
AVKXWS6w4Zx/g0NFgDyuUNRAo4XxVptOtGqHvsUMwFc26wyCrnXLCEiWUeLhFpjp
3nJK7Jo1dAn6r+7Ide0FdKU6iUF9DCXSNBo5guagfenOrDai1aGahw5+CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCCClyRzh8SocDMoyWYFV9ZnNetMB8GA1UdIwQY
MBaAFKn/OnOGjcEc2Nv14cOAu7cQYC+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgt
NDc5NzRmNWM3MDRhLzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgtNDc5NzRmNWM3MDRh
LzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsgA8kZf
fa5eOBEJ5ReL8ls1CQ+FpMwJmjSL7UvnVy7c9V+Tj6At9zZ6oehvNOGEtTEk7/Fd
GWc+WODihgUKlxvmAPSzZMXhssn9pWewCxnacjp4R/B1PBy2JDUEwXNv3anOeQc5
t1ccQ2reVZmUUYkZlK12v0puJe7HggLG7iyDrrMH7aRLsQZMZdvpdcHP2YyPbU8+
3wE/eqlxWtGMsN+Un4GIAnIDD61vUW0TSX5wjU/l9lVfmD9mGmsdmvxmMxbNgVHK
nBZG+eXiK6auUBcjMoRsMieMn2WNAB4Vs4gYo1SgJhbK9zSoljsFM/CAsvi7r5JQ
zGMfMel8MRYX/w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:42:06 2025 by rpki-client