Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: ib9Af50Bdx32QawUbjJc+3I2dib+h68u+X6EsgDDya0=
Subject key identifier: 46:57:9B:39:45:A4:16:D0:15:8F:52:DA:47:8E:84:25:20:B6:6E:CB
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 01964820D97416BB39C56CCB5D1823D6DE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 14FB
Signing time: Fri 18 Apr 2025 09:00:34 +0000
Manifest this update: Fri 18 Apr 2025 09:00:34 +0000
Manifest next update: Sat 19 Apr 2025 09:00:34 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: XiSODewkDTpJVbOKXmZH5YR83V7pPqryMWHoyeHXvhY=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:20:d9:74:16:bb:39:c5:6c:cb:5d:18:23:d6:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Apr 18 09:00:34 2025 GMT
Not After : Apr 19 09:00:34 2025 GMT
Subject: CN=46579b3945a416d0158f52da478e842520b66ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:c1:ab:26:4c:cf:9c:1c:aa:67:c6:f6:07:
48:67:d2:37:f4:e1:4e:35:13:1e:48:5a:10:d7:40:
1e:30:24:c0:4f:98:58:4b:04:ee:0f:ca:64:1b:f7:
1a:35:a4:66:37:de:f0:1f:f5:b2:9a:e0:f3:bb:30:
59:9d:8f:7e:14:8c:fe:6c:a3:de:5b:61:79:53:c3:
72:4b:16:e9:e6:49:82:f4:f5:1b:e4:ee:0e:24:5b:
5d:31:f5:76:20:c8:d7:19:51:ed:3b:67:65:76:92:
8e:53:da:86:2a:22:1b:36:5e:e9:5c:80:cd:f0:87:
4f:da:4d:ba:33:c5:92:e0:6f:e8:18:90:d7:cf:43:
e0:7d:b3:46:e2:92:a1:9a:2a:c2:3d:98:19:9c:58:
71:93:de:54:f9:a7:d6:7e:dd:28:d5:3b:a3:f3:a5:
d3:98:0e:91:0b:d2:d4:c3:f7:ba:18:7b:63:ff:04:
2a:74:51:f1:ab:c6:71:98:e3:75:0f:53:f2:c3:bf:
f3:68:24:fd:f1:0d:9d:3b:a7:59:62:30:e8:4c:7e:
3b:06:38:b4:4c:71:84:99:52:f1:ec:19:c3:0d:dc:
63:12:e8:f9:bd:6a:c5:6e:16:81:fb:20:35:e6:ee:
3c:f6:fd:42:f5:41:1a:82:77:a7:50:6e:7b:8e:bf:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:57:9B:39:45:A4:16:D0:15:8F:52:DA:47:8E:84:25:20:B6:6E:CB
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:19:10:1a:4a:09:83:a8:5a:5f:4a:23:0a:2d:fa:21:17:17:
86:e3:44:c6:4d:2b:41:b8:42:c6:62:55:93:21:ee:db:25:a4:
4e:1a:3f:80:30:a9:40:4e:f9:36:55:93:fc:fc:0f:cf:c4:d3:
ca:ad:ff:0e:04:41:c4:4e:be:95:f8:af:08:5c:3c:ab:1b:ab:
08:ee:53:42:2d:fd:15:99:c5:ed:17:25:4b:a5:9f:8b:56:73:
41:e7:9a:8e:c4:4a:40:94:dd:32:97:1f:66:90:70:e4:b9:fe:
98:86:a4:89:af:3c:d6:99:31:11:de:d2:84:b4:5c:d9:55:71:
44:d1:f4:d9:5b:87:5c:4e:ec:dc:88:f7:fb:ee:41:44:e2:df:
fb:d6:7c:a1:08:ba:3d:8d:a1:c3:af:cf:3d:74:d8:f8:3a:40:
d0:75:2c:02:6c:42:01:04:2f:88:9b:af:d3:2a:d0:c3:18:93:
5a:26:1c:19:4b:7a:ba:7d:63:bc:57:0e:29:d1:ef:35:43:9d:
70:e6:e2:98:a6:c3:88:70:51:d8:20:14:2d:83:76:ce:70:30:
c7:dc:9f:37:d8:e5:ff:12:76:e3:09:d9:79:15:62:27:9f:d5:
04:3a:56:dd:1a:cb:73:45:f0:ff:c7:9c:55:fb:87:46:56:29:
8f:77:22:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIINl0Frs5xWzLXRgj1t4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMDEwZGEzNTc2MjQyMzI0Y2VmYjJjODFjMTMzOWE2YzBl
M2I0MDMwHhcNMjUwNDE4MDkwMDM0WhcNMjUwNDE5MDkwMDM0WjAzMTEwLwYDVQQD
Eyg0NjU3OWIzOTQ1YTQxNmQwMTU4ZjUyZGE0NzhlODQyNTIwYjY2ZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD7BqyZMz5wcqmfG9gdIZ9I39OFO
NRMeSFoQ10AeMCTAT5hYSwTuD8pkG/caNaRmN97wH/WymuDzuzBZnY9+FIz+bKPe
W2F5U8NySxbp5kmC9PUb5O4OJFtdMfV2IMjXGVHtO2dldpKOU9qGKiIbNl7pXIDN
8IdP2k26M8WS4G/oGJDXz0PgfbNG4pKhmirCPZgZnFhxk95U+afWft0o1Tuj86XT
mA6RC9LUw/e6GHtj/wQqdFHxq8ZxmON1D1Pyw7/zaCT98Q2dO6dZYjDoTH47Bji0
THGEmVLx7BnDDdxjEuj5vWrFbhaB+yA15u489v1C9UEagnenUG57jr/k6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZXmzlFpBbQFY9S2keOhCUgtm7LMB8GA1UdIwQY
MBaAFNEBDaNXYkIyTO+yyBwTOabA47QDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAt
YTcwNDEyZmJjODMyLzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAtYTcwNDEyZmJjODMy
LzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShkQGkoJ
g6haX0ojCi36IRcXhuNExk0rQbhCxmJVkyHu2yWkTho/gDCpQE75NlWT/PwPz8TT
yq3/DgRBxE6+lfivCFw8qxurCO5TQi39FZnF7RclS6Wfi1ZzQeeajsRKQJTdMpcf
ZpBw5Ln+mIakia881pkxEd7ShLRc2VVxRNH02VuHXE7s3Ij3++5BROLf+9Z8oQi6
PY2hw6/PPXTY+DpA0HUsAmxCAQQviJuv0yrQwxiTWiYcGUt6un1jvFcOKdHvNUOd
cObimKbDiHBR2CAULYN2znAwx9yfN9jl/xJ24wnZeRViJ5/VBDpW3RrLc0Xw/8ec
VfuHRlYpj3ci7g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:17:29 2025 by rpki-client