Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File: Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier: f2Whr0hrPnPWt0mMG3n9xHOLu/cA9Sn/9k28Zm70d/I=
Subject key identifier: 07:1F:9F:14:29:12:C1:03:28:58:AD:46:E0:F4:AF:A1:6A:F1:11:24
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer: /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial: 019649D853610C7E3D12895B10A96BE3AC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number: 0718
Signing time: Fri 18 Apr 2025 17:00:35 +0000
Manifest this update: Fri 18 Apr 2025 17:00:35 +0000
Manifest next update: Sat 19 Apr 2025 17:00:35 +0000
Files and hashes: 1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=)
2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: k/YdkDLiVrB807xbsw6sshS3JzqjerwY3+WodNeo924=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:53:61:0c:7e:3d:12:89:5b:10:a9:6b:e3:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Validity
Not Before: Apr 18 17:00:35 2025 GMT
Not After : Apr 19 17:00:35 2025 GMT
Subject: CN=071f9f142912c1032858ad46e0f4afa16af11124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:c3:e6:70:49:5d:b1:80:8c:3c:8e:68:be:
ea:d9:3e:e5:19:49:26:b3:21:5f:5a:3c:84:ee:42:
29:08:c0:02:42:9f:ec:b2:a4:f4:2c:48:5b:c0:a3:
21:a0:ab:8d:a6:9b:81:aa:63:50:86:95:4f:22:76:
f9:0b:5d:7b:ad:9b:e7:9a:77:52:c4:27:8a:a7:5a:
8c:1e:c0:77:fd:76:e9:cd:dc:64:ec:96:b8:89:f3:
ff:43:54:c7:51:4a:68:1e:f5:f5:65:35:3e:ee:2e:
13:06:02:5b:67:63:d2:56:69:1b:73:93:ea:10:51:
3f:b3:8c:52:c6:6b:87:d9:ff:35:51:7f:8b:78:af:
da:da:76:59:f2:bb:9c:a5:8f:88:e0:83:0a:38:45:
4c:da:1a:92:f0:1b:13:cb:c0:0c:ea:1a:8c:5f:aa:
0a:9a:83:65:8e:80:a3:c5:20:55:48:b3:7d:59:15:
f7:3c:d3:10:b9:12:d2:f6:c6:60:a0:75:bf:97:7c:
17:b3:ab:0a:95:22:a7:72:a2:70:86:c3:40:8a:12:
38:4a:43:8f:98:2f:33:06:bc:5b:75:ec:19:b8:6a:
21:6d:54:6c:1a:e5:01:08:7e:27:d7:30:76:c2:48:
ef:40:68:c7:9d:1c:fc:f4:0e:53:1a:e1:9d:07:b5:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:9F:14:29:12:C1:03:28:58:AD:46:E0:F4:AF:A1:6A:F1:11:24
X509v3 Authority Key Identifier:
keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:25:a6:94:0d:7b:6c:4e:21:a8:7d:80:73:00:6c:53:c3:76:
72:e1:0a:9a:e5:ec:9d:8d:78:c3:bd:7b:4c:22:94:c7:9c:c9:
a5:2a:a9:d0:68:19:43:d1:8a:06:23:6d:27:09:7d:a1:6e:95:
7e:d6:30:d1:59:b9:45:7c:b6:13:9b:a5:5b:fc:57:91:05:c9:
e5:7d:ec:dd:c6:27:0a:23:81:64:26:5e:22:4e:2b:c1:6f:8a:
03:e3:f0:8c:22:11:65:1a:cc:2e:82:2d:68:6d:5e:b4:d0:ee:
ee:9a:ce:ed:19:ad:33:44:4b:fb:4a:43:89:16:d4:42:e5:6b:
0f:8f:aa:6f:8e:bb:b2:02:1f:e4:0f:b0:90:87:24:d9:06:99:
ce:e3:15:99:bd:80:13:be:fc:f7:a2:bc:97:28:97:6a:0f:77:
ec:f8:bd:37:5c:fe:f1:1a:12:91:ac:11:f1:10:dd:66:84:73:
19:a8:4f:5f:a5:fc:7c:e5:b4:27:6f:0e:2a:77:0a:0c:99:6c:
e7:5d:c7:0a:1d:ec:8f:93:df:87:84:18:54:a3:09:2a:7e:a5:
ae:bc:c2:e1:df:82:d8:62:1d:9d:ec:ad:c5:4f:af:2e:76:c1:
0c:98:77:7b:a7:29:09:5d:3c:bb:8c:67:ae:87:3c:1b:8f:8d:
f3:d2:8a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2FNhDH49EolbEKlr46x9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWE3ZjkzZmNhODA4YzgyZDI2ZmJmZTBmZGUxYjk2OGNm
NmU4ZDMwHhcNMjUwNDE4MTcwMDM1WhcNMjUwNDE5MTcwMDM1WjAzMTEwLwYDVQQD
EygwNzFmOWYxNDI5MTJjMTAzMjg1OGFkNDZlMGY0YWZhMTZhZjExMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI7D5nBJXbGAjDyOaL7q2T7lGUkm
syFfWjyE7kIpCMACQp/ssqT0LEhbwKMhoKuNppuBqmNQhpVPInb5C117rZvnmndS
xCeKp1qMHsB3/Xbpzdxk7Ja4ifP/Q1THUUpoHvX1ZTU+7i4TBgJbZ2PSVmkbc5Pq
EFE/s4xSxmuH2f81UX+LeK/a2nZZ8rucpY+I4IMKOEVM2hqS8BsTy8AM6hqMX6oK
moNljoCjxSBVSLN9WRX3PNMQuRLS9sZgoHW/l3wXs6sKlSKncqJwhsNAihI4SkOP
mC8zBrxbdewZuGohbVRsGuUBCH4n1zB2wkjvQGjHnRz89A5TGuGdB7XihQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcfnxQpEsEDKFitRuD0r6Fq8REkMB8GA1UdIwQY
MBaAFEOaf5P8qAjILSb7/g/eG5aM9ujTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84ZjlmMzItYzFkNS00ZmE2LWIwMTMt
OTI5N2I4NTVmYTcyLzEvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84ZjlmMzItYzFkNS00ZmE2LWIwMTMtOTI5N2I4NTVmYTcy
LzEvUTVwX2tfeW9DTWd0SnZ2LUQ5NGJsb3oyNk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCWmlA17
bE4hqH2AcwBsU8N2cuEKmuXsnY14w717TCKUx5zJpSqp0GgZQ9GKBiNtJwl9oW6V
ftYw0Vm5RXy2E5ulW/xXkQXJ5X3s3cYnCiOBZCZeIk4rwW+KA+PwjCIRZRrMLoIt
aG1etNDu7prO7RmtM0RL+0pDiRbUQuVrD4+qb467sgIf5A+wkIck2QaZzuMVmb2A
E77896K8lyiXag937Pi9N1z+8RoSkawR8RDdZoRzGahPX6X8fOW0J28OKncKDJls
513HCh3sj5Pfh4QYVKMJKn6lrrzC4d+C2GIdneytxU+vLnbBDJh3e6cpCV08u4xn
roc8G4+N89KKDg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:02:27 2025 by rpki-client