Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: mHbgHDZlbLJDnGSqDSNXd3BVkuCq3202PzRJK+bpJQc=
Subject key identifier: 68:46:D6:30:CC:77:30:56:53:AF:20:07:2F:05:EC:63:12:5A:B9:AB
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 01964F6CB8903937A6E39F6184C079EE7984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 19:00:47 +0000
Manifest this update: Sat 19 Apr 2025 19:00:47 +0000
Manifest next update: Sun 20 Apr 2025 19:00:47 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: +xZT8BuoRqnNhx8syuX4aAl6sWzu+JrWO/n0IMzjcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:b8:90:39:37:a6:e3:9f:61:84:c0:79:ee:79:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Apr 19 19:00:47 2025 GMT
Not After : Apr 20 19:00:47 2025 GMT
Subject: CN=6846d630cc77305653af20072f05ec63125ab9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ac:53:ca:4d:8e:f9:b1:84:3a:7e:f8:a6:3c:
d1:64:d3:f5:df:4f:b8:73:43:db:f4:4e:07:3c:93:
ce:36:d8:93:97:ab:bb:20:e4:8e:6f:1c:1b:2e:80:
61:57:d3:c0:bb:a7:9d:1a:19:4f:01:b8:35:fa:91:
ea:0a:a8:f4:a7:dc:66:cf:15:76:54:f1:9d:5c:2f:
e0:1f:a4:e3:77:5b:88:b8:3e:d1:8b:7f:d5:4b:ff:
ef:69:1d:3c:3c:e4:c4:c8:3a:e6:5d:45:3f:88:f8:
a6:66:37:76:16:11:bd:4c:b5:6d:b1:d4:6e:ff:e3:
ba:ed:9f:9d:6d:3c:8d:11:6c:17:9e:c0:22:14:e5:
89:4e:b8:5d:27:81:68:88:d7:c1:50:d9:74:e2:1c:
fb:68:fd:89:64:65:be:38:69:3f:10:51:8e:23:16:
53:45:a9:9b:63:a9:d0:4a:d3:1a:58:73:62:a0:f1:
fe:75:74:64:27:d4:76:e8:e8:de:9b:08:f7:92:3e:
ef:dc:2b:40:c0:36:32:05:24:bf:24:37:f7:d2:dd:
ea:9e:2b:1c:13:30:32:88:b1:59:89:88:45:53:77:
92:a7:4d:52:6f:99:02:a8:24:54:22:e4:72:0c:73:
9f:2a:a5:c6:94:e4:56:e4:db:38:52:e8:bb:89:f7:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:D6:30:CC:77:30:56:53:AF:20:07:2F:05:EC:63:12:5A:B9:AB
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:57:82:29:49:e4:0a:52:e4:9e:4d:0a:17:d3:e5:21:05:29:
af:0d:42:0c:84:5b:68:f9:5f:a4:d1:a9:f6:7e:ec:21:b8:d4:
fd:24:f7:47:b1:02:b3:14:3e:91:06:21:50:8b:5c:fb:4d:be:
bd:8d:b0:d6:2a:10:74:36:73:09:5b:c9:c8:9a:25:9c:43:2b:
6f:fb:37:e7:f6:30:ed:22:08:29:ce:10:95:d2:39:ab:55:8c:
b8:27:6c:48:4e:ef:f0:17:cb:b4:5b:d7:6f:58:d1:3c:07:5b:
93:56:6c:1e:dd:c4:5e:5f:13:5c:02:36:5f:a9:a5:e2:46:b6:
c8:3c:9e:5f:27:03:f9:6e:c0:58:d1:55:41:37:77:4b:f6:5e:
e9:71:a1:20:af:e2:01:f3:78:ae:16:6c:d3:57:d0:e9:64:0c:
db:05:5e:a8:9d:be:b7:f9:c3:11:03:f2:aa:e6:2a:31:36:8c:
be:bf:b0:57:90:8a:e4:f9:7e:d9:24:0e:30:13:e2:5d:12:7f:
a0:91:a3:6e:53:39:e8:1b:e7:96:0b:a5:e4:1e:d2:28:1f:72:
85:aa:72:7f:1b:30:e8:e5:73:cd:8f:58:e5:b1:2a:5a:15:c4:
0d:be:20:1f:bd:3d:1f:39:11:bb:59:e8:90:58:fa:f5:f7:fa:
73:4c:4d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbLiQOTem459hhMB57nmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh
ZTMxNDgwHhcNMjUwNDE5MTkwMDQ3WhcNMjUwNDIwMTkwMDQ3WjAzMTEwLwYDVQQD
Eyg2ODQ2ZDYzMGNjNzczMDU2NTNhZjIwMDcyZjA1ZWM2MzEyNWFiOWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5axTyk2O+bGEOn74pjzRZNP130+4
c0Pb9E4HPJPONtiTl6u7IOSObxwbLoBhV9PAu6edGhlPAbg1+pHqCqj0p9xmzxV2
VPGdXC/gH6Tjd1uIuD7Ri3/VS//vaR08POTEyDrmXUU/iPimZjd2FhG9TLVtsdRu
/+O67Z+dbTyNEWwXnsAiFOWJTrhdJ4FoiNfBUNl04hz7aP2JZGW+OGk/EFGOIxZT
RambY6nQStMaWHNioPH+dXRkJ9R26Ojemwj3kj7v3CtAwDYyBSS/JDf30t3qnisc
EzAyiLFZiYhFU3eSp01Sb5kCqCRUIuRyDHOfKqXGlORW5Ns4Uui7ifc4IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhG1jDMdzBWU68gBy8F7GMSWrmrMB8GA1UdIwQY
MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt
YjZmMWNmYWE2OTg1LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1
LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVeCKUnk
ClLknk0KF9PlIQUprw1CDIRbaPlfpNGp9n7sIbjU/ST3R7ECsxQ+kQYhUItc+02+
vY2w1ioQdDZzCVvJyJolnEMrb/s35/Yw7SIIKc4QldI5q1WMuCdsSE7v8BfLtFvX
b1jRPAdbk1ZsHt3EXl8TXAI2X6ml4ka2yDyeXycD+W7AWNFVQTd3S/Ze6XGhIK/i
AfN4rhZs01fQ6WQM2wVeqJ2+t/nDEQPyquYqMTaMvr+wV5CK5Pl+2SQOMBPiXRJ/
oJGjblM56Bvnlgul5B7SKB9yhapyfxsw6OVzzY9Y5bEqWhXEDb4gH709HzkRu1no
kFj69ff6c0xNOA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:33 2025 by rpki-client