Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier: iorQ87yQL2Kky5/lo1+nWzUPg4mpzMJr6PQW/cgGbgo=
Subject key identifier: C7:52:3D:F8:FE:A6:AD:93:1B:2B:70:EC:FB:C7:49:98:F9:DC:4E:8D
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial: 0196BF37BB1D4D3F458EFED47AFF35473F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number: 03CA
Signing time: Sun 11 May 2025 12:00:22 +0000
Manifest this update: Sun 11 May 2025 12:00:22 +0000
Manifest next update: Mon 12 May 2025 12:00:22 +0000
Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=)
2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: /yKGB7arinYITqG+/Pptwzk5d+TRAQUw1I8IQ5g3m6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:bb:1d:4d:3f:45:8e:fe:d4:7a:ff:35:47:3f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Validity
Not Before: May 11 12:00:22 2025 GMT
Not After : May 12 12:00:22 2025 GMT
Subject: CN=c7523df8fea6ad931b2b70ecfbc74998f9dc4e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:39:ef:72:42:bc:1c:e0:e5:dd:39:fa:05:
09:ff:b1:b6:54:94:6c:01:f5:78:23:98:78:40:09:
d3:3d:29:6f:77:6d:7f:c5:52:80:99:05:21:87:42:
0d:cc:0e:aa:03:aa:b4:58:5d:05:e8:de:8a:3b:5a:
60:1f:cd:40:60:ae:5b:cb:3a:ff:95:b1:54:08:7b:
57:9d:f9:a6:3c:38:23:b9:a7:50:2b:57:ad:47:83:
bc:77:31:6a:bd:d9:dc:d5:7f:90:ca:0d:9d:b0:0b:
84:c2:5a:40:99:35:c4:a7:43:40:e0:8a:21:3c:3f:
b3:20:cd:a4:61:6a:6c:f3:a1:5e:df:d8:86:ce:a9:
f7:3c:b1:a3:7e:d4:81:09:c0:5f:3c:a6:af:ed:95:
e7:cc:10:64:41:40:63:7b:e8:94:b8:04:26:66:d6:
7a:b3:54:56:da:92:46:30:fa:3c:b5:19:f2:d6:ef:
f0:52:b5:6b:d2:75:fc:b6:39:53:c4:2c:b2:e0:3d:
40:04:91:50:e7:ec:05:ac:f8:5a:12:d2:e6:ce:84:
de:0c:24:16:b7:3d:80:2c:6f:19:18:ea:fd:c5:03:
0b:8c:2d:bc:66:2e:0c:6f:96:40:fb:70:a4:3e:3b:
99:8c:34:0b:b0:aa:33:57:13:17:46:a9:64:6c:a2:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:52:3D:F8:FE:A6:AD:93:1B:2B:70:EC:FB:C7:49:98:F9:DC:4E:8D
X509v3 Authority Key Identifier:
keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5a:a0:a2:c3:07:cd:54:04:f3:12:0c:09:c1:7d:63:8b:01:
d3:b7:fb:43:de:d1:1f:2a:8e:3c:1e:8d:a6:ac:06:61:03:df:
ce:c7:51:a7:e5:3e:a3:77:eb:25:70:29:04:90:f8:5c:42:53:
01:59:4f:31:5b:7e:1b:43:0b:37:2c:6b:1d:f1:fa:de:46:39:
22:cf:03:06:73:c5:21:ae:f3:9b:68:ed:8b:e7:e0:70:dd:df:
ec:ab:0a:0b:a5:c1:31:86:ba:43:c5:92:49:4a:55:00:2c:f6:
44:a3:f1:af:54:5d:2f:66:bf:67:bf:2e:9b:5c:5a:cb:da:2f:
03:81:62:20:ca:58:7e:cf:0b:d7:75:bb:62:5f:64:3f:e6:0b:
47:40:5f:61:0a:36:30:3d:9a:c3:50:db:0d:37:4b:e0:66:c7:
96:e9:c2:d7:4e:3b:b7:6e:5d:79:6c:64:b3:07:f4:24:20:d1:
ca:ed:5d:9d:d8:24:46:74:ba:83:e8:81:93:24:fd:31:f7:e9:
b3:2b:bc:1a:bd:15:90:c5:b5:58:82:97:a4:46:20:a2:ad:07:
ee:18:d6:c9:1a:0e:34:b0:7f:6c:4f:e1:c2:12:52:a9:8f:2d:
20:17:de:ba:b0:81:3b:d4:d7:09:ab:1d:4a:86:a2:05:a0:98:
f3:e2:e4:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/N7sdTT9Fjv7Uev81Rz8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMGYyZDE4MjlkNmZiOGQyNDdmYTRlOTY1OGVhMTdmMDZj
MDBiMDUwHhcNMjUwNTExMTIwMDIyWhcNMjUwNTEyMTIwMDIyWjAzMTEwLwYDVQQD
EyhjNzUyM2RmOGZlYTZhZDkzMWIyYjcwZWNmYmM3NDk5OGY5ZGM0ZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+o573JCvBzg5d05+gUJ/7G2VJRs
AfV4I5h4QAnTPSlvd21/xVKAmQUhh0INzA6qA6q0WF0F6N6KO1pgH81AYK5byzr/
lbFUCHtXnfmmPDgjuadQK1etR4O8dzFqvdnc1X+Qyg2dsAuEwlpAmTXEp0NA4Ioh
PD+zIM2kYWps86Fe39iGzqn3PLGjftSBCcBfPKav7ZXnzBBkQUBje+iUuAQmZtZ6
s1RW2pJGMPo8tRny1u/wUrVr0nX8tjlTxCyy4D1ABJFQ5+wFrPhaEtLmzoTeDCQW
tz2ALG8ZGOr9xQMLjC28Zi4Mb5ZA+3CkPjuZjDQLsKozVxMXRqlkbKL+YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdSPfj+pq2TGytw7PvHSZj53E6NMB8GA1UdIwQY
MBaAFKsPLRgp1vuNJH+k6WWOoX8GwAsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MjYxMjMtYmZjMi00N2VhLTliMDUt
NTcwZmVjMjlkMTM5LzEvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83MjYxMjMtYmZjMi00N2VhLTliMDUtNTcwZmVjMjlkMTM5
LzEvcXc4dEdDblctNDBrZjZUcFpZNmhmd2JBQ3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlqgosMH
zVQE8xIMCcF9Y4sB07f7Q97RHyqOPB6NpqwGYQPfzsdRp+U+o3frJXApBJD4XEJT
AVlPMVt+G0MLNyxrHfH63kY5Is8DBnPFIa7zm2jti+fgcN3f7KsKC6XBMYa6Q8WS
SUpVACz2RKPxr1RdL2a/Z78um1xay9ovA4FiIMpYfs8L13W7Yl9kP+YLR0BfYQo2
MD2aw1DbDTdL4GbHlunC1047t25deWxkswf0JCDRyu1dndgkRnS6g+iBkyT9Mffp
syu8Gr0VkMW1WIKXpEYgoq0H7hjWyRoONLB/bE/hwhJSqY8tIBfeurCBO9TXCasd
SoaiBaCY8+LkAA==
-----END CERTIFICATE-----
Generated at Sun May 11 22:24:47 2025 by rpki-client