
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
File: QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft (raw, json)
Hash identifier: TqqrQC8MK/Jwa5HXTHcBXkQQVQzCQYJNIdTi8yCNfUI=
Subject key identifier: 7F:A4:CE:63:6C:14:6F:A0:C6:9E:0B:B3:3F:18:CF:30:D2:B4:B3:90
Authority key identifier: 40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A
Certificate issuer: /CN=40aa949d31c66888cb4758f23dd5f312141dec4a
Certificate serial: 0196BB91CD2F60A542432C50F4D85242A22E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
Manifest number: 0C54
Signing time: Sat 10 May 2025 19:00:16 +0000
Manifest this update: Sat 10 May 2025 19:00:16 +0000
Manifest next update: Sun 11 May 2025 19:00:16 +0000
Files and hashes: 1: Ci2nxFCN2-JFxhCGu2Re4yZAOHs.roa (hash: +bhZNarT7FFMkSZsUhSIu2eb8t+79YYtheiLS/N1UY0=)
2: QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl (hash: 6om2ElXQDPjW0J+7ldDVgcClT/J9WLk23akUA/PZWO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:cd:2f:60:a5:42:43:2c:50:f4:d8:52:42:a2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40aa949d31c66888cb4758f23dd5f312141dec4a
Validity
Not Before: May 10 19:00:16 2025 GMT
Not After : May 11 19:00:16 2025 GMT
Subject: CN=7fa4ce636c146fa0c69e0bb33f18cf30d2b4b390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:ec:53:0d:84:e1:4d:8d:eb:89:36:6f:2f:
e5:62:0b:45:86:cd:f7:ee:a8:ee:5f:bd:a6:c7:e1:
09:e8:d7:af:2c:d9:00:de:0f:88:1e:d9:76:58:87:
a6:58:fc:8d:9b:a1:3e:1b:43:ac:f3:a1:36:0f:f8:
fb:80:68:40:a2:d8:62:b0:a7:f9:f0:21:b1:04:e3:
ff:da:76:c7:19:8e:5e:d5:0a:97:b3:60:ac:fc:06:
35:ea:15:d2:85:b1:bb:27:7a:5d:55:98:22:6b:b7:
78:1f:41:4f:48:97:fe:f2:fe:2f:94:70:c8:72:b9:
31:0d:7b:7c:cb:98:2c:83:46:9d:11:38:20:3c:41:
10:01:46:21:ed:35:b5:8b:33:f4:06:1e:4a:54:65:
4f:ed:5e:15:76:39:8e:3d:69:ea:f9:66:2f:45:0e:
80:bf:fd:81:e0:0f:70:0c:e6:24:e9:f5:3b:32:2a:
05:ec:c9:2d:78:01:c4:92:a2:c5:9d:4e:b0:62:16:
0f:02:33:bc:b2:1a:53:d6:3e:0e:ee:aa:b6:4d:b9:
cc:7d:0e:f8:08:1e:e3:4e:0e:31:08:e0:51:cf:05:
3d:e7:c3:77:ba:1a:21:0a:38:92:3a:a5:c1:d7:93:
19:f6:7e:2d:c3:09:4d:28:2b:2b:df:95:16:41:cc:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:CE:63:6C:14:6F:A0:C6:9E:0B:B3:3F:18:CF:30:D2:B4:B3:90
X509v3 Authority Key Identifier:
keyid:40:AA:94:9D:31:C6:68:88:CB:47:58:F2:3D:D5:F3:12:14:1D:EC:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de9401-56bb-4813-8f88-fd11bb1cc82d/1/QKqUnTHGaIjLR1jyPdXzEhQd7Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:14:6a:c8:86:f7:d8:54:00:eb:55:77:c4:8d:a5:34:2f:1c:
b5:63:8e:55:f3:f0:ad:16:c3:85:2d:39:9e:29:bd:55:bf:24:
8d:2b:16:d5:bc:bc:ba:f1:be:66:12:f1:61:05:1e:b1:e7:a8:
e7:ed:4d:4c:bf:14:c1:c4:b2:5d:1b:03:73:99:df:5f:e8:52:
69:87:23:9a:4b:76:eb:a1:9c:d5:2a:e1:1b:e4:d8:8d:31:b1:
88:ad:2f:cb:51:67:71:2b:12:a8:93:17:3f:b4:36:cd:2b:f2:
61:3a:a3:ba:3f:38:60:8b:03:27:5a:02:52:0d:67:55:0e:0e:
c6:dc:e3:d5:4c:de:d5:e6:61:9d:24:7d:bf:d9:06:8e:b9:71:
82:85:7b:8b:bc:a9:e0:a1:7b:40:94:a9:ad:59:d1:c8:a7:5c:
25:2e:65:f3:01:a3:ab:c9:e0:f5:6e:59:1a:21:54:ec:09:27:
ce:c8:b9:fe:40:64:e4:cf:58:2c:d3:22:ba:be:83:c4:d9:e6:
b2:8b:83:67:ea:88:37:9a:b3:b2:2a:66:06:7d:78:52:69:12:
82:22:6c:d1:01:4c:f2:5d:61:9d:82:1d:2c:e4:c2:97:19:37:
c8:4a:cd:f4:44:4f:a0:59:d6:fa:3c:61:d5:bd:fe:e3:a1:62:
47:07:9e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kc0vYKVCQyxQ9NhSQqIuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYWE5NDlkMzFjNjY4ODhjYjQ3NThmMjNkZDVmMzEyMTQx
ZGVjNGEwHhcNMjUwNTEwMTkwMDE2WhcNMjUwNTExMTkwMDE2WjAzMTEwLwYDVQQD
Eyg3ZmE0Y2U2MzZjMTQ2ZmEwYzY5ZTBiYjMzZjE4Y2YzMGQyYjRiMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wXsUw2E4U2N64k2by/lYgtFhs33
7qjuX72mx+EJ6NevLNkA3g+IHtl2WIemWPyNm6E+G0Os86E2D/j7gGhAothisKf5
8CGxBOP/2nbHGY5e1QqXs2Cs/AY16hXShbG7J3pdVZgia7d4H0FPSJf+8v4vlHDI
crkxDXt8y5gsg0adETggPEEQAUYh7TW1izP0Bh5KVGVP7V4VdjmOPWnq+WYvRQ6A
v/2B4A9wDOYk6fU7MioF7MkteAHEkqLFnU6wYhYPAjO8shpT1j4O7qq2TbnMfQ74
CB7jTg4xCOBRzwU958N3uhohCjiSOqXB15MZ9n4twwlNKCsr35UWQcwSiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+kzmNsFG+gxp4Lsz8YzzDStLOQMB8GA1UdIwQY
MBaAFECqlJ0xxmiIy0dY8j3V8xIUHexKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtxVW5USEdhSWpMUjFqeVBkWHpFaFFkN0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kZTk0MDEtNTZiYi00ODEzLThmODgt
ZmQxMWJiMWNjODJkLzEvUUtxVW5USEdhSWpMUjFqeVBkWHpFaFFkN0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9kZTk0MDEtNTZiYi00ODEzLThmODgtZmQxMWJiMWNjODJk
LzEvUUtxVW5USEdhSWpMUjFqeVBkWHpFaFFkN0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxRqyIb3
2FQA61V3xI2lNC8ctWOOVfPwrRbDhS05nim9Vb8kjSsW1by8uvG+ZhLxYQUeseeo
5+1NTL8UwcSyXRsDc5nfX+hSaYcjmkt266Gc1SrhG+TYjTGxiK0vy1FncSsSqJMX
P7Q2zSvyYTqjuj84YIsDJ1oCUg1nVQ4Oxtzj1Uze1eZhnSR9v9kGjrlxgoV7i7yp
4KF7QJSprVnRyKdcJS5l8wGjq8ng9W5ZGiFU7Aknzsi5/kBk5M9YLNMiur6DxNnm
souDZ+qIN5qzsipmBn14UmkSgiJs0QFM8l1hnYIdLOTClxk3yErN9ERPoFnW+jxh
1b3+46FiRweegg==
-----END CERTIFICATE-----
Generated at Sun May 11 01:16:34 2025 by rpki-client