Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: zdtGtj8dyH718ytOr+zAPVjhke3N9x0wKnTKW/am8GY=
Subject key identifier: 0A:B0:2B:25:73:D6:6C:03:46:70:7E:41:C9:4A:97:82:C7:C2:4E:4B
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 0196AE0E40C3FF62DAF6D4816D6F38AD1395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 11BE
Signing time: Thu 08 May 2025 04:01:31 +0000
Manifest this update: Thu 08 May 2025 04:01:31 +0000
Manifest next update: Fri 09 May 2025 04:01:31 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: tVLFVeYdqGWoRNrIMIjiCfGKTWf9F9PDe5ZZU7JrWDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:40:c3:ff:62:da:f6:d4:81:6d:6f:38:ad:13:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: May 8 04:01:31 2025 GMT
Not After : May 9 04:01:31 2025 GMT
Subject: CN=0ab02b2573d66c0346707e41c94a9782c7c24e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:46:59:b6:91:be:4c:bb:9b:90:8c:ff:85:
5d:cf:b5:e9:c1:dd:9f:8d:59:5e:a6:c1:25:bb:77:
d6:a5:76:8f:c7:fa:bd:d5:6c:10:13:7f:f2:5d:fd:
dc:d8:7b:73:6f:75:ae:3b:ca:fc:b3:34:b7:c9:5a:
3f:61:be:d1:2d:02:2f:92:99:a3:f8:f5:9b:a2:6b:
ab:2d:4c:16:42:09:be:03:23:89:31:64:f1:ab:be:
87:01:05:de:93:3f:ca:ca:95:96:d8:e8:25:0e:9c:
ed:6c:a3:bc:f3:a8:74:a5:b6:3b:00:86:56:d9:b6:
95:2d:2d:fb:4d:e0:3d:67:88:f8:e7:e3:a6:a5:a1:
27:79:b1:cb:1c:3f:5a:3a:b4:78:7b:50:87:c6:25:
11:26:77:ac:85:25:61:84:f3:62:bc:58:fc:47:39:
d8:c1:38:13:52:d8:4e:31:a4:c8:79:65:5e:b3:9d:
57:18:87:aa:21:28:f0:9e:16:0e:37:1f:4a:a9:81:
47:ba:1e:82:21:50:a5:67:8d:6b:9f:ef:46:53:33:
d4:14:85:8f:bb:19:0f:47:a5:37:7c:ab:73:c6:06:
3d:4d:20:27:87:40:80:f1:4f:88:1a:b7:80:38:a0:
32:eb:69:fe:07:7f:31:49:c1:13:a2:4c:22:da:d7:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B0:2B:25:73:D6:6C:03:46:70:7E:41:C9:4A:97:82:C7:C2:4E:4B
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:cd:fe:35:22:72:32:1d:1f:02:84:2f:de:ae:e2:03:f3:
82:3a:4f:b4:5a:56:b0:b4:92:6c:d3:87:3a:29:26:88:65:a1:
41:7b:10:10:85:17:ab:c3:dd:3a:4f:78:aa:d2:df:d5:c3:88:
e5:0f:2b:8c:60:0f:23:90:71:f2:94:20:8f:49:9c:e9:09:c7:
87:e9:14:3e:e0:85:d0:ca:a9:f6:e8:58:67:37:b4:7e:a2:b0:
d2:d1:27:ff:1b:59:5c:a3:cb:4e:e5:81:4e:b7:ef:0b:39:36:
5c:33:ea:6d:81:24:71:1f:b0:37:bc:e2:bf:5b:32:05:15:fd:
35:d7:87:07:18:4a:1f:cd:1f:b5:52:bc:3c:30:d2:8c:fc:21:
45:1e:63:64:0d:3a:ee:3c:c1:0a:69:a7:40:a3:50:f4:c3:1f:
a0:08:cf:26:bf:fe:4b:14:f3:e9:59:fa:4e:01:4e:e8:50:4c:
95:13:ac:5f:ca:e9:9c:db:1c:9f:87:aa:fc:4f:4c:64:20:22:
d9:bb:7f:61:4e:3b:70:1b:9f:cc:79:b5:18:ec:13:21:be:0c:
88:5e:d2:ef:d4:51:fe:ce:b9:1e:7e:6d:56:cf:70:9a:73:e0:
65:4c:e6:0d:d3:cf:9d:2a:ff:10:8b:54:38:99:7b:87:57:0a:
59:58:b0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauDkDD/2La9tSBbW84rROVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YTI1MTE0MDExNGM4ZmQ4YWQ1ZmI0NWI3MTg5YWJhN2Jj
NTA0OGYwHhcNMjUwNTA4MDQwMTMxWhcNMjUwNTA5MDQwMTMxWjAzMTEwLwYDVQQD
EygwYWIwMmIyNTczZDY2YzAzNDY3MDdlNDFjOTRhOTc4MmM3YzI0ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl91GWbaRvky7m5CM/4Vdz7Xpwd2f
jVlepsElu3fWpXaPx/q91WwQE3/yXf3c2Htzb3WuO8r8szS3yVo/Yb7RLQIvkpmj
+PWbomurLUwWQgm+AyOJMWTxq76HAQXekz/KypWW2OglDpztbKO886h0pbY7AIZW
2baVLS37TeA9Z4j45+OmpaEnebHLHD9aOrR4e1CHxiURJneshSVhhPNivFj8RznY
wTgTUthOMaTIeWVes51XGIeqISjwnhYONx9KqYFHuh6CIVClZ41rn+9GUzPUFIWP
uxkPR6U3fKtzxgY9TSAnh0CA8U+IGreAOKAy62n+B38xScETokwi2te80wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqwKyVz1mwDRnB+QclKl4LHwk5LMB8GA1UdIwQY
MBaAFKiiURQBFMj9itX7RbcYmrp7xQSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEt
ZjA5NDYyYzEyZGE0LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEtZjA5NDYyYzEyZGE0
LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/7N/jUi
cjIdHwKEL96u4gPzgjpPtFpWsLSSbNOHOikmiGWhQXsQEIUXq8PdOk94qtLf1cOI
5Q8rjGAPI5Bx8pQgj0mc6QnHh+kUPuCF0Mqp9uhYZze0fqKw0tEn/xtZXKPLTuWB
TrfvCzk2XDPqbYEkcR+wN7ziv1syBRX9NdeHBxhKH80ftVK8PDDSjPwhRR5jZA06
7jzBCmmnQKNQ9MMfoAjPJr/+SxTz6Vn6TgFO6FBMlROsX8rpnNscn4eq/E9MZCAi
2bt/YU47cBufzHm1GOwTIb4MiF7S79RR/s65Hn5tVs9wmnPgZUzmDdPPnSr/EItU
OJl7h1cKWViwjg==
-----END CERTIFICATE-----
Generated at Thu May 8 10:58:56 2025 by rpki-client