Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: RCA+2CuQ5vFERwdGQrGMb8Mw5gLP2emaAHsw8lktTUY=
Subject key identifier: A0:45:42:D6:BA:61:85:66:0B:67:9A:4C:24:40:EB:65:B5:C1:34:DE
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 01969ED1010FB2D9CC8D55092BE7E8933ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 05:00:19 +0000
Manifest this update: Mon 05 May 2025 05:00:19 +0000
Manifest next update: Tue 06 May 2025 05:00:19 +0000
Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: +nlw1ZhQVjWN1sRxhMOLiDlDeypAxa0K7RgFhuerkDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:01:0f:b2:d9:cc:8d:55:09:2b:e7:e8:93:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: May 5 05:00:19 2025 GMT
Not After : May 6 05:00:19 2025 GMT
Subject: CN=a04542d6ba6185660b679a4c2440eb65b5c134de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:d2:e2:be:ab:a3:c0:75:47:08:af:bf:9f:
7f:96:bc:b5:73:db:8d:59:f3:b4:01:09:13:65:d6:
e5:64:b7:4f:f1:96:86:0b:27:f9:79:4e:3d:0c:df:
70:83:c9:98:66:f0:e7:e5:67:7c:cc:50:6f:c7:02:
28:b5:27:7d:2a:c2:b6:0e:7b:4d:ef:52:fd:cf:1b:
97:16:7b:7f:ed:97:84:f3:ab:d8:57:93:99:49:71:
33:28:e9:5b:47:dd:89:bb:0a:80:86:f0:5d:3a:59:
51:33:44:ca:10:8f:1f:73:d5:f0:61:1f:94:63:62:
86:77:45:0b:83:21:02:d1:49:05:35:d2:ea:cf:75:
ae:bf:6f:07:77:11:43:2b:7d:5b:04:5d:b9:40:16:
c8:ef:11:dc:81:04:b3:f4:3b:23:fb:ad:8c:a6:6d:
26:a1:b7:29:0c:77:cc:9a:83:c5:ed:4c:4a:1f:71:
b7:f2:74:3a:d6:0a:bc:c1:9b:99:c3:8f:cc:19:94:
47:43:09:e7:6a:b6:9b:71:3f:ae:2c:d4:13:b3:ff:
81:04:b1:11:f6:39:d1:f4:e5:d7:ee:67:e8:68:b9:
46:62:32:3d:9b:d1:44:4f:f0:d7:21:f5:16:87:b3:
33:62:dc:58:f8:de:5e:ed:c8:c7:58:ef:a5:df:9b:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:42:D6:BA:61:85:66:0B:67:9A:4C:24:40:EB:65:B5:C1:34:DE
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:ce:ad:9c:82:2d:8d:ce:0e:22:00:ec:d7:3f:db:6e:a9:fa:
6a:00:dc:8b:98:cc:d3:3d:1c:da:2f:a4:1a:ed:d9:42:05:87:
ae:d9:4b:75:d1:03:38:ad:5c:ad:a9:20:b8:3a:3a:7b:d9:a7:
8f:d8:9f:25:4b:f3:9c:73:9e:10:02:42:8b:fe:ae:88:00:8e:
a0:23:b6:f6:ea:4d:3b:e3:6f:db:9d:1b:b0:ba:6f:71:3e:80:
fa:d7:c0:11:30:85:2d:8b:5e:09:de:ea:70:e8:e6:43:5d:7b:
2f:4e:33:07:c3:d6:e6:b9:43:9f:f2:8c:9d:82:aa:00:82:6a:
41:f4:44:42:04:a6:1a:f4:8a:31:2e:50:6d:c4:81:56:3c:a2:
a7:77:fb:81:66:b5:c4:78:1c:98:92:4b:97:a7:31:e8:e4:10:
ee:46:c9:7f:ce:2e:9e:ae:ed:5a:3d:f2:46:f4:a4:0c:21:ef:
36:2a:bf:9f:6b:8a:9b:34:b0:89:3b:5a:ca:6c:d9:86:3a:96:
b6:c0:63:8c:e3:61:b3:56:63:62:8d:e0:c8:3d:ad:20:4f:9d:
f6:a8:e9:32:57:56:29:db:75:2f:34:ad:e9:e3:b9:b9:c7:b7:
58:e7:dd:8a:1c:bc:a7:76:4a:3d:a2:f8:4a:e4:dc:ee:93:34:
0b:4c:39:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0QEPstnMjVUJK+fokzrMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3
YmZkNTQwHhcNMjUwNTA1MDUwMDE5WhcNMjUwNTA2MDUwMDE5WjAzMTEwLwYDVQQD
EyhhMDQ1NDJkNmJhNjE4NTY2MGI2NzlhNGMyNDQwZWI2NWI1YzEzNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrDS4r6ro8B1Rwivv59/lry1c9uN
WfO0AQkTZdblZLdP8ZaGCyf5eU49DN9wg8mYZvDn5Wd8zFBvxwIotSd9KsK2DntN
71L9zxuXFnt/7ZeE86vYV5OZSXEzKOlbR92JuwqAhvBdOllRM0TKEI8fc9XwYR+U
Y2KGd0ULgyEC0UkFNdLqz3Wuv28HdxFDK31bBF25QBbI7xHcgQSz9Dsj+62Mpm0m
obcpDHfMmoPF7UxKH3G38nQ61gq8wZuZw4/MGZRHQwnnarabcT+uLNQTs/+BBLER
9jnR9OXX7mfoaLlGYjI9m9FET/DXIfUWh7MzYtxY+N5e7cjHWO+l35t1/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBFQta6YYVmC2eaTCRA62W1wTTeMB8GA1UdIwQY
MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt
OTk3ZjQ3YWI3ZGYyLzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy
LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0c6tnIIt
jc4OIgDs1z/bbqn6agDci5jM0z0c2i+kGu3ZQgWHrtlLddEDOK1crakguDo6e9mn
j9ifJUvznHOeEAJCi/6uiACOoCO29upNO+Nv250bsLpvcT6A+tfAETCFLYteCd7q
cOjmQ117L04zB8PW5rlDn/KMnYKqAIJqQfREQgSmGvSKMS5QbcSBVjyip3f7gWa1
xHgcmJJLl6cx6OQQ7kbJf84unq7tWj3yRvSkDCHvNiq/n2uKmzSwiTtaymzZhjqW
tsBjjONhs1ZjYo3gyD2tIE+d9qjpMldWKdt1LzSt6eO5uce3WOfdihy8p3ZKPaL4
SuTc7pM0C0w53Q==
-----END CERTIFICATE-----
Generated at Mon May 5 11:22:43 2025 by rpki-client