Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: O5oTd+7AD5ub0OZ+AAs5eqpYhehVbz5NQJNkMp5fzgw=
Subject key identifier: 71:A4:EE:CA:45:0D:9D:A5:B5:FE:72:05:5F:A6:F3:D4:14:08:C1:A6
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 0196C984C8B3C642E22CC6B5ACAE374060E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 153B
Signing time: Tue 13 May 2025 12:00:44 +0000
Manifest this update: Tue 13 May 2025 12:00:44 +0000
Manifest next update: Wed 14 May 2025 12:00:44 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: L6DFAKt52OfyUJrbSHJHYfeDYW+GGqlmmmZLbICjmcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:c8:b3:c6:42:e2:2c:c6:b5:ac:ae:37:40:60:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: May 13 12:00:44 2025 GMT
Not After : May 14 12:00:44 2025 GMT
Subject: CN=71a4eeca450d9da5b5fe72055fa6f3d41408c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:f8:1e:82:25:a5:d0:1e:f7:15:4f:79:94:
a1:08:15:68:10:ba:96:8f:c2:e0:c0:cd:ff:a0:ca:
84:ad:2a:6b:46:95:d9:eb:be:03:dd:67:cf:55:27:
c3:b5:d9:1d:f6:69:58:9a:2a:f7:d4:76:21:8f:eb:
9d:42:d4:27:ae:73:dd:05:8e:af:4f:e2:47:80:de:
70:43:c1:c3:6b:02:b3:9c:81:ec:06:dc:5e:a9:17:
24:cd:55:81:7c:49:e6:10:4e:b9:11:6a:02:7f:45:
0c:1e:d5:bf:95:e0:4c:b9:1f:76:b3:c3:44:67:5a:
c1:e8:9f:bf:b8:52:71:9b:45:13:54:5c:71:70:0f:
38:cd:32:c9:17:e6:25:f0:14:0a:54:79:aa:7f:0c:
0a:50:d5:a4:3b:6a:96:7e:0e:da:22:7c:cc:71:e5:
72:b4:d1:e1:0e:87:7a:30:81:b2:5f:4a:aa:da:1c:
c0:49:d7:ec:b7:68:e6:e5:08:61:86:26:af:73:8d:
78:bd:72:2b:05:39:e2:86:7d:d8:bb:14:01:37:ce:
49:78:df:3a:17:98:64:75:a8:dd:e7:15:af:72:87:
bc:db:e3:22:67:eb:6f:9f:af:00:e3:85:92:e9:09:
45:9f:d3:8b:79:1e:47:9c:b4:5a:e0:a5:8d:6a:88:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A4:EE:CA:45:0D:9D:A5:B5:FE:72:05:5F:A6:F3:D4:14:08:C1:A6
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:bc:0b:45:c6:ba:86:75:1e:f5:b7:a5:f6:32:cf:8d:71:
c6:aa:4a:4e:cb:81:ac:5a:c0:f4:14:ca:82:f1:5d:7a:39:0a:
da:e3:5a:3c:6c:d6:77:1a:15:80:8b:5c:4b:d4:88:d5:c6:81:
d1:b3:99:f1:ea:4b:1b:b9:e8:81:52:d1:4f:38:47:5a:99:ba:
96:72:86:3b:28:64:ba:36:54:bc:79:90:da:4f:0c:cf:6d:74:
66:e2:27:5f:09:c5:fb:5b:2b:5e:e2:56:46:8c:58:64:86:67:
a7:ae:c2:5b:86:22:b9:ee:7f:12:96:d9:2f:e4:ea:a2:16:07:
2f:8e:5f:f0:a6:db:7c:3d:a3:67:dc:42:e3:a1:3b:6e:77:bb:
64:df:01:43:64:b9:8d:46:00:40:82:32:3a:74:b2:79:c0:ba:
ae:f1:bf:cf:6f:bd:85:60:5b:c5:ae:ed:90:57:9e:e6:95:c7:
be:b5:42:be:8c:37:e7:7f:af:d8:9a:b2:d4:4a:39:50:4b:d6:
f2:0f:e3:c9:e0:6b:c4:fe:24:e5:4c:09:c3:1e:fc:af:d8:1c:
b7:87:5e:16:68:ae:bd:be:15:e9:98:3c:fd:37:4e:03:70:1d:
1c:2c:da:19:c3:2e:db:37:d1:9a:49:47:3a:1a:29:bb:c9:95:
e0:00:dc:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJhMizxkLiLMa1rK43QGDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4
ZjNkYmYwHhcNMjUwNTEzMTIwMDQ0WhcNMjUwNTE0MTIwMDQ0WjAzMTEwLwYDVQQD
Eyg3MWE0ZWVjYTQ1MGQ5ZGE1YjVmZTcyMDU1ZmE2ZjNkNDE0MDhjMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJz4HoIlpdAe9xVPeZShCBVoELqW
j8LgwM3/oMqErSprRpXZ674D3WfPVSfDtdkd9mlYmir31HYhj+udQtQnrnPdBY6v
T+JHgN5wQ8HDawKznIHsBtxeqRckzVWBfEnmEE65EWoCf0UMHtW/leBMuR92s8NE
Z1rB6J+/uFJxm0UTVFxxcA84zTLJF+Yl8BQKVHmqfwwKUNWkO2qWfg7aInzMceVy
tNHhDod6MIGyX0qq2hzASdfst2jm5Qhhhiavc414vXIrBTnihn3YuxQBN85JeN86
F5hkdajd5xWvcoe82+MiZ+tvn68A44WS6QlFn9OLeR5HnLRa4KWNaoj2SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGk7spFDZ2ltf5yBV+m89QUCMGmMB8GA1UdIwQY
MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt
OGZlZDUwOTA5NzcwLzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw
LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwe8C0XG
uoZ1HvW3pfYyz41xxqpKTsuBrFrA9BTKgvFdejkK2uNaPGzWdxoVgItcS9SI1caB
0bOZ8epLG7nogVLRTzhHWpm6lnKGOyhkujZUvHmQ2k8Mz210ZuInXwnF+1srXuJW
RoxYZIZnp67CW4Yiue5/EpbZL+TqohYHL45f8KbbfD2jZ9xC46E7bne7ZN8BQ2S5
jUYAQIIyOnSyecC6rvG/z2+9hWBbxa7tkFee5pXHvrVCvow353+v2Jqy1Eo5UEvW
8g/jyeBrxP4k5UwJwx78r9gct4deFmiuvb4V6Zg8/TdOA3AdHCzaGcMu2zfRmklH
Ohopu8mV4ADc2g==
-----END CERTIFICATE-----
Generated at Tue May 13 21:29:44 2025 by rpki-client