Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: 89U/22paKVdSq+uTxeJyrn57IE/Rjg8Y/EbS8JlA3+4=
Subject key identifier: 54:D7:2E:FF:5E:58:5A:50:9E:37:96:6C:96:02:AE:EB:B0:43:89:6A
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 0196C34C7EC2E04FFD562193A0395FD8986F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0E0E
Signing time: Mon 12 May 2025 07:01:32 +0000
Manifest this update: Mon 12 May 2025 07:01:32 +0000
Manifest next update: Tue 13 May 2025 07:01:32 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: FIYTBoCk7LgGsn+WNUqZ8mfvkDQD3zr4ltik3JgZlig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:7e:c2:e0:4f:fd:56:21:93:a0:39:5f:d8:98:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: May 12 07:01:32 2025 GMT
Not After : May 13 07:01:32 2025 GMT
Subject: CN=54d72eff5e585a509e37966c9602aeebb043896a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:c8:51:de:97:fd:b5:f9:cf:7b:b9:c0:b8:
17:89:0f:da:bd:64:8b:1c:7f:1f:79:de:9d:e4:b1:
79:1e:b9:c2:c5:a5:3f:78:7d:ca:95:61:dc:14:46:
94:66:93:a1:e2:91:0a:0e:1b:dc:88:b8:99:3d:ab:
ab:dc:ae:27:62:78:34:b2:d3:41:00:aa:8a:46:03:
a5:bd:e0:10:bf:95:5f:03:30:8b:86:28:3f:bb:f6:
6b:a0:0b:23:fa:3a:a3:fd:11:99:2a:2b:b5:cb:0b:
90:95:95:c5:53:91:38:84:06:7e:61:a4:a2:ef:50:
fa:76:b9:05:2f:bd:ee:3d:9f:bc:15:cd:c4:46:be:
97:14:b6:34:b6:f8:db:6b:99:4e:bc:7b:17:f8:7f:
d7:ee:b6:67:cc:62:26:63:cc:a2:a8:a2:d1:1c:7f:
79:47:d8:51:6a:fc:d4:ed:bc:cf:b5:a8:8f:85:e0:
2e:3a:a5:5a:6c:37:2d:b1:4d:15:f7:f9:b1:dd:71:
1d:89:7a:d7:c7:d7:31:60:c9:a0:e3:f2:71:f3:ee:
14:4a:8f:db:f3:78:69:ce:70:2a:f2:54:3b:b0:67:
77:55:f5:77:48:38:ee:67:9a:d7:cc:82:d1:59:2e:
01:fd:1d:5b:ca:d2:1a:10:6b:00:b6:0f:c5:26:26:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D7:2E:FF:5E:58:5A:50:9E:37:96:6C:96:02:AE:EB:B0:43:89:6A
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:55:48:a9:c9:f0:de:ef:60:0c:40:89:5c:12:cd:bc:f7:41:
3c:40:86:a2:84:1c:15:f9:97:ab:82:d3:92:1d:fe:3a:02:6a:
07:04:ce:0d:1c:06:3a:ce:2c:25:c1:ad:c9:4e:8a:63:85:f3:
8d:90:1c:98:2a:4c:51:67:0f:6d:0d:8f:d8:08:cb:ff:d0:5d:
70:87:95:95:a1:d1:17:76:e0:54:42:4d:02:83:d0:12:9c:92:
65:2b:f6:8f:c2:78:c6:47:68:9c:97:97:5a:b8:56:9c:0f:60:
4c:76:30:85:f8:21:90:61:83:d6:ee:e8:ce:f1:91:ab:05:1a:
8c:c6:b3:d0:d1:81:fa:6a:4e:e8:aa:94:9f:c7:c8:1a:87:f2:
79:06:8f:fc:de:33:c3:c3:6b:bb:68:99:1b:de:31:e2:ba:32:
32:b8:a0:45:c0:03:6c:f2:20:f7:ea:8a:19:a8:9c:59:12:7d:
de:46:64:12:ac:65:1b:3c:da:54:4e:cf:33:58:9e:cb:4c:d1:
c8:02:ce:5c:ed:5f:20:a5:0b:6b:26:5c:fe:ee:07:9e:97:82:
57:00:2c:01:6b:0e:4f:41:58:49:59:73:f3:38:53:43:1e:9d:
bf:0b:17:b1:ae:56:31:83:8b:c5:f1:0a:f3:69:8b:b5:07:98:
a3:5a:63:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTH7C4E/9ViGToDlf2JhvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjg3MmU0Y2RiMDdkNjgzOTE0N2U0M2E0YTQxOWJjODRi
YTMyMTQwHhcNMjUwNTEyMDcwMTMyWhcNMjUwNTEzMDcwMTMyWjAzMTEwLwYDVQQD
Eyg1NGQ3MmVmZjVlNTg1YTUwOWUzNzk2NmM5NjAyYWVlYmIwNDM4OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32DIUd6X/bX5z3u5wLgXiQ/avWSL
HH8fed6d5LF5HrnCxaU/eH3KlWHcFEaUZpOh4pEKDhvciLiZPaur3K4nYng0stNB
AKqKRgOlveAQv5VfAzCLhig/u/ZroAsj+jqj/RGZKiu1ywuQlZXFU5E4hAZ+YaSi
71D6drkFL73uPZ+8Fc3ERr6XFLY0tvjba5lOvHsX+H/X7rZnzGImY8yiqKLRHH95
R9hRavzU7bzPtaiPheAuOqVabDctsU0V9/mx3XEdiXrXx9cxYMmg4/Jx8+4USo/b
83hpznAq8lQ7sGd3VfV3SDjuZ5rXzILRWS4B/R1bytIaEGsAtg/FJiYmewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTXLv9eWFpQnjeWbJYCruuwQ4lqMB8GA1UdIwQY
MBaAFED4cuTNsH1oORR+Q6SkGbyEujIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTkt
ZGExMzhhZGUyMjJiLzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTktZGExMzhhZGUyMjJi
LzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVVIqcnw
3u9gDECJXBLNvPdBPECGooQcFfmXq4LTkh3+OgJqBwTODRwGOs4sJcGtyU6KY4Xz
jZAcmCpMUWcPbQ2P2AjL/9BdcIeVlaHRF3bgVEJNAoPQEpySZSv2j8J4xkdonJeX
WrhWnA9gTHYwhfghkGGD1u7ozvGRqwUajMaz0NGB+mpO6KqUn8fIGofyeQaP/N4z
w8Nru2iZG94x4royMrigRcADbPIg9+qKGaicWRJ93kZkEqxlGzzaVE7PM1iey0zR
yALOXO1fIKULayZc/u4HnpeCVwAsAWsOT0FYSVlz8zhTQx6dvwsXsa5WMYOLxfEK
82mLtQeYo1pjKg==
-----END CERTIFICATE-----
Generated at Mon May 12 12:45:47 2025 by rpki-client