Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: 3OvnhcR1eDRHC1qJW0H9+I0XhB5lXlznUK4Za0/1a2M=
Subject key identifier: B7:B5:CD:85:F9:F5:34:1D:0D:84:5D:49:84:FA:20:D9:00:E4:8C:C8
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 0196CB05778DC136265035D8F6E5256E02EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0948
Signing time: Tue 13 May 2025 19:00:55 +0000
Manifest this update: Tue 13 May 2025 19:00:55 +0000
Manifest next update: Wed 14 May 2025 19:00:55 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: JasGTOD6Wrxln/2brg3BVq3R8D20f1JhhYI/EkTemVk=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:77:8d:c1:36:26:50:35:d8:f6:e5:25:6e:02:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: May 13 19:00:55 2025 GMT
Not After : May 14 19:00:55 2025 GMT
Subject: CN=b7b5cd85f9f5341d0d845d4984fa20d900e48cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:4f:66:bd:c8:4f:a8:5f:11:b7:19:ed:c3:
1b:0e:d5:e7:80:0c:c7:dc:88:cd:42:10:ad:23:17:
7b:b1:19:b5:06:6b:1a:92:ab:83:d6:d9:8f:a3:8d:
05:f8:2c:f1:8f:11:f4:a2:26:ad:4f:9f:e5:ab:7d:
43:fb:b4:40:87:c0:d4:9b:18:84:f2:7a:8b:d1:ec:
6e:a7:a5:7f:28:cd:a6:15:89:e2:0e:04:fa:44:f6:
e0:e7:f5:9f:d2:4f:95:cc:61:c5:d4:3b:5b:3c:12:
ea:be:c2:00:62:65:65:b3:6c:3d:cf:68:f2:16:1e:
90:e7:5f:6d:64:6a:41:5a:ad:22:63:9e:fe:ab:45:
2e:ee:26:27:9a:00:bf:a8:7e:7d:47:e5:43:ee:c7:
51:47:60:45:02:ba:17:4e:c0:8c:4c:a7:7a:e3:a4:
41:5a:9c:68:7d:02:e0:b2:e3:4f:7d:be:39:40:2a:
50:e9:9e:9b:75:82:05:66:4f:de:7b:ea:3e:df:c9:
d2:80:be:bd:ff:ad:1c:08:3d:de:28:a4:5c:6e:5d:
6a:da:e2:a4:f0:69:99:83:b1:fa:02:25:f5:78:22:
27:4e:6a:b8:97:63:3e:ac:86:5f:b5:0c:64:8b:84:
32:e4:2f:ea:8a:9e:f9:36:65:54:6d:f4:a1:33:5b:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B5:CD:85:F9:F5:34:1D:0D:84:5D:49:84:FA:20:D9:00:E4:8C:C8
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5a:2e:06:df:42:b2:90:01:e9:b7:a4:f1:8f:a2:2a:aa:ab:
88:1a:c6:54:72:a3:f7:89:2a:ec:64:42:96:87:3c:5e:ef:8a:
58:ad:26:54:ea:6e:af:ec:08:c3:9d:a0:73:ba:ab:da:fd:4e:
df:88:c5:95:d6:0d:29:8b:c0:45:b3:1e:fc:32:63:f3:86:73:
a3:47:7f:4f:b0:b8:7e:44:5c:58:1b:46:17:83:5d:d9:6e:8e:
a5:9a:80:c9:3b:b2:90:6d:d8:de:10:db:51:91:64:a4:df:ec:
80:ca:a4:72:ec:72:a0:3c:de:7f:68:a2:72:91:cb:c7:6a:5d:
42:04:bd:7d:9f:5c:f5:0f:78:2a:19:56:84:c8:cc:a9:7d:0f:
03:30:13:56:f7:b3:b1:d4:28:d5:f6:49:14:5f:b6:94:1c:b7:
99:d1:4e:9e:f3:09:b5:4b:cf:65:bd:a7:3f:51:ee:29:75:2e:
7c:62:c6:3d:c9:1d:df:a3:60:60:5a:e6:b7:de:4a:3d:d1:84:
b3:1d:85:1a:05:5b:22:3d:ee:70:dc:36:ec:c6:7a:31:cb:5d:
29:7a:26:e5:c6:3e:66:cc:83:b6:92:44:73:34:d5:0c:c3:aa:
5d:e8:15:0a:38:ab:a8:9b:23:2f:ba:9b:82:07:94:77:46:8d:
60:c2:d9:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBXeNwTYmUDXY9uUlbgLqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm
OWY1ODAwHhcNMjUwNTEzMTkwMDU1WhcNMjUwNTE0MTkwMDU1WjAzMTEwLwYDVQQD
EyhiN2I1Y2Q4NWY5ZjUzNDFkMGQ4NDVkNDk4NGZhMjBkOTAwZTQ4Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAJPZr3IT6hfEbcZ7cMbDtXngAzH
3IjNQhCtIxd7sRm1BmsakquD1tmPo40F+CzxjxH0oiatT5/lq31D+7RAh8DUmxiE
8nqL0exup6V/KM2mFYniDgT6RPbg5/Wf0k+VzGHF1DtbPBLqvsIAYmVls2w9z2jy
Fh6Q519tZGpBWq0iY57+q0Uu7iYnmgC/qH59R+VD7sdRR2BFAroXTsCMTKd646RB
WpxofQLgsuNPfb45QCpQ6Z6bdYIFZk/ee+o+38nSgL69/60cCD3eKKRcbl1q2uKk
8GmZg7H6AiX1eCInTmq4l2M+rIZftQxki4Qy5C/qip75NmVUbfShM1uryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe1zYX59TQdDYRdSYT6INkA5IzIMB8GA1UdIwQY
MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt
MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi
LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVouBt9C
spAB6bek8Y+iKqqriBrGVHKj94kq7GRCloc8Xu+KWK0mVOpur+wIw52gc7qr2v1O
34jFldYNKYvARbMe/DJj84Zzo0d/T7C4fkRcWBtGF4Nd2W6OpZqAyTuykG3Y3hDb
UZFkpN/sgMqkcuxyoDzef2iicpHLx2pdQgS9fZ9c9Q94KhlWhMjMqX0PAzATVvez
sdQo1fZJFF+2lBy3mdFOnvMJtUvPZb2nP1HuKXUufGLGPckd36NgYFrmt95KPdGE
sx2FGgVbIj3ucNw27MZ6MctdKXom5cY+ZsyDtpJEczTVDMOqXegVCjirqJsjL7qb
ggeUd0aNYMLZ9g==
-----END CERTIFICATE-----
Generated at Tue May 13 21:50:47 2025 by rpki-client