Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: haVEfR3KMA2Yfn+RjplTpVXA2DjfbQv72YDL3PY3E94=
Subject key identifier: 69:DA:0A:D1:8E:F8:32:5C:56:AA:C2:54:01:51:82:7B:D0:12:12:AA
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 0196C2A71F967A1915B35A54D5B45FAC5EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 150F
Signing time: Mon 12 May 2025 04:00:54 +0000
Manifest this update: Mon 12 May 2025 04:00:54 +0000
Manifest next update: Tue 13 May 2025 04:00:54 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: sBiVXkpH8DqaP4S4VOrgw9TX9bDFfCXBUTL+YBUGxiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a7:1f:96:7a:19:15:b3:5a:54:d5:b4:5f:ac:5e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: May 12 04:00:54 2025 GMT
Not After : May 13 04:00:54 2025 GMT
Subject: CN=69da0ad18ef8325c56aac2540151827bd01212aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:3f:ca:0f:6e:73:0c:3a:c9:4b:72:e6:62:
cb:91:36:54:2c:12:9a:3a:89:49:aa:cf:bb:b6:95:
4f:b1:80:74:df:cc:8d:3d:0f:28:58:21:f6:23:74:
96:7a:d5:f3:6e:ca:33:15:db:31:2b:00:e2:4b:1f:
1a:d2:5a:2d:15:4d:54:6e:81:49:c6:ab:60:45:f1:
85:35:19:4e:84:d4:05:32:3a:42:3a:9f:95:f8:dd:
f7:f0:bc:1d:39:9a:4a:ce:c5:c2:c7:c4:57:ce:58:
68:b5:20:15:bf:c0:ac:d3:1b:cd:80:0a:95:80:8b:
90:1d:35:99:77:be:99:cb:aa:4d:09:12:de:4e:0f:
71:14:aa:47:53:e5:2c:de:cb:b2:7d:ea:73:61:82:
3b:78:54:21:d8:b7:a1:1f:30:77:c5:1b:1f:64:2e:
26:88:36:2c:87:d0:68:31:6e:30:7e:ce:0f:a9:71:
e0:da:1e:ad:d7:16:66:43:0b:30:ad:8e:95:3e:8b:
3d:81:79:89:e5:8f:8a:00:f3:9e:b4:c6:f7:5a:51:
34:f1:f6:c9:ec:6b:9b:bc:80:24:c9:bd:bd:b8:ae:
79:ca:13:88:6c:2e:65:31:6f:e7:1f:3c:ba:76:cf:
e6:cd:30:66:c5:21:45:60:89:8b:fb:b0:45:0e:00:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DA:0A:D1:8E:F8:32:5C:56:AA:C2:54:01:51:82:7B:D0:12:12:AA
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:91:98:49:5c:0c:4b:d5:f7:84:0e:38:fd:81:b9:6e:f4:15:
c0:84:50:56:50:d7:cf:1e:62:1e:ad:10:c6:6e:f8:6e:8d:47:
52:44:a9:fa:c6:62:a9:73:8d:93:b1:c9:5d:31:20:75:61:11:
8b:54:42:27:46:0d:ce:11:40:bf:52:2a:2e:68:7d:31:21:3c:
eb:52:8a:e6:93:2e:01:ab:69:ea:d9:9d:5f:b0:cb:02:5a:38:
fa:6c:b7:92:60:6a:f8:05:19:ae:16:f9:25:fe:a8:55:3b:e5:
2f:fe:58:5a:e6:1a:dc:b6:77:10:6c:61:10:c6:c1:fd:36:0c:
65:b6:4f:15:15:c6:f6:fc:54:99:1e:c4:74:49:46:18:e0:c0:
e6:d0:1e:1c:72:a7:ad:21:29:54:8f:8e:9b:77:e9:6e:34:8b:
98:6b:9b:0c:e8:9e:7d:3a:65:5a:b3:82:48:50:37:6c:8c:31:
e1:d0:53:61:bd:5e:ec:b5:0c:53:6e:07:11:02:fa:ff:87:e0:
c9:bd:0c:c6:b6:a2:c9:2c:7c:ba:67:2b:95:20:e2:1a:ac:c1:
1c:c3:b9:cd:73:7d:23:26:36:06:23:0e:90:7e:52:f3:b5:5f:
35:e4:f5:80:02:de:4e:04:c4:0f:5a:f9:11:ea:fe:e6:c1:7e:
43:53:b5:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpx+WehkVs1pU1bRfrF72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2
MGFjN2UwHhcNMjUwNTEyMDQwMDU0WhcNMjUwNTEzMDQwMDU0WjAzMTEwLwYDVQQD
Eyg2OWRhMGFkMThlZjgzMjVjNTZhYWMyNTQwMTUxODI3YmQwMTIxMmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w0/yg9ucww6yUty5mLLkTZULBKa
OolJqs+7tpVPsYB038yNPQ8oWCH2I3SWetXzbsozFdsxKwDiSx8a0lotFU1UboFJ
xqtgRfGFNRlOhNQFMjpCOp+V+N338LwdOZpKzsXCx8RXzlhotSAVv8Cs0xvNgAqV
gIuQHTWZd76Zy6pNCRLeTg9xFKpHU+Us3suyfepzYYI7eFQh2LehHzB3xRsfZC4m
iDYsh9BoMW4wfs4PqXHg2h6t1xZmQwswrY6VPos9gXmJ5Y+KAPOetMb3WlE08fbJ
7GubvIAkyb29uK55yhOIbC5lMW/nHzy6ds/mzTBmxSFFYImL+7BFDgCZWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnaCtGO+DJcVqrCVAFRgnvQEhKqMB8GA1UdIwQY
MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct
MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm
LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5GYSVwM
S9X3hA44/YG5bvQVwIRQVlDXzx5iHq0Qxm74bo1HUkSp+sZiqXONk7HJXTEgdWER
i1RCJ0YNzhFAv1IqLmh9MSE861KK5pMuAatp6tmdX7DLAlo4+my3kmBq+AUZrhb5
Jf6oVTvlL/5YWuYa3LZ3EGxhEMbB/TYMZbZPFRXG9vxUmR7EdElGGODA5tAeHHKn
rSEpVI+Om3fpbjSLmGubDOiefTplWrOCSFA3bIwx4dBTYb1e7LUMU24HEQL6/4fg
yb0MxraiySx8umcrlSDiGqzBHMO5zXN9IyY2BiMOkH5S87VfNeT1gALeTgTED1r5
Eer+5sF+Q1O1Eg==
-----END CERTIFICATE-----
Generated at Mon May 12 12:34:53 2025 by rpki-client