Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: cbvD2bcmlBGQ5KFIXolxEFBaMG8mi3B9px0EzvKw8fs=
Subject key identifier: 6A:4F:D5:8F:2D:F2:32:70:9E:81:24:DA:59:4F:EE:33:0C:4C:85:6C
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 0196D1AC7A8BDDB952A5E05663E58023F2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 08D7
Signing time: Thu 15 May 2025 02:01:03 +0000
Manifest this update: Thu 15 May 2025 02:01:03 +0000
Manifest next update: Fri 16 May 2025 02:01:03 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: 3haHyRfuvhDwHsS3YQFhi6+EtVCiBjGhfm0gfxDN4AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:ac:7a:8b:dd:b9:52:a5:e0:56:63:e5:80:23:f2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: May 15 02:01:03 2025 GMT
Not After : May 16 02:01:03 2025 GMT
Subject: CN=6a4fd58f2df232709e8124da594fee330c4c856c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:e4:d2:70:59:be:7f:77:c1:31:69:cc:20:
5b:19:fa:56:72:c7:d0:5f:04:69:8b:76:2e:dc:00:
6f:58:88:ab:3f:2c:b4:02:bf:2a:14:67:6e:e0:78:
7f:c4:96:4f:78:ad:ae:8e:78:37:f1:d7:8c:e2:fc:
c8:79:cd:2b:42:f9:86:a2:0a:72:30:5c:c3:40:6b:
18:d2:1c:d9:0a:4d:73:d7:4e:c4:ab:83:c1:49:cf:
16:bc:00:95:9c:b1:43:ed:25:6a:69:a8:2d:fe:e9:
10:c2:d8:a3:b5:7b:e2:0a:47:34:1d:65:7c:a2:d0:
98:e1:e5:91:69:bc:3a:9d:8e:62:9f:c3:f5:3a:e8:
5a:8e:20:26:01:37:62:c1:5b:e9:14:ff:ba:6a:da:
b7:6b:dc:a4:6c:cd:cf:87:f8:42:7e:06:22:e1:b1:
31:b1:68:70:a4:6d:de:83:6d:a6:e9:00:81:a5:11:
d0:c2:a9:bf:17:a8:16:06:8a:4d:dd:58:14:a0:ae:
b3:53:f2:97:af:31:61:f2:e1:7f:14:e7:50:f6:78:
2e:f3:53:20:85:ff:dc:ca:2d:58:35:0e:95:42:71:
94:8b:65:62:49:e3:d4:f7:ef:3e:ef:f2:15:c9:40:
97:66:8e:63:5c:1b:9d:d7:ce:a9:52:b9:02:9d:7b:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:D5:8F:2D:F2:32:70:9E:81:24:DA:59:4F:EE:33:0C:4C:85:6C
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:29:48:00:15:44:dd:68:1f:d6:d1:ce:99:9a:b1:d5:14:00:
2b:d2:50:bf:5c:a5:82:a9:89:23:4d:ea:99:7b:04:56:ca:78:
55:3e:72:7a:6c:d7:cc:17:46:40:08:90:71:97:77:3c:cd:3e:
17:30:e4:97:64:08:49:fe:24:e6:67:ba:c8:88:be:2f:40:b9:
00:77:e1:c3:99:2d:26:6a:ab:a1:09:6a:9b:e3:b6:be:98:74:
6b:6a:21:f3:7f:a1:67:20:92:7e:53:9d:75:5f:98:c5:fb:60:
4f:26:84:9a:31:7c:72:6f:ca:a2:57:96:f6:d5:4f:a6:b1:6e:
f5:bb:7f:4e:e9:81:7d:5c:49:49:12:aa:74:f2:99:b9:e1:71:
34:7a:b6:05:27:dd:6b:a6:c7:b7:ac:eb:ca:ec:04:9b:8a:eb:
56:a5:e4:9f:af:32:89:d7:71:95:9a:00:b8:09:4d:08:18:61:
86:d6:e2:d2:d3:22:ba:d0:7c:ac:5c:65:81:ba:e3:b4:85:75:
3c:b4:66:0f:62:a9:ac:d3:f1:70:c0:a5:1d:b6:18:bb:b5:d9:
bd:73:46:eb:0e:8e:f2:1f:80:67:99:54:e4:7b:ef:25:2a:4f:
67:34:bb:99:db:a0:23:74:01:0e:25:c2:e8:6f:00:a5:9b:68:
c3:09:4f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbRrHqL3blSpeBWY+WAI/K9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3
ZDliMzkwHhcNMjUwNTE1MDIwMTAzWhcNMjUwNTE2MDIwMTAzWjAzMTEwLwYDVQQD
Eyg2YTRmZDU4ZjJkZjIzMjcwOWU4MTI0ZGE1OTRmZWUzMzBjNGM4NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtLk0nBZvn93wTFpzCBbGfpWcsfQ
XwRpi3Yu3ABvWIirPyy0Ar8qFGdu4Hh/xJZPeK2ujng38deM4vzIec0rQvmGogpy
MFzDQGsY0hzZCk1z107Eq4PBSc8WvACVnLFD7SVqaagt/ukQwtijtXviCkc0HWV8
otCY4eWRabw6nY5in8P1OuhajiAmATdiwVvpFP+6atq3a9ykbM3Ph/hCfgYi4bEx
sWhwpG3eg22m6QCBpRHQwqm/F6gWBopN3VgUoK6zU/KXrzFh8uF/FOdQ9ngu81Mg
hf/cyi1YNQ6VQnGUi2ViSePU9+8+7/IVyUCXZo5jXBud186pUrkCnXsRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpP1Y8t8jJwnoEk2llP7jMMTIVsMB8GA1UdIwQY
MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt
N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi
LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWilIABVE
3Wgf1tHOmZqx1RQAK9JQv1ylgqmJI03qmXsEVsp4VT5yemzXzBdGQAiQcZd3PM0+
FzDkl2QISf4k5me6yIi+L0C5AHfhw5ktJmqroQlqm+O2vph0a2oh83+hZyCSflOd
dV+YxftgTyaEmjF8cm/KoleW9tVPprFu9bt/TumBfVxJSRKqdPKZueFxNHq2BSfd
a6bHt6zryuwEm4rrVqXkn68yiddxlZoAuAlNCBhhhtbi0tMiutB8rFxlgbrjtIV1
PLRmD2KprNPxcMClHbYYu7XZvXNG6w6O8h+AZ5lU5HvvJSpPZzS7mdugI3QBDiXC
6G8ApZtowwlPhg==
-----END CERTIFICATE-----
Generated at Thu May 15 07:55:43 2025 by rpki-client