Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: mbTGy1hOgpadhlsiIZKj6uX1BTTxHCZ6Xvwg1YKAXtQ=
Subject key identifier: FB:2B:A7:A2:47:62:D6:35:B8:11:16:9F:84:D9:39:F6:54:FE:9C:37
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 0196CB059F35A674AF7CA58B8EDEA6DBBB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1345
Signing time: Tue 13 May 2025 19:01:05 +0000
Manifest this update: Tue 13 May 2025 19:01:05 +0000
Manifest next update: Wed 14 May 2025 19:01:05 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: 39qVRbTyAGOeq4qczDNZBS6YVd7YXX4RjmQEealxugk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:9f:35:a6:74:af:7c:a5:8b:8e:de:a6:db:bb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: May 13 19:01:05 2025 GMT
Not After : May 14 19:01:05 2025 GMT
Subject: CN=fb2ba7a24762d635b811169f84d939f654fe9c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9b:6e:d1:64:b5:ba:94:b9:50:8b:6f:7d:61:
10:fb:ab:d6:fa:38:46:9e:dc:ec:b8:e3:c8:ec:50:
1e:a6:9f:40:3b:cc:18:b4:7d:1b:98:41:0f:0d:dc:
d9:25:c7:20:88:e2:5b:4c:56:d7:2e:88:f9:20:db:
da:ea:5e:a2:22:63:88:f2:b4:77:32:da:8a:3a:cc:
36:82:ad:c8:93:59:a4:1a:63:d7:3f:4a:05:f5:b3:
61:b4:54:ee:ed:22:c2:0f:6b:2c:82:9c:b8:7c:20:
bd:b5:b4:6f:8a:02:77:58:88:2e:dc:e9:da:51:69:
c8:e6:37:65:2c:e8:bc:d9:94:40:5a:cd:1d:f2:73:
07:b8:4d:7c:7e:b4:14:cd:5d:96:71:1e:94:2f:70:
e6:ac:4f:01:1f:aa:c8:a4:95:b4:d7:40:2e:c5:f8:
27:a7:e6:0f:a1:19:51:83:2d:19:c5:e0:95:ea:d6:
5f:86:f8:c8:bc:39:15:18:56:74:2b:3b:18:0e:8b:
1a:1f:d3:12:4e:df:8f:5e:23:4c:0a:ee:ac:0c:72:
1c:c1:be:3d:a7:23:ea:b1:78:02:9e:68:87:bd:b7:
48:bc:f2:04:e3:64:5a:f9:c4:b1:62:cb:45:28:7c:
3f:4f:06:ad:42:a1:5b:59:b9:a6:aa:7e:69:97:0e:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2B:A7:A2:47:62:D6:35:B8:11:16:9F:84:D9:39:F6:54:FE:9C:37
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ef:59:66:3f:a2:f0:e6:4a:8e:20:95:3a:ac:66:3d:21:8b:
2c:d8:18:e5:1e:77:34:f8:ae:7f:db:bb:1e:bf:df:20:26:a8:
8f:87:92:b6:db:4f:8f:06:53:c0:f4:c0:1f:ab:e4:6d:8c:7f:
68:79:f2:46:2a:46:cc:99:4f:f3:d0:49:b6:09:cc:76:50:3a:
25:57:d3:b2:f2:2b:3a:33:d5:ad:fc:c4:07:09:0a:83:6b:4d:
24:07:ab:14:e5:6e:78:2f:fd:a4:26:ad:98:ab:c5:dd:ca:55:
f1:73:0c:0f:dd:02:50:bf:79:f6:1d:1b:5c:a8:0c:78:75:92:
68:0f:78:c7:62:95:a5:cc:f1:2b:f6:67:08:a8:17:43:67:96:
d0:74:4d:25:76:82:c7:a7:35:33:ab:0b:03:16:a4:20:ed:69:
3c:1b:74:f3:0c:3f:fd:08:34:51:39:f2:c8:22:16:ad:c9:fb:
de:2d:20:2e:50:8f:4c:1c:30:78:f1:b1:97:8b:30:48:b4:70:
a7:07:8c:ff:64:54:f8:29:1b:83:70:fd:34:df:cd:51:d8:f4:
1d:d1:89:c5:80:5b:84:62:e3:ef:20:bd:ce:6b:5d:2c:90:a6:
57:87:ea:87:e0:46:40:43:8d:99:dd:38:b2:f6:4d:2d:35:64:
fd:f3:af:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBZ81pnSvfKWLjt6m27s8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh
ZDQzNDIwHhcNMjUwNTEzMTkwMTA1WhcNMjUwNTE0MTkwMTA1WjAzMTEwLwYDVQQD
EyhmYjJiYTdhMjQ3NjJkNjM1YjgxMTE2OWY4NGQ5MzlmNjU0ZmU5YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ptu0WS1upS5UItvfWEQ+6vW+jhG
ntzsuOPI7FAepp9AO8wYtH0bmEEPDdzZJccgiOJbTFbXLoj5INva6l6iImOI8rR3
MtqKOsw2gq3Ik1mkGmPXP0oF9bNhtFTu7SLCD2ssgpy4fCC9tbRvigJ3WIgu3Ona
UWnI5jdlLOi82ZRAWs0d8nMHuE18frQUzV2WcR6UL3DmrE8BH6rIpJW010Auxfgn
p+YPoRlRgy0ZxeCV6tZfhvjIvDkVGFZ0KzsYDosaH9MSTt+PXiNMCu6sDHIcwb49
pyPqsXgCnmiHvbdIvPIE42Ra+cSxYstFKHw/TwatQqFbWbmmqn5plw44SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsrp6JHYtY1uBEWn4TZOfZU/pw3MB8GA1UdIwQY
MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAae9ZZj+i
8OZKjiCVOqxmPSGLLNgY5R53NPiuf9u7Hr/fICaoj4eStttPjwZTwPTAH6vkbYx/
aHnyRipGzJlP89BJtgnMdlA6JVfTsvIrOjPVrfzEBwkKg2tNJAerFOVueC/9pCat
mKvF3cpV8XMMD90CUL959h0bXKgMeHWSaA94x2KVpczxK/ZnCKgXQ2eW0HRNJXaC
x6c1M6sLAxakIO1pPBt08ww//Qg0UTnyyCIWrcn73i0gLlCPTBwwePGxl4swSLRw
pweM/2RU+Ckbg3D9NN/NUdj0HdGJxYBbhGLj7yC9zmtdLJCmV4fqh+BGQEONmd04
svZNLTVk/fOvVg==
-----END CERTIFICATE-----
Generated at Wed May 14 03:20:01 2025 by rpki-client