Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
File: QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft (raw, json)
Hash identifier: F6muoEOxWFxg4Xw7EcdZW6KZQuxF9X4PnnimYrvrZTo=
Subject key identifier: 6A:FD:8E:CD:D6:02:DB:F6:A5:44:6D:90:2E:84:B9:BC:9A:18:46:3C
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 0196BE5CAAE7C0389342B6F2F2941580EA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 08:01:06 +0000
Manifest this update: Sun 11 May 2025 08:01:06 +0000
Manifest next update: Mon 12 May 2025 08:01:06 +0000
Files and hashes: 1: 0qda3zP6aWS1QmMsfKtgTS_B8vw.roa (hash: NDD2ZMdGd4Vw1apZklWLmjHBzI7LGvrNZrE04O9xutU=)
2: QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl (hash: fFL73rR4Kn6bMBursMGgzju0MCXujxt6b9dTSi9cB4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:aa:e7:c0:38:93:42:b6:f2:f2:94:15:80:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: May 11 08:01:06 2025 GMT
Not After : May 12 08:01:06 2025 GMT
Subject: CN=6afd8ecdd602dbf6a5446d902e84b9bc9a18463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:d6:cf:b8:f5:64:9b:1e:7a:de:0a:8d:2c:
33:9e:fa:c7:67:82:81:de:02:42:6d:f7:5f:0e:96:
ff:8b:c2:53:cf:cb:17:dd:85:58:26:a7:35:19:7f:
80:6c:08:33:0b:72:14:68:0e:53:3f:8f:45:52:f9:
e8:a9:22:64:4c:55:fa:63:15:82:94:55:b6:5c:4d:
eb:9a:74:24:31:c8:1c:69:fe:6a:6a:90:12:06:6e:
51:6b:d4:3a:f2:83:5b:00:d0:d3:a9:00:7c:cb:1d:
f2:17:fb:5f:27:20:80:ac:ca:3f:83:55:a5:53:93:
3d:1f:f5:a3:8a:92:71:fc:a3:6d:b9:7c:d2:8d:08:
8b:84:42:e3:05:33:f5:e8:3b:2c:d0:f3:5a:0a:5e:
96:a5:76:ff:2d:48:a3:ed:ea:e3:42:85:c5:66:48:
74:14:1c:f3:2c:d8:a2:1e:c8:cc:a2:0c:24:84:17:
eb:1c:27:8c:b2:1d:da:ea:bb:0a:1f:86:54:03:ed:
11:07:25:35:bb:ed:95:9f:d6:65:c5:9a:67:ad:95:
37:a4:33:c2:3f:15:e7:d6:e2:5c:c8:51:94:78:06:
f8:09:56:57:6b:35:9c:ef:a5:11:b2:bc:1a:13:a4:
8b:de:af:ff:d8:7f:6d:51:1e:27:9c:79:92:f4:34:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FD:8E:CD:D6:02:DB:F6:A5:44:6D:90:2E:84:B9:BC:9A:18:46:3C
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ba:cb:b9:67:a3:27:da:ac:e2:ed:20:11:75:16:7b:ef:46:
b8:a3:20:2c:99:3e:d6:7b:54:59:32:38:6a:78:79:ea:2a:0b:
76:ea:20:45:a9:73:99:dd:d9:94:68:0f:d0:f0:3a:c0:7b:b1:
8b:05:26:81:60:04:af:6e:3f:f1:10:58:54:9c:75:56:00:aa:
30:0b:5a:95:85:6c:de:d1:62:0b:0f:22:18:b3:19:3d:5e:6b:
1a:48:8f:b4:4a:aa:ca:b5:f2:85:7b:16:a7:3c:76:db:25:f4:
43:76:de:10:e9:23:6c:52:d0:58:75:58:1f:26:18:54:1b:53:
ce:f6:b9:7e:1d:0b:cc:62:b4:72:2b:ac:bb:ad:59:e3:70:9c:
9e:7b:5b:7b:6d:04:9e:3f:86:6f:95:a9:90:6b:bc:ae:e6:cf:
98:d7:37:ec:f8:25:56:19:a6:d8:c8:59:f1:24:7d:20:dd:56:
c9:f3:2b:66:d3:68:84:d1:c6:33:75:6a:bd:ef:45:0a:bb:31:
0a:3f:93:0b:e5:15:59:c1:66:37:b3:dd:6c:79:8c:c9:51:e8:
e4:4d:a7:b9:93:00:88:d6:98:0e:61:cd:28:3e:18:b4:04:12:
a0:33:4c:5c:9b:f4:56:97:75:2b:ed:c1:0a:f7:ff:13:a9:23:
a6:49:ff:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XKrnwDiTQrby8pQVgOovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxM2ZmYTEwNmFlM2ZlZTZiZTg3YmFjMDZhODdiYTU3ZWQx
YzExNDAwHhcNMjUwNTExMDgwMTA2WhcNMjUwNTEyMDgwMTA2WjAzMTEwLwYDVQQD
Eyg2YWZkOGVjZGQ2MDJkYmY2YTU0NDZkOTAyZTg0YjliYzlhMTg0NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3DWz7j1ZJseet4KjSwznvrHZ4KB
3gJCbfdfDpb/i8JTz8sX3YVYJqc1GX+AbAgzC3IUaA5TP49FUvnoqSJkTFX6YxWC
lFW2XE3rmnQkMcgcaf5qapASBm5Ra9Q68oNbANDTqQB8yx3yF/tfJyCArMo/g1Wl
U5M9H/WjipJx/KNtuXzSjQiLhELjBTP16Dss0PNaCl6WpXb/LUij7erjQoXFZkh0
FBzzLNiiHsjMogwkhBfrHCeMsh3a6rsKH4ZUA+0RByU1u+2Vn9ZlxZpnrZU3pDPC
PxXn1uJcyFGUeAb4CVZXazWc76URsrwaE6SL3q//2H9tUR4nnHmS9DSJ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr9js3WAtv2pURtkC6EubyaGEY8MB8GA1UdIwQY
MBaAFEE/+hBq4/7mvoe6wGqHulftHBFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMt
ZmEyNmVjMzlmYWJhLzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jNzk2MzUtYmVjNC00ZmI1LTg5MmMtZmEyNmVjMzlmYWJh
LzEvUVRfNkVHcmpfdWEtaDdyQWFvZTZWLTBjRVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULrLuWej
J9qs4u0gEXUWe+9GuKMgLJk+1ntUWTI4anh56ioLduogRalzmd3ZlGgP0PA6wHux
iwUmgWAEr24/8RBYVJx1VgCqMAtalYVs3tFiCw8iGLMZPV5rGkiPtEqqyrXyhXsW
pzx22yX0Q3beEOkjbFLQWHVYHyYYVBtTzva5fh0LzGK0ciusu61Z43Ccnntbe20E
nj+Gb5WpkGu8rubPmNc37PglVhmm2MhZ8SR9IN1WyfMrZtNohNHGM3Vqve9FCrsx
Cj+TC+UVWcFmN7PdbHmMyVHo5E2nuZMAiNaYDmHNKD4YtAQSoDNMXJv0Vpd1K+3B
Cvf/E6kjpkn/1Q==
-----END CERTIFICATE-----
Generated at Sun May 11 14:41:47 2025 by rpki-client