Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: ZS4Yt11rPrSndXd6iJIN5IyuKzjnZGHHV3rHvKIgqwQ=
Subject key identifier: B3:C0:ED:60:79:AA:34:43:89:34:8C:E2:D9:2C:50:F2:41:9A:61:F7
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 0196AB7A1DFFA7A668CF809D0C3E6DCEAA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 12FD
Signing time: Wed 07 May 2025 16:00:29 +0000
Manifest this update: Wed 07 May 2025 16:00:29 +0000
Manifest next update: Thu 08 May 2025 16:00:29 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: DgJrngYDpYlh5nrKaVRt7le46d1oz5PCxxbbTxUO528=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:1d:ff:a7:a6:68:cf:80:9d:0c:3e:6d:ce:aa:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: May 7 16:00:29 2025 GMT
Not After : May 8 16:00:29 2025 GMT
Subject: CN=b3c0ed6079aa344389348ce2d92c50f2419a61f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:97:3f:d8:02:92:6c:97:65:52:5a:29:9e:
ba:1a:8a:2f:19:67:66:4a:ad:ed:10:2a:e9:77:70:
3f:65:cf:3f:bd:16:53:72:de:eb:42:82:c2:ca:41:
f8:92:bd:f5:cf:80:8c:74:32:99:5a:bd:8c:9c:a0:
57:68:21:18:8c:16:f7:d0:0c:88:b7:96:4e:a3:e4:
da:7e:3d:0f:00:6a:c7:00:d4:06:fb:f6:dd:d0:67:
e5:76:3e:a5:bb:df:86:88:9e:27:b3:82:b5:15:5d:
33:bd:6c:85:68:8c:ef:3c:75:0a:c6:ad:f4:0e:5e:
ca:ca:86:1c:bf:c8:62:85:fa:b3:90:3d:5c:79:25:
07:22:3d:7b:08:77:02:ed:0c:69:76:5b:8a:31:e2:
b4:5d:04:dd:ad:36:49:4d:cd:3d:19:00:bf:26:d5:
9b:fd:28:fd:9c:2a:47:f7:90:dd:fa:36:0d:c0:19:
32:72:14:40:57:2b:76:1e:29:c8:7b:42:46:3c:91:
46:7a:62:ed:06:d2:16:6b:97:93:4a:2a:e9:09:79:
9e:a5:08:4b:18:cd:9c:b9:29:84:ce:98:45:1d:7c:
d6:60:c2:c0:3a:37:6b:06:6d:e1:78:e3:50:7d:f0:
48:26:0b:d5:bd:91:11:71:f3:da:6f:bd:7e:3b:5f:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C0:ED:60:79:AA:34:43:89:34:8C:E2:D9:2C:50:F2:41:9A:61:F7
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8b:8c:4b:78:f9:6d:c9:25:5d:66:1b:ff:8e:e0:52:ec:25:
d1:c4:c8:c1:2a:c9:36:a6:55:7c:f3:97:15:79:83:63:60:bc:
e7:c3:49:10:1b:37:26:6b:2f:c8:66:3d:a3:7c:59:49:da:fc:
fb:f1:67:e7:61:c7:06:dd:f3:bc:82:6c:84:33:7c:92:49:92:
fe:03:c4:40:86:3b:8b:84:81:d2:1a:2c:ac:e3:d6:2c:f2:74:
3f:26:42:a6:a9:7c:4a:8f:65:e9:d3:61:39:4a:21:4e:b9:57:
21:02:48:9f:d0:d6:01:62:b6:d0:fa:ab:45:a8:79:d8:4e:8f:
8a:8d:e9:13:20:60:86:d9:36:2e:53:46:f5:f1:b4:7c:1d:3a:
77:a2:10:f5:3f:80:1f:c4:15:ee:7f:ec:48:0c:a4:37:d5:82:
55:71:2c:9d:58:68:56:ed:9b:33:03:17:ab:c6:2f:15:c4:31:
01:1f:d9:7d:76:c0:bd:fb:a6:c7:4c:83:52:4d:b4:c7:c2:d5:
2a:07:19:b7:ef:8f:3e:10:68:4d:9b:72:4b:b9:82:df:96:bf:
72:eb:50:4b:d0:34:8a:01:21:b1:ac:1d:c5:da:d3:e0:03:41:
07:d6:80:28:24:3a:18:14:5f:29:6a:25:b5:17:62:d1:3f:6a:
26:68:49:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZareh3/p6Zoz4CdDD5tzqoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjU0ZDRhNzY3YWQwOTk2MDZlNDQyZTA5MmY5MTI0MWEz
NjM2NzAwHhcNMjUwNTA3MTYwMDI5WhcNMjUwNTA4MTYwMDI5WjAzMTEwLwYDVQQD
EyhiM2MwZWQ2MDc5YWEzNDQzODkzNDhjZTJkOTJjNTBmMjQxOWE2MWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4SXP9gCkmyXZVJaKZ66GoovGWdm
Sq3tECrpd3A/Zc8/vRZTct7rQoLCykH4kr31z4CMdDKZWr2MnKBXaCEYjBb30AyI
t5ZOo+Tafj0PAGrHANQG+/bd0Gfldj6lu9+GiJ4ns4K1FV0zvWyFaIzvPHUKxq30
Dl7KyoYcv8hihfqzkD1ceSUHIj17CHcC7QxpdluKMeK0XQTdrTZJTc09GQC/JtWb
/Sj9nCpH95Dd+jYNwBkychRAVyt2HinIe0JGPJFGemLtBtIWa5eTSirpCXmepQhL
GM2cuSmEzphFHXzWYMLAOjdrBm3heONQffBIJgvVvZERcfPab71+O18ZAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPA7WB5qjRDiTSM4tksUPJBmmH3MB8GA1UdIwQY
MBaAFEAlTUp2etCZYG5ELgkvkSQaNjZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2Ut
YmJlOTEyZWVjNzNlLzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2UtYmJlOTEyZWVjNzNl
LzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMouMS3j5
bcklXWYb/47gUuwl0cTIwSrJNqZVfPOXFXmDY2C858NJEBs3JmsvyGY9o3xZSdr8
+/Fn52HHBt3zvIJshDN8kkmS/gPEQIY7i4SB0hosrOPWLPJ0PyZCpql8So9l6dNh
OUohTrlXIQJIn9DWAWK20PqrRah52E6Pio3pEyBghtk2LlNG9fG0fB06d6IQ9T+A
H8QV7n/sSAykN9WCVXEsnVhoVu2bMwMXq8YvFcQxAR/ZfXbAvfumx0yDUk20x8LV
KgcZt++PPhBoTZtyS7mC35a/cutQS9A0igEhsawdxdrT4ANBB9aAKCQ6GBRfKWol
tRdi0T9qJmhJgg==
-----END CERTIFICATE-----
Generated at Wed May 7 22:41:03 2025 by rpki-client