Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
File: dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json)
Hash identifier: 2rN40RxN1+Ux5k/5C+RY9UxfWemEKlM9KD+JleMeEf4=
Subject key identifier: A2:EC:1D:8B:BD:4D:56:CA:B4:09:84:BF:80:05:43:67:72:FB:A1:12
Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
Certificate issuer: /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Certificate serial: 0196D0D0F73C2B54B1611AA2D2192810712F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
Manifest number: 14D0
Signing time: Wed 14 May 2025 22:01:17 +0000
Manifest this update: Wed 14 May 2025 22:01:17 +0000
Manifest next update: Thu 15 May 2025 22:01:17 +0000
Files and hashes: 1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=)
2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: VmdxKOk8k/qmV62IRJVELXABNspVIS+R4FwKV40rGz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:d0:f7:3c:2b:54:b1:61:1a:a2:d2:19:28:10:71:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4
Validity
Not Before: May 14 22:01:17 2025 GMT
Not After : May 15 22:01:17 2025 GMT
Subject: CN=a2ec1d8bbd4d56cab40984bf8005436772fba112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:2d:0f:ce:cf:b2:98:e6:99:75:25:df:08:
90:a6:b5:0b:8f:7b:04:65:a7:2f:7f:ff:d7:2b:f5:
af:3f:bf:d2:4a:40:e1:cc:81:34:8d:67:e3:9b:e3:
b9:da:6e:26:11:ec:56:27:35:32:c5:67:36:e5:1c:
7c:10:7c:e8:c0:92:71:89:f5:73:ba:96:bf:e5:db:
8e:12:78:fa:01:ba:76:f9:05:d2:04:c2:39:31:0e:
61:eb:64:4e:a3:83:0e:26:09:4b:98:85:a8:b5:4f:
68:00:60:45:6e:03:2b:c9:7b:32:a5:ad:43:d9:fb:
fc:18:00:40:b1:cd:4a:f0:21:93:d0:76:57:11:8b:
8a:9f:0d:2f:31:2e:4b:86:fd:c1:21:1c:68:d6:d1:
bf:f0:29:1d:28:90:3a:64:f8:d9:bf:b0:d7:65:af:
ed:77:5c:12:35:fa:4d:e9:6a:4a:f0:32:b4:12:88:
e3:f1:a6:ce:7e:43:34:2c:9c:b3:c9:bd:26:74:0f:
15:c2:54:ac:8e:c8:cb:5e:19:99:9d:22:54:6c:ed:
9a:a7:b6:75:0a:ce:29:ed:f6:f8:6b:92:1a:90:98:
52:8c:86:03:16:a2:8a:25:52:16:9c:28:7b:c6:1a:
1e:6f:69:99:55:0b:7c:78:5a:de:90:81:43:11:80:
e1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EC:1D:8B:BD:4D:56:CA:B4:09:84:BF:80:05:43:67:72:FB:A1:12
X509v3 Authority Key Identifier:
keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c9:45:28:cb:c0:61:b7:de:45:83:50:95:af:1e:aa:49:63:
91:4a:db:6e:b9:99:0a:06:3c:a0:a0:d6:08:d0:07:f0:1c:c4:
ba:b9:15:5b:15:1c:ae:88:7e:8a:9e:3d:f4:fe:47:c9:97:88:
9b:2a:0c:ef:85:21:07:c3:1b:1d:00:62:90:e4:42:bc:2d:b4:
71:9e:be:bb:64:a6:16:34:a1:60:ea:9b:74:c6:70:59:65:f6:
58:75:05:fb:86:9d:07:1c:23:ea:f3:ac:46:2b:bd:00:34:1b:
11:61:02:72:da:3b:a2:f9:94:3d:00:8e:ca:0c:f0:8c:22:a4:
0b:3d:b7:b6:c8:b1:1c:a4:6e:82:fc:b8:b2:d1:88:10:7a:a3:
f0:1c:04:5a:3b:81:16:1d:af:32:fa:4a:99:ff:04:86:30:5a:
0c:f2:75:6e:bf:0a:7f:f9:bc:b1:95:58:60:33:bd:b7:8e:fd:
d8:66:66:7b:11:e7:74:10:13:09:a2:d3:82:fb:f4:c6:db:fe:
bc:70:84:61:3d:72:c2:38:de:90:2a:1a:82:02:a7:7c:9d:ce:
78:00:ae:3a:29:6b:cb:a2:8d:77:da:22:27:26:04:ce:1d:2a:
21:27:5a:0a:1d:ff:07:be:18:a9:95:49:17:30:00:0e:8d:aa:
25:8d:9d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbQ0Pc8K1SxYRqi0hkoEHEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YWE1MWYyMDE0ZmEwZmQ3MTE3MDY5ZDg4YTY3OWYxNjcw
YzMyYTQwHhcNMjUwNTE0MjIwMTE3WhcNMjUwNTE1MjIwMTE3WjAzMTEwLwYDVQQD
EyhhMmVjMWQ4YmJkNGQ1NmNhYjQwOTg0YmY4MDA1NDM2NzcyZmJhMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzItD87PspjmmXUl3wiQprULj3sE
Zacvf//XK/WvP7/SSkDhzIE0jWfjm+O52m4mEexWJzUyxWc25Rx8EHzowJJxifVz
upa/5duOEnj6Abp2+QXSBMI5MQ5h62ROo4MOJglLmIWotU9oAGBFbgMryXsypa1D
2fv8GABAsc1K8CGT0HZXEYuKnw0vMS5Lhv3BIRxo1tG/8CkdKJA6ZPjZv7DXZa/t
d1wSNfpN6WpK8DK0Eojj8abOfkM0LJyzyb0mdA8VwlSsjsjLXhmZnSJUbO2ap7Z1
Cs4p7fb4a5IakJhSjIYDFqKKJVIWnCh7xhoeb2mZVQt8eFrekIFDEYDh8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLsHYu9TVbKtAmEv4AFQ2dy+6ESMB8GA1UdIwQY
MBaAFHaqUfIBT6D9cRcGnYimefFnDDKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUt
MjUxZjVkY2U3ZTRkLzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUtMjUxZjVkY2U3ZTRk
LzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQclFKMvA
YbfeRYNQla8eqkljkUrbbrmZCgY8oKDWCNAH8BzEurkVWxUcroh+ip499P5HyZeI
myoM74UhB8MbHQBikORCvC20cZ6+u2SmFjShYOqbdMZwWWX2WHUF+4adBxwj6vOs
Riu9ADQbEWECcto7ovmUPQCOygzwjCKkCz23tsixHKRugvy4stGIEHqj8BwEWjuB
Fh2vMvpKmf8EhjBaDPJ1br8Kf/m8sZVYYDO9t4792GZmexHndBATCaLTgvv0xtv+
vHCEYT1ywjjekCoaggKnfJ3OeACuOilry6KNd9oiJyYEzh0qISdaCh3/B74YqZVJ
FzAADo2qJY2dRQ==
-----END CERTIFICATE-----
Generated at Thu May 15 07:26:46 2025 by rpki-client