Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: hUdPByIN4XevTPjp3YL+blWozklSKVpbnFHyTHDDDDI=
Subject key identifier: 1B:54:73:F3:2A:71:E8:4C:1D:F7:40:FD:92:AE:71:4B:D8:BE:5A:B1
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 0196BA48BF422A7BFF2C693F18480819DA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 108E
Signing time: Sat 10 May 2025 13:00:51 +0000
Manifest this update: Sat 10 May 2025 13:00:51 +0000
Manifest next update: Sun 11 May 2025 13:00:51 +0000
Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: orhriACQMgLQZYdpO07skla4t3BvCUwoVZwjV0/+2Hw=)
2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:bf:42:2a:7b:ff:2c:69:3f:18:48:08:19:da:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: May 10 13:00:51 2025 GMT
Not After : May 11 13:00:51 2025 GMT
Subject: CN=1b5473f32a71e84c1df740fd92ae714bd8be5ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:8a:3e:0f:2d:0f:67:a3:45:e1:cf:44:b6:
82:1e:fb:b4:c9:ed:19:38:5a:84:43:61:5e:f0:37:
55:83:78:2a:14:48:8a:63:ad:a1:43:9a:30:a2:9a:
2b:6c:14:c9:4c:cf:df:d8:2a:20:50:70:52:b5:8e:
e8:36:7a:32:08:b4:bd:06:2d:82:81:a1:85:53:f0:
5a:29:ec:20:c5:58:7d:55:24:0e:2c:9e:b0:19:a5:
15:5f:6b:54:3a:be:39:69:56:df:c0:14:3c:6b:f2:
f6:d3:52:1c:0f:e5:1b:6c:9b:6e:1e:a6:5e:27:4e:
0a:61:4e:97:d7:2a:8c:45:75:31:b6:38:7c:fb:ca:
b4:95:cc:ec:7c:e0:25:66:52:25:17:a7:32:bf:eb:
31:ec:00:c0:c2:a6:e5:6f:47:ec:8d:1f:f8:01:0b:
93:5c:cd:e0:8f:e0:85:df:9f:13:18:ab:19:4d:29:
ee:ed:ff:2e:ad:76:4b:4a:f3:19:1e:d9:6b:59:f6:
ec:c7:bb:9b:93:36:7e:56:ab:ae:c7:2c:22:19:02:
03:d3:ac:79:2d:22:85:71:b6:7b:d0:6f:e3:a6:21:
c4:8a:d4:8b:3e:2c:13:2c:ef:e7:88:e0:6e:a4:09:
71:e2:79:22:c3:05:e4:65:fb:d5:7d:db:d6:24:d1:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:54:73:F3:2A:71:E8:4C:1D:F7:40:FD:92:AE:71:4B:D8:BE:5A:B1
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4b:34:a8:76:a4:38:40:26:f1:74:56:28:20:cc:30:4f:87:
bd:81:d2:21:cb:78:50:f8:09:5e:3c:b1:ad:16:19:c1:c3:d6:
2a:70:77:95:b1:cb:c7:ac:86:0c:ce:13:16:b2:b2:1d:ce:e6:
a8:dc:4b:38:89:57:03:1e:40:54:a5:f5:54:03:f9:e8:8f:78:
d3:87:02:66:1a:0b:2d:9b:29:7e:6f:ad:13:54:64:15:67:85:
49:cb:09:c4:7c:83:6b:04:19:aa:26:b3:e7:84:79:db:cc:24:
f6:5b:93:22:a1:c2:a6:76:32:a2:a7:f0:71:4c:d9:35:59:41:
40:33:c2:75:fa:80:7b:35:50:14:e9:86:43:93:b8:0f:a5:18:
30:63:69:6f:61:1a:fa:c0:1b:e0:bd:c6:ee:8e:b5:aa:f5:d2:
fb:6c:cb:70:73:f0:34:03:40:7d:8b:28:12:7d:63:7a:7e:69:
50:e8:e1:62:38:c4:de:c8:9d:49:a0:84:46:ac:5c:a1:b3:cf:
a2:b6:22:65:c6:e8:59:e7:f7:7a:f3:87:ad:9d:ee:05:87:92:
04:b3:e2:76:10:52:6d:02:75:d7:1d:25:03:cd:14:1f:0e:45:
a7:f3:66:ee:93:58:19:ef:f6:75:38:cd:0c:b3:9d:c4:26:c4:
d2:ee:6a:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SL9CKnv/LGk/GEgIGdosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk
NGU1OTIwHhcNMjUwNTEwMTMwMDUxWhcNMjUwNTExMTMwMDUxWjAzMTEwLwYDVQQD
EygxYjU0NzNmMzJhNzFlODRjMWRmNzQwZmQ5MmFlNzE0YmQ4YmU1YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnauKPg8tD2ejReHPRLaCHvu0ye0Z
OFqEQ2Fe8DdVg3gqFEiKY62hQ5owoporbBTJTM/f2CogUHBStY7oNnoyCLS9Bi2C
gaGFU/BaKewgxVh9VSQOLJ6wGaUVX2tUOr45aVbfwBQ8a/L201IcD+UbbJtuHqZe
J04KYU6X1yqMRXUxtjh8+8q0lczsfOAlZlIlF6cyv+sx7ADAwqblb0fsjR/4AQuT
XM3gj+CF358TGKsZTSnu7f8urXZLSvMZHtlrWfbsx7ubkzZ+VquuxywiGQID06x5
LSKFcbZ70G/jpiHEitSLPiwTLO/niOBupAlx4nkiwwXkZfvVfdvWJNEuVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtUc/MqcehMHfdA/ZKucUvYvlqxMB8GA1UdIwQY
MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt
MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4
LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUs0qHak
OEAm8XRWKCDMME+HvYHSIct4UPgJXjyxrRYZwcPWKnB3lbHLx6yGDM4TFrKyHc7m
qNxLOIlXAx5AVKX1VAP56I9404cCZhoLLZspfm+tE1RkFWeFScsJxHyDawQZqiaz
54R528wk9luTIqHCpnYyoqfwcUzZNVlBQDPCdfqAezVQFOmGQ5O4D6UYMGNpb2Ea
+sAb4L3G7o61qvXS+2zLcHPwNANAfYsoEn1jen5pUOjhYjjE3sidSaCERqxcobPP
orYiZcboWef3evOHrZ3uBYeSBLPidhBSbQJ11x0lA80UHw5Fp/Nm7pNYGe/2dTjN
DLOdxCbE0u5q7Q==
-----END CERTIFICATE-----
Generated at Sat May 10 22:20:39 2025 by rpki-client