Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: MHb31VG0IFJrhtiYowkLWu8iAhxYvbmLst8QzSy36kU=
Subject key identifier: F4:6E:8B:D2:6D:93:ED:BC:39:56:EA:34:32:B0:C8:D9:76:35:6A:EF
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 0196B77E12F282ABDAA2691DE9409ABA2157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 0E09
Signing time: Sat 10 May 2025 00:00:14 +0000
Manifest this update: Sat 10 May 2025 00:00:14 +0000
Manifest next update: Sun 11 May 2025 00:00:14 +0000
Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: o3R2q1Hmxe3+gllcao/O7gu9GAihn5iye5qHVfSTi9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:12:f2:82:ab:da:a2:69:1d:e9:40:9a:ba:21:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: May 10 00:00:14 2025 GMT
Not After : May 11 00:00:14 2025 GMT
Subject: CN=f46e8bd26d93edbc3956ea3432b0c8d976356aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:7c:cb:77:34:61:3e:0e:7d:aa:4f:d9:e1:
ce:85:85:01:96:74:d0:2b:ee:83:1c:7e:43:ce:40:
c3:54:6c:60:49:c9:18:bb:4b:f2:44:39:b7:83:e2:
d8:c3:e4:d8:9d:53:70:92:3d:5b:e5:fe:ee:b8:52:
2c:7c:d4:c7:8a:37:cf:74:7c:db:00:99:aa:24:af:
b3:bd:59:14:91:ef:6e:20:24:79:d1:0b:a2:63:98:
28:52:70:bd:84:c3:2c:c0:8c:af:07:85:88:db:7c:
23:f5:11:fc:66:ff:41:9a:f7:35:a7:db:e2:fa:7e:
2b:7f:cc:c1:98:a7:de:9d:58:3c:44:6d:c5:1b:38:
d1:df:89:1f:dc:73:db:e5:63:48:df:fc:fd:96:53:
f0:74:16:4f:e4:4c:5b:b7:11:e4:0e:23:79:59:94:
11:fa:5b:86:ae:53:69:12:8a:89:f1:58:f6:bb:c2:
4d:79:05:9e:ee:0d:bc:09:83:fd:9a:d0:0f:64:00:
ab:61:48:4f:89:8c:d2:f3:89:13:b3:7d:fc:b1:10:
a4:b8:77:07:d4:9d:d2:2e:c5:fd:b7:53:5c:a7:04:
bd:af:dd:55:2a:73:94:46:26:8b:73:c5:56:c8:b0:
8b:4e:ae:d5:e8:be:43:a7:f2:8d:7a:26:96:cc:08:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6E:8B:D2:6D:93:ED:BC:39:56:EA:34:32:B0:C8:D9:76:35:6A:EF
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f6:39:cf:2c:86:10:d9:84:b7:84:f3:19:55:db:3d:6a:b2:
15:f1:29:ec:d4:97:a1:da:f2:ef:22:70:b1:fe:2b:31:40:ed:
4a:88:7c:60:4c:12:66:39:8c:a0:57:4c:82:76:42:f3:b4:c1:
5a:8a:7e:81:90:e7:8f:55:41:78:44:eb:60:09:7c:fd:63:2c:
0e:9d:a3:6c:e5:4f:81:ee:ee:3b:c6:bb:d7:5a:fb:57:02:b7:
50:a5:7f:a4:48:04:6c:37:53:ce:5b:44:b1:bd:3d:c0:e8:b7:
54:99:04:7e:42:2b:01:c4:50:a4:db:c6:6e:5c:96:15:bd:3b:
11:94:3a:6b:07:5d:14:b6:48:08:fa:fd:48:f4:07:ab:fa:7a:
4f:43:da:cf:2b:12:a5:e2:f0:a1:d9:82:52:d3:54:f7:a7:92:
cf:34:75:95:33:a6:9b:e6:e9:c9:b6:26:cd:f8:b0:b4:fe:c7:
04:e3:fc:c3:e5:13:da:50:0c:90:13:68:bd:f6:ff:bc:04:57:
92:25:f7:c5:13:0e:bb:84:45:5c:82:64:16:3e:10:01:1e:69:
71:c1:e2:52:91:5a:21:6b:00:6f:f1:37:9c:f6:65:f1:cb:28:
aa:66:55:96:00:fc:fe:97:5d:9b:9a:68:73:fa:04:31:b6:70:
98:f0:47:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3fhLygqvaomkd6UCauiFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjc0ZjJjNWJlYjk5OTliODY3M2M3NjA3NDNjN2U3ZDMx
Y2Q2NzMwHhcNMjUwNTEwMDAwMDE0WhcNMjUwNTExMDAwMDE0WjAzMTEwLwYDVQQD
EyhmNDZlOGJkMjZkOTNlZGJjMzk1NmVhMzQzMmIwYzhkOTc2MzU2YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi98y3c0YT4OfapP2eHOhYUBlnTQ
K+6DHH5DzkDDVGxgSckYu0vyRDm3g+LYw+TYnVNwkj1b5f7uuFIsfNTHijfPdHzb
AJmqJK+zvVkUke9uICR50QuiY5goUnC9hMMswIyvB4WI23wj9RH8Zv9Bmvc1p9vi
+n4rf8zBmKfenVg8RG3FGzjR34kf3HPb5WNI3/z9llPwdBZP5ExbtxHkDiN5WZQR
+luGrlNpEoqJ8Vj2u8JNeQWe7g28CYP9mtAPZACrYUhPiYzS84kTs338sRCkuHcH
1J3SLsX9t1NcpwS9r91VKnOURiaLc8VWyLCLTq7V6L5Dp/KNeiaWzAguawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRui9Jtk+28OVbqNDKwyNl2NWrvMB8GA1UdIwQY
MBaAFEEnTyxb65mZuGc8dgdDx+fTHNZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDIt
YTQ4NzUyYjgwNGM3LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZmFmZjUtNjI5YS00ZDJmLWIxMDItYTQ4NzUyYjgwNGM3
LzEvUVNkUExGdnJtWm00Wnp4MkIwUEg1OU1jMW5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/Y5zyyG
ENmEt4TzGVXbPWqyFfEp7NSXodry7yJwsf4rMUDtSoh8YEwSZjmMoFdMgnZC87TB
Wop+gZDnj1VBeETrYAl8/WMsDp2jbOVPge7uO8a711r7VwK3UKV/pEgEbDdTzltE
sb09wOi3VJkEfkIrAcRQpNvGblyWFb07EZQ6awddFLZICPr9SPQHq/p6T0PazysS
peLwodmCUtNU96eSzzR1lTOmm+bpybYmzfiwtP7HBOP8w+UT2lAMkBNovfb/vARX
kiX3xRMOu4RFXIJkFj4QAR5pccHiUpFaIWsAb/E3nPZl8csoqmZVlgD8/pddm5po
c/oEMbZwmPBHCw==
-----END CERTIFICATE-----
Generated at Sat May 10 04:44:21 2025 by rpki-client