Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: cAYWXH9mi09r+mo62l+vufiax8JX3p9lP1LcekpISqg=
Subject key identifier: 5A:39:C7:8D:19:6E:46:72:9B:6E:CD:16:4A:41:0C:38:85:36:3D:83
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 0196C79618EA33AF0D80CAD5184785A1DA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 0220
Signing time: Tue 13 May 2025 03:00:24 +0000
Manifest this update: Tue 13 May 2025 03:00:24 +0000
Manifest next update: Wed 14 May 2025 03:00:24 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: +0gd6GNh/UocvCW8dslvs+CtfLELRYPbYtOxn/G7Up0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:18:ea:33:af:0d:80:ca:d5:18:47:85:a1:da:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: May 13 03:00:24 2025 GMT
Not After : May 14 03:00:24 2025 GMT
Subject: CN=5a39c78d196e46729b6ecd164a410c3885363d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:84:3d:d3:fd:a6:47:2a:01:c0:5b:9c:5b:
6e:a9:72:56:f8:ff:29:e9:7a:42:5c:1e:47:3d:2b:
9f:f2:6c:ab:0f:45:03:5c:67:ce:9a:b4:4b:e5:e2:
84:a4:4d:f3:db:db:f9:d8:a3:58:78:85:a8:32:c7:
e2:34:15:f1:57:e5:c2:cf:c0:1b:84:d9:e8:23:3a:
cf:79:41:28:dc:da:47:57:b2:bb:a9:45:d9:9c:7e:
9c:c5:b8:7f:b7:03:9d:52:03:2c:d7:1d:5e:9f:3d:
e0:46:b1:5a:c3:30:88:24:b6:58:d3:5d:a5:b4:c5:
7d:b9:08:12:1a:ca:26:12:22:8c:95:04:99:fb:18:
30:ab:9b:d9:8f:52:75:7d:ac:55:c6:d7:95:54:95:
3a:f0:88:56:c2:11:94:23:1c:9e:87:a6:55:02:82:
6c:5c:ed:34:ab:8f:28:47:c6:5a:bf:ab:53:59:b2:
38:1d:59:73:82:59:75:fa:85:59:bb:30:ad:2f:0c:
c3:70:2c:76:79:49:cc:25:30:31:9a:47:d1:2a:e1:
e8:2e:12:9f:d8:a6:1d:b4:f7:90:66:19:04:af:92:
37:e7:47:bf:08:4c:5d:4e:c3:18:e2:0b:a7:cd:ef:
5a:40:83:2f:fc:e7:b1:11:2e:bb:9e:b9:c4:c2:7c:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:39:C7:8D:19:6E:46:72:9B:6E:CD:16:4A:41:0C:38:85:36:3D:83
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0e:1d:bf:be:4c:a3:4f:0b:c1:d8:e5:97:16:14:1b:af:25:
82:01:63:71:34:56:0e:52:74:de:bb:02:92:1e:31:5e:bb:19:
51:24:59:c5:1d:d5:86:04:28:78:88:84:e8:8b:7e:28:0c:50:
9d:8e:b4:92:d9:af:b5:4e:f6:b5:f5:07:2d:ca:03:b0:97:b9:
4f:0f:a1:8a:52:06:4b:7c:76:4b:b6:40:7f:92:ab:c8:9c:8b:
56:25:e7:f0:30:44:61:03:1b:2e:9a:17:40:a9:16:e2:ee:c8:
ec:80:b9:5e:d4:3c:07:03:10:09:da:1f:83:43:fa:53:b5:ad:
56:0d:f2:33:f4:d0:14:55:b0:62:48:4d:89:e8:d1:5c:3b:f3:
db:b6:40:76:e9:d4:f7:a9:cb:22:5a:45:ff:b5:f1:8a:1c:c7:
73:d9:71:56:fb:a5:7a:01:7d:1b:4b:5e:96:79:3a:52:bb:3d:
88:61:db:53:62:27:f6:0d:6b:d4:eb:19:73:60:9f:7c:b0:6a:
e6:10:f3:df:4a:2c:25:a2:79:c7:46:42:bc:5a:fb:e1:19:3f:
b7:01:2d:65:95:9f:e7:23:e8:13:75:3f:96:a4:34:59:a5:38:
fc:1b:7a:1b:13:28:b0:f6:7e:a6:08:2b:3b:41:c3:99:18:79:
bc:64:ce:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHlhjqM68NgMrVGEeFodqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzU3NDdkYjQxNzBlZDQ1NzU2Y2M5YTNhNGU3Njg5YTBl
YjYyYzcwHhcNMjUwNTEzMDMwMDI0WhcNMjUwNTE0MDMwMDI0WjAzMTEwLwYDVQQD
Eyg1YTM5Yzc4ZDE5NmU0NjcyOWI2ZWNkMTY0YTQxMGMzODg1MzYzZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm6EPdP9pkcqAcBbnFtuqXJW+P8p
6XpCXB5HPSuf8myrD0UDXGfOmrRL5eKEpE3z29v52KNYeIWoMsfiNBXxV+XCz8Ab
hNnoIzrPeUEo3NpHV7K7qUXZnH6cxbh/twOdUgMs1x1enz3gRrFawzCIJLZY012l
tMV9uQgSGsomEiKMlQSZ+xgwq5vZj1J1faxVxteVVJU68IhWwhGUIxyeh6ZVAoJs
XO00q48oR8Zav6tTWbI4HVlzgll1+oVZuzCtLwzDcCx2eUnMJTAxmkfRKuHoLhKf
2KYdtPeQZhkEr5I350e/CExdTsMY4gunze9aQIMv/OexES67nrnEwnzTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo5x40ZbkZym27NFkpBDDiFNj2DMB8GA1UdIwQY
MBaAFKo1dH20Fw7UV1bMmjpOdomg62LHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpWMGZiUVhEdFJYVnN5YU9rNTJpYURyWXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YTVjMzQtNGRmMy00OWMzLTg3N2It
MWE4Y2QwNDZkYTkyLzEvcWpWMGZiUVhEdFJYVnN5YU9rNTJpYURyWXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80YTVjMzQtNGRmMy00OWMzLTg3N2ItMWE4Y2QwNDZkYTky
LzEvcWpWMGZiUVhEdFJYVnN5YU9rNTJpYURyWXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA4dv75M
o08LwdjllxYUG68lggFjcTRWDlJ03rsCkh4xXrsZUSRZxR3VhgQoeIiE6It+KAxQ
nY60ktmvtU72tfUHLcoDsJe5Tw+hilIGS3x2S7ZAf5KryJyLViXn8DBEYQMbLpoX
QKkW4u7I7IC5XtQ8BwMQCdofg0P6U7WtVg3yM/TQFFWwYkhNiejRXDvz27ZAdunU
96nLIlpF/7XxihzHc9lxVvulegF9G0telnk6Urs9iGHbU2In9g1r1OsZc2CffLBq
5hDz30osJaJ5x0ZCvFr74Rk/twEtZZWf5yPoE3U/lqQ0WaU4/Bt6GxMosPZ+pggr
O0HDmRh5vGTOxA==
-----END CERTIFICATE-----
Generated at Tue May 13 05:51:04 2025 by rpki-client