Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: ChR8yNmsDrgaX3LRXPhqs34dow8W2+/wJE+zZ4WdSzI=
Subject key identifier: E7:EE:51:04:9A:D1:7E:09:1C:D6:7C:F0:34:C3:8A:49:96:C3:8D:37
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019675679175AAEC3C9DBAB3552AACE2FFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0E12
Signing time: Sun 27 Apr 2025 04:00:43 +0000
Manifest this update: Sun 27 Apr 2025 04:00:43 +0000
Manifest next update: Mon 28 Apr 2025 04:00:43 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: 714kEKc42eGlIvUNFiDRHt03lOL6/GZ6Eh/wXIzOxNg=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:91:75:aa:ec:3c:9d:ba:b3:55:2a:ac:e2:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Apr 27 04:00:43 2025 GMT
Not After : Apr 28 04:00:43 2025 GMT
Subject: CN=e7ee51049ad17e091cd67cf034c38a4996c38d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:dd:76:4f:27:f1:ab:1e:90:fa:69:09:09:
5e:07:dc:ce:28:df:fa:b0:82:2f:c4:f3:0d:7f:6b:
5a:d5:80:00:df:d3:5c:d4:29:d2:41:7c:48:9b:8f:
17:27:58:e0:0b:eb:fe:ce:1a:4c:c7:24:5a:27:74:
e9:98:b4:a4:37:e9:7f:f4:24:dd:3c:72:e7:09:bc:
b0:75:ed:6c:9d:92:d3:a2:fd:6e:cb:5d:d8:cf:e3:
66:e3:79:14:0b:51:86:b9:6e:20:fa:59:b0:39:b5:
9e:f4:56:fc:34:42:40:4f:cb:c7:ca:1f:e3:96:57:
cf:1e:83:18:ce:89:6a:d8:62:8e:7f:43:5b:9f:d9:
d9:3d:be:49:56:6a:de:3c:71:87:29:d8:dd:00:f5:
1a:8c:d0:1d:46:22:f1:b2:db:5b:63:e1:a8:8e:19:
3d:cb:33:52:3f:1b:25:ad:73:30:2b:fe:52:91:1b:
bc:f3:00:32:5e:56:67:8c:70:fc:82:69:e9:12:06:
ab:23:42:dc:0c:f9:d4:9c:84:4d:70:55:af:a2:fb:
96:da:21:49:27:e0:ad:f9:67:03:be:c5:3c:f7:90:
6c:0d:d8:cc:e7:c2:9a:0a:57:0b:86:b6:a8:68:1d:
bc:dc:1b:c2:f4:5c:14:0b:c7:1c:a4:bf:a6:04:17:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EE:51:04:9A:D1:7E:09:1C:D6:7C:F0:34:C3:8A:49:96:C3:8D:37
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1b:40:20:67:92:0c:dc:49:a4:08:d7:cb:f5:7a:f6:9c:44:
ab:45:2e:62:70:c6:0e:83:a1:0c:f7:47:1e:cb:42:33:ab:9a:
37:5d:03:d5:dd:b8:82:82:ac:46:a5:4a:48:a3:00:e6:c8:a1:
46:a3:08:90:54:79:95:9a:63:cd:f5:a8:35:08:75:9d:57:8f:
01:94:f4:6c:4a:f7:8f:bc:e4:cf:b8:d9:57:a4:b4:40:c4:6d:
b5:1c:3d:be:6a:33:a4:5c:48:8c:c9:30:ba:2a:27:77:d2:d0:
44:7c:b7:59:f7:65:00:22:62:10:64:c3:95:4d:f9:59:75:c1:
fe:9e:19:69:4f:1d:c5:57:2b:0a:aa:06:ed:17:55:d6:7f:bf:
ca:56:ec:a7:8d:91:52:d3:98:b2:ad:e3:98:38:b5:c4:38:86:
a6:94:63:06:13:14:50:c8:5f:9d:ed:71:94:c9:38:bb:7e:e4:
4f:b1:11:4a:4a:17:af:91:3d:f1:12:ed:c0:10:56:15:12:8c:
8b:b2:76:12:c6:a1:11:3f:d4:c1:1c:87:0c:65:d2:0e:23:be:
c3:f7:6e:43:45:64:7c:df:74:30:19:12:8e:f3:e5:db:ad:04:
d8:04:1a:41:4d:9c:16:4f:36:d1:c2:9c:ab:d9:1c:01:7b:b1:
65:1d:5e:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z5F1quw8nbqzVSqs4v/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3
NmM1YTgwHhcNMjUwNDI3MDQwMDQzWhcNMjUwNDI4MDQwMDQzWjAzMTEwLwYDVQQD
EyhlN2VlNTEwNDlhZDE3ZTA5MWNkNjdjZjAzNGMzOGE0OTk2YzM4ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWDddk8n8asekPppCQleB9zOKN/6
sIIvxPMNf2ta1YAA39Nc1CnSQXxIm48XJ1jgC+v+zhpMxyRaJ3TpmLSkN+l/9CTd
PHLnCbywde1snZLTov1uy13Yz+Nm43kUC1GGuW4g+lmwObWe9Fb8NEJAT8vHyh/j
llfPHoMYzolq2GKOf0Nbn9nZPb5JVmrePHGHKdjdAPUajNAdRiLxsttbY+Gojhk9
yzNSPxslrXMwK/5SkRu88wAyXlZnjHD8gmnpEgarI0LcDPnUnIRNcFWvovuW2iFJ
J+Ct+WcDvsU895BsDdjM58KaClcLhraoaB283BvC9FwUC8ccpL+mBBfgPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfuUQSa0X4JHNZ88DTDikmWw403MB8GA1UdIwQY
MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt
NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4
LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhtAIGeS
DNxJpAjXy/V69pxEq0UuYnDGDoOhDPdHHstCM6uaN10D1d24goKsRqVKSKMA5sih
RqMIkFR5lZpjzfWoNQh1nVePAZT0bEr3j7zkz7jZV6S0QMRttRw9vmozpFxIjMkw
uiond9LQRHy3WfdlACJiEGTDlU35WXXB/p4ZaU8dxVcrCqoG7RdV1n+/ylbsp42R
UtOYsq3jmDi1xDiGppRjBhMUUMhfne1xlMk4u37kT7ERSkoXr5E98RLtwBBWFRKM
i7J2EsahET/UwRyHDGXSDiO+w/duQ0VkfN90MBkSjvPl260E2AQaQU2cFk820cKc
q9kcAXuxZR1eKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:10 2025 by rpki-client