Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: ah95jD/T387UGoHzg5oRYI6no8kjr/CJLHObSY5eU0s=
Subject key identifier: 74:02:9A:56:2A:30:26:71:24:B8:9E:32:81:D3:6E:7F:74:F2:40:19
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 01967642DA9B064351D753E501C5C85FF1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 06FC
Signing time: Sun 27 Apr 2025 08:00:14 +0000
Manifest this update: Sun 27 Apr 2025 08:00:14 +0000
Manifest next update: Mon 28 Apr 2025 08:00:14 +0000
Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: TsZk02WOIrVVgZMHVdQtLbw9uYtg85BqNZ3SCgl8rhs=)
2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=)
3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:da:9b:06:43:51:d7:53:e5:01:c5:c8:5f:f1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Apr 27 08:00:14 2025 GMT
Not After : Apr 28 08:00:14 2025 GMT
Subject: CN=74029a562a30267124b89e3281d36e7f74f24019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:7b:39:aa:8f:ee:4d:fc:cf:91:fc:97:e2:
92:2a:23:01:e4:f7:ac:cf:81:d2:4d:03:fc:c0:12:
1f:d6:ff:b1:c9:ce:47:b8:cb:83:7a:40:5d:69:25:
65:7a:ad:99:ee:d2:c6:68:90:7c:96:d3:41:b6:3a:
06:71:54:16:e5:67:06:11:63:9d:e3:95:2a:d0:26:
ff:17:1f:a4:d6:35:c3:91:6f:20:9c:d5:2f:15:53:
26:44:9e:1c:a2:d5:86:56:4e:f6:7d:cb:d4:0d:ff:
af:39:4b:f2:b9:af:77:71:19:43:0f:11:91:e5:58:
e9:9c:1b:db:b5:0d:d4:6b:19:9b:ca:77:b0:cd:c8:
69:b0:a2:8b:d8:7f:ee:34:d5:23:55:41:30:4e:2e:
a9:07:86:ca:bc:02:cf:e5:54:a3:50:87:4b:0c:d0:
53:f3:c9:09:79:4b:59:af:61:da:69:01:30:07:ce:
76:13:1e:ef:0b:9c:7d:9a:ec:cc:2e:79:cc:02:7b:
06:ca:27:cc:01:9d:e5:6b:ec:a7:c5:22:76:7e:17:
58:67:fe:67:ff:63:b9:c1:37:f1:dd:94:5a:c0:b9:
5f:94:47:44:9f:50:1a:9b:e5:03:a3:97:37:25:72:
37:de:a4:25:4c:fd:1d:51:5e:3b:c7:99:59:48:b1:
3a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:9A:56:2A:30:26:71:24:B8:9E:32:81:D3:6E:7F:74:F2:40:19
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4e:92:49:64:42:0f:72:ed:52:c1:82:af:ce:ae:ff:ac:a9:
2f:07:dc:c6:b9:6c:00:cb:61:c7:c8:37:33:9d:1c:2c:83:f8:
fd:f7:d9:9e:82:80:5d:6a:19:b4:ae:db:88:5a:cd:63:a3:dc:
cf:13:8d:f2:3d:cb:f3:d3:01:76:75:d0:02:2b:03:06:b9:85:
1e:4f:69:29:91:66:3c:97:66:bf:11:01:56:0c:e4:43:d8:f9:
5f:90:60:49:86:96:31:30:0b:1e:55:01:d9:c8:81:cc:7e:ed:
ca:d2:76:11:58:75:6d:b6:64:74:ff:c0:7f:80:34:6d:39:1b:
69:35:cf:35:e2:37:c2:8a:d1:7a:5d:72:5f:a0:f9:f4:bc:c1:
96:7b:1e:0a:7f:13:0c:4d:da:67:da:d9:3c:b9:8c:16:48:d4:
11:59:df:96:89:94:73:7e:b3:f9:5e:a8:9e:d0:8b:52:a1:34:
35:fc:42:88:0a:94:05:df:a7:99:2f:2c:1e:65:76:01:21:0a:
b9:37:ea:8d:1d:71:37:4a:11:d1:fa:e7:12:bc:34:ce:0e:ea:
dd:bc:9f:19:dd:9d:99:35:ee:5b:55:ff:21:e8:c2:d4:8f:33:
c9:37:ba:ca:bb:44:77:fa:e0:58:f4:ad:af:f5:fc:be:14:5b:
b4:91:72:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QtqbBkNR11PlAcXIX/HRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2EyNjcwNTA4Yjk0NTEyM2JlZWNiZjEzMTQ1ZmZiZDdi
ZmNkZTQwHhcNMjUwNDI3MDgwMDE0WhcNMjUwNDI4MDgwMDE0WjAzMTEwLwYDVQQD
Eyg3NDAyOWE1NjJhMzAyNjcxMjRiODllMzI4MWQzNmU3Zjc0ZjI0MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKh7OaqP7k38z5H8l+KSKiMB5Pes
z4HSTQP8wBIf1v+xyc5HuMuDekBdaSVleq2Z7tLGaJB8ltNBtjoGcVQW5WcGEWOd
45Uq0Cb/Fx+k1jXDkW8gnNUvFVMmRJ4cotWGVk72fcvUDf+vOUvyua93cRlDDxGR
5VjpnBvbtQ3UaxmbynewzchpsKKL2H/uNNUjVUEwTi6pB4bKvALP5VSjUIdLDNBT
88kJeUtZr2HaaQEwB852Ex7vC5x9muzMLnnMAnsGyifMAZ3la+ynxSJ2fhdYZ/5n
/2O5wTfx3ZRawLlflEdEn1Aam+UDo5c3JXI33qQlTP0dUV47x5lZSLE60wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQCmlYqMCZxJLieMoHTbn908kAZMB8GA1UdIwQY
MBaAFEJ6JnBQi5RRI77svxMUX/vXv83kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQt
MDZiM2NlYTQ5MmVlLzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lYzJlMDgtZjYzYS00YmQ3LWI4NjQtMDZiM2NlYTQ5MmVl
LzEvUW5vbWNGQ0xsRkVqdnV5X0V4UmYtOWVfemVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiU6SSWRC
D3LtUsGCr86u/6ypLwfcxrlsAMthx8g3M50cLIP4/ffZnoKAXWoZtK7biFrNY6Pc
zxON8j3L89MBdnXQAisDBrmFHk9pKZFmPJdmvxEBVgzkQ9j5X5BgSYaWMTALHlUB
2ciBzH7tytJ2EVh1bbZkdP/Af4A0bTkbaTXPNeI3worRel1yX6D59LzBlnseCn8T
DE3aZ9rZPLmMFkjUEVnflomUc36z+V6ontCLUqE0NfxCiAqUBd+nmS8sHmV2ASEK
uTfqjR1xN0oR0frnErw0zg7q3byfGd2dmTXuW1X/IejC1I8zyTe6yrtEd/rgWPSt
r/X8vhRbtJFy3Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:34:41 2025 by rpki-client