Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: VxDN6l4KZ5g6iBtGv/Wcb20HBPzPeHNeehsVnO+VCo8=
Subject key identifier: 40:F8:57:F9:1D:E8:03:84:98:30:87:C4:39:F4:09:7F:12:F5:A8:0E
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019689CA0DA45AD3978B7D05901332324E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0901
Signing time: Thu 01 May 2025 03:00:42 +0000
Manifest this update: Thu 01 May 2025 03:00:42 +0000
Manifest next update: Fri 02 May 2025 03:00:42 +0000
Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: e+JM6ar/JWtDlmfIZFDmi+bCykb94taUU5XwgKLckIg=)
2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:ca:0d:a4:5a:d3:97:8b:7d:05:90:13:32:32:4e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: May 1 03:00:42 2025 GMT
Not After : May 2 03:00:42 2025 GMT
Subject: CN=40f857f91de80384983087c439f4097f12f5a80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:1c:26:54:00:6d:da:29:4c:ce:0e:ef:b3:
33:ce:94:b7:f0:c8:82:73:98:d8:61:64:ea:6a:92:
41:41:db:60:e1:fb:ba:7b:14:ab:1d:f3:b6:07:37:
de:9a:67:da:8e:08:1b:10:46:0f:8b:34:a0:bf:54:
37:f8:a3:51:49:49:75:5e:6d:f0:b6:6d:57:4f:8b:
61:b7:dd:4b:b4:f3:75:8c:9a:ac:24:4b:fd:73:4f:
e3:fa:85:e1:04:b2:fc:7b:66:d3:14:0f:f1:cc:58:
45:58:89:a4:e7:6f:2d:e9:4d:41:61:fb:d9:1c:9f:
1b:76:9c:3b:9d:60:ce:39:74:8b:29:d9:e4:98:3f:
a3:16:e6:f7:ff:7a:7d:d8:f4:fb:77:09:b9:c7:ab:
80:94:69:dd:5d:de:6e:8a:6e:bd:f0:09:fb:f2:d7:
20:00:7a:8d:b2:f1:26:f7:49:35:82:ef:55:19:99:
09:44:fa:ed:dc:5a:8b:8e:57:e2:1a:9d:37:ab:8e:
d3:e6:83:5a:fb:43:da:37:60:66:32:bc:66:58:60:
63:7f:50:4f:cd:7c:da:69:21:43:9d:ac:d9:90:51:
7f:01:d1:6e:68:1d:e8:8d:5a:e9:b9:f2:a0:df:41:
b6:e6:d5:33:19:4a:68:d2:e9:ca:9c:37:4f:fa:4b:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:57:F9:1D:E8:03:84:98:30:87:C4:39:F4:09:7F:12:F5:A8:0E
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:96:57:2e:22:ba:c0:f5:d8:ce:7f:ec:9e:ab:da:41:94:
5a:73:16:7c:52:3e:72:bb:b5:65:67:78:3c:b5:fa:76:f3:b0:
cc:27:b9:58:08:34:fe:a7:40:62:0a:2e:cf:04:58:ed:7b:6b:
5f:03:f9:9c:41:1b:af:aa:ff:e5:37:3b:94:69:35:20:28:45:
af:3c:b4:ce:7b:ad:de:74:fe:63:5d:8c:49:76:34:0a:1a:2b:
86:64:54:81:3d:8a:c9:83:f0:15:b2:6c:f0:c9:6b:87:af:93:
5e:cf:bd:f5:75:da:d4:ad:9a:23:ec:a2:04:b0:f3:d3:a8:bf:
df:ef:09:04:40:fb:0f:03:f3:12:d1:fa:39:b0:f1:16:b6:08:
d2:7b:0b:d3:b2:8a:a7:3b:10:3e:d0:35:e3:26:6d:6d:54:1b:
a5:de:91:34:37:93:bd:42:dc:78:ac:5e:76:be:e8:9f:00:1b:
42:72:2b:89:7f:74:6a:ac:dd:d1:22:d5:67:f4:de:13:5a:03:
ab:ad:02:ac:f3:a3:f3:e1:6b:69:b2:07:c1:bd:69:42:a4:99:
50:3a:15:c6:03:d5:24:98:23:fd:94:3a:cd:06:e6:bd:7a:e0:
af:f8:ee:1c:51:8b:91:6e:01:97:a8:af:cd:64:53:61:5a:9a:
a6:67:e6:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJyg2kWtOXi30FkBMyMk6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl
YTQ3NDMwHhcNMjUwNTAxMDMwMDQyWhcNMjUwNTAyMDMwMDQyWjAzMTEwLwYDVQQD
Eyg0MGY4NTdmOTFkZTgwMzg0OTgzMDg3YzQzOWY0MDk3ZjEyZjVhODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZYcJlQAbdopTM4O77MzzpS38MiC
c5jYYWTqapJBQdtg4fu6exSrHfO2BzfemmfajggbEEYPizSgv1Q3+KNRSUl1Xm3w
tm1XT4tht91LtPN1jJqsJEv9c0/j+oXhBLL8e2bTFA/xzFhFWImk528t6U1BYfvZ
HJ8bdpw7nWDOOXSLKdnkmD+jFub3/3p92PT7dwm5x6uAlGndXd5uim698An78tcg
AHqNsvEm90k1gu9VGZkJRPrt3FqLjlfiGp03q47T5oNa+0PaN2BmMrxmWGBjf1BP
zXzaaSFDnazZkFF/AdFuaB3ojVrpufKg30G25tUzGUpo0unKnDdP+kuKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED4V/kd6AOEmDCHxDn0CX8S9agOMB8GA1UdIwQY
MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt
NjljNjI5ODQxNWY4LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4
LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZu6WVy4i
usD12M5/7J6r2kGUWnMWfFI+cru1ZWd4PLX6dvOwzCe5WAg0/qdAYgouzwRY7Xtr
XwP5nEEbr6r/5Tc7lGk1IChFrzy0znut3nT+Y12MSXY0ChorhmRUgT2KyYPwFbJs
8Mlrh6+TXs+99XXa1K2aI+yiBLDz06i/3+8JBED7DwPzEtH6ObDxFrYI0nsL07KK
pzsQPtA14yZtbVQbpd6RNDeTvULceKxedr7onwAbQnIriX90aqzd0SLVZ/TeE1oD
q60CrPOj8+FrabIHwb1pQqSZUDoVxgPVJJgj/ZQ6zQbmvXrgr/juHFGLkW4Bl6iv
zWRTYVqapmfm1w==
-----END CERTIFICATE-----
Generated at Thu May 1 08:26:25 2025 by rpki-client