Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: 3xta5vCd3opmjaqo4yeTt0fumBwxjGE4JL/00bNSyfI=
Subject key identifier: 44:97:07:DC:4C:64:FF:81:A9:A9:61:12:EF:E8:68:76:44:2E:C4:83
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 01967642F8EFB69D2DF706C75BB8F6FF0BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 08:00:22 +0000
Manifest this update: Sun 27 Apr 2025 08:00:22 +0000
Manifest next update: Mon 28 Apr 2025 08:00:22 +0000
Files and hashes: 1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: f9bt0c3O+guUnBbyOAORcXOkCjU4IR5ALcN88oljRAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:f8:ef:b6:9d:2d:f7:06:c7:5b:b8:f6:ff:0b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Apr 27 08:00:22 2025 GMT
Not After : Apr 28 08:00:22 2025 GMT
Subject: CN=449707dc4c64ff81a9a96112efe86876442ec483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:fb:53:ea:28:22:2a:03:4a:a0:af:e6:ac:
56:08:ec:7c:55:5d:cd:ba:ee:93:e1:46:d4:38:f9:
ec:85:79:5c:db:74:97:16:5b:3d:23:87:76:d4:dd:
7d:ff:5a:98:a7:8d:80:44:53:44:1f:15:50:ee:b2:
c0:1f:00:20:3d:a0:44:37:4b:66:77:50:3d:c2:bd:
c5:a4:3e:37:59:cc:64:38:b0:61:2e:4f:77:c8:62:
15:f2:c6:10:40:7d:77:ae:44:79:21:8a:17:ae:e7:
ec:6b:0c:bd:c0:f8:79:90:73:ec:d7:9a:d0:10:03:
51:23:79:80:df:f4:74:4c:4e:8a:c4:d6:e6:b5:cd:
09:2c:e2:03:a9:0c:fd:49:49:af:35:9a:a3:1f:21:
0f:bc:00:54:a6:3d:2b:ed:0a:e9:c6:76:25:bd:6b:
07:0e:a1:1a:fa:f9:c0:be:19:93:47:c7:6f:3b:88:
da:3f:61:29:de:73:b3:04:37:95:5d:79:db:99:91:
44:24:43:72:f7:43:ac:35:4f:c6:57:85:7b:99:70:
32:9d:6d:64:42:9b:0f:ad:ca:76:51:09:1f:32:63:
84:fb:d8:ed:12:2a:0d:55:ce:e7:ab:ad:7d:4c:65:
de:20:c6:11:3e:45:e0:9a:23:57:73:56:c8:00:c1:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:97:07:DC:4C:64:FF:81:A9:A9:61:12:EF:E8:68:76:44:2E:C4:83
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:97:c5:af:e5:aa:ce:88:09:9b:68:b4:98:b8:af:8f:17:e8:
5f:8e:88:c8:16:3c:36:d6:31:1b:c4:9b:ec:70:26:18:50:4c:
5d:bb:84:e6:9c:71:66:11:bc:dd:be:c3:65:cb:5d:94:9a:99:
9d:aa:f8:f9:dd:fb:9f:59:9c:e2:a3:d5:9e:8b:53:de:9d:09:
99:9d:f8:15:2f:08:2f:e9:3a:a6:6f:11:88:7a:f4:df:d6:63:
fb:42:05:ec:4a:5e:95:1a:3e:03:34:0a:b7:e7:3b:c1:98:26:
c1:1f:45:14:f2:18:47:2e:34:d3:85:c3:bf:5c:18:0f:28:ea:
9f:e8:59:26:46:ef:11:03:77:2f:1b:9b:d3:2b:33:fe:d7:f8:
a7:e5:5c:9c:ce:32:22:c8:cd:4b:30:70:f9:df:53:11:ad:dc:
ed:fc:89:c0:cd:b6:f5:67:16:61:04:4d:f5:22:e0:63:99:d2:
d6:af:da:f0:41:76:00:17:92:c1:5f:5c:07:16:16:73:3f:b9:
1e:c2:8b:61:e5:e6:55:99:6d:b1:a0:c9:5b:f7:18:b6:b0:af:
13:04:b7:5d:2a:b7:a9:78:d7:d7:ab:19:52:99:13:1f:46:55:
2b:2b:01:85:8a:be:ac:51:7f:89:52:80:83:50:94:d8:9e:11:
9e:66:27:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2Qvjvtp0t9wbHW7j2/wvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTgxNWJlNzU0N2ViODcwZWI1ZjY0MWQzMGZlNjk2Mzc0
MWM4ZTAwHhcNMjUwNDI3MDgwMDIyWhcNMjUwNDI4MDgwMDIyWjAzMTEwLwYDVQQD
Eyg0NDk3MDdkYzRjNjRmZjgxYTlhOTYxMTJlZmU4Njg3NjQ0MmVjNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtX7U+ooIioDSqCv5qxWCOx8VV3N
uu6T4UbUOPnshXlc23SXFls9I4d21N19/1qYp42ARFNEHxVQ7rLAHwAgPaBEN0tm
d1A9wr3FpD43WcxkOLBhLk93yGIV8sYQQH13rkR5IYoXrufsawy9wPh5kHPs15rQ
EANRI3mA3/R0TE6KxNbmtc0JLOIDqQz9SUmvNZqjHyEPvABUpj0r7QrpxnYlvWsH
DqEa+vnAvhmTR8dvO4jaP2Ep3nOzBDeVXXnbmZFEJENy90OsNU/GV4V7mXAynW1k
QpsPrcp2UQkfMmOE+9jtEioNVc7nq619TGXeIMYRPkXgmiNXc1bIAMGyBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESXB9xMZP+BqalhEu/oaHZELsSDMB8GA1UdIwQY
MBaAFKmoFb51R+uHDrX2QdMP5pY3QcjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEt
MjQzYzVmNGUyZTQwLzEvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEtMjQzYzVmNGUyZTQw
LzEvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5fFr+Wq
zogJm2i0mLivjxfoX46IyBY8NtYxG8Sb7HAmGFBMXbuE5pxxZhG83b7DZctdlJqZ
nar4+d37n1mc4qPVnotT3p0JmZ34FS8IL+k6pm8RiHr039Zj+0IF7EpelRo+AzQK
t+c7wZgmwR9FFPIYRy4004XDv1wYDyjqn+hZJkbvEQN3Lxub0ysz/tf4p+VcnM4y
IsjNSzBw+d9TEa3c7fyJwM229WcWYQRN9SLgY5nS1q/a8EF2ABeSwV9cBxYWcz+5
HsKLYeXmVZltsaDJW/cYtrCvEwS3XSq3qXjX16sZUpkTH0ZVKysBhYq+rFF/iVKA
g1CU2J4RnmYnKg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:06:51 2025 by rpki-client