Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: Q6fdhEMbQTwswFVNOsfVaKUbifhL67nr4iWYLX2ukrU=
Subject key identifier: 67:2A:16:CC:C8:D6:B5:D7:86:8D:0B:40:B3:35:88:88:75:74:84:F5
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 0196760C02E59245B94A933C197A3FFD33C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1519
Signing time: Sun 27 Apr 2025 07:00:20 +0000
Manifest this update: Sun 27 Apr 2025 07:00:20 +0000
Manifest next update: Mon 28 Apr 2025 07:00:20 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: QYJH0k/LozIOoniI29DGSxGmQearYLppbzJIao3FGiA=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:02:e5:92:45:b9:4a:93:3c:19:7a:3f:fd:33:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Apr 27 07:00:20 2025 GMT
Not After : Apr 28 07:00:20 2025 GMT
Subject: CN=672a16ccc8d6b5d7868d0b40b3358888757484f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:30:3c:97:11:2d:f2:93:29:8b:dd:cf:96:
43:9f:ba:71:bc:58:61:7b:af:a4:2e:34:08:e3:b4:
be:bd:34:e6:28:e3:c5:b6:08:1a:b6:e0:7a:85:e7:
21:26:8f:c6:70:77:ba:64:a9:dc:b8:aa:07:c1:4f:
29:38:0f:7a:32:39:83:05:78:a7:40:33:6a:21:66:
20:3b:0c:27:bd:62:fa:29:90:ee:66:00:08:7f:91:
03:4c:25:4d:ad:e5:98:86:12:25:85:3c:8d:39:45:
76:b3:84:ba:41:aa:da:cc:43:ed:20:bc:df:5f:15:
45:36:28:ff:0f:04:53:9e:38:a2:39:f1:ba:52:c2:
8e:e8:95:44:4c:f8:c7:44:3e:c7:60:8c:d2:9a:b3:
28:73:21:f4:7f:e3:4e:31:ba:33:bd:6a:33:d9:c0:
36:61:bb:3f:de:71:de:12:71:47:db:9f:16:77:ba:
cb:53:08:e1:a3:ea:b0:a0:cc:7c:2f:6d:86:a3:b0:
d0:6c:0a:dd:87:38:75:0e:39:24:0a:f5:af:4d:15:
bd:97:6b:80:9c:b2:72:d9:2b:1c:ed:d7:db:c6:8b:
51:99:4b:fc:55:0e:07:e7:f9:37:e6:f2:82:df:36:
c2:24:45:78:d0:83:43:99:07:dd:5e:ef:b0:5f:fa:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:16:CC:C8:D6:B5:D7:86:8D:0B:40:B3:35:88:88:75:74:84:F5
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:43:1c:c4:56:9d:76:08:9b:cf:41:37:0e:12:67:6c:9b:0d:
cf:38:c2:cc:2b:1f:c8:5c:c5:e6:dc:74:dc:d3:36:ce:61:9c:
5e:5e:05:16:a9:d3:73:46:83:34:c6:94:b5:54:dd:29:0f:d9:
ca:b1:6b:db:c9:63:ea:2c:0c:7e:f7:60:b6:9b:8b:0d:76:bf:
73:f8:6f:ca:c9:24:55:05:89:2b:c7:c7:34:f9:23:01:a0:fe:
da:86:df:7c:00:91:48:f6:a6:b3:e6:ff:e6:0e:92:16:2b:85:
85:b1:af:8d:bf:61:45:f3:6b:50:92:80:c0:89:16:98:a3:3c:
cb:bc:65:33:b3:9c:13:fd:24:a3:9d:81:2e:81:fa:27:f7:84:
b4:ea:67:27:1e:0f:31:3f:61:ec:60:d5:1b:aa:4d:80:e9:b6:
88:b2:a0:ce:cc:e8:3b:0c:0b:32:f5:19:59:dc:5f:cd:f8:19:
d9:8e:aa:bc:c2:0c:b2:bd:a3:53:cd:a9:f3:02:19:af:7f:02:
3c:3d:6a:87:8a:d4:f4:ea:5a:48:02:94:94:59:92:55:21:03:
f7:db:d1:9e:0e:6c:2c:9b:29:0c:bb:87:bb:1a:60:1d:bf:d3:
91:23:71:0e:0c:f4:4d:cc:f3:98:2f:2f:ac:e5:47:e5:21:72:
f8:fd:64:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DALlkkW5SpM8GXo//TPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjUwNDI3MDcwMDIwWhcNMjUwNDI4MDcwMDIwWjAzMTEwLwYDVQQD
Eyg2NzJhMTZjY2M4ZDZiNWQ3ODY4ZDBiNDBiMzM1ODg4ODc1NzQ4NGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+8wPJcRLfKTKYvdz5ZDn7pxvFhh
e6+kLjQI47S+vTTmKOPFtggatuB6hechJo/GcHe6ZKncuKoHwU8pOA96MjmDBXin
QDNqIWYgOwwnvWL6KZDuZgAIf5EDTCVNreWYhhIlhTyNOUV2s4S6QarazEPtILzf
XxVFNij/DwRTnjiiOfG6UsKO6JVETPjHRD7HYIzSmrMocyH0f+NOMbozvWoz2cA2
Ybs/3nHeEnFH258Wd7rLUwjho+qwoMx8L22Go7DQbArdhzh1DjkkCvWvTRW9l2uA
nLJy2Ssc7dfbxotRmUv8VQ4H5/k35vKC3zbCJEV40INDmQfdXu+wX/pFMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcqFszI1rXXho0LQLM1iIh1dIT1MB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkMcxFad
dgibz0E3DhJnbJsNzzjCzCsfyFzF5tx03NM2zmGcXl4FFqnTc0aDNMaUtVTdKQ/Z
yrFr28lj6iwMfvdgtpuLDXa/c/hvyskkVQWJK8fHNPkjAaD+2obffACRSPams+b/
5g6SFiuFhbGvjb9hRfNrUJKAwIkWmKM8y7xlM7OcE/0ko52BLoH6J/eEtOpnJx4P
MT9h7GDVG6pNgOm2iLKgzszoOwwLMvUZWdxfzfgZ2Y6qvMIMsr2jU82p8wIZr38C
PD1qh4rU9OpaSAKUlFmSVSED99vRng5sLJspDLuHuxpgHb/TkSNxDgz0TczzmC8v
rOVH5SFy+P1k/w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:17 2025 by rpki-client