Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier: D7sGCujgM5idfWPT6zVKLvOdBetEaXRZpTTovfEzTLY=
Subject key identifier: 39:FB:63:73:4B:90:9F:41:CD:EB:30:7C:42:8D:F2:B9:92:50:7D:EA
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 0196759E63A39ACF36A928E888259AB3B6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number: 14A0
Signing time: Sun 27 Apr 2025 05:00:36 +0000
Manifest this update: Sun 27 Apr 2025 05:00:36 +0000
Manifest next update: Mon 28 Apr 2025 05:00:36 +0000
Files and hashes: 1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=)
2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: Uf1lHOQpZDXqB00V6W0xmVx8BupzektdYYtGevaPTf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:63:a3:9a:cf:36:a9:28:e8:88:25:9a:b3:b6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Apr 27 05:00:36 2025 GMT
Not After : Apr 28 05:00:36 2025 GMT
Subject: CN=39fb63734b909f41cdeb307c428df2b992507dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:1e:2e:27:6c:80:30:e7:56:32:76:32:6e:
90:0d:5a:95:54:94:ef:e0:be:a0:46:f7:a9:bb:af:
64:12:79:f9:da:e4:e8:39:83:41:66:7b:eb:19:75:
ae:e7:67:22:3e:d4:e7:56:eb:35:2a:fb:b5:8d:2c:
36:a6:02:1b:44:bb:43:af:5f:ca:f7:4f:4e:67:b8:
96:71:6b:78:ac:11:8e:d2:9a:d4:91:66:00:40:81:
fc:a3:dc:4f:f4:73:fc:c6:be:98:a1:de:64:93:82:
bb:40:e4:3a:dc:9a:aa:15:e0:de:65:12:8d:84:71:
d2:52:79:0e:45:0a:47:0c:fd:03:50:18:7c:57:fd:
52:a3:6d:e7:19:64:9f:ca:28:e7:39:b2:03:7a:75:
ba:67:2c:42:19:7a:2c:22:d0:81:a3:96:c4:43:54:
92:82:d8:ce:14:84:c9:9f:25:b7:65:7e:b8:bf:4b:
8e:71:f1:fe:b2:a1:21:33:76:c8:89:ad:fe:23:35:
1f:f0:56:6c:32:72:b5:2e:42:89:bc:62:b0:d7:a0:
1f:3f:03:0f:4c:e2:64:3d:61:78:2b:1f:38:33:d4:
1b:08:11:64:08:bf:24:05:b6:50:d1:ff:12:b3:35:
25:52:80:44:37:3d:de:c2:7c:8d:3c:06:17:f5:30:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FB:63:73:4B:90:9F:41:CD:EB:30:7C:42:8D:F2:B9:92:50:7D:EA
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4a:8f:fb:4b:9b:06:18:3f:63:86:96:91:1a:6e:ac:c4:46:
6d:b2:21:1c:0b:22:83:76:c3:84:f3:97:00:d2:01:b2:0c:57:
e0:45:9a:6d:1b:5f:aa:c7:0f:34:37:e5:08:e3:0b:74:4a:4c:
52:53:66:5b:5d:94:3c:b7:72:25:ac:e8:ca:e8:34:3d:d8:c0:
47:61:1b:51:e5:33:c8:fb:37:77:83:37:e0:01:2e:ce:f7:21:
e1:72:69:03:f9:3d:b0:ed:c7:64:53:64:94:4d:0a:39:40:2c:
76:57:be:a4:fa:46:0a:2a:ba:1c:b2:07:a5:d7:27:65:16:f1:
f3:e6:20:50:30:9c:1a:85:ed:0f:34:7d:20:62:91:47:80:f5:
80:68:42:a0:8d:ad:3a:07:3c:c9:71:2c:80:96:70:db:b3:2d:
e4:fc:e3:7e:82:65:2e:da:e0:ea:6d:4a:13:d9:b8:7f:91:2b:
6e:98:bf:30:a2:1a:79:4d:36:83:07:49:eb:8b:b8:9b:55:02:
91:dc:f1:16:4c:9d:13:55:43:d7:74:ee:44:11:57:12:d3:cb:
1f:b7:97:0b:56:1e:a0:ec:76:f2:a4:36:83:06:ac:60:3e:c2:
06:45:4a:36:fc:72:71:79:c5:2c:51:49:64:51:17:93:46:78:
e7:23:cf:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nmOjms82qSjoiCWas7b+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl
MzlhYzYwHhcNMjUwNDI3MDUwMDM2WhcNMjUwNDI4MDUwMDM2WjAzMTEwLwYDVQQD
EygzOWZiNjM3MzRiOTA5ZjQxY2RlYjMwN2M0MjhkZjJiOTkyNTA3ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+4eLidsgDDnVjJ2Mm6QDVqVVJTv
4L6gRvepu69kEnn52uToOYNBZnvrGXWu52ciPtTnVus1Kvu1jSw2pgIbRLtDr1/K
909OZ7iWcWt4rBGO0prUkWYAQIH8o9xP9HP8xr6Yod5kk4K7QOQ63JqqFeDeZRKN
hHHSUnkORQpHDP0DUBh8V/1So23nGWSfyijnObIDenW6ZyxCGXosItCBo5bEQ1SS
gtjOFITJnyW3ZX64v0uOcfH+sqEhM3bIia3+IzUf8FZsMnK1LkKJvGKw16AfPwMP
TOJkPWF4Kx84M9QbCBFkCL8kBbZQ0f8SszUlUoBENz3ewnyNPAYX9TCHmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn7Y3NLkJ9BzeswfEKN8rmSUH3qMB8GA1UdIwQY
MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt
YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm
LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkqP+0ub
Bhg/Y4aWkRpurMRGbbIhHAsig3bDhPOXANIBsgxX4EWabRtfqscPNDflCOMLdEpM
UlNmW12UPLdyJazoyug0PdjAR2EbUeUzyPs3d4M34AEuzvch4XJpA/k9sO3HZFNk
lE0KOUAsdle+pPpGCiq6HLIHpdcnZRbx8+YgUDCcGoXtDzR9IGKRR4D1gGhCoI2t
Ogc8yXEsgJZw27Mt5PzjfoJlLtrg6m1KE9m4f5Erbpi/MKIaeU02gwdJ64u4m1UC
kdzxFkydE1VD13TuRBFXEtPLH7eXC1YeoOx28qQ2gwasYD7CBkVKNvxycXnFLFFJ
ZFEXk0Z45yPPzw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:55 2025 by rpki-client