Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: pdsibQwI6OrnAECmV+ikupLebwXmDqiyp+kBW6upkLU=
Subject key identifier: 81:A7:0E:0F:A2:15:B4:E4:AF:E1:D2:F6:D4:65:4F:3F:72:DD:0F:76
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 019680903752E15D38C63A0DD032AB51B2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 1224
Signing time: Tue 29 Apr 2025 08:00:56 +0000
Manifest this update: Tue 29 Apr 2025 08:00:56 +0000
Manifest next update: Wed 30 Apr 2025 08:00:56 +0000
Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: W3PLu4R0EjOrTztuFF5/flC7W4eCYrgMbFk3CZ/QLbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:37:52:e1:5d:38:c6:3a:0d:d0:32:ab:51:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Apr 29 08:00:56 2025 GMT
Not After : Apr 30 08:00:56 2025 GMT
Subject: CN=81a70e0fa215b4e4afe1d2f6d4654f3f72dd0f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:d0:52:76:c5:cb:c6:11:35:d3:4d:b8:6a:
d8:6b:13:12:6c:b0:cb:aa:8f:cf:df:a0:cb:78:f5:
af:f8:02:d6:58:b2:38:d0:31:68:9c:3b:24:54:8e:
83:53:d8:50:f1:4b:83:21:1f:5d:24:b4:35:2b:d9:
b2:54:28:aa:dd:1d:bf:c6:83:b3:1a:06:db:d7:07:
c2:dc:3c:9b:a7:54:30:14:38:24:84:06:23:75:cf:
9d:72:8f:f7:66:ff:ca:fd:2e:26:e1:50:83:20:96:
33:46:2e:c1:2f:1b:91:68:19:34:e2:ad:7a:ba:ea:
f9:b5:dd:91:cd:c6:88:12:f6:c1:2b:1e:9b:84:58:
d3:7f:d4:28:26:c0:f7:38:a9:c6:29:bb:55:ae:b6:
fb:03:f7:57:d2:98:68:4b:97:14:16:82:9f:d5:9a:
b0:3c:0c:cc:3f:0b:53:a4:66:b7:a8:ed:1b:70:ed:
bd:08:cb:f5:6d:b9:0f:8b:7a:20:59:ec:a3:9a:9c:
bc:5d:00:2b:25:f4:da:2c:5e:e6:6c:fa:73:a3:73:
a2:81:74:45:e5:a8:e7:aa:10:09:c3:dd:4e:89:dd:
b0:79:c9:26:62:87:57:52:1c:ef:13:64:3b:57:d0:
30:25:55:2e:75:d2:11:65:55:15:e8:9b:83:41:63:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A7:0E:0F:A2:15:B4:E4:AF:E1:D2:F6:D4:65:4F:3F:72:DD:0F:76
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:68:cc:74:f2:3f:08:28:cf:9b:0c:e8:b2:d1:12:7f:b3:9b:
e7:54:b9:bd:15:3f:90:b2:e0:30:40:8f:76:cd:5f:b6:23:a8:
25:84:96:8e:8c:13:88:27:52:48:42:1a:28:7f:55:a2:8a:dc:
65:e5:91:b1:fa:c0:2f:be:59:7f:5c:2b:f1:e4:5e:70:db:f5:
93:ec:c0:41:2d:c8:b0:4c:2e:50:2d:b5:c6:bb:47:8b:42:5f:
11:22:b2:d8:10:3f:17:be:34:90:03:cd:cc:f4:09:9c:d0:05:
da:c1:41:d9:40:9c:36:87:60:49:e3:7d:b7:05:66:46:7f:a2:
5d:04:6a:12:e1:28:e3:3d:27:06:74:f9:88:8c:28:65:15:ca:
0d:09:90:bc:72:be:53:f2:dd:a3:29:86:91:76:27:3d:7a:a2:
51:10:b4:ed:bd:e3:44:5b:83:8b:47:51:63:d0:01:30:e4:b4:
70:ee:40:ab:03:43:9b:8f:f3:81:6e:ce:7d:54:42:c6:95:b3:
1b:d2:65:19:fe:9f:e0:6b:00:96:d2:99:69:09:cc:62:fa:9d:
6e:27:7c:c4:c9:66:d9:4d:4e:c1:be:7c:9a:0a:d3:c4:7a:c9:
fb:c8:d7:07:98:5a:60:49:76:0e:34:9d:c5:7b:c0:be:62:f1:
56:07:29:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAkDdS4V04xjoN0DKrUbK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTg0OTZiOGQxZGQ4MjViNDg3MDM4ZmI4N2NhMTk5YjEz
YjkzZGYwHhcNMjUwNDI5MDgwMDU2WhcNMjUwNDMwMDgwMDU2WjAzMTEwLwYDVQQD
Eyg4MWE3MGUwZmEyMTViNGU0YWZlMWQyZjZkNDY1NGYzZjcyZGQwZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9fQUnbFy8YRNdNNuGrYaxMSbLDL
qo/P36DLePWv+ALWWLI40DFonDskVI6DU9hQ8UuDIR9dJLQ1K9myVCiq3R2/xoOz
Ggbb1wfC3Dybp1QwFDgkhAYjdc+dco/3Zv/K/S4m4VCDIJYzRi7BLxuRaBk04q16
uur5td2RzcaIEvbBKx6bhFjTf9QoJsD3OKnGKbtVrrb7A/dX0phoS5cUFoKf1Zqw
PAzMPwtTpGa3qO0bcO29CMv1bbkPi3ogWeyjmpy8XQArJfTaLF7mbPpzo3OigXRF
5ajnqhAJw91Oid2weckmYodXUhzvE2Q7V9AwJVUuddIRZVUV6JuDQWOk8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGnDg+iFbTkr+HS9tRlTz9y3Q92MB8GA1UdIwQY
MBaAFKiYSWuNHdgltIcDj7h8oZmxO5PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUt
MzY4NzhmNjU3ZTEyLzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUtMzY4NzhmNjU3ZTEy
LzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWjMdPI/
CCjPmwzostESf7Ob51S5vRU/kLLgMECPds1ftiOoJYSWjowTiCdSSEIaKH9Voorc
ZeWRsfrAL75Zf1wr8eRecNv1k+zAQS3IsEwuUC21xrtHi0JfESKy2BA/F740kAPN
zPQJnNAF2sFB2UCcNodgSeN9twVmRn+iXQRqEuEo4z0nBnT5iIwoZRXKDQmQvHK+
U/LdoymGkXYnPXqiURC07b3jRFuDi0dRY9ABMOS0cO5AqwNDm4/zgW7OfVRCxpWz
G9JlGf6f4GsAltKZaQnMYvqdbid8xMlm2U1Owb58mgrTxHrJ+8jXB5haYEl2DjSd
xXvAvmLxVgcpaQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:29:48 2025 by rpki-client