Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
File: Q9JznRqU2rlXbiF80N-FdyBLIwA.mft (raw, json)
Hash identifier: YfzsB8Woo8esF6UHakGzm7eWvLnbInZ1Q+hHAK1UItw=
Subject key identifier: 74:FF:2D:5A:4C:77:A7:FC:C4:BA:35:67:20:6C:3D:CF:B4:52:C2:3D
Authority key identifier: 43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
Certificate issuer: /CN=43d2739d1a94dab9576e217cd0df8577204b2300
Certificate serial: 01967F7D4293F489C3DC4329AD6F93F44C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
Manifest number: 026B
Signing time: Tue 29 Apr 2025 03:00:37 +0000
Manifest this update: Tue 29 Apr 2025 03:00:37 +0000
Manifest next update: Wed 30 Apr 2025 03:00:37 +0000
Files and hashes: 1: Q9JznRqU2rlXbiF80N-FdyBLIwA.crl (hash: VKRk5hV4giFFwLA7cgkE8YIAvwBv3IFmOkUyUwvitZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:42:93:f4:89:c3:dc:43:29:ad:6f:93:f4:4c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d2739d1a94dab9576e217cd0df8577204b2300
Validity
Not Before: Apr 29 03:00:37 2025 GMT
Not After : Apr 30 03:00:37 2025 GMT
Subject: CN=74ff2d5a4c77a7fcc4ba3567206c3dcfb452c23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:fb:bb:f7:3a:36:88:2f:53:c9:5e:c7:6e:
9b:71:92:7f:83:62:a1:6b:df:cc:5c:d1:ba:82:3b:
41:44:59:57:ff:97:79:ed:8c:b3:06:33:00:08:17:
73:ac:53:7d:51:f3:dd:fb:d1:ab:60:95:7c:43:c9:
54:4e:ed:9f:16:9d:ba:00:2c:9b:1e:db:63:7b:ca:
53:5f:e9:ab:72:b8:e6:69:b9:81:f8:f9:47:d2:a8:
3a:13:af:d9:a0:5f:85:a5:97:e9:30:3b:e1:9a:ca:
e1:d2:99:b8:67:1b:b9:53:be:7b:1f:46:5f:75:1d:
25:06:a6:7a:50:9f:1b:50:04:a3:f0:75:40:64:d5:
70:67:a2:c3:c1:23:be:15:62:fd:ab:7e:a7:cc:ba:
f5:24:cc:03:88:a1:ae:74:12:d9:5c:e8:f6:ea:26:
ca:d9:93:9e:df:aa:bb:6b:d3:d1:23:2c:c7:28:88:
58:5e:04:fe:62:b4:ac:56:64:7e:71:9b:22:5b:ca:
19:b3:ad:61:bf:57:71:be:51:48:cd:93:c1:e1:15:
89:8c:69:98:a8:73:a4:bd:59:c7:48:4f:3f:35:a0:
56:bb:8a:bf:28:ab:50:3a:ec:32:0a:38:d3:75:2b:
02:b2:56:2c:a6:5c:f5:e1:ce:3e:7a:14:ac:17:f2:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:2D:5A:4C:77:A7:FC:C4:BA:35:67:20:6C:3D:CF:B4:52:C2:3D
X509v3 Authority Key Identifier:
keyid:43:D2:73:9D:1A:94:DA:B9:57:6E:21:7C:D0:DF:85:77:20:4B:23:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9JznRqU2rlXbiF80N-FdyBLIwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7fe5c5-9ba2-4e66-ba2e-a44326a39f97/1/Q9JznRqU2rlXbiF80N-FdyBLIwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7d:1a:8a:e0:4a:8e:de:3b:86:c6:e9:3b:e5:88:71:66:87:
5a:a9:7e:e3:74:0a:ed:f3:6c:99:d2:f9:04:d3:54:00:90:cd:
1c:7d:f6:23:b5:8d:f5:9c:ac:5b:14:40:6f:ca:c9:f9:a5:82:
5c:62:48:91:3c:c7:45:af:b0:fb:42:c3:3f:44:e5:b7:77:31:
3c:bd:21:13:3e:a5:90:34:8f:f5:20:94:f8:b3:e5:2e:9e:5c:
ef:7e:cb:67:01:83:99:fa:00:31:2c:92:81:3b:25:ca:80:e4:
e2:e0:e4:aa:5b:33:52:2a:e1:34:dc:72:30:5f:2f:17:6d:36:
b2:8a:4e:50:18:50:3b:61:a7:09:4a:cf:e9:01:9d:83:9c:3b:
54:05:05:cd:69:06:45:2c:ab:34:d7:e4:b4:44:cf:76:f1:35:
84:cb:ab:03:fb:76:11:9a:31:30:7c:d0:5e:62:75:cb:15:92:
3a:85:26:14:ee:80:b6:4d:95:32:b5:2d:a6:6b:0e:5c:72:6c:
65:c2:a7:34:e1:21:c0:b1:02:f4:f4:9b:45:5c:c2:e5:2c:98:
38:bf:d0:72:35:d4:18:42:c9:e4:17:bd:a9:12:bb:be:42:6e:
44:e2:d0:38:95:8d:79:32:9d:ad:82:47:ea:2e:8a:52:17:f2:
41:14:1b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/fUKT9InD3EMprW+T9EwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDI3MzlkMWE5NGRhYjk1NzZlMjE3Y2QwZGY4NTc3MjA0
YjIzMDAwHhcNMjUwNDI5MDMwMDM3WhcNMjUwNDMwMDMwMDM3WjAzMTEwLwYDVQQD
Eyg3NGZmMmQ1YTRjNzdhN2ZjYzRiYTM1NjcyMDZjM2RjZmI0NTJjMjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthf7u/c6NogvU8lex26bcZJ/g2Kh
a9/MXNG6gjtBRFlX/5d57YyzBjMACBdzrFN9UfPd+9GrYJV8Q8lUTu2fFp26ACyb
Httje8pTX+mrcrjmabmB+PlH0qg6E6/ZoF+FpZfpMDvhmsrh0pm4Zxu5U757H0Zf
dR0lBqZ6UJ8bUASj8HVAZNVwZ6LDwSO+FWL9q36nzLr1JMwDiKGudBLZXOj26ibK
2ZOe36q7a9PRIyzHKIhYXgT+YrSsVmR+cZsiW8oZs61hv1dxvlFIzZPB4RWJjGmY
qHOkvVnHSE8/NaBWu4q/KKtQOuwyCjjTdSsCslYsplz14c4+ehSsF/K3uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHT/LVpMd6f8xLo1ZyBsPc+0UsI9MB8GA1UdIwQY
MBaAFEPSc50alNq5V24hfNDfhXcgSyMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlKem5ScVUycmxYYmlGODBOLUZkeUJMSXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ZmU1YzUtOWJhMi00ZTY2LWJhMmUt
YTQ0MzI2YTM5Zjk3LzEvUTlKem5ScVUycmxYYmlGODBOLUZkeUJMSXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ZmU1YzUtOWJhMi00ZTY2LWJhMmUtYTQ0MzI2YTM5Zjk3
LzEvUTlKem5ScVUycmxYYmlGODBOLUZkeUJMSXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATX0aiuBK
jt47hsbpO+WIcWaHWql+43QK7fNsmdL5BNNUAJDNHH32I7WN9ZysWxRAb8rJ+aWC
XGJIkTzHRa+w+0LDP0Tlt3cxPL0hEz6lkDSP9SCU+LPlLp5c737LZwGDmfoAMSyS
gTslyoDk4uDkqlszUirhNNxyMF8vF202sopOUBhQO2GnCUrP6QGdg5w7VAUFzWkG
RSyrNNfktETPdvE1hMurA/t2EZoxMHzQXmJ1yxWSOoUmFO6Atk2VMrUtpmsOXHJs
ZcKnNOEhwLEC9PSbRVzC5SyYOL/QcjXUGELJ5Be9qRK7vkJuROLQOJWNeTKdrYJH
6i6KUhfyQRQbcw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:26 2025 by rpki-client