Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
File: qqbmeSWCHkuHnIA-wKUiRflnOtA.mft (raw, json)
Hash identifier: zyenAtmLa6O3KgAUbVilXFhS4UMo3vmxXsk+CT3t7Qs=
Subject key identifier: 49:E3:07:D1:B6:D1:69:A0:8A:88:8A:67:9A:A0:9B:DE:10:03:99:DD
Authority key identifier: AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
Certificate issuer: /CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Certificate serial: 019685B67AB6ABEDB1956346F29ED7CD95D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
Manifest number: 02B9
Signing time: Wed 30 Apr 2025 08:00:50 +0000
Manifest this update: Wed 30 Apr 2025 08:00:50 +0000
Manifest next update: Thu 01 May 2025 08:00:50 +0000
Files and hashes: 1: qqbmeSWCHkuHnIA-wKUiRflnOtA.crl (hash: 9GwVZJjOkKm5ntNK8vAOpeKwAWH/L0qqJaqr+nDN9AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:7a:b6:ab:ed:b1:95:63:46:f2:9e:d7:cd:95:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Validity
Not Before: Apr 30 08:00:50 2025 GMT
Not After : May 1 08:00:50 2025 GMT
Subject: CN=49e307d1b6d169a08a888a679aa09bde100399dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:21:86:20:1a:d0:77:4e:cc:ef:e2:ae:8e:
ab:21:b3:e2:d2:42:dd:05:14:2d:28:96:63:2a:73:
de:18:14:bf:e3:58:39:34:f1:41:12:35:03:81:36:
05:95:2d:a8:ad:57:2a:6d:8e:4e:cd:6e:92:39:43:
de:5c:7f:e8:4e:f2:9e:bb:0a:a5:fd:3d:20:22:0a:
f8:75:52:57:d1:b9:df:90:11:0b:3a:c2:c2:cd:a9:
fc:e7:8a:24:42:ad:68:ef:bf:4c:cb:98:98:d4:26:
55:a6:d0:aa:c6:58:9c:a7:f7:17:92:67:02:d2:3b:
a3:4b:6e:66:cc:cf:73:03:dd:a7:ae:71:1f:0e:c0:
30:ac:4c:e1:6e:a9:2a:a4:ca:5a:52:5e:59:25:bc:
eb:ba:a5:53:03:3c:a8:58:a6:52:b7:ae:12:ca:a3:
5a:8e:71:23:7f:ea:ee:f4:a5:75:84:70:81:92:df:
ce:56:10:f4:8f:2b:1b:10:18:f7:9b:8c:ea:59:70:
ff:75:6c:54:f8:80:4c:f0:2a:ac:13:8e:24:08:c7:
7e:a2:69:e5:e9:03:75:a7:9b:26:70:b2:59:ea:94:
63:24:95:3b:72:bf:ba:d7:ce:6f:a6:2b:ee:e0:aa:
f7:f1:66:4b:20:73:2f:62:0e:16:8b:6a:7a:2e:08:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:07:D1:B6:D1:69:A0:8A:88:8A:67:9A:A0:9B:DE:10:03:99:DD
X509v3 Authority Key Identifier:
keyid:AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:14:ba:a4:ba:6d:08:db:c1:c9:e5:db:7e:a6:64:a5:b9:
db:1c:7d:f7:45:01:51:e6:c9:4a:42:f8:e2:e3:39:4e:46:48:
a4:1c:73:4d:f4:79:45:e1:00:e9:6a:63:40:13:b7:84:83:e1:
de:d2:f4:4a:6c:5e:dd:96:08:55:14:eb:dc:01:58:c0:6f:c3:
74:18:1c:34:fe:31:d8:d2:a5:4f:56:4a:24:b5:67:16:e1:8b:
a3:56:6f:5d:6a:e1:58:78:31:bd:2d:cb:e1:2f:5f:d9:d7:ef:
b1:43:85:77:9f:87:72:01:ff:11:bd:63:c4:e4:58:17:b0:3c:
55:7c:89:c5:ff:32:2f:0c:b9:5b:cf:06:f2:6b:2f:a8:5f:0e:
c4:c4:f3:50:78:13:39:0e:20:17:89:75:b8:69:f6:85:c7:af:
42:9c:d4:f0:54:2a:14:8b:4e:ca:5d:54:95:7d:93:81:de:64:
fa:ed:58:86:ad:b9:da:b9:1e:fc:de:7f:8c:ad:07:a0:a7:c3:
8f:2f:39:e3:23:89:66:1a:bf:03:b7:43:f4:a1:e8:ac:d3:e8:
33:7a:b3:2c:58:48:e3:49:fa:af:b2:91:9b:53:3b:73:d4:3e:
a6:a4:31:7a:9f:62:4e:ad:88:79:30:18:4b:25:5a:29:b1:5d:
c4:55:47:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFtnq2q+2xlWNG8p7XzZXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYTZlNjc5MjU4MjFlNGI4NzljODAzZWMwYTUyMjQ1Zjk2
NzNhZDAwHhcNMjUwNDMwMDgwMDUwWhcNMjUwNTAxMDgwMDUwWjAzMTEwLwYDVQQD
Eyg0OWUzMDdkMWI2ZDE2OWEwOGE4ODhhNjc5YWEwOWJkZTEwMDM5OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHUhhiAa0HdOzO/iro6rIbPi0kLd
BRQtKJZjKnPeGBS/41g5NPFBEjUDgTYFlS2orVcqbY5OzW6SOUPeXH/oTvKeuwql
/T0gIgr4dVJX0bnfkBELOsLCzan854okQq1o779My5iY1CZVptCqxlicp/cXkmcC
0jujS25mzM9zA92nrnEfDsAwrEzhbqkqpMpaUl5ZJbzruqVTAzyoWKZSt64SyqNa
jnEjf+ru9KV1hHCBkt/OVhD0jysbEBj3m4zqWXD/dWxU+IBM8CqsE44kCMd+omnl
6QN1p5smcLJZ6pRjJJU7cr+6185vpivu4Kr38WZLIHMvYg4Wi2p6LgjxnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnjB9G20WmgioiKZ5qgm94QA5ndMB8GA1UdIwQY
MBaAFKqm5nklgh5Lh5yAPsClIkX5ZzrQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82NGFlNWEtODYyMi00NWUyLTkzMjct
NTEyZjU2NWFjMDExLzEvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy82NGFlNWEtODYyMi00NWUyLTkzMjctNTEyZjU2NWFjMDEx
LzEvcXFibWVTV0NIa3VIbklBLXdLVWlSZmxuT3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwoUuqS6
bQjbwcnl236mZKW52xx990UBUebJSkL44uM5TkZIpBxzTfR5ReEA6WpjQBO3hIPh
3tL0Smxe3ZYIVRTr3AFYwG/DdBgcNP4x2NKlT1ZKJLVnFuGLo1ZvXWrhWHgxvS3L
4S9f2dfvsUOFd5+HcgH/Eb1jxORYF7A8VXyJxf8yLwy5W88G8msvqF8OxMTzUHgT
OQ4gF4l1uGn2hcevQpzU8FQqFItOyl1UlX2Tgd5k+u1Yhq252rke/N5/jK0HoKfD
jy854yOJZhq/A7dD9KHorNPoM3qzLFhI40n6r7KRm1M7c9Q+pqQxep9iTq2IeTAY
SyVaKbFdxFVH8A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:26:14 2025 by rpki-client