Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
File: QnbajwSHyFCAm0qYcoysIXKycD0.mft (raw, json)
Hash identifier: S1ji0XdzY+ni7u3ix896xIwSMT75G7PQtD7CIxwszwQ=
Subject key identifier: C4:90:DA:D0:EE:1E:32:78:BD:65:66:4B:1A:1E:21:75:FC:F0:3E:B2
Authority key identifier: 42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
Certificate issuer: /CN=4276da8f0487c850809b4a98728cac2172b2703d
Certificate serial: 019683916659C8A0C1A7E20C1B25A60F1BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 22:01:06 +0000
Manifest this update: Tue 29 Apr 2025 22:01:06 +0000
Manifest next update: Wed 30 Apr 2025 22:01:06 +0000
Files and hashes: 1: QnbajwSHyFCAm0qYcoysIXKycD0.crl (hash: 32TfR7aD5Xf/RZc4XqXlFZ5cqZt/CJah8Bm6Mlu/7Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:66:59:c8:a0:c1:a7:e2:0c:1b:25:a6:0f:1b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4276da8f0487c850809b4a98728cac2172b2703d
Validity
Not Before: Apr 29 22:01:06 2025 GMT
Not After : Apr 30 22:01:06 2025 GMT
Subject: CN=c490dad0ee1e3278bd65664b1a1e2175fcf03eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:22:0b:7f:68:4b:d9:b6:3c:02:ba:ba:02:75:
f0:2e:da:34:9f:39:50:b4:a9:9b:b8:bf:04:50:98:
02:5d:50:df:5b:de:f7:04:e3:cf:4c:13:c8:ff:39:
2f:f4:26:f7:4d:fd:4c:51:98:b4:b9:b7:4d:7f:8c:
f6:f4:df:1c:0e:85:06:ce:41:28:61:78:46:c6:66:
fe:9c:c2:5e:d8:b2:2b:05:64:33:fe:ae:cd:29:b0:
c4:fe:bd:1f:de:8e:78:1a:71:7e:ce:0d:e1:4c:8a:
81:43:18:b5:80:af:63:4e:3c:fd:2f:90:0a:9b:ff:
5f:5e:bf:ee:62:06:32:e8:6e:33:62:7f:f3:37:7f:
b6:f6:8c:c2:c4:69:80:8d:7b:f6:3b:03:47:51:30:
56:90:76:b6:85:12:6b:d9:f6:02:ac:11:7f:21:b5:
11:ce:88:e0:68:b1:61:00:0d:4b:94:51:63:ae:07:
fc:0e:dd:16:95:c7:f2:f4:75:1d:0f:f4:ef:54:ed:
fd:0e:24:7a:72:e6:94:63:ea:95:81:4e:f0:d7:a5:
a7:35:e3:bb:c8:7b:21:40:26:34:b4:b5:ce:f8:51:
d6:07:7c:a7:14:a1:32:d0:04:bc:cb:70:b4:54:56:
86:83:65:51:c5:30:08:c9:a9:30:3e:8b:4c:d2:3d:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:90:DA:D0:EE:1E:32:78:BD:65:66:4B:1A:1E:21:75:FC:F0:3E:B2
X509v3 Authority Key Identifier:
keyid:42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e7:1c:6f:71:bc:5b:c3:57:82:cd:1f:df:de:85:b5:b8:f4:
0a:8c:d9:65:a4:af:ce:6a:10:e5:10:d7:c1:ec:2e:d2:fc:90:
d8:ee:cc:ed:8a:56:b2:52:cc:8d:4b:07:32:bb:64:78:07:34:
95:da:b1:81:3b:d5:fe:01:d0:64:10:14:73:2a:68:a7:96:96:
c1:29:65:6e:d9:39:e4:4e:22:f0:5b:58:0e:f5:91:b6:bc:33:
e4:c1:62:2d:e0:ec:34:22:5b:31:43:e2:18:46:f9:a4:9f:6e:
c6:2a:cb:d7:72:c1:30:f9:2a:91:88:c6:df:39:29:f1:a7:8b:
95:8d:c1:7e:4b:24:00:e8:fe:78:7c:9e:40:73:a1:f5:10:76:
16:cf:4f:34:98:60:1f:20:12:94:4a:83:7a:73:3a:9a:a0:71:
ca:53:f4:a7:0d:e9:6b:a9:96:5d:10:8e:63:ad:82:86:c4:48:
a7:96:42:18:30:5e:31:6b:a4:46:55:c2:c0:1c:f4:45:41:32:
0e:3b:ac:5e:28:b3:0f:ab:12:61:23:71:30:38:d3:81:ec:de:
72:b3:56:31:e9:43:fa:71:4a:7c:d9:b2:da:1d:28:9e:2a:b4:
04:56:d8:0e:cf:36:62:4e:4d:08:b9:c8:b6:c7:d5:fb:41:cc:
55:47:8c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkWZZyKDBp+IMGyWmDxu2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNzZkYThmMDQ4N2M4NTA4MDliNGE5ODcyOGNhYzIxNzJi
MjcwM2QwHhcNMjUwNDI5MjIwMTA2WhcNMjUwNDMwMjIwMTA2WjAzMTEwLwYDVQQD
EyhjNDkwZGFkMGVlMWUzMjc4YmQ2NTY2NGIxYTFlMjE3NWZjZjAzZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCILf2hL2bY8Arq6AnXwLto0nzlQ
tKmbuL8EUJgCXVDfW973BOPPTBPI/zkv9Cb3Tf1MUZi0ubdNf4z29N8cDoUGzkEo
YXhGxmb+nMJe2LIrBWQz/q7NKbDE/r0f3o54GnF+zg3hTIqBQxi1gK9jTjz9L5AK
m/9fXr/uYgYy6G4zYn/zN3+29ozCxGmAjXv2OwNHUTBWkHa2hRJr2fYCrBF/IbUR
zojgaLFhAA1LlFFjrgf8Dt0Wlcfy9HUdD/TvVO39DiR6cuaUY+qVgU7w16WnNeO7
yHshQCY0tLXO+FHWB3ynFKEy0AS8y3C0VFaGg2VRxTAIyakwPotM0j3EEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSQ2tDuHjJ4vWVmSxoeIXX88D6yMB8GA1UdIwQY
MBaAFEJ22o8Eh8hQgJtKmHKMrCFysnA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5iYWp3U0h5RkNBbTBxWWNveXNJWEt5Y0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lYTEwNzItZjMyNi00ZTUxLWFkZjEt
YmE5YjBmYTFiN2EyLzEvUW5iYWp3U0h5RkNBbTBxWWNveXNJWEt5Y0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lYTEwNzItZjMyNi00ZTUxLWFkZjEtYmE5YjBmYTFiN2Ey
LzEvUW5iYWp3U0h5RkNBbTBxWWNveXNJWEt5Y0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeccb3G8
W8NXgs0f396Ftbj0CozZZaSvzmoQ5RDXwewu0vyQ2O7M7YpWslLMjUsHMrtkeAc0
ldqxgTvV/gHQZBAUcypop5aWwSllbtk55E4i8FtYDvWRtrwz5MFiLeDsNCJbMUPi
GEb5pJ9uxirL13LBMPkqkYjG3zkp8aeLlY3BfkskAOj+eHyeQHOh9RB2Fs9PNJhg
HyASlEqDenM6mqBxylP0pw3pa6mWXRCOY62ChsRIp5ZCGDBeMWukRlXCwBz0RUEy
DjusXiizD6sSYSNxMDjTgezecrNWMelD+nFKfNmy2h0oniq0BFbYDs82Yk5NCLnI
tsfV+0HMVUeM7g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:10:28 2025 by rpki-client