Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: XFGl52le+hI6AowD01BlouiwIPN5KLOWUxKuSymA2Mc=
Subject key identifier: 9B:62:AF:39:7B:E9:90:66:B1:1E:A9:2B:A4:1B:38:50:45:3E:E5:6F
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 0196789F5DBFB43E256F822BD874C689845F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 059C
Signing time: Sun 27 Apr 2025 19:00:32 +0000
Manifest this update: Sun 27 Apr 2025 19:00:32 +0000
Manifest next update: Mon 28 Apr 2025 19:00:32 +0000
Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: MBPgttst9GNtC3SFv01EgLRoVxY0vB3mfB4SQfnLkV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:5d:bf:b4:3e:25:6f:82:2b:d8:74:c6:89:84:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Apr 27 19:00:32 2025 GMT
Not After : Apr 28 19:00:32 2025 GMT
Subject: CN=9b62af397be99066b11ea92ba41b3850453ee56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:0a:f8:48:ac:6d:03:32:a4:3f:35:7f:0b:
60:da:ce:9d:7e:10:70:89:68:d2:4b:ed:7c:5c:c6:
d5:d1:d2:5e:8d:a7:36:64:9a:69:e6:14:52:65:9a:
8e:8d:87:49:dd:80:0c:d9:49:60:01:d9:f8:08:ca:
ea:7b:a9:f1:ef:13:41:5d:95:31:62:b6:21:06:01:
21:a0:75:00:28:a2:25:86:04:bb:14:82:0e:7e:6b:
93:3f:1f:57:03:cf:3a:11:16:0f:ff:c4:e6:18:c3:
10:bb:c0:6f:7d:ce:b1:94:f5:43:18:9a:4c:a7:4f:
30:8b:0d:ea:f9:05:96:cb:54:71:2f:5f:5b:fc:1e:
a2:90:20:f5:4f:64:30:7b:4b:ef:60:5e:a9:6b:9b:
84:b5:2a:02:eb:e6:5e:c7:25:9e:13:81:15:07:49:
01:bb:b1:e1:95:3a:2b:0b:9f:36:4c:18:33:87:d0:
74:59:08:19:3e:3d:03:3c:ae:08:3f:0b:bb:16:9f:
20:07:c9:93:3c:c3:b1:a6:9c:54:5e:a9:9b:99:8a:
8f:4e:e9:a5:a4:7c:9a:e0:e4:67:05:9f:74:ea:ef:
5f:37:fe:37:fd:c3:92:f5:48:60:b0:69:49:e6:d8:
35:77:17:54:d3:e9:4b:44:e2:41:6b:f9:09:38:0d:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:62:AF:39:7B:E9:90:66:B1:1E:A9:2B:A4:1B:38:50:45:3E:E5:6F
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b6:7e:d9:a0:93:f4:99:36:f8:72:4a:99:0f:28:aa:08:f0:
92:06:09:2a:36:a6:b7:a7:1c:8d:ff:11:76:58:a9:c3:43:4b:
eb:61:4d:67:d0:67:40:69:94:2a:70:65:9a:52:ce:60:2a:03:
87:5b:eb:ce:32:4a:c6:29:8c:08:27:c8:34:49:c1:52:43:cd:
04:8a:20:ba:35:80:14:c3:34:35:26:c6:4f:62:a7:7c:ad:74:
05:e5:ca:bc:05:ce:8d:28:60:71:54:c2:1e:69:3b:a5:88:dd:
2c:b3:9d:d9:f8:85:96:d3:07:20:93:ee:17:30:d2:8d:2a:76:
21:c1:b8:ec:05:0f:65:6a:27:23:fd:02:63:3f:10:e2:1c:83:
a4:8d:41:de:36:54:52:ee:f0:45:26:55:a0:86:b5:7a:85:f4:
ee:67:0c:43:a4:08:4c:1d:bd:f4:5c:90:15:77:3b:b4:e6:16:
4c:2f:fc:74:9b:25:28:e9:3d:fa:cd:ec:85:00:fa:f0:64:3c:
87:e7:2f:e4:d3:54:64:97:53:27:c6:92:3a:26:6f:4b:df:97:
e0:6c:df:49:3d:6f:b8:e7:97:3b:04:44:79:de:4e:bf:fe:9b:
8e:5b:3b:d7:7d:56:9a:a7:e7:7e:50:b5:a7:09:e2:3a:0f:61:
d3:6e:76:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n12/tD4lb4Ir2HTGiYRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj
OGU1NTMwHhcNMjUwNDI3MTkwMDMyWhcNMjUwNDI4MTkwMDMyWjAzMTEwLwYDVQQD
Eyg5YjYyYWYzOTdiZTk5MDY2YjExZWE5MmJhNDFiMzg1MDQ1M2VlNTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlAK+EisbQMypD81fwtg2s6dfhBw
iWjSS+18XMbV0dJejac2ZJpp5hRSZZqOjYdJ3YAM2UlgAdn4CMrqe6nx7xNBXZUx
YrYhBgEhoHUAKKIlhgS7FIIOfmuTPx9XA886ERYP/8TmGMMQu8Bvfc6xlPVDGJpM
p08wiw3q+QWWy1RxL19b/B6ikCD1T2Qwe0vvYF6pa5uEtSoC6+ZexyWeE4EVB0kB
u7HhlTorC582TBgzh9B0WQgZPj0DPK4IPwu7Fp8gB8mTPMOxppxUXqmbmYqPTuml
pHya4ORnBZ906u9fN/43/cOS9UhgsGlJ5tg1dxdU0+lLROJBa/kJOA1qjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtirzl76ZBmsR6pK6QbOFBFPuVvMB8GA1UdIwQY
MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt
ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0
LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbZ+2aCT
9Jk2+HJKmQ8oqgjwkgYJKjamt6ccjf8Rdlipw0NL62FNZ9BnQGmUKnBlmlLOYCoD
h1vrzjJKximMCCfINEnBUkPNBIogujWAFMM0NSbGT2KnfK10BeXKvAXOjShgcVTC
Hmk7pYjdLLOd2fiFltMHIJPuFzDSjSp2IcG47AUPZWonI/0CYz8Q4hyDpI1B3jZU
Uu7wRSZVoIa1eoX07mcMQ6QITB299FyQFXc7tOYWTC/8dJslKOk9+s3shQD68GQ8
h+cv5NNUZJdTJ8aSOiZvS9+X4GzfST1vuOeXOwREed5Ov/6bjls7131WmqfnflC1
pwniOg9h0252gg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:24 2025 by rpki-client