Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: byAvukwb7oi79bQvK5r6ERqDxdjY43g30X69EWG2oXg=
Subject key identifier: 5B:D6:D3:EC:A3:3E:F5:3C:28:29:41:B7:76:24:8F:C0:C8:59:1F:BF
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 01968390A20617FD7C7E3449C9F14FF49951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0C4C
Signing time: Tue 29 Apr 2025 22:00:16 +0000
Manifest this update: Tue 29 Apr 2025 22:00:16 +0000
Manifest next update: Wed 30 Apr 2025 22:00:16 +0000
Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=)
2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: 5pJQkLzGmP/j++2HduTyXh/X9VfXIvZfIkVHyLQC0S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:a2:06:17:fd:7c:7e:34:49:c9:f1:4f:f4:99:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Apr 29 22:00:16 2025 GMT
Not After : Apr 30 22:00:16 2025 GMT
Subject: CN=5bd6d3eca33ef53c282941b776248fc0c8591fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:6f:1b:f4:85:cf:57:46:5b:51:34:36:ba:
be:6e:81:38:52:d9:a0:6d:d5:81:5d:5b:df:d1:e5:
59:7c:8a:88:e5:ad:f7:49:54:67:fb:80:42:6b:fc:
8c:85:bc:79:bd:8b:49:b6:05:0e:c2:b2:a5:18:b4:
c6:b4:3a:3f:8e:1a:b6:5a:b1:60:80:2d:f4:7c:ba:
3b:97:91:ce:09:19:89:0e:64:dd:4d:1c:8d:82:1a:
58:47:ce:69:4d:92:d1:d2:ba:fe:c6:d3:4f:fb:26:
80:f5:de:c4:f0:06:de:59:bd:26:a4:12:65:08:89:
b8:5a:3d:0d:4f:17:4b:65:39:75:43:a8:f9:ab:52:
5f:73:63:d6:c5:88:bb:1d:8a:4b:11:ee:3b:bf:27:
26:52:03:aa:50:dc:49:9c:1a:d8:e8:60:4a:d5:f1:
fc:bc:5e:88:52:82:ef:62:69:b9:b0:fc:57:62:46:
a0:90:30:4b:04:25:3e:a3:83:1d:8b:98:9e:dd:81:
26:b2:c0:97:92:af:99:6d:e6:6f:04:79:2a:2c:84:
9c:c4:69:47:85:aa:ad:14:da:33:97:7a:d6:d5:3f:
d2:19:d9:f7:35:9a:46:58:45:c7:a3:c5:e2:e0:b9:
e5:dd:0a:10:d5:25:a3:1b:be:f1:fb:a8:2e:00:30:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:D3:EC:A3:3E:F5:3C:28:29:41:B7:76:24:8F:C0:C8:59:1F:BF
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:97:a1:1e:1a:1d:99:f6:d7:b3:08:6a:ae:ef:6f:d8:07:84:
e8:ab:f0:9c:11:f3:7b:55:de:36:47:b9:ce:0c:75:dd:ce:9e:
a7:ec:46:26:bd:15:61:93:5c:59:87:47:8e:1c:33:12:aa:c0:
37:55:62:8b:34:c3:07:c0:93:bf:fd:7a:2e:9d:2b:06:75:1a:
5c:7f:be:df:27:9c:bb:ad:ff:56:5f:b3:f1:4c:8e:1c:b3:45:
64:24:a0:b9:dd:c3:8b:2c:ce:29:ff:b9:05:79:09:b4:21:24:
6e:a4:f8:ea:03:f4:4b:0c:77:9c:04:86:c2:ca:1e:98:76:38:
73:47:7a:c5:49:2d:f8:04:37:61:e7:26:b2:77:b0:95:32:3d:
68:7e:e7:5a:3d:0f:54:30:98:45:7c:df:be:41:2c:a4:e0:f9:
e4:75:da:1a:1f:46:34:0e:0a:21:9a:b9:f9:37:44:be:06:d8:
c3:ae:e6:a9:a8:2a:5d:f1:1f:46:6e:70:f9:cb:b8:8b:36:88:
72:e8:14:ea:d5:b9:fc:fb:8b:8d:12:96:42:79:4a:8a:f2:66:
f4:f2:19:9e:65:ef:68:e7:65:d2:cf:d1:24:77:e4:0f:31:bb:
b8:ff:68:60:8d:ac:97:29:b9:b2:d0:7f:67:7c:1f:f8:45:bd:
64:8c:e7:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkKIGF/18fjRJyfFP9JlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZmMzkzMzUwYzc3NTk4YzEyMWFjZDNjOTJmNzA0ODU3
NmVmODkwHhcNMjUwNDI5MjIwMDE2WhcNMjUwNDMwMjIwMDE2WjAzMTEwLwYDVQQD
Eyg1YmQ2ZDNlY2EzM2VmNTNjMjgyOTQxYjc3NjI0OGZjMGM4NTkxZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+JvG/SFz1dGW1E0Nrq+boE4Utmg
bdWBXVvf0eVZfIqI5a33SVRn+4BCa/yMhbx5vYtJtgUOwrKlGLTGtDo/jhq2WrFg
gC30fLo7l5HOCRmJDmTdTRyNghpYR85pTZLR0rr+xtNP+yaA9d7E8AbeWb0mpBJl
CIm4Wj0NTxdLZTl1Q6j5q1Jfc2PWxYi7HYpLEe47vycmUgOqUNxJnBrY6GBK1fH8
vF6IUoLvYmm5sPxXYkagkDBLBCU+o4Mdi5ie3YEmssCXkq+ZbeZvBHkqLIScxGlH
haqtFNozl3rW1T/SGdn3NZpGWEXHo8Xi4Lnl3QoQ1SWjG77x+6guADDBfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvW0+yjPvU8KClBt3Ykj8DIWR+/MB8GA1UdIwQY
MBaAFKjG85M1DHdZjBIazTyS9wSFdu+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3Nzct
YzZiY2EwMWIyZmY4LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3NzctYzZiY2EwMWIyZmY4
LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpehHhod
mfbXswhqru9v2AeE6KvwnBHze1XeNke5zgx13c6ep+xGJr0VYZNcWYdHjhwzEqrA
N1ViizTDB8CTv/16Lp0rBnUaXH++3yecu63/Vl+z8UyOHLNFZCSgud3DiyzOKf+5
BXkJtCEkbqT46gP0Swx3nASGwsoemHY4c0d6xUkt+AQ3YecmsnewlTI9aH7nWj0P
VDCYRXzfvkEspOD55HXaGh9GNA4KIZq5+TdEvgbYw67mqagqXfEfRm5w+cu4izaI
cugU6tW5/PuLjRKWQnlKivJm9PIZnmXvaOdl0s/RJHfkDzG7uP9oYI2slym5stB/
Z3wf+EW9ZIzngQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:36:50 2025 by rpki-client