Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: Ds6Bp/M72SStSQ1WWinWt1lp/x7bKt0TKYHXlSogZXI=
Subject key identifier: 56:BC:F4:74:61:89:0E:4D:34:70:A0:B8:A3:8D:5F:6B:47:27:72:BC
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 01967567998396D20A71A2349D9660C4AC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 0E37
Signing time: Sun 27 Apr 2025 04:00:45 +0000
Manifest this update: Sun 27 Apr 2025 04:00:45 +0000
Manifest next update: Mon 28 Apr 2025 04:00:45 +0000
Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: H3Di881MUrjo5y+IZ073DlxVIRhLpwFelptCaA4tTIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:99:83:96:d2:0a:71:a2:34:9d:96:60:c4:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Apr 27 04:00:45 2025 GMT
Not After : Apr 28 04:00:45 2025 GMT
Subject: CN=56bcf47461890e4d3470a0b8a38d5f6b472772bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:8a:a3:5f:7a:5e:3a:63:eb:db:84:27:9b:
30:7d:bb:10:07:a5:1a:4e:ba:04:13:d1:13:d2:a2:
19:92:a7:b9:e6:f6:9c:98:58:76:dc:4a:6c:c5:8c:
b6:21:f3:52:81:a9:7b:d3:16:56:bb:05:b2:7c:2f:
a5:c9:68:cb:a7:6f:ce:af:67:39:53:c7:bd:87:f5:
aa:7c:9b:1b:0f:c7:07:d7:4f:11:0b:b1:85:b4:ae:
35:85:14:d9:15:59:9e:31:b1:11:eb:1b:f9:c0:a9:
bd:be:f4:85:18:49:61:fc:85:c6:87:a3:d3:0e:fa:
8c:51:52:35:64:6f:ec:90:c9:da:5c:f8:33:8b:a2:
03:7f:ff:f3:99:ef:d2:af:7d:bb:12:cf:55:ff:5b:
44:ef:ba:26:c8:f1:90:28:23:da:d8:f5:35:d7:b2:
4a:08:c6:17:4d:c4:9e:69:6b:10:ba:ec:34:e0:35:
1c:54:1c:39:0a:42:18:2c:98:fe:0a:ea:53:a9:78:
ff:96:55:c3:e0:9e:83:93:3f:03:4e:d3:08:53:d2:
a0:a7:00:04:73:5a:52:95:e2:12:f8:8b:eb:c4:54:
76:c0:03:9b:99:27:60:82:85:25:ea:06:4f:df:67:
81:a9:8f:6e:90:7a:b6:71:77:67:bc:95:39:d3:e4:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BC:F4:74:61:89:0E:4D:34:70:A0:B8:A3:8D:5F:6B:47:27:72:BC
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e7:f6:df:cb:33:41:29:65:36:55:a1:00:ba:cf:2d:e5:7e:
e4:d4:ee:25:e7:50:a9:a2:38:62:ed:27:da:92:f4:eb:51:d0:
16:6b:06:72:42:5a:23:3c:08:25:b6:5a:57:f3:1a:96:46:95:
f2:b1:aa:c3:d9:23:c4:48:0d:c0:e6:c9:04:27:3e:7b:5f:b6:
92:a9:af:98:c1:1c:18:0b:75:e1:01:2f:aa:b7:2e:3f:31:94:
98:c9:08:ae:24:f6:75:2e:de:ee:7d:45:ad:b5:c8:10:ce:82:
28:98:41:10:ca:f2:f5:be:27:0b:b6:3b:63:5f:d5:8a:2c:ec:
1e:b1:13:6b:44:29:a2:1d:2f:9c:66:f2:a0:06:60:7a:a7:1b:
ca:d4:c5:e9:fd:3b:5c:41:de:90:6b:31:4c:60:bc:cf:6f:c7:
b9:d6:33:86:30:a9:3a:69:22:7c:15:2b:02:3f:c0:d9:bf:7a:
f8:0e:79:31:d7:70:16:c0:5d:5c:1f:9c:42:20:33:55:47:f1:
bb:21:c0:30:cb:29:45:ca:b2:34:20:a6:37:4c:55:e4:5d:4f:
04:98:d2:f0:f6:54:98:75:e4:09:82:54:de:68:ca:50:b3:f3:
96:de:4d:9a:10:12:74:8b:58:52:ac:c1:fe:ba:fd:88:bb:0d:
53:e1:20:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z5mDltIKcaI0nZZgxKxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWMzZjFhOTc5MDNlNzk2MjkyYTJhYzdhNzhkNDFiMWMy
MWRiODUwHhcNMjUwNDI3MDQwMDQ1WhcNMjUwNDI4MDQwMDQ1WjAzMTEwLwYDVQQD
Eyg1NmJjZjQ3NDYxODkwZTRkMzQ3MGEwYjhhMzhkNWY2YjQ3Mjc3MmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv6Ko196Xjpj69uEJ5swfbsQB6Ua
TroEE9ET0qIZkqe55vacmFh23EpsxYy2IfNSgal70xZWuwWyfC+lyWjLp2/Or2c5
U8e9h/WqfJsbD8cH108RC7GFtK41hRTZFVmeMbER6xv5wKm9vvSFGElh/IXGh6PT
DvqMUVI1ZG/skMnaXPgzi6IDf//zme/Sr327Es9V/1tE77omyPGQKCPa2PU117JK
CMYXTcSeaWsQuuw04DUcVBw5CkIYLJj+CupTqXj/llXD4J6Dkz8DTtMIU9KgpwAE
c1pSleIS+IvrxFR2wAObmSdggoUl6gZP32eBqY9ukHq2cXdnvJU50+TpRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFa89HRhiQ5NNHCguKONX2tHJ3K8MB8GA1UdIwQY
MBaAFENcPxqXkD55YpKirHp41BscIduFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEt
ZGJkZWIzZDUzNjBiLzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEtZGJkZWIzZDUzNjBi
LzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoef238sz
QSllNlWhALrPLeV+5NTuJedQqaI4Yu0n2pL061HQFmsGckJaIzwIJbZaV/MalkaV
8rGqw9kjxEgNwObJBCc+e1+2kqmvmMEcGAt14QEvqrcuPzGUmMkIriT2dS7e7n1F
rbXIEM6CKJhBEMry9b4nC7Y7Y1/ViizsHrETa0Qpoh0vnGbyoAZgeqcbytTF6f07
XEHekGsxTGC8z2/HudYzhjCpOmkifBUrAj/A2b96+A55MddwFsBdXB+cQiAzVUfx
uyHAMMspRcqyNCCmN0xV5F1PBJjS8PZUmHXkCYJU3mjKULPzlt5NmhASdItYUqzB
/rr9iLsNU+EgJw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:03:29 2025 by rpki-client