Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: P8chX01zynNfSt8w0moFBj6NqDhWh7guJCkDsw6gjb8=
Subject key identifier: A5:6B:B8:15:0F:F0:90:A4:98:03:EF:FF:ED:64:7F:E5:D8:B9:BF:B6
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 019683910498B0AEEF7A8159318607BCED9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 22:00:41 +0000
Manifest this update: Tue 29 Apr 2025 22:00:41 +0000
Manifest next update: Wed 30 Apr 2025 22:00:41 +0000
Files and hashes: 1: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: J0+1kdkfii0N+3bPUtWqEVdGXyrwGD5T3eM3/QEzX5w=)
2: tcbbFJDqhBbRkJh6NDYN55iLfDE.roa (hash: vKEQ9e0Db9WBNbap5GYKx4PxGXK/ovDmh/isyYRiZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:04:98:b0:ae:ef:7a:81:59:31:86:07:bc:ed:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Apr 29 22:00:41 2025 GMT
Not After : Apr 30 22:00:41 2025 GMT
Subject: CN=a56bb8150ff090a49803efffed647fe5d8b9bfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:e5:e8:8f:3a:19:5c:10:f2:89:80:c3:37:
16:9a:32:48:62:2c:14:89:9b:27:24:da:cb:f3:4d:
90:38:5a:1b:ea:1e:cb:6b:8d:9d:6f:76:4d:73:68:
d7:42:a6:d6:cb:61:86:75:0d:bf:56:07:d7:87:e6:
f7:d4:98:e9:ff:9c:2d:1e:35:a8:a4:5b:8f:c9:e1:
7e:e5:4d:96:ac:34:58:a0:f3:d7:47:eb:67:a5:5f:
ee:24:e5:90:8f:bb:51:81:48:2b:28:0d:2c:48:ba:
a5:7d:9c:1b:26:97:74:55:00:ef:5b:b7:03:fc:f6:
ad:f3:76:51:75:63:6c:1c:46:33:0d:e8:e8:1d:d7:
67:1d:d1:3e:b0:7d:83:20:b2:ae:85:0c:3e:44:3a:
14:8e:5d:c0:fe:dd:13:e3:01:cc:02:73:6c:05:aa:
cb:45:a5:57:eb:1d:23:30:51:14:ca:97:0f:60:88:
b9:31:13:c3:72:84:99:38:a1:31:0d:f9:11:a7:4a:
eb:ee:cb:54:4e:5f:90:2a:33:35:20:d6:67:bb:ab:
b4:68:cf:4d:a8:f6:8f:44:8b:1c:31:38:1e:a8:d1:
1e:1c:18:95:b4:4c:c7:20:96:da:73:01:fa:8b:0f:
68:2a:f8:33:ed:a9:68:6f:6f:5c:3b:50:60:ee:4e:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6B:B8:15:0F:F0:90:A4:98:03:EF:FF:ED:64:7F:E5:D8:B9:BF:B6
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:eb:73:7f:2f:96:af:9a:5a:f1:93:59:dd:a7:d4:59:6f:87:
2c:f0:61:d2:d7:9f:c2:3f:37:a8:9d:4e:45:07:1e:d0:f1:a3:
16:22:c8:42:09:b6:15:3e:ea:e8:30:c6:e0:2e:3a:3a:6d:2c:
6f:e8:5a:42:86:88:42:c1:c2:2e:27:72:6f:2a:51:63:5d:af:
bd:7e:6b:67:f8:dc:6a:a6:83:cb:71:0c:54:4b:20:e6:a7:2f:
aa:e0:8e:77:45:89:c9:06:e7:bd:f6:a9:d5:be:96:d9:9a:ef:
87:81:5e:1c:97:50:cf:5d:9b:e9:db:bc:f7:2e:25:e8:6a:76:
50:46:2c:cb:c5:d9:05:f5:90:cb:a0:55:43:ef:9b:2c:d3:e8:
73:b8:db:9a:3a:5f:6d:7d:ef:bc:dc:9a:e1:04:fd:18:9f:7f:
67:8c:76:43:b9:ad:f4:65:f7:b1:39:e4:ae:ae:ad:41:b4:27:
ea:55:07:a2:3a:24:40:a5:a2:62:62:ef:32:c8:ab:7a:8d:af:
de:82:2f:5b:70:91:a7:36:06:fc:63:62:5f:a4:aa:b1:b0:a4:
92:ab:1b:1c:3c:97:50:46:21:07:29:bc:9f:4d:57:c6:4f:09:
e9:1f:94:80:4d:31:dc:fe:3d:36:6c:b8:fb:e1:a7:89:73:04:
14:76:13:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkQSYsK7veoFZMYYHvO2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDQ3MWE2NmY3OTA3MTA3ZTQ1MzQ3MTZiZmE0MjA4ZDQw
Njk2OWYwHhcNMjUwNDI5MjIwMDQxWhcNMjUwNDMwMjIwMDQxWjAzMTEwLwYDVQQD
EyhhNTZiYjgxNTBmZjA5MGE0OTgwM2VmZmZlZDY0N2ZlNWQ4YjliZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpzl6I86GVwQ8omAwzcWmjJIYiwU
iZsnJNrL802QOFob6h7La42db3ZNc2jXQqbWy2GGdQ2/VgfXh+b31Jjp/5wtHjWo
pFuPyeF+5U2WrDRYoPPXR+tnpV/uJOWQj7tRgUgrKA0sSLqlfZwbJpd0VQDvW7cD
/Pat83ZRdWNsHEYzDejoHddnHdE+sH2DILKuhQw+RDoUjl3A/t0T4wHMAnNsBarL
RaVX6x0jMFEUypcPYIi5MRPDcoSZOKExDfkRp0rr7stUTl+QKjM1INZnu6u0aM9N
qPaPRIscMTgeqNEeHBiVtEzHIJbacwH6iw9oKvgz7alob29cO1Bg7k5ynwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVruBUP8JCkmAPv/+1kf+XYub+2MB8GA1UdIwQY
MBaAFKhEcaZveQcQfkU0cWv6QgjUBpafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84NWQwOTctMDE1My00OTAyLWFmN2Et
YjhjMzMxYTg0OGFhLzEvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84NWQwOTctMDE1My00OTAyLWFmN2EtYjhjMzMxYTg0OGFh
LzEvcUVSeHBtOTVCeEItUlRSeGFfcENDTlFHbHA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+tzfy+W
r5pa8ZNZ3afUWW+HLPBh0tefwj83qJ1ORQce0PGjFiLIQgm2FT7q6DDG4C46Om0s
b+haQoaIQsHCLidybypRY12vvX5rZ/jcaqaDy3EMVEsg5qcvquCOd0WJyQbnvfap
1b6W2Zrvh4FeHJdQz12b6du89y4l6Gp2UEYsy8XZBfWQy6BVQ++bLNPoc7jbmjpf
bX3vvNya4QT9GJ9/Z4x2Q7mt9GX3sTnkrq6tQbQn6lUHojokQKWiYmLvMsireo2v
3oIvW3CRpzYG/GNiX6SqsbCkkqsbHDyXUEYhBym8n01Xxk8J6R+UgE0x3P49Nmy4
++GniXMEFHYTeA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:24:41 2025 by rpki-client