Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: 83+hIUCVHgwqXHprtmt4G+NbhQaikXNbJakFosR4+MA=
Subject key identifier: 85:4D:AA:78:5F:12:99:CE:A6:7B:CE:7D:48:21:61:21:D6:A6:92:0D
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 01967755AEE84715FF89AA35A617509136BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 01FC
Signing time: Sun 27 Apr 2025 13:00:25 +0000
Manifest this update: Sun 27 Apr 2025 13:00:25 +0000
Manifest next update: Mon 28 Apr 2025 13:00:25 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: rPv8zZrbIcwPuHK3uFjrHK+HCjlC1s0miNB2BufvAhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:ae:e8:47:15:ff:89:aa:35:a6:17:50:91:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Apr 27 13:00:25 2025 GMT
Not After : Apr 28 13:00:25 2025 GMT
Subject: CN=854daa785f1299cea67bce7d48216121d6a6920d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:a8:0a:6b:80:21:3c:c7:9c:60:51:95:8c:
7c:fa:97:a8:6e:4b:46:42:16:27:96:ec:eb:71:a9:
9a:f8:a0:9a:9d:44:a7:1d:17:b1:d0:45:3e:06:96:
1e:ca:7f:49:29:77:1a:54:83:3d:b3:c0:15:3a:d2:
ba:4d:75:37:8e:be:50:a1:d7:f4:f6:ad:a6:96:68:
61:1c:75:9d:f1:21:00:0b:93:60:f8:12:87:ee:b3:
5d:50:9b:4e:29:08:f2:73:98:dc:b4:5a:f2:75:ef:
72:a6:1a:8f:2e:94:65:1c:19:a5:39:18:a4:fb:4e:
46:a1:e6:05:e4:43:d2:12:9b:06:b5:3b:84:18:51:
ce:55:a5:6f:63:aa:fb:bb:19:e5:ba:25:ad:23:03:
8c:9b:b3:91:9a:3f:17:c5:a8:16:8a:0c:a8:fe:0a:
7e:fd:1c:2a:ad:d2:77:18:66:a3:34:ad:ed:5c:28:
51:a5:5f:3f:be:0b:ab:e6:54:5e:ee:10:8a:b1:64:
d7:1b:69:d4:95:1f:66:f9:0b:b1:dc:bb:51:01:b2:
3d:e4:11:78:27:0f:6b:1e:4d:6b:8b:60:19:ff:99:
74:4c:16:68:31:3c:c3:9e:07:0c:38:9e:11:7f:fd:
c1:f7:f6:84:b4:fb:6f:df:60:1a:65:48:15:78:c1:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:AA:78:5F:12:99:CE:A6:7B:CE:7D:48:21:61:21:D6:A6:92:0D
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:65:37:ca:62:e8:7e:d5:ac:4b:fe:60:a9:e2:88:8d:15:5e:
0c:8e:98:45:c7:a9:b9:7f:12:38:ac:cf:35:34:b6:09:70:9b:
b4:37:24:17:df:ec:a1:27:c1:9c:20:79:5f:68:91:f8:b4:4a:
e0:18:e4:f8:f8:a8:f5:77:94:8f:70:58:eb:97:c5:9f:93:f6:
fe:7c:ad:dd:cc:20:2b:f9:04:cf:56:9c:23:d7:e9:79:93:f3:
5a:5a:6e:49:f8:60:10:5f:96:d9:c8:47:72:0f:4b:61:9c:2d:
8d:e8:fb:89:1e:a0:53:c8:21:e5:07:c1:3f:c1:b7:ca:07:4e:
36:e5:c3:99:d7:d6:7f:99:e8:58:1d:56:b6:16:ae:05:72:67:
c5:c8:66:8e:18:d4:99:08:4f:3f:63:1b:76:69:73:c3:e9:0e:
36:05:40:ef:6d:b8:47:7a:e8:52:86:96:01:e7:af:7b:c1:e7:
f5:5a:c7:31:8c:97:4b:db:7d:ac:07:fa:a6:64:49:20:4b:6b:
d1:61:09:26:f3:b9:7e:d1:0d:e7:a4:21:d9:26:2d:4c:47:64:
2d:48:be:d0:d7:88:8b:25:ef:c4:ff:70:b6:1e:3b:c4:51:8c:
83:68:16:81:03:41:c7:d2:04:dc:2a:bb:36:da:3f:92:f7:35:
96:02:25:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Va7oRxX/iao1phdQkTa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmE2YzA1MDUwYjUwYzcwYjlhMzVkMzQyMzBiN2FjMzA5
ZDRkOWEwHhcNMjUwNDI3MTMwMDI1WhcNMjUwNDI4MTMwMDI1WjAzMTEwLwYDVQQD
Eyg4NTRkYWE3ODVmMTI5OWNlYTY3YmNlN2Q0ODIxNjEyMWQ2YTY5MjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb+oCmuAITzHnGBRlYx8+peobktG
QhYnluzrcama+KCanUSnHRex0EU+BpYeyn9JKXcaVIM9s8AVOtK6TXU3jr5Qodf0
9q2mlmhhHHWd8SEAC5Ng+BKH7rNdUJtOKQjyc5jctFryde9yphqPLpRlHBmlORik
+05GoeYF5EPSEpsGtTuEGFHOVaVvY6r7uxnluiWtIwOMm7ORmj8XxagWigyo/gp+
/RwqrdJ3GGajNK3tXChRpV8/vgur5lRe7hCKsWTXG2nUlR9m+Qux3LtRAbI95BF4
Jw9rHk1ri2AZ/5l0TBZoMTzDngcMOJ4Rf/3B9/aEtPtv32AaZUgVeMFXpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVNqnhfEpnOpnvOfUghYSHWppINMB8GA1UdIwQY
MBaAFEG6bAUFC1DHC5o100Iwt6wwnU2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgt
YjBiODU4YzBmYmE0LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgtYjBiODU4YzBmYmE0
LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWU3ymLo
ftWsS/5gqeKIjRVeDI6YRcepuX8SOKzPNTS2CXCbtDckF9/soSfBnCB5X2iR+LRK
4Bjk+Pio9XeUj3BY65fFn5P2/nyt3cwgK/kEz1acI9fpeZPzWlpuSfhgEF+W2chH
cg9LYZwtjej7iR6gU8gh5QfBP8G3ygdONuXDmdfWf5noWB1WthauBXJnxchmjhjU
mQhPP2Mbdmlzw+kONgVA7224R3roUoaWAeeve8Hn9VrHMYyXS9t9rAf6pmRJIEtr
0WEJJvO5ftEN56Qh2SYtTEdkLUi+0NeIiyXvxP9wth47xFGMg2gWgQNBx9IE3Cq7
Nto/kvc1lgIl8w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:50:14 2025 by rpki-client