Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: aRRTdK3kDeh4nn4Mxi/PnP6xFtzEqMMlGSyFhgRHIwI=
Subject key identifier: C6:36:2A:63:49:E5:BC:9F:E5:33:12:0B:DB:CC:AE:11:15:06:9B:C9
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019679E93009044C71C901446331DB510177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 01:00:47 +0000
Manifest this update: Mon 28 Apr 2025 01:00:47 +0000
Manifest next update: Tue 29 Apr 2025 01:00:47 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: TEBaODlmDCqhNdveSNP6xcEtL-0.roa (hash: Ni+drEe1sF+jcV53LsQ0wrDEiq7Vue9pJpbJAT7gLcE=)
3: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: 75tml9clpTR6dcysjpNOXAMtrAJPHJb1mcWGaoAPnCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:30:09:04:4c:71:c9:01:44:63:31:db:51:01:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Apr 28 01:00:47 2025 GMT
Not After : Apr 29 01:00:47 2025 GMT
Subject: CN=c6362a6349e5bc9fe533120bdbccae1115069bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:f5:c4:66:46:e9:ce:b9:9d:a4:be:1e:79:
34:8c:da:f7:9b:8b:44:3a:10:76:5f:53:9c:96:9c:
20:92:62:d7:4f:2b:3d:f1:d6:ec:04:34:22:e0:fa:
67:3b:c6:47:07:61:db:af:2a:20:76:ed:8a:fe:f1:
df:66:99:46:50:33:71:87:34:17:11:ef:fd:5e:ac:
b2:98:41:f3:ec:e7:8a:2d:2c:08:51:d4:3e:4e:2f:
87:9f:7b:aa:c6:9d:d3:d7:1a:9d:df:c7:0a:a4:bf:
b8:97:f7:46:a0:be:54:0c:f9:bc:7e:87:76:43:43:
8a:cf:73:0a:9d:20:05:47:b4:08:d3:ea:59:e4:f2:
4a:ac:73:fb:60:f9:8e:a0:c6:17:48:12:f9:8b:c1:
85:63:f4:3c:01:15:89:1b:96:c1:53:fa:6f:19:b2:
a6:ce:a1:55:ba:a2:95:c1:f6:97:31:2f:8f:aa:fc:
96:a5:78:60:a5:9b:d4:56:eb:0b:53:8a:f9:57:c3:
53:3d:4a:00:18:7e:9a:d1:ac:2d:eb:a5:f0:05:9f:
d3:f1:89:98:8f:99:fe:86:e1:55:e8:ab:d2:2b:b3:
7f:f4:87:31:4e:13:27:63:7e:0a:23:e3:54:06:58:
96:c6:11:b0:65:39:8e:89:fe:61:92:67:03:85:ea:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:2A:63:49:E5:BC:9F:E5:33:12:0B:DB:CC:AE:11:15:06:9B:C9
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:db:3e:29:43:42:95:29:91:e3:75:f6:09:ba:c3:bf:11:0d:
8b:c6:7a:9a:aa:cc:e1:e7:fd:e8:08:fa:06:6c:fb:ef:2c:cc:
43:e6:4e:49:45:8a:e4:b1:3f:ff:7d:c2:d3:24:62:1a:6b:1f:
7c:3a:52:b5:61:7a:51:a8:f3:34:14:27:5f:b1:48:c6:47:f7:
a9:13:20:29:e4:09:29:9b:64:3e:71:54:2a:bd:6b:d1:b5:9e:
fd:f1:5d:87:d2:62:1c:52:9b:a2:a8:9f:46:f7:67:c4:76:47:
c8:cb:42:cc:12:6b:64:d5:44:2b:58:83:d7:73:2d:4b:b5:ff:
dd:c5:03:08:03:61:cf:38:74:d9:6f:b7:4f:f5:2d:d0:3e:39:
b9:cb:88:c0:ba:57:7d:4d:17:9f:a0:62:33:2a:e2:7c:54:49:
80:0b:81:c9:c7:8a:0e:11:e7:e8:b9:90:da:ff:9c:45:1f:56:
e6:b9:d3:96:5b:6d:db:ae:28:56:db:2d:89:ae:47:8e:16:c0:
f8:c8:28:9c:55:0f:55:59:64:4a:91:01:1e:70:59:8b:b3:92:
da:7c:38:21:32:11:1c:54:15:5d:e0:f8:52:be:54:c2:e0:76:
11:28:5a:d6:6b:8e:bb:46:ca:59:d5:47:ad:93:16:8a:e1:04:
52:12:27:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56TAJBExxyQFEYzHbUQF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw
ZTk0MTgwHhcNMjUwNDI4MDEwMDQ3WhcNMjUwNDI5MDEwMDQ3WjAzMTEwLwYDVQQD
EyhjNjM2MmE2MzQ5ZTViYzlmZTUzMzEyMGJkYmNjYWUxMTE1MDY5YmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOf1xGZG6c65naS+Hnk0jNr3m4tE
OhB2X1OclpwgkmLXTys98dbsBDQi4PpnO8ZHB2Hbryogdu2K/vHfZplGUDNxhzQX
Ee/9XqyymEHz7OeKLSwIUdQ+Ti+Hn3uqxp3T1xqd38cKpL+4l/dGoL5UDPm8fod2
Q0OKz3MKnSAFR7QI0+pZ5PJKrHP7YPmOoMYXSBL5i8GFY/Q8ARWJG5bBU/pvGbKm
zqFVuqKVwfaXMS+PqvyWpXhgpZvUVusLU4r5V8NTPUoAGH6a0awt66XwBZ/T8YmY
j5n+huFV6KvSK7N/9IcxThMnY34KI+NUBliWxhGwZTmOif5hkmcDhepvrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMY2KmNJ5byf5TMSC9vMrhEVBpvJMB8GA1UdIwQY
MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt
NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx
LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNs+KUNC
lSmR43X2CbrDvxENi8Z6mqrM4ef96Aj6Bmz77yzMQ+ZOSUWK5LE//33C0yRiGmsf
fDpStWF6UajzNBQnX7FIxkf3qRMgKeQJKZtkPnFUKr1r0bWe/fFdh9JiHFKboqif
RvdnxHZHyMtCzBJrZNVEK1iD13MtS7X/3cUDCANhzzh02W+3T/Ut0D45ucuIwLpX
fU0Xn6BiMyrifFRJgAuByceKDhHn6LmQ2v+cRR9W5rnTlltt264oVtstia5HjhbA
+MgonFUPVVlkSpEBHnBZi7OS2nw4ITIRHFQVXeD4Ur5UwuB2ESha1muOu0bKWdVH
rZMWiuEEUhInJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:22:22 2025 by rpki-client