Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: nGUpkwEpIu2WMfgektzGmLkjdhvwowZZr3kPm0Sh/FI=
Subject key identifier: B9:63:5A:87:A8:2E:58:62:23:8F:FF:63:AE:7F:8C:7F:37:B2:60:14
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 019687DB5BFD2535DAA033EEF048F46E48D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 10F3
Signing time: Wed 30 Apr 2025 18:00:22 +0000
Manifest this update: Wed 30 Apr 2025 18:00:22 +0000
Manifest next update: Thu 01 May 2025 18:00:22 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: UDvhx/w1fo4di+KoGKcZJhrj2DupWY/DNZnWi0/zit8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:5b:fd:25:35:da:a0:33:ee:f0:48:f4:6e:48:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Apr 30 18:00:22 2025 GMT
Not After : May 1 18:00:22 2025 GMT
Subject: CN=b9635a87a82e5862238fff63ae7f8c7f37b26014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:d8:77:be:9e:c1:0c:fa:fb:2c:80:6b:da:
25:f9:49:cb:a7:12:a3:8d:62:a9:4b:32:d7:bc:7c:
3d:a9:a0:ef:c6:63:74:52:89:06:db:bc:b6:ef:31:
fc:9e:16:61:66:c8:eb:dd:b5:3a:b8:7b:44:e5:1d:
aa:94:e5:fc:dd:ba:d4:b7:e8:f8:92:57:47:a0:7f:
eb:8a:36:fa:c3:42:e7:11:d2:db:24:67:be:d3:fd:
99:5a:c2:a5:fa:04:d4:8e:5e:9d:46:5f:7c:d4:aa:
10:d7:6d:9b:f7:60:82:cd:fc:b7:90:96:98:4e:db:
d2:0d:e3:d6:c9:7e:d7:51:46:b1:52:50:d7:e4:da:
e3:45:41:86:a3:bd:5e:06:56:37:a5:c1:35:12:c1:
85:ee:54:6a:40:e5:0a:dd:d5:ab:f2:8b:e9:fb:55:
ac:b5:6e:30:28:7f:e6:5f:15:1c:3f:ee:20:dd:f5:
06:7c:3e:c1:a6:de:2e:8a:59:8e:60:6b:94:b8:17:
70:81:41:bc:18:0a:96:bd:09:a5:15:0b:ba:18:cf:
a9:6f:ee:9d:82:a9:72:9d:40:4d:3b:6e:21:3e:82:
6d:89:5f:ec:c4:93:7e:40:f7:b7:4b:ea:6b:2a:0b:
5d:9a:19:ba:0e:17:b8:ec:a6:67:12:e8:df:5c:7f:
04:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:63:5A:87:A8:2E:58:62:23:8F:FF:63:AE:7F:8C:7F:37:B2:60:14
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0e:ce:05:5b:ea:c0:8e:3c:eb:52:c6:e3:15:53:70:c7:95:
e4:a6:c7:68:3c:63:4b:ac:80:44:50:1e:d0:0b:db:c0:77:68:
3f:18:23:50:7b:68:33:ed:0b:51:c9:d9:f8:c4:0a:3c:ed:bd:
38:35:17:6e:ae:cf:36:8c:85:ca:0e:3c:82:f4:80:eb:f1:27:
05:bc:a6:45:52:7d:37:1e:25:db:03:56:84:10:76:c3:bf:e5:
4d:f4:22:60:06:01:8e:36:f4:cb:2d:d7:ca:5c:76:a8:5d:6b:
c8:e7:91:07:56:02:8b:32:57:9f:b8:62:e0:c7:af:f7:90:48:
98:97:a7:0d:79:3e:f4:20:bc:ae:da:aa:d7:68:e8:e6:7a:5f:
0c:e8:7f:39:48:f7:40:6e:ab:0a:d2:1d:b0:80:8b:1e:c8:6d:
3d:69:46:d5:91:78:f4:e6:ef:18:e6:aa:7a:c3:23:f4:6e:99:
82:1f:7e:83:fa:d4:f5:71:9d:01:7b:40:38:dc:72:8e:42:50:
f7:01:85:13:ac:7b:5a:a0:10:a6:45:11:93:9c:b9:e0:e8:62:
e3:79:8d:db:fe:6d:41:d9:33:6b:70:7c:6a:d4:a2:63:20:50:
96:da:71:6d:b0:d5:79:ff:be:b0:7c:93:a3:4c:da:ce:10:9b:
74:c9:11:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH21v9JTXaoDPu8Ej0bkjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZTBiNmQxM2NkMTFmMzYxMTRmYTk4NDAzMzgwNDk0MWM4
MmYxNDMwHhcNMjUwNDMwMTgwMDIyWhcNMjUwNTAxMTgwMDIyWjAzMTEwLwYDVQQD
EyhiOTYzNWE4N2E4MmU1ODYyMjM4ZmZmNjNhZTdmOGM3ZjM3YjI2MDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07zYd76ewQz6+yyAa9ol+UnLpxKj
jWKpSzLXvHw9qaDvxmN0UokG27y27zH8nhZhZsjr3bU6uHtE5R2qlOX83brUt+j4
kldHoH/rijb6w0LnEdLbJGe+0/2ZWsKl+gTUjl6dRl981KoQ122b92CCzfy3kJaY
TtvSDePWyX7XUUaxUlDX5NrjRUGGo71eBlY3pcE1EsGF7lRqQOUK3dWr8ovp+1Ws
tW4wKH/mXxUcP+4g3fUGfD7Bpt4uilmOYGuUuBdwgUG8GAqWvQmlFQu6GM+pb+6d
gqlynUBNO24hPoJtiV/sxJN+QPe3S+prKgtdmhm6Dhe47KZnEujfXH8EIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLljWoeoLlhiI4//Y65/jH83smAUMB8GA1UdIwQY
MBaAFKngttE80R82EU+phAM4BJQcgvFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUt
ZDMyZjhkODc1Zjk4LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81MjU2NWItYjhiZC00ZTk1LTg5ZGUtZDMyZjhkODc1Zjk4
LzEvcWVDMjBUelJIellSVDZtRUF6Z0VsQnlDOFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATw7OBVvq
wI4861LG4xVTcMeV5KbHaDxjS6yARFAe0AvbwHdoPxgjUHtoM+0LUcnZ+MQKPO29
ODUXbq7PNoyFyg48gvSA6/EnBbymRVJ9Nx4l2wNWhBB2w7/lTfQiYAYBjjb0yy3X
ylx2qF1ryOeRB1YCizJXn7hi4Mev95BImJenDXk+9CC8rtqq12jo5npfDOh/OUj3
QG6rCtIdsICLHshtPWlG1ZF49ObvGOaqesMj9G6Zgh9+g/rU9XGdAXtAONxyjkJQ
9wGFE6x7WqAQpkURk5y54Ohi43mN2/5tQdkza3B8atSiYyBQltpxbbDVef++sHyT
o0zazhCbdMkRtQ==
-----END CERTIFICATE-----
Generated at Thu May 1 00:31:59 2025 by rpki-client