Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
File: QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft (raw, json)
Hash identifier: H5XKu6/BnYbl+RfwRN/FPcS/AQaWTU2FEj0Z1FCJDRM=
Subject key identifier: 77:3F:7A:A3:18:A8:BD:9B:7D:FA:26:E2:89:B8:FD:08:DA:03:26:E1
Authority key identifier: 40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
Certificate issuer: /CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Certificate serial: 019676E8565B7C4B20B3113CFD216E5CBD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
Manifest number: 01D2
Signing time: Sun 27 Apr 2025 11:01:00 +0000
Manifest this update: Sun 27 Apr 2025 11:01:00 +0000
Manifest next update: Mon 28 Apr 2025 11:01:00 +0000
Files and hashes: 1: QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl (hash: 6xaLyaFBbdvN4widjg3azD4gb/mBWDgFdKH/neHI6y0=)
2: tTBKVFQWZufXMYyq5fxW8fRNH90.roa (hash: YC4oYFYBwZQuGV+b+L7LVxd1pwxsZMobv4J4wury7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:56:5b:7c:4b:20:b3:11:3c:fd:21:6e:5c:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4018f55a6b033b244f86145bd9f0a6f1400c1bff
Validity
Not Before: Apr 27 11:01:00 2025 GMT
Not After : Apr 28 11:01:00 2025 GMT
Subject: CN=773f7aa318a8bd9b7dfa26e289b8fd08da0326e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:76:a5:95:9c:53:4b:3e:74:3e:25:f0:af:
0a:2e:2a:5b:0c:2c:2c:e3:36:e3:3e:f2:c1:10:ba:
38:c3:49:72:3e:13:c8:e4:70:56:00:65:5c:fc:7a:
ab:c0:3a:c1:8d:0a:ca:a9:24:86:26:e8:af:2a:c9:
2a:69:c2:b0:04:3f:d5:21:81:c4:98:bb:f2:f9:7a:
80:44:47:2d:36:e1:d3:7e:a8:83:43:4e:f4:4e:99:
c0:49:7b:05:0e:f5:1f:f7:60:e9:48:37:d3:7a:72:
da:7b:48:2a:66:cd:58:89:dc:e9:ca:d0:9a:5f:06:
08:04:fe:98:4b:57:f4:dc:95:df:4d:4f:02:52:a2:
cd:8d:c1:66:db:83:0d:5f:c0:e0:d7:b6:60:a8:cb:
d8:9d:ca:fe:6c:91:3b:b8:56:94:01:ab:53:83:91:
69:a6:ad:00:22:fe:6f:6e:b8:8b:76:59:a2:4c:3e:
98:0a:21:ca:d5:43:df:a4:81:8d:34:70:53:01:6b:
8c:b1:ca:92:5e:fa:e1:99:38:e5:e6:1f:25:dd:59:
ee:6b:65:9b:32:36:ee:0b:5f:55:00:fd:bd:fd:a8:
82:72:09:55:80:6d:fb:47:c6:84:66:be:bf:50:23:
2b:6f:70:3f:74:93:af:91:10:7e:82:57:ad:e9:07:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3F:7A:A3:18:A8:BD:9B:7D:FA:26:E2:89:B8:FD:08:DA:03:26:E1
X509v3 Authority Key Identifier:
keyid:40:18:F5:5A:6B:03:3B:24:4F:86:14:5B:D9:F0:A6:F1:40:0C:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBj1WmsDOyRPhhRb2fCm8UAMG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/78795e-423e-4a1c-81e0-6e169d65c911/1/QBj1WmsDOyRPhhRb2fCm8UAMG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e0:80:57:5c:9a:d1:e9:d1:bd:ca:a6:4a:d7:36:6a:e8:99:
5e:e5:4b:55:d4:9d:63:6c:20:e2:78:ca:36:71:93:22:70:b3:
16:0e:e1:02:98:ab:be:bb:f3:d5:8e:02:00:2a:3e:8f:f4:8a:
91:05:18:b1:92:9c:a2:ab:11:0f:b6:e1:76:c8:00:01:98:3b:
8e:32:d9:b1:fc:f8:1b:85:9f:00:41:15:9b:69:a8:85:55:d2:
aa:84:47:a0:78:2b:2f:84:34:a5:4b:8a:e8:0c:8d:88:42:a7:
71:5d:00:50:c0:2f:db:a6:59:0a:fe:6c:ca:e7:54:6f:bd:f5:
4f:7c:c9:bf:89:61:4f:1c:2d:5b:0a:f0:df:32:d1:51:9f:2e:
7a:64:5e:88:6d:10:f5:6d:d8:7c:d6:de:c7:ac:e6:b1:57:93:
94:21:20:e3:2a:a4:9c:24:de:60:6d:7f:aa:0e:d1:7c:65:ff:
a5:5a:a9:eb:81:37:07:0f:cc:d0:70:bd:3a:46:a0:c4:fd:7b:
f5:47:a0:22:46:14:9e:04:59:d8:5e:38:a1:f7:1b:0b:1d:43:
4d:93:26:ff:b2:32:52:75:81:c8:9b:8f:3e:0a:02:75:3c:bd:
c1:16:5d:92:23:28:87:ac:7a:9e:ca:7c:4e:a5:a3:77:93:b3:
bb:2a:34:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ26FZbfEsgsxE8/SFuXL2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMThmNTVhNmIwMzNiMjQ0Zjg2MTQ1YmQ5ZjBhNmYxNDAw
YzFiZmYwHhcNMjUwNDI3MTEwMTAwWhcNMjUwNDI4MTEwMTAwWjAzMTEwLwYDVQQD
Eyg3NzNmN2FhMzE4YThiZDliN2RmYTI2ZTI4OWI4ZmQwOGRhMDMyNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxop2pZWcU0s+dD4l8K8KLipbDCws
4zbjPvLBELo4w0lyPhPI5HBWAGVc/HqrwDrBjQrKqSSGJuivKskqacKwBD/VIYHE
mLvy+XqAREctNuHTfqiDQ070TpnASXsFDvUf92DpSDfTenLae0gqZs1YidzpytCa
XwYIBP6YS1f03JXfTU8CUqLNjcFm24MNX8Dg17ZgqMvYncr+bJE7uFaUAatTg5Fp
pq0AIv5vbriLdlmiTD6YCiHK1UPfpIGNNHBTAWuMscqSXvrhmTjl5h8l3Vnua2Wb
MjbuC19VAP29/aiCcglVgG37R8aEZr6/UCMrb3A/dJOvkRB+glet6QcF/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc/eqMYqL2bffom4om4/QjaAybhMB8GA1UdIwQY
MBaAFEAY9VprAzskT4YUW9nwpvFADBv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAt
NmUxNjlkNjVjOTExLzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83ODc5NWUtNDIzZS00YTFjLTgxZTAtNmUxNjlkNjVjOTEx
LzEvUUJqMVdtc0RPeVJQaGhSYjJmQ204VUFNR184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuCAV1ya
0enRvcqmStc2auiZXuVLVdSdY2wg4njKNnGTInCzFg7hApirvrvz1Y4CACo+j/SK
kQUYsZKcoqsRD7bhdsgAAZg7jjLZsfz4G4WfAEEVm2mohVXSqoRHoHgrL4Q0pUuK
6AyNiEKncV0AUMAv26ZZCv5syudUb731T3zJv4lhTxwtWwrw3zLRUZ8uemReiG0Q
9W3YfNbex6zmsVeTlCEg4yqknCTeYG1/qg7RfGX/pVqp64E3Bw/M0HC9OkagxP17
9UegIkYUngRZ2F44ofcbCx1DTZMm/7IyUnWByJuPPgoCdTy9wRZdkiMoh6x6nsp8
TqWjd5Ozuyo0qw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:34 2025 by rpki-client