Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: RA9JNFfYJl7pOf3CsVkBODVxEf+s59swP7VvB1sfrlc=
Subject key identifier: 5B:A0:A6:93:85:12:4D:7E:2E:24:1A:E6:11:EC:A6:55:C7:94:93:DF
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 01969CE28884FC8508E4AA6464923D361B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 1527
Signing time: Sun 04 May 2025 20:00:13 +0000
Manifest this update: Sun 04 May 2025 20:00:13 +0000
Manifest next update: Mon 05 May 2025 20:00:13 +0000
Files and hashes: 1: _O5lI_NrxjYhfLVpiDzpC5pBpNo.roa (hash: kRyUBDk7DeOK1Op874QsCkY85Pkvq4XHwWApA0Uvb60=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: kNXbwK61kRJZGK/p4ws97b3zx7nAUP+o+nlD/NCNX8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:88:84:fc:85:08:e4:aa:64:64:92:3d:36:1b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: May 4 20:00:13 2025 GMT
Not After : May 5 20:00:13 2025 GMT
Subject: CN=5ba0a69385124d7e2e241ae611eca655c79493df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:f6:8a:f0:71:21:12:ff:f3:08:39:da:18:
81:02:54:1e:09:f0:14:04:bf:c5:98:ac:bc:bf:a7:
6c:7c:87:a3:1f:fb:d5:6e:c0:71:1f:a9:ff:9f:d4:
3c:a0:d6:8c:8b:f8:77:c7:cd:84:f9:62:50:bf:f3:
4d:72:5a:38:a1:56:b9:eb:b0:6e:d6:b9:58:90:66:
24:97:a2:85:fd:07:1a:6d:ab:8c:d8:bb:1e:5b:b4:
c8:29:0b:de:42:ce:b0:67:e2:31:5d:79:9e:5e:36:
24:3e:35:9f:a9:e3:ff:32:24:0d:65:58:c1:91:25:
5b:1d:4a:6a:78:8f:20:e0:c8:13:23:cf:4a:87:51:
26:cb:a9:7d:61:0e:7b:09:3c:a8:02:c2:c4:49:c1:
db:9e:b6:e3:02:80:8f:74:d7:54:a4:5b:18:06:d2:
c0:44:69:02:a8:52:1b:51:9d:e4:d5:91:b0:e4:32:
74:1a:ed:8b:95:28:b5:b7:25:7e:8f:5f:5a:43:b1:
4e:cf:a0:58:16:12:d0:dd:35:85:e9:8d:ab:76:cf:
7c:aa:30:94:85:4c:ef:db:a8:27:00:8b:30:bd:13:
e1:c2:0a:f0:d4:ee:b7:54:f2:90:77:9f:5e:28:98:
0e:f0:03:9c:44:c6:f3:65:76:17:80:9b:75:19:e9:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A0:A6:93:85:12:4D:7E:2E:24:1A:E6:11:EC:A6:55:C7:94:93:DF
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b5:b7:39:10:1a:b1:fc:07:8a:3a:86:d7:ef:16:4c:2d:23:
59:89:29:27:8f:14:dc:3d:48:22:08:10:c8:eb:e2:9e:30:f1:
a9:d5:ae:c1:5a:45:79:b2:a7:4f:af:66:2f:dd:79:76:9d:82:
2f:13:09:3a:9c:d7:d2:68:dd:59:be:4a:64:ca:c4:69:dc:48:
e8:8f:67:91:4b:2c:a4:4d:1a:b6:de:32:14:07:e4:90:95:c4:
76:a8:1a:af:5c:77:91:d7:35:fc:8d:74:a3:33:b6:ee:cc:16:
bb:ee:2a:fb:a1:88:7f:64:81:ac:4e:c1:ec:27:12:6d:80:61:
a1:a9:d7:c7:0a:b4:d7:0c:39:82:23:25:03:60:4d:0c:3e:ea:
29:1e:86:9e:60:c2:96:03:d6:30:39:84:c2:57:c4:88:e0:b8:
32:b8:23:8b:34:0e:2d:64:2d:e0:da:81:d1:dd:a3:61:93:b4:
eb:dd:60:eb:f9:91:5d:ef:c8:e4:a6:68:1a:48:85:8e:b1:75:
c1:7b:fd:49:29:a3:a5:39:d5:80:81:bc:6e:45:53:75:48:c3:
59:2a:28:e9:4c:c2:3c:1a:f3:a2:7b:95:b0:68:f7:e6:10:cf:
29:74:2b:47:69:da:44:c9:95:c8:7e:ea:b3:86:cb:c5:ca:7c:
7e:0d:19:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZac4oiE/IUI5KpkZJI9NhsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzZhZjBjMjliZWJjN2M0ODVjZjgwMDFkYTlmMTk5MzBh
Y2U0NWQwHhcNMjUwNTA0MjAwMDEzWhcNMjUwNTA1MjAwMDEzWjAzMTEwLwYDVQQD
Eyg1YmEwYTY5Mzg1MTI0ZDdlMmUyNDFhZTYxMWVjYTY1NWM3OTQ5M2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxD2ivBxIRL/8wg52hiBAlQeCfAU
BL/FmKy8v6dsfIejH/vVbsBxH6n/n9Q8oNaMi/h3x82E+WJQv/NNclo4oVa567Bu
1rlYkGYkl6KF/QcabauM2LseW7TIKQveQs6wZ+IxXXmeXjYkPjWfqeP/MiQNZVjB
kSVbHUpqeI8g4MgTI89Kh1Emy6l9YQ57CTyoAsLEScHbnrbjAoCPdNdUpFsYBtLA
RGkCqFIbUZ3k1ZGw5DJ0Gu2LlSi1tyV+j19aQ7FOz6BYFhLQ3TWF6Y2rds98qjCU
hUzv26gnAIswvRPhwgrw1O63VPKQd59eKJgO8AOcRMbzZXYXgJt1GemqzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFugppOFEk1+LiQa5hHsplXHlJPfMB8GA1UdIwQY
MBaAFKrGrwwpvrx8SFz4AB2p8ZkwrORdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMt
OTM0NzU5MTkxMGE4LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMtOTM0NzU5MTkxMGE4
LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrW3ORAa
sfwHijqG1+8WTC0jWYkpJ48U3D1IIggQyOvinjDxqdWuwVpFebKnT69mL915dp2C
LxMJOpzX0mjdWb5KZMrEadxI6I9nkUsspE0att4yFAfkkJXEdqgar1x3kdc1/I10
ozO27swWu+4q+6GIf2SBrE7B7CcSbYBhoanXxwq01ww5giMlA2BNDD7qKR6GnmDC
lgPWMDmEwlfEiOC4MrgjizQOLWQt4NqB0d2jYZO0691g6/mRXe/I5KZoGkiFjrF1
wXv9SSmjpTnVgIG8bkVTdUjDWSoo6UzCPBrzonuVsGj35hDPKXQrR2naRMmVyH7q
s4bLxcp8fg0Zlg==
-----END CERTIFICATE-----
Generated at Mon May 5 04:44:50 2025 by rpki-client