Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: 348JsbPJ8jLUiAsPLojmFwDRbhaC4WnhoQm67LVq5P4=
Subject key identifier: 23:3E:6E:7E:B6:64:1C:79:02:C4:39:2F:AC:49:24:55:DE:F9:E2:67
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 01967AFBCA34A310B73CC0C480E0E5D0B095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 06:00:43 +0000
Manifest this update: Mon 28 Apr 2025 06:00:43 +0000
Manifest next update: Tue 29 Apr 2025 06:00:43 +0000
Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: mY1ispN8Dkom9l+n2BDXG89t4s920rAnHKC6tuWm1qg=)
2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:ca:34:a3:10:b7:3c:c0:c4:80:e0:e5:d0:b0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Apr 28 06:00:43 2025 GMT
Not After : Apr 29 06:00:43 2025 GMT
Subject: CN=233e6e7eb6641c7902c4392fac492455def9e267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:20:a2:35:96:b7:1f:85:33:cf:e4:df:82:
42:c3:f2:55:e3:c1:e0:f4:20:e3:ba:68:3e:58:c0:
df:c9:9f:ad:19:ed:71:40:cd:b1:f4:33:b3:b4:2a:
c9:01:d0:9d:44:8c:6b:42:59:fe:03:ab:91:be:91:
3b:73:a8:67:41:80:8e:2a:8e:81:e8:87:32:6a:3b:
bb:57:c1:6b:2a:d2:be:34:3c:82:45:3f:da:f7:0d:
fc:89:d4:76:71:4e:17:15:99:e3:6c:cc:79:7d:29:
e2:78:6d:d9:30:83:11:e0:8b:ce:4a:2e:85:68:97:
1e:1b:43:2f:e8:6f:b3:05:45:bb:ed:75:1e:39:7c:
72:66:b9:26:18:0e:41:7f:8f:a3:71:27:13:49:77:
83:81:ea:d2:c7:9d:b7:f5:9b:f0:30:94:e8:6e:05:
26:5f:f7:83:10:67:5a:d7:6f:88:0e:1b:6d:fb:40:
dc:b4:e8:f3:fb:db:14:7f:aa:14:3c:88:38:d5:74:
68:a1:1e:5c:90:12:f5:5c:e5:da:72:32:cf:1e:3e:
fe:90:48:9b:f2:2d:5f:ac:4a:9a:98:f5:c7:b7:20:
7a:c5:92:b0:61:b2:6f:d4:6c:9c:d3:32:13:69:f8:
b3:76:da:08:b3:57:7c:f1:41:15:59:bf:76:38:0d:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3E:6E:7E:B6:64:1C:79:02:C4:39:2F:AC:49:24:55:DE:F9:E2:67
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6a:07:60:13:c4:16:6d:70:a7:2a:2f:8a:bd:13:51:ae:07:
5b:bd:a9:0d:4e:02:b9:b1:d0:6f:ef:8b:f1:a2:2a:9f:33:21:
95:44:29:87:e0:a6:01:20:55:01:04:80:4b:7c:59:07:d6:c2:
97:55:b9:c6:1b:5d:5e:61:35:af:db:a8:2e:e7:5a:2a:da:4c:
80:3a:05:e9:67:dc:71:4b:b7:18:e0:a1:c4:17:48:98:d1:19:
e0:bf:53:2d:ad:e4:8a:fd:7f:7d:c4:30:52:09:98:28:36:bf:
67:87:82:1c:cc:63:9a:95:9e:c6:14:12:af:49:07:e3:bf:d5:
9b:18:f4:dc:0c:11:6a:3c:54:fd:2e:5c:03:c5:9e:a5:36:92:
c6:8d:64:63:ce:6c:64:c9:4a:93:7a:9d:33:ad:01:8b:71:8a:
87:6c:20:93:70:ce:e7:bd:b5:ce:8e:3d:9d:4c:bb:46:aa:b5:
c2:56:f0:d9:01:2b:76:ae:6c:7d:70:81:f9:c9:33:af:28:ed:
5c:a4:79:fb:42:a2:81:11:3a:72:3e:81:02:4e:86:e1:2d:6c:
ae:c3:36:06:56:f5:45:a4:57:ec:01:82:67:45:e6:87:cd:4f:
f0:2c:0c:d5:d8:38:84:b7:ab:de:8f:73:e6:b3:1b:cf:55:69:
ce:56:a6:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6+8o0oxC3PMDEgODl0LCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm
NGNlM2MwHhcNMjUwNDI4MDYwMDQzWhcNMjUwNDI5MDYwMDQzWjAzMTEwLwYDVQQD
EygyMzNlNmU3ZWI2NjQxYzc5MDJjNDM5MmZhYzQ5MjQ1NWRlZjllMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmQgojWWtx+FM8/k34JCw/JV48Hg
9CDjumg+WMDfyZ+tGe1xQM2x9DOztCrJAdCdRIxrQln+A6uRvpE7c6hnQYCOKo6B
6Icyaju7V8FrKtK+NDyCRT/a9w38idR2cU4XFZnjbMx5fSnieG3ZMIMR4IvOSi6F
aJceG0Mv6G+zBUW77XUeOXxyZrkmGA5Bf4+jcScTSXeDgerSx5239ZvwMJTobgUm
X/eDEGda12+IDhtt+0DctOjz+9sUf6oUPIg41XRooR5ckBL1XOXacjLPHj7+kEib
8i1frEqamPXHtyB6xZKwYbJv1Gyc0zITafizdtoIs1d88UEVWb92OA1sJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM+bn62ZBx5AsQ5L6xJJFXe+eJnMB8GA1UdIwQY
MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt
Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw
LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGoHYBPE
Fm1wpyovir0TUa4HW72pDU4CubHQb++L8aIqnzMhlUQph+CmASBVAQSAS3xZB9bC
l1W5xhtdXmE1r9uoLudaKtpMgDoF6WfccUu3GOChxBdImNEZ4L9TLa3kiv1/fcQw
UgmYKDa/Z4eCHMxjmpWexhQSr0kH47/Vmxj03AwRajxU/S5cA8WepTaSxo1kY85s
ZMlKk3qdM60Bi3GKh2wgk3DO5721zo49nUy7Rqq1wlbw2QErdq5sfXCB+ckzryjt
XKR5+0KigRE6cj6BAk6G4S1srsM2Blb1RaRX7AGCZ0Xmh81P8CwM1dg4hLer3o9z
5rMbz1Vpzlamlg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:20:35 2025 by rpki-client