Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: LqRw9TP19ifFZjtFnIu3gBSscDa6+4v5fKN8VgG0dbU=
Subject key identifier: 38:97:D8:3C:2F:DD:3A:2E:5C:A3:2C:31:B9:7F:9B:9F:A6:44:D3:B5
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019685ED60B430690F9524610118F47D04C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 118A
Signing time: Wed 30 Apr 2025 09:00:48 +0000
Manifest this update: Wed 30 Apr 2025 09:00:48 +0000
Manifest next update: Thu 01 May 2025 09:00:48 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=)
3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: oRS7TJoaELtldzmROCl3eVke8t6FvdeT1Td1pIoiyZw=)
4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=)
6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:60:b4:30:69:0f:95:24:61:01:18:f4:7d:04:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Apr 30 09:00:48 2025 GMT
Not After : May 1 09:00:48 2025 GMT
Subject: CN=3897d83c2fdd3a2e5ca32c31b97f9b9fa644d3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:b5:e9:1e:7b:77:b8:9a:da:d5:40:ca:83:
19:90:9f:99:7c:1d:f8:fc:c6:0a:3a:a2:f5:b1:a5:
2f:33:ff:e4:c7:ee:87:c9:e3:85:e1:ce:11:32:90:
35:ca:3b:13:75:1a:9a:d8:48:c8:80:e3:27:2d:b1:
9f:dc:fe:e2:7b:bf:fb:95:f3:55:e2:0d:6e:ad:cb:
e3:12:f5:0d:8d:1e:a1:dd:06:4e:64:6b:36:06:14:
1b:fd:c4:51:c3:5a:d1:c3:08:9a:27:e5:d5:3f:3b:
19:ca:25:12:ea:9a:cd:17:8a:3d:4f:fc:06:1f:46:
29:2d:bc:aa:5d:e5:37:ba:05:dd:cb:8d:ca:1e:86:
51:71:b1:42:bc:00:96:aa:26:00:37:94:3a:08:db:
c7:67:34:23:aa:c9:f4:a6:24:83:25:2d:a0:4d:59:
52:e5:12:4f:fb:b9:7a:62:73:f6:5a:2c:4f:7e:f3:
88:f8:2c:17:2a:f8:1e:ad:ea:0c:88:06:ee:0e:3f:
6e:79:75:1f:37:a6:be:bb:1d:0f:fa:0b:95:b3:fd:
da:c4:38:0d:00:83:14:82:b8:a1:b8:ba:7e:00:24:
d4:5b:81:c6:68:27:90:e3:7f:3b:80:16:e6:76:0d:
c7:88:1d:dd:20:8c:f9:fc:4a:e2:ea:8b:e5:4c:93:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:97:D8:3C:2F:DD:3A:2E:5C:A3:2C:31:B9:7F:9B:9F:A6:44:D3:B5
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:2c:98:9e:05:b9:d7:a1:bc:e4:a9:0a:0e:70:8f:fb:7a:
e7:a5:e6:7f:0e:25:58:12:35:fd:70:19:19:06:dd:a8:24:00:
bc:64:0b:c7:16:fd:73:52:86:27:97:f7:a8:0c:36:a8:0c:50:
21:61:29:1b:73:4a:93:fd:d8:51:44:34:b7:7a:e0:f9:83:fc:
b1:ad:cd:87:e9:49:65:25:b5:54:f8:ff:8c:aa:2b:ef:43:ae:
59:f9:26:41:a1:31:0f:2b:a6:9d:28:9c:0c:3b:41:7c:20:eb:
bb:b4:73:da:ac:ec:9d:f1:43:e8:23:8a:af:05:21:f6:9d:0d:
a1:9e:cd:77:ae:22:0d:b3:e3:dd:c8:87:cc:1c:36:ed:8a:d8:
d7:3f:e2:11:d7:b0:64:8c:46:03:8a:d3:a0:6b:aa:6e:9d:40:
ff:49:d4:42:28:3c:7b:ae:38:09:ff:45:6a:82:93:66:e5:0d:
24:78:97:6b:b7:d7:c1:51:34:7e:46:c0:4e:77:7a:4d:ec:b5:
f9:36:80:d7:16:cb:aa:51:2c:92:5e:1d:a6:49:94:a9:e4:da:
37:aa:88:e6:29:ca:79:81:b4:4a:5e:1e:d0:98:4c:4e:0c:5a:
dc:a7:9e:c4:62:bf:68:7a:f6:80:d0:55:9c:68:63:1e:7c:e6:
f3:34:2d:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaF7WC0MGkPlSRhARj0fQTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz
ZWY0NmUwHhcNMjUwNDMwMDkwMDQ4WhcNMjUwNTAxMDkwMDQ4WjAzMTEwLwYDVQQD
EygzODk3ZDgzYzJmZGQzYTJlNWNhMzJjMzFiOTdmOWI5ZmE2NDRkM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArda16R57d7ia2tVAyoMZkJ+ZfB34
/MYKOqL1saUvM//kx+6HyeOF4c4RMpA1yjsTdRqa2EjIgOMnLbGf3P7ie7/7lfNV
4g1urcvjEvUNjR6h3QZOZGs2BhQb/cRRw1rRwwiaJ+XVPzsZyiUS6prNF4o9T/wG
H0YpLbyqXeU3ugXdy43KHoZRcbFCvACWqiYAN5Q6CNvHZzQjqsn0piSDJS2gTVlS
5RJP+7l6YnP2WixPfvOI+CwXKvgereoMiAbuDj9ueXUfN6a+ux0P+guVs/3axDgN
AIMUgrihuLp+ACTUW4HGaCeQ4387gBbmdg3HiB3dIIz5/Eri6ovlTJNf3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiX2Dwv3TouXKMsMbl/m5+mRNO1MB8GA1UdIwQY
MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt
Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx
LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJUsmJ4F
udehvOSpCg5wj/t656Xmfw4lWBI1/XAZGQbdqCQAvGQLxxb9c1KGJ5f3qAw2qAxQ
IWEpG3NKk/3YUUQ0t3rg+YP8sa3Nh+lJZSW1VPj/jKor70OuWfkmQaExDyumnSic
DDtBfCDru7Rz2qzsnfFD6COKrwUh9p0NoZ7Nd64iDbPj3ciHzBw27YrY1z/iEdew
ZIxGA4rToGuqbp1A/0nUQig8e644Cf9FaoKTZuUNJHiXa7fXwVE0fkbATnd6Tey1
+TaA1xbLqlEskl4dpkmUqeTaN6qI5inKeYG0Sl4e0JhMTgxa3KeexGK/aHr2gNBV
nGhjHnzm8zQtVQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 16:46:43 2025 by rpki-client