Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: 3T7CX/yVOZGYlfDSko6NNMxUauvqh04JD0DTjC59Yb4=
Subject key identifier: F4:73:DA:BE:08:D1:BC:FC:D3:96:71:36:08:90:C1:DE:86:00:3B:84
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 01967C45E802E66F9CEDCB2234B9C7CD94A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 12:01:18 +0000
Manifest this update: Mon 28 Apr 2025 12:01:18 +0000
Manifest next update: Tue 29 Apr 2025 12:01:18 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: DH5B7t1NjJhuxBWtJChlZHbp96sZZstszjF37BCyryQ=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:e8:02:e6:6f:9c:ed:cb:22:34:b9:c7:cd:94:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Apr 28 12:01:18 2025 GMT
Not After : Apr 29 12:01:18 2025 GMT
Subject: CN=f473dabe08d1bcfcd39671360890c1de86003b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:36:9c:c3:7f:12:d9:2e:e0:60:c6:c0:d7:
2c:e3:d3:d1:a2:39:52:87:e5:18:ec:19:56:0b:eb:
c2:d1:3b:40:22:4a:4b:1d:f7:45:a8:18:1a:07:50:
11:bd:9f:3a:1b:c6:2a:70:4b:26:bd:2f:e2:c5:81:
b5:d5:1d:f1:fd:0e:c2:fb:1f:cb:89:e1:67:bc:5b:
0d:40:7d:d8:2b:d5:a6:66:68:7f:e9:d5:85:68:d3:
c5:f7:a7:0d:d0:a9:93:60:9d:8b:bd:5c:85:06:5b:
2c:99:a9:f5:ef:3f:d7:64:8f:3e:8e:91:b2:18:f9:
6b:35:cc:f5:dc:de:dc:f7:8f:73:0f:38:dd:23:ef:
e5:6d:53:92:12:a2:cf:45:2a:a0:21:ba:6a:c2:43:
e0:bf:f1:a5:fd:ed:e5:8f:e1:24:e4:c3:4d:91:cb:
f3:f1:fb:2c:3e:bc:63:9f:53:b1:60:6a:d3:07:53:
5e:ef:45:fe:d9:b9:a4:c7:5c:af:71:72:04:4c:01:
c7:98:b6:d5:5c:75:10:88:f2:b8:ca:ea:12:12:c8:
f9:52:44:49:17:f9:1b:78:81:13:05:d2:a0:4a:2f:
d9:e2:c5:9d:fe:fc:3d:1c:8b:48:82:a2:15:9c:5b:
e3:52:f7:51:4d:63:f5:17:76:ff:93:33:4d:65:89:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:73:DA:BE:08:D1:BC:FC:D3:96:71:36:08:90:C1:DE:86:00:3B:84
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3b:d7:0d:ad:1d:9b:ab:fc:6e:56:5c:4f:7c:44:55:a7:e6:
e9:0e:be:2b:95:32:54:3f:e5:74:1a:ee:66:38:b2:f7:c7:8e:
da:86:7b:30:21:fd:b7:56:2c:3b:60:3d:bb:cc:58:d1:c1:29:
69:b6:ec:a5:96:f8:67:af:65:0b:69:58:bc:e2:d1:d5:cb:2f:
62:9c:38:37:e5:c8:fb:aa:8b:a8:c3:93:8b:aa:bf:68:26:b6:
35:a5:f3:0e:e0:5f:2f:2b:1d:59:6d:20:18:b6:58:b8:0b:c4:
55:ba:05:5f:14:e6:c7:76:21:c4:73:d5:ed:97:b2:a8:4e:88:
cf:b8:56:f6:b8:fb:5c:10:84:4f:5d:64:e8:c0:5b:d3:1c:3f:
c9:d6:5a:a6:4d:5c:71:67:3f:09:53:aa:9b:5f:8d:75:6e:60:
47:50:56:36:62:43:7c:b5:09:30:ac:a6:0a:ba:db:e9:d8:5a:
b1:99:44:fe:a9:62:27:6b:56:8e:49:c1:5e:ac:a3:6d:e7:84:
38:f6:dd:47:13:ec:47:71:57:e9:e9:19:35:e5:87:bc:55:de:
46:f9:60:7f:ab:60:45:74:75:e2:07:14:be:3f:48:23:9d:d2:
fc:19:04:62:f1:b0:12:ba:8f:e7:d9:87:fe:53:9b:10:e7:07:
77:78:a8:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RegC5m+c7csiNLnHzZShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx
YTI4YjkwHhcNMjUwNDI4MTIwMTE4WhcNMjUwNDI5MTIwMTE4WjAzMTEwLwYDVQQD
EyhmNDczZGFiZTA4ZDFiY2ZjZDM5NjcxMzYwODkwYzFkZTg2MDAzYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIQ2nMN/Etku4GDGwNcs49PRojlS
h+UY7BlWC+vC0TtAIkpLHfdFqBgaB1ARvZ86G8YqcEsmvS/ixYG11R3x/Q7C+x/L
ieFnvFsNQH3YK9WmZmh/6dWFaNPF96cN0KmTYJ2LvVyFBlssman17z/XZI8+jpGy
GPlrNcz13N7c949zDzjdI+/lbVOSEqLPRSqgIbpqwkPgv/Gl/e3lj+Ek5MNNkcvz
8fssPrxjn1OxYGrTB1Ne70X+2bmkx1yvcXIETAHHmLbVXHUQiPK4yuoSEsj5UkRJ
F/kbeIETBdKgSi/Z4sWd/vw9HItIgqIVnFvjUvdRTWP1F3b/kzNNZYmWNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRz2r4I0bz805ZxNgiQwd6GADuEMB8GA1UdIwQY
MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt
ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5
LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTvXDa0d
m6v8blZcT3xEVafm6Q6+K5UyVD/ldBruZjiy98eO2oZ7MCH9t1YsO2A9u8xY0cEp
abbspZb4Z69lC2lYvOLR1csvYpw4N+XI+6qLqMOTi6q/aCa2NaXzDuBfLysdWW0g
GLZYuAvEVboFXxTmx3YhxHPV7ZeyqE6Iz7hW9rj7XBCET11k6MBb0xw/ydZapk1c
cWc/CVOqm1+NdW5gR1BWNmJDfLUJMKymCrrb6dhasZlE/qliJ2tWjknBXqyjbeeE
OPbdRxPsR3FX6ekZNeWHvFXeRvlgf6tgRXR14gcUvj9II53S/BkEYvGwErqP59mH
/lObEOcHd3ioqg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:08:03 2025 by rpki-client