Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
File: Q15Blg1ZDpmATpC5rwNlWExxLHI.mft (raw, json)
Hash identifier: idcMO0rA+OgPpQQRkiQ+AwS0QkxiCZjS3tRN/npuTNk=
Subject key identifier: 1D:3C:41:BF:0E:F5:CC:E4:62:16:03:30:3F:96:10:0E:95:9F:53:9B
Authority key identifier: 43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
Certificate issuer: /CN=435e41960d590e99804e90b9af0365584c712c72
Certificate serial: 01967679C98CDCF6F7242E1FBD3F60D53F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
Manifest number: 1265
Signing time: Sun 27 Apr 2025 09:00:14 +0000
Manifest this update: Sun 27 Apr 2025 09:00:14 +0000
Manifest next update: Mon 28 Apr 2025 09:00:14 +0000
Files and hashes: 1: Q15Blg1ZDpmATpC5rwNlWExxLHI.crl (hash: V4hPtQ7pxLiZW7AYzahNzCDi42CfqLDXngeIK1K2FrU=)
2: Qgkf9isvn9G1i53cocvwB25dPG0.roa (hash: 7pOvhNxITVVpr4C2N2+h/b2aAgFP8cFKYE5FjzDD/YQ=)
3: XGxdWNZPiFptk-3w7OILGgkhItU.roa (hash: xf5heCAI8Pty8+MuLnNYj13qa72HA9enfkhk9E22KD4=)
4: XQLqdml-mlBf3Z-90xd5Tk9chkc.roa (hash: nSfERnt4sWaMf0P1jQhY7bLFNZayDQ04cDYTAEFX1MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:c9:8c:dc:f6:f7:24:2e:1f:bd:3f:60:d5:3f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e41960d590e99804e90b9af0365584c712c72
Validity
Not Before: Apr 27 09:00:14 2025 GMT
Not After : Apr 28 09:00:14 2025 GMT
Subject: CN=1d3c41bf0ef5cce4621603303f96100e959f539b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:4f:b8:67:79:a9:bf:14:f6:df:78:72:70:
7f:2d:73:f3:2b:07:a0:18:cf:cb:6d:3f:18:61:46:
c4:b7:03:b3:cd:b6:02:93:be:91:8f:88:57:d9:0a:
f1:51:70:d8:bb:fa:a5:63:46:4f:4b:a2:6c:6a:66:
f9:0c:62:ae:5a:18:57:86:53:a6:18:5a:82:fc:3f:
e8:ca:5e:76:a7:73:e3:9a:15:12:28:50:e6:77:90:
3a:ae:8f:40:07:da:ec:a7:77:7d:a4:48:2c:bf:f8:
c0:64:e6:48:c2:f8:39:aa:a0:20:cc:c9:3d:a3:53:
61:4e:dd:44:33:a2:5c:27:de:c7:78:9a:1c:40:22:
03:6c:4c:dd:84:04:16:c3:4b:9c:9a:4c:61:7d:f7:
fe:7e:f4:8e:98:49:73:00:55:22:9b:b5:3b:fc:99:
81:e7:0e:96:2e:cc:8d:d6:62:44:b0:34:bc:ce:7d:
a0:f8:9d:cf:e1:cd:6c:24:b5:73:cb:c8:50:62:ec:
11:c2:54:97:db:91:f9:ac:c8:04:a6:40:e6:4d:b7:
1c:c2:e5:eb:0e:a6:51:c9:51:1e:1f:b0:d9:0d:c7:
f9:50:82:fe:3e:52:92:31:65:7e:8a:30:1d:f2:01:
2d:14:2a:07:01:5c:94:2d:ff:bc:63:51:e6:1e:9d:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:41:BF:0E:F5:CC:E4:62:16:03:30:3F:96:10:0E:95:9F:53:9B
X509v3 Authority Key Identifier:
keyid:43:5E:41:96:0D:59:0E:99:80:4E:90:B9:AF:03:65:58:4C:71:2C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q15Blg1ZDpmATpC5rwNlWExxLHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7e2f28-5cae-4e6f-a5f0-01bb5fd534f5/1/Q15Blg1ZDpmATpC5rwNlWExxLHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ce:be:ab:29:e9:dd:a1:54:55:94:31:61:d3:f5:8a:83:14:
0a:8a:99:1c:3c:f6:07:ba:1c:93:51:2d:bb:9d:8f:5e:a9:65:
09:6f:96:c7:59:72:1b:02:d1:e0:2f:20:6e:73:d0:b8:48:90:
c7:0d:2e:53:bc:f7:7d:13:05:ac:29:77:39:73:9a:50:2e:bb:
dd:ce:11:e6:25:a1:be:08:d3:66:2b:49:3f:36:8e:f9:1f:6c:
28:0a:60:69:84:28:a9:47:bc:2d:8f:fa:4f:12:c0:76:20:d1:
5a:8f:e5:86:02:be:57:b3:56:8b:e2:4d:76:c7:8a:3e:22:db:
4b:0c:ca:90:7a:17:ce:d3:2d:ab:b1:cd:0a:ed:1b:04:ca:1f:
2f:54:06:35:20:62:7e:94:37:14:58:84:e9:2c:77:f1:ab:02:
71:b2:e5:75:d3:84:c6:f2:4b:aa:bd:4d:70:ad:7e:47:35:fe:
03:01:91:a8:4b:9d:9a:21:ac:1e:f2:6c:64:cd:25:84:e6:40:
78:70:68:59:4f:58:4a:0d:57:73:df:7d:b7:df:da:43:60:5d:
ce:a4:44:c4:b7:ee:23:25:d2:93:ec:f9:e7:dd:c0:65:31:6b:
6a:16:da:f0:c1:48:e5:04:45:62:ac:92:0c:58:06:ed:09:fc:
7c:2d:6e:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2ecmM3Pb3JC4fvT9g1T9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWU0MTk2MGQ1OTBlOTk4MDRlOTBiOWFmMDM2NTU4NGM3
MTJjNzIwHhcNMjUwNDI3MDkwMDE0WhcNMjUwNDI4MDkwMDE0WjAzMTEwLwYDVQQD
EygxZDNjNDFiZjBlZjVjY2U0NjIxNjAzMzAzZjk2MTAwZTk1OWY1MzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnNPuGd5qb8U9t94cnB/LXPzKweg
GM/LbT8YYUbEtwOzzbYCk76Rj4hX2QrxUXDYu/qlY0ZPS6Jsamb5DGKuWhhXhlOm
GFqC/D/oyl52p3PjmhUSKFDmd5A6ro9AB9rsp3d9pEgsv/jAZOZIwvg5qqAgzMk9
o1NhTt1EM6JcJ97HeJocQCIDbEzdhAQWw0ucmkxhfff+fvSOmElzAFUim7U7/JmB
5w6WLsyN1mJEsDS8zn2g+J3P4c1sJLVzy8hQYuwRwlSX25H5rMgEpkDmTbccwuXr
DqZRyVEeH7DZDcf5UIL+PlKSMWV+ijAd8gEtFCoHAVyULf+8Y1HmHp1g/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB08Qb8O9czkYhYDMD+WEA6Vn1ObMB8GA1UdIwQY
MBaAFENeQZYNWQ6ZgE6Qua8DZVhMcSxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAt
MDFiYjVmZDUzNGY1LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZTJmMjgtNWNhZS00ZTZmLWE1ZjAtMDFiYjVmZDUzNGY1
LzEvUTE1QmxnMVpEcG1BVHBDNXJ3TmxXRXh4TEhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc6+qynp
3aFUVZQxYdP1ioMUCoqZHDz2B7ock1Etu52PXqllCW+Wx1lyGwLR4C8gbnPQuEiQ
xw0uU7z3fRMFrCl3OXOaUC673c4R5iWhvgjTZitJPzaO+R9sKApgaYQoqUe8LY/6
TxLAdiDRWo/lhgK+V7NWi+JNdseKPiLbSwzKkHoXztMtq7HNCu0bBMofL1QGNSBi
fpQ3FFiE6Sx38asCcbLlddOExvJLqr1NcK1+RzX+AwGRqEudmiGsHvJsZM0lhOZA
eHBoWU9YSg1Xc999t9/aQ2BdzqRExLfuIyXSk+z5593AZTFrahba8MFI5QRFYqyS
DFgG7Qn8fC1u8A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:40:01 2025 by rpki-client