Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: iatuarE/6hVr1heT1aftjSeZlK0l6DlXVK2uz6r4kJ4=
Subject key identifier: 5C:8D:C3:E5:56:CE:DB:84:1B:F6:21:94:F7:EC:40:8E:6D:A1:7D:B1
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 019698CEED2C620C52FFBBD5ECEF8C89D5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 14B1
Signing time: Sun 04 May 2025 01:00:20 +0000
Manifest this update: Sun 04 May 2025 01:00:20 +0000
Manifest next update: Mon 05 May 2025 01:00:20 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: etbiOFVU9zRJoWrg0d7Dm+ANtbK9fL6IKZT0/c1JJWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:ce:ed:2c:62:0c:52:ff:bb:d5:ec:ef:8c:89:d5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: May 4 01:00:20 2025 GMT
Not After : May 5 01:00:20 2025 GMT
Subject: CN=5c8dc3e556cedb841bf62194f7ec408e6da17db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:fe:4d:c0:ff:36:e6:06:ef:e8:50:b4:49:
76:cf:21:5e:1b:a4:a6:d1:3a:49:a2:42:0e:1c:e3:
2a:4c:8f:bc:e3:2e:2c:c4:03:e5:56:6b:0c:db:5c:
cf:d8:75:6b:a8:58:db:b1:32:46:15:48:f5:da:27:
ce:79:7e:3c:97:fe:45:db:a1:c8:38:0c:95:1d:04:
ff:ac:fc:06:d8:9a:08:6f:e9:f6:ae:22:83:e8:df:
81:71:24:22:a0:a8:ff:9e:32:43:e1:57:5c:5f:15:
21:98:17:2d:29:8e:43:f8:e7:6d:9b:40:a9:1c:bc:
e4:4e:31:e6:74:db:f7:38:e0:76:bd:1c:9a:69:c0:
2b:eb:0a:56:54:d6:db:c1:e4:5b:39:31:ab:05:33:
a4:d4:2c:08:62:74:d7:a7:45:84:5a:fb:ee:d2:c2:
c4:f2:1c:46:54:f2:68:05:51:9f:0f:5f:ff:1a:16:
69:62:83:f8:f4:02:f2:3a:95:2a:60:c2:40:40:41:
67:5c:c2:b3:59:a2:07:2c:f9:dc:0d:ba:ac:5e:31:
1c:b0:0e:06:32:64:c2:2e:66:ce:e4:49:0c:76:a6:
f4:5f:e8:61:fe:8f:5a:2d:53:9f:6c:b6:40:74:76:
21:0e:b0:aa:0c:fa:56:ea:0d:1f:08:0a:a9:f1:c9:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:C3:E5:56:CE:DB:84:1B:F6:21:94:F7:EC:40:8E:6D:A1:7D:B1
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:dc:77:9c:b8:6a:bc:71:68:2c:19:8c:fb:dd:12:db:2b:
ef:33:16:86:39:09:53:4d:f0:64:33:bd:39:b4:33:f3:05:46:
6d:1c:7e:eb:45:bf:3c:c0:8d:9f:cd:19:11:5c:5a:bc:96:df:
3c:ea:5d:d5:f5:2c:c0:20:c9:52:5a:50:c8:38:08:d2:67:9e:
cf:e0:5c:d6:51:83:3f:4f:33:f6:57:f2:80:63:91:3b:c9:a8:
97:0b:f2:52:ed:ab:5a:c8:22:5f:a7:3f:31:52:2b:43:8f:84:
8f:99:19:11:33:82:74:20:65:eb:90:21:90:1c:de:bc:e9:31:
93:f5:41:91:1d:be:89:ff:8b:3b:16:6b:07:fb:bd:8b:c3:b1:
f2:a4:d8:f7:66:01:40:d0:1c:f4:79:3b:0c:6e:5f:9c:73:5f:
64:ba:45:e4:4a:1a:d6:55:e1:c3:b7:49:73:e6:be:af:44:38:
1e:35:1a:fc:f4:b1:86:11:c9:12:e4:d0:60:84:f3:61:dd:2b:
3c:f2:6d:23:5d:09:39:a5:6f:c5:80:ef:ad:58:a0:f4:14:6f:
20:11:08:10:18:b4:85:74:c8:b1:c9:44:a8:b1:d1:a8:29:b3:
57:73:50:b3:68:df:c7:8f:29:67:1e:d1:61:e0:2d:dc:fc:13:
96:b4:8e:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaYzu0sYgxS/7vV7O+MidWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWQ0ZDBmY2M1ODYxYTM0NzE2ZjEwYTBhNDQ5N2FhNDI4
MWFiM2EwHhcNMjUwNTA0MDEwMDIwWhcNMjUwNTA1MDEwMDIwWjAzMTEwLwYDVQQD
Eyg1YzhkYzNlNTU2Y2VkYjg0MWJmNjIxOTRmN2VjNDA4ZTZkYTE3ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WH+TcD/NuYG7+hQtEl2zyFeG6Sm
0TpJokIOHOMqTI+84y4sxAPlVmsM21zP2HVrqFjbsTJGFUj12ifOeX48l/5F26HI
OAyVHQT/rPwG2JoIb+n2riKD6N+BcSQioKj/njJD4VdcXxUhmBctKY5D+Odtm0Cp
HLzkTjHmdNv3OOB2vRyaacAr6wpWVNbbweRbOTGrBTOk1CwIYnTXp0WEWvvu0sLE
8hxGVPJoBVGfD1//GhZpYoP49ALyOpUqYMJAQEFnXMKzWaIHLPncDbqsXjEcsA4G
MmTCLmbO5EkMdqb0X+hh/o9aLVOfbLZAdHYhDrCqDPpW6g0fCAqp8ckS+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyNw+VWztuEG/YhlPfsQI5toX2xMB8GA1UdIwQY
MBaAFKhdTQ/MWGGjRxbxCgpEl6pCgas6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMt
MDg4NTc4NWJkMTJmLzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMtMDg4NTc4NWJkMTJm
LzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm33cd5y4
arxxaCwZjPvdEtsr7zMWhjkJU03wZDO9ObQz8wVGbRx+60W/PMCNn80ZEVxavJbf
POpd1fUswCDJUlpQyDgI0meez+Bc1lGDP08z9lfygGORO8molwvyUu2rWsgiX6c/
MVIrQ4+Ej5kZETOCdCBl65AhkBzevOkxk/VBkR2+if+LOxZrB/u9i8Ox8qTY92YB
QNAc9Hk7DG5fnHNfZLpF5Eoa1lXhw7dJc+a+r0Q4HjUa/PSxhhHJEuTQYITzYd0r
PPJtI10JOaVvxYDvrVig9BRvIBEIEBi0hXTIsclEqLHRqCmzV3NQs2jfx48pZx7R
YeAt3PwTlrSOwg==
-----END CERTIFICATE-----
Generated at Sun May 4 03:38:24 2025 by rpki-client