Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File: qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier: KREsw/tOrnnyr7eoTnu+3AkY4ssFoaw8ncoA9qVQGFQ=
Subject key identifier: 2E:FF:87:C4:E4:02:DA:7B:67:A9:B2:BE:11:74:FE:39:FA:E0:27:DA
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 01967D2102D9C2C138C043C9FFD6F6FE0459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number: 12BA
Signing time: Mon 28 Apr 2025 16:00:37 +0000
Manifest this update: Mon 28 Apr 2025 16:00:37 +0000
Manifest next update: Tue 29 Apr 2025 16:00:37 +0000
Files and hashes: 1: LgqWUP0536hPg5BCpisRq1CfwzE.roa (hash: vMIIsO4xKqj7JGP30ELt6Q8iCAR8hVZNP/9djB0t8ro=)
2: dJRAHiOGAXHi9ZK3B82VqToDqnk.roa (hash: uJbxE7UmTFUvOg3MJeibMc8I9N/6ZLAzoiFFQ1kOB8U=)
3: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: 25I+R3rK3oUQgXg1G+xX0FXrb8khTF5VqtMpzOxze1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:02:d9:c2:c1:38:c0:43:c9:ff:d6:f6:fe:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Apr 28 16:00:37 2025 GMT
Not After : Apr 29 16:00:37 2025 GMT
Subject: CN=2eff87c4e402da7b67a9b2be1174fe39fae027da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:02:ff:0f:ab:1a:1b:2f:16:20:de:d9:48:
5f:59:ae:68:ea:cf:f8:ed:4c:a9:27:00:8c:4a:63:
72:9b:4b:e5:03:3e:33:b9:f1:e6:ee:d5:92:76:f7:
a6:2d:54:42:36:c0:33:66:e4:5a:8c:bf:79:63:36:
26:60:c9:10:f3:53:fb:bf:11:fb:23:1d:63:92:e5:
97:11:79:e7:04:0e:38:99:15:39:ee:4b:fb:5f:35:
6e:79:36:a2:22:59:39:b9:06:c7:1e:9d:ea:63:2d:
6a:7e:22:89:f5:d1:32:09:a3:4a:d2:38:ff:b5:e9:
c6:ca:0f:27:da:e9:6a:1d:01:09:08:a3:f4:67:d5:
14:69:5c:6e:28:78:86:4c:8f:9b:f3:81:ef:5d:b9:
14:11:86:ec:7c:7d:42:ad:fa:f2:3a:1e:2a:93:0b:
a8:f3:c3:4e:79:b0:62:9b:4c:f9:53:91:55:db:88:
a1:97:83:b2:1e:39:3d:7d:14:cd:4f:52:28:93:0a:
cd:3c:60:f0:e3:26:0f:98:a5:57:69:e7:05:54:a2:
29:2e:cf:53:96:88:fb:63:1c:e0:69:d6:1b:b0:be:
1c:3e:42:cd:86:63:13:20:fc:87:24:c9:69:6b:0c:
8d:be:f8:69:4a:70:fd:94:3f:78:5e:82:28:b2:75:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FF:87:C4:E4:02:DA:7B:67:A9:B2:BE:11:74:FE:39:FA:E0:27:DA
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a6:42:7e:4b:6a:fb:29:2e:a5:e6:c4:1f:29:df:43:e6:52:
b6:2a:90:90:ab:58:aa:d8:61:af:0e:08:21:99:c7:b8:6e:55:
b7:b9:4e:d8:e9:06:1b:aa:df:9d:f1:45:72:c4:2f:90:fd:ca:
56:94:14:24:1a:b4:67:f2:5a:26:8e:9b:31:29:ff:05:d4:43:
b5:a5:7c:fa:39:9a:65:20:6f:59:ad:37:ad:d6:92:75:9a:3f:
ba:78:69:c4:40:49:bf:12:68:d3:ae:ec:43:31:56:36:dd:fa:
a5:d4:c1:6c:55:9c:9b:58:b2:d4:d4:3e:0f:22:f4:2b:3c:7f:
28:0a:19:40:bf:4e:1d:9d:64:43:c8:c6:40:62:65:76:ed:46:
4e:8d:84:aa:52:f8:6f:01:36:a0:26:19:42:55:e9:4b:5e:22:
1b:a6:6d:25:4b:80:ae:3f:e6:b2:64:56:01:9e:50:a5:34:31:
fa:9e:e3:29:c0:39:8f:8e:9d:46:40:2b:ab:7d:ce:98:9a:17:
6b:94:e9:68:8e:e5:31:51:ec:bf:5f:c2:9b:54:d3:bf:4c:69:
a5:59:78:56:b3:99:7f:6e:57:e6:d9:76:73:a5:63:fd:c6:90:
0b:96:54:66:07:fc:1e:b2:dd:1a:c3:8f:a3:25:b3:00:74:08:
d8:9a:42:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9IQLZwsE4wEPJ/9b2/gRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTU1ODg1M2ZlYmM3OWQ4MTNlYjJjMGNlNWNiNzM2ZmI3
M2MwZGYwHhcNMjUwNDI4MTYwMDM3WhcNMjUwNDI5MTYwMDM3WjAzMTEwLwYDVQQD
EygyZWZmODdjNGU0MDJkYTdiNjdhOWIyYmUxMTc0ZmUzOWZhZTAyN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe0C/w+rGhsvFiDe2UhfWa5o6s/4
7UypJwCMSmNym0vlAz4zufHm7tWSdvemLVRCNsAzZuRajL95YzYmYMkQ81P7vxH7
Ix1jkuWXEXnnBA44mRU57kv7XzVueTaiIlk5uQbHHp3qYy1qfiKJ9dEyCaNK0jj/
tenGyg8n2ulqHQEJCKP0Z9UUaVxuKHiGTI+b84HvXbkUEYbsfH1CrfryOh4qkwuo
88NOebBim0z5U5FV24ihl4OyHjk9fRTNT1IokwrNPGDw4yYPmKVXaecFVKIpLs9T
loj7YxzgadYbsL4cPkLNhmMTIPyHJMlpawyNvvhpSnD9lD94XoIosnXyDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7/h8TkAtp7Z6myvhF0/jn64CfaMB8GA1UdIwQY
MBaAFKgVWIU/68edgT6ywM5ctzb7c8DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJWWWhUX3J4NTJCUHJMQXpseTNOdnR6d044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81Y2E0OGItYzk2Ni00ZTYzLTg2OGQt
YTg1YzFiMmVjMWNlLzEvcUJWWWhUX3J4NTJCUHJMQXpseTNOdnR6d044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81Y2E0OGItYzk2Ni00ZTYzLTg2OGQtYTg1YzFiMmVjMWNl
LzEvcUJWWWhUX3J4NTJCUHJMQXpseTNOdnR6d044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6ZCfktq
+ykupebEHynfQ+ZStiqQkKtYqthhrw4IIZnHuG5Vt7lO2OkGG6rfnfFFcsQvkP3K
VpQUJBq0Z/JaJo6bMSn/BdRDtaV8+jmaZSBvWa03rdaSdZo/unhpxEBJvxJo067s
QzFWNt36pdTBbFWcm1iy1NQ+DyL0Kzx/KAoZQL9OHZ1kQ8jGQGJldu1GTo2EqlL4
bwE2oCYZQlXpS14iG6ZtJUuArj/msmRWAZ5QpTQx+p7jKcA5j46dRkArq33OmJoX
a5TpaI7lMVHsv1/Cm1TTv0xppVl4VrOZf25X5tl2c6Vj/caQC5ZUZgf8HrLdGsOP
oyWzAHQI2JpCDw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:47 2025 by rpki-client