Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: qEfRAPhC/26tP/BlomXd+ejm9yIAWxtH+OO8tlh8u3Q=
Subject key identifier: 59:2D:84:91:AC:69:1C:67:0A:3B:1B:38:19:31:EC:35:ED:5A:41:94
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 01967EA1677C13A6C3358026043C550687FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 23:00:29 +0000
Manifest this update: Mon 28 Apr 2025 23:00:29 +0000
Manifest next update: Tue 29 Apr 2025 23:00:29 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: bh36k+A6Yv0LFfw5U+EsMYy9lY6J5Bh6JW62IEVgwhA=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:67:7c:13:a6:c3:35:80:26:04:3c:55:06:87:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Apr 28 23:00:29 2025 GMT
Not After : Apr 29 23:00:29 2025 GMT
Subject: CN=592d8491ac691c670a3b1b381931ec35ed5a4194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:a4:05:eb:9f:36:5f:66:f3:fd:dc:e3:6d:
41:a0:a1:61:51:bc:a2:bd:65:bb:05:60:d8:db:fb:
07:bc:da:d7:b2:79:9d:77:80:3e:10:99:a0:7d:4a:
1e:ec:84:81:d6:cb:2e:99:9c:20:08:6c:a8:88:e7:
14:37:ed:de:1e:b9:c8:8a:dc:b7:35:5c:6b:63:3e:
b8:73:5f:1e:46:3d:05:b5:86:c0:c7:38:e3:de:61:
b3:4c:35:15:9b:c6:77:03:44:62:1b:82:1e:48:87:
99:3f:0b:08:34:d1:cb:19:15:a0:3b:a7:51:05:53:
d7:11:47:df:de:a7:3d:19:5f:8e:26:45:a5:74:95:
f8:cb:61:ec:a6:22:31:d4:17:19:9f:f5:ce:56:4a:
97:aa:b0:7c:6e:c4:43:1c:f9:5c:b3:a1:74:cc:93:
88:85:a1:50:f3:4e:0c:a0:a7:3b:aa:5b:a4:ea:d7:
0a:3f:6d:6a:6c:59:61:7b:56:ff:94:58:95:4e:13:
86:6c:27:54:c1:c9:13:aa:d6:73:64:05:94:6d:73:
cc:94:04:52:6e:b1:a7:87:cd:bf:11:0f:b2:08:3a:
85:bf:61:34:41:9b:18:6c:b0:8a:2f:a1:51:bf:20:
a2:2a:42:8b:90:a5:41:a9:e5:7f:d5:2b:34:be:ba:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:84:91:AC:69:1C:67:0A:3B:1B:38:19:31:EC:35:ED:5A:41:94
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1e:a0:15:f0:f4:8b:22:e4:24:d4:3a:4b:0b:30:8a:1e:62:
fb:d6:0b:f6:bb:6a:3c:c9:75:d2:e2:6b:b7:f0:09:47:ae:84:
5c:5e:b2:8f:fe:ce:c3:f7:6f:de:3e:79:b2:47:4f:a6:44:f0:
c7:0f:7c:cf:44:63:d3:c2:47:a7:4a:f2:cb:13:e7:07:e5:34:
40:e7:ae:32:62:ce:28:8e:b3:0d:8b:ff:8c:ec:d1:0c:bb:44:
4b:bd:fd:fd:23:4d:5b:06:d0:7f:7c:c1:ab:98:cb:e5:ef:38:
f5:b6:f0:58:18:ef:d3:b1:57:3c:ff:d7:28:a1:93:73:88:f9:
c1:04:2d:9f:6e:86:15:01:a3:0e:46:e4:fa:a7:c1:bb:ae:81:
97:41:ee:5e:e1:74:e0:f4:86:17:d2:0e:f9:bd:bc:81:98:77:
9b:b8:1a:c6:4e:6c:43:64:64:10:ab:03:08:6d:a2:0f:8d:7d:
01:f6:f3:a9:d1:11:0c:22:2e:bb:5a:66:e6:31:da:c0:89:9c:
6c:98:bb:e5:61:9c:0c:a5:4f:17:a5:86:97:76:71:89:74:52:
98:27:8e:39:98:58:51:3a:77:b6:ec:12:0a:be:f3:b4:30:ba:
c6:95:4f:47:68:8c:a0:9d:4a:9a:d7:0d:e1:87:7f:40:e7:ca:
1c:8e:75:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oWd8E6bDNYAmBDxVBof8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2JhNDM1NzY2Njc2NjRhZDZmMjlhNjY2MjcwZTMzNTc4
MzZmMWEwHhcNMjUwNDI4MjMwMDI5WhcNMjUwNDI5MjMwMDI5WjAzMTEwLwYDVQQD
Eyg1OTJkODQ5MWFjNjkxYzY3MGEzYjFiMzgxOTMxZWMzNWVkNWE0MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp6kBeufNl9m8/3c421BoKFhUbyi
vWW7BWDY2/sHvNrXsnmdd4A+EJmgfUoe7ISB1ssumZwgCGyoiOcUN+3eHrnIity3
NVxrYz64c18eRj0FtYbAxzjj3mGzTDUVm8Z3A0RiG4IeSIeZPwsINNHLGRWgO6dR
BVPXEUff3qc9GV+OJkWldJX4y2HspiIx1BcZn/XOVkqXqrB8bsRDHPlcs6F0zJOI
haFQ804MoKc7qluk6tcKP21qbFlhe1b/lFiVThOGbCdUwckTqtZzZAWUbXPMlARS
brGnh82/EQ+yCDqFv2E0QZsYbLCKL6FRvyCiKkKLkKVBqeV/1Ss0vrrx0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkthJGsaRxnCjsbOBkx7DXtWkGUMB8GA1UdIwQY
MBaAFKt7pDV2ZnZkrW8ppmYnDjNXg28aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYt
MjNhYzc1ODA0OGVjLzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8wZTFmOTEtYzNlZC00MzVkLWE0NWYtMjNhYzc1ODA0OGVj
LzEvcTN1a05YWm1kbVN0YnltbVppY09NMWVEYnhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh6gFfD0
iyLkJNQ6Swswih5i+9YL9rtqPMl10uJrt/AJR66EXF6yj/7Ow/dv3j55skdPpkTw
xw98z0Rj08JHp0ryyxPnB+U0QOeuMmLOKI6zDYv/jOzRDLtES739/SNNWwbQf3zB
q5jL5e849bbwWBjv07FXPP/XKKGTc4j5wQQtn26GFQGjDkbk+qfBu66Bl0HuXuF0
4PSGF9IO+b28gZh3m7gaxk5sQ2RkEKsDCG2iD419AfbzqdERDCIuu1pm5jHawImc
bJi75WGcDKVPF6WGl3ZxiXRSmCeOOZhYUTp3tuwSCr7ztDC6xpVPR2iMoJ1KmtcN
4Yd/QOfKHI51Mg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:26:35 2025 by rpki-client