Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: Y7zGtHSCNN72rsgVzB/7cGP5bN+2hYz4I8DphsVqsKo=
Subject key identifier: 4C:0F:F3:DD:9D:9A:79:EE:33:86:30:A6:B6:7E:35:D0:CD:0A:25:5D
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 019687DBCC0CAC851854F60B820696321F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0903
Signing time: Wed 30 Apr 2025 18:00:50 +0000
Manifest this update: Wed 30 Apr 2025 18:00:50 +0000
Manifest next update: Thu 01 May 2025 18:00:50 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: rJmoNRkFexhEU9HWacSLcZ7goE5JTMrAdvdhr/dTjpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:cc:0c:ac:85:18:54:f6:0b:82:06:96:32:1f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Apr 30 18:00:50 2025 GMT
Not After : May 1 18:00:50 2025 GMT
Subject: CN=4c0ff3dd9d9a79ee338630a6b67e35d0cd0a255d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3b:29:2d:8e:8b:cf:26:24:b9:2c:9a:9e:f6:
a1:76:1b:9e:73:cc:00:2a:af:33:9d:1f:85:f1:5f:
4c:54:2b:f5:a0:48:16:e7:c4:60:11:4e:1d:9f:7d:
46:56:e2:5c:9d:5f:c9:f8:91:4d:34:75:3e:af:15:
c8:80:13:2b:aa:b8:0e:ac:a6:cf:45:35:fc:b5:d8:
c0:1a:38:86:75:06:54:96:69:4e:a9:aa:3d:e4:d7:
b9:a6:8d:d5:a4:18:40:ef:13:62:7a:a7:d4:6f:58:
d1:75:fb:6c:17:0c:f4:fa:de:9c:d0:cd:0d:d8:2d:
eb:32:fc:fc:bc:b4:b2:60:26:1a:b2:b2:63:a0:f2:
b0:2b:c6:89:7b:1b:38:7b:35:d1:c8:f2:26:01:3e:
d2:f9:b6:9e:0c:4b:12:f9:23:01:bf:a5:39:9b:86:
88:88:3a:78:a1:54:a7:6b:bd:51:8d:81:70:7d:b4:
09:2d:c2:5c:7c:1f:c4:40:23:a5:51:73:8e:d5:42:
29:53:48:66:10:42:8b:19:e0:75:c1:e6:d0:0e:b6:
ac:20:d3:1d:d6:05:de:3b:b3:f9:35:d4:14:4c:c1:
a0:77:64:e7:e3:b4:4a:3b:29:97:4e:94:78:a8:07:
9f:bb:8d:4f:25:16:d4:54:0b:66:49:0d:88:fe:1f:
7b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:F3:DD:9D:9A:79:EE:33:86:30:A6:B6:7E:35:D0:CD:0A:25:5D
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:51:bd:d7:b2:3f:91:a5:f8:84:1f:37:c3:82:7f:81:54:bc:
96:41:4b:21:50:78:7b:77:71:20:32:be:07:98:6c:45:61:61:
a7:27:9b:5e:5e:b5:d9:8d:c6:72:66:96:75:06:51:e6:95:3e:
9c:c7:8e:2c:c0:b8:55:60:9e:f3:3c:1e:21:10:7f:78:7a:df:
10:ef:bd:9e:83:80:d4:66:52:37:69:43:b5:6c:83:31:6a:2d:
e8:1b:3d:d9:8d:b5:bf:0b:09:72:6a:42:ed:74:5f:6a:71:da:
11:b0:67:21:83:76:17:34:d0:a3:4b:3a:79:c9:be:f1:50:3a:
ed:14:d9:24:7d:ff:fc:89:c4:e1:01:b0:d3:8c:40:2f:72:27:
78:df:c0:f4:a9:2f:b7:e6:77:47:ea:d1:a6:63:f9:4a:4a:e6:
3b:38:aa:c3:46:fc:a2:dd:6f:9c:97:1b:59:29:ee:4b:2e:af:
e4:68:93:38:dd:ca:25:b6:9e:b9:5a:e5:4d:68:20:e0:22:8e:
ec:6c:e3:ef:4b:6a:0f:63:30:35:06:a7:24:48:3d:de:15:7f:
04:5c:bf:9e:d6:8e:a4:0b:33:b3:83:f5:83:9f:71:22:94:03:
99:39:47:60:d9:28:6f:c8:75:8e:dd:04:f1:72:18:8a:f1:25:
e4:a4:ba:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH28wMrIUYVPYLggaWMh9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWMyOWM5NWQyNDhjYmZmYTc0NGFiMzRlNDdlYWNjYTcz
NTUwZDEwHhcNMjUwNDMwMTgwMDUwWhcNMjUwNTAxMTgwMDUwWjAzMTEwLwYDVQQD
Eyg0YzBmZjNkZDlkOWE3OWVlMzM4NjMwYTZiNjdlMzVkMGNkMGEyNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jspLY6LzyYkuSyanvahdhuec8wA
Kq8znR+F8V9MVCv1oEgW58RgEU4dn31GVuJcnV/J+JFNNHU+rxXIgBMrqrgOrKbP
RTX8tdjAGjiGdQZUlmlOqao95Ne5po3VpBhA7xNieqfUb1jRdftsFwz0+t6c0M0N
2C3rMvz8vLSyYCYasrJjoPKwK8aJexs4ezXRyPImAT7S+baeDEsS+SMBv6U5m4aI
iDp4oVSna71RjYFwfbQJLcJcfB/EQCOlUXOO1UIpU0hmEEKLGeB1webQDrasINMd
1gXeO7P5NdQUTMGgd2Tn47RKOymXTpR4qAefu41PJRbUVAtmSQ2I/h97kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwP892dmnnuM4YwprZ+NdDNCiVdMB8GA1UdIwQY
MBaAFKscKcldJIy/+nRKs05H6synNVDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQt
ZWE2Njg0NDE0OWVlLzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQtZWE2Njg0NDE0OWVl
LzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFG917I/
kaX4hB83w4J/gVS8lkFLIVB4e3dxIDK+B5hsRWFhpyebXl612Y3GcmaWdQZR5pU+
nMeOLMC4VWCe8zweIRB/eHrfEO+9noOA1GZSN2lDtWyDMWot6Bs92Y21vwsJcmpC
7XRfanHaEbBnIYN2FzTQo0s6ecm+8VA67RTZJH3//InE4QGw04xAL3IneN/A9Kkv
t+Z3R+rRpmP5SkrmOziqw0b8ot1vnJcbWSnuSy6v5GiTON3KJbaeuVrlTWgg4CKO
7Gzj70tqD2MwNQanJEg93hV/BFy/ntaOpAszs4P1g59xIpQDmTlHYNkob8h1jt0E
8XIYivEl5KS66A==
-----END CERTIFICATE-----
Generated at Thu May 1 04:44:59 2025 by rpki-client