Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier: meYG9XaajnH6Ct3I+FRM3Xg7VYsFkPTzqgtq/u6tzL4=
Subject key identifier: 6F:0B:D4:33:A8:DE:F9:3C:7B:6B:09:C9:4A:E8:C1:74:4F:1E:8C:10
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 01969002FA4E67755539CF27CEA8A54D188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number: 31
Signing time: Fri 02 May 2025 08:00:36 +0000
Manifest this update: Fri 02 May 2025 08:00:36 +0000
Manifest next update: Sat 03 May 2025 08:00:36 +0000
Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: qaadzxEn6QCASAWwhD4LMIgBp0MSnvBkb2XzI9PJjIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:fa:4e:67:75:55:39:cf:27:ce:a8:a5:4d:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: May 2 08:00:36 2025 GMT
Not After : May 3 08:00:36 2025 GMT
Subject: CN=6f0bd433a8def93c7b6b09c94ae8c1744f1e8c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:37:99:6a:d8:5e:29:28:8f:d1:f9:70:0b:
78:c6:c6:fd:d9:0e:b8:7e:ea:27:ac:e6:1b:f9:ab:
66:aa:50:e7:29:ba:7e:0d:45:05:87:87:3d:49:0e:
33:9d:29:24:a5:d1:0b:e6:b6:c6:07:87:80:da:a7:
14:8e:e0:14:01:e2:cd:01:29:b1:0c:80:ba:ef:40:
3e:bc:89:b7:34:26:fa:99:6b:56:91:75:60:dc:44:
d3:d9:92:bf:2f:6a:31:1a:95:40:03:f5:44:df:5d:
5e:86:5e:70:8d:91:b2:6a:d4:99:d2:17:90:e7:da:
fa:2e:a3:6a:65:a7:49:19:2d:1c:cf:0d:ec:2f:64:
6b:f4:e8:d8:78:8f:78:fe:0a:c1:a4:8b:26:2f:df:
9c:e9:eb:62:19:85:0b:b6:5e:47:67:ba:16:9f:2c:
94:e4:a9:6e:2e:45:53:6f:22:99:09:d9:26:98:a3:
48:ea:4f:7b:4b:f8:f1:1a:fd:4e:87:54:e7:14:d3:
64:dc:37:76:86:75:6c:9a:e7:fe:2f:64:e3:17:d2:
10:3f:51:f5:4e:b7:f8:cd:38:bc:ff:be:b4:21:03:
a3:0e:3a:a5:95:76:be:91:50:8c:51:0e:71:16:fe:
89:cc:20:ad:b3:5a:a9:1d:9b:a2:29:2b:31:d7:b8:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0B:D4:33:A8:DE:F9:3C:7B:6B:09:C9:4A:E8:C1:74:4F:1E:8C:10
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8b:9d:c0:39:14:4d:34:a3:32:42:05:c3:5a:75:ac:e4:7f:
fd:11:ee:50:de:d9:3f:5a:75:57:0b:7f:ba:91:7b:1a:3b:09:
f7:1e:2b:09:67:ad:78:9e:cb:6a:7f:59:43:34:55:c1:e8:53:
d9:d3:db:49:6b:6b:61:bf:85:7e:9f:a6:fa:b8:db:cb:8c:bc:
31:2b:88:a5:5f:95:d4:08:d1:d0:90:e7:0b:51:23:aa:d3:1c:
4e:c4:23:14:6a:f1:cf:03:87:fb:c1:8f:5d:d8:1a:47:a6:12:
df:16:5c:fa:61:75:99:f4:1e:7e:fc:b4:2a:68:63:63:98:67:
0b:64:c6:2a:71:05:78:a8:f6:e9:88:99:97:cb:3a:06:90:9f:
b4:51:af:6a:bb:8b:6c:e8:ba:9d:e1:41:6a:6a:15:fd:65:31:
10:01:d6:e7:b2:c7:97:72:84:25:5a:aa:0c:a9:aa:e4:94:0a:
99:c4:c1:4f:44:88:14:d1:14:0c:31:6d:aa:d4:82:a5:e5:c8:
69:d0:34:d9:da:ee:76:8f:c0:ad:87:7f:00:19:19:81:bc:ae:
31:ea:c2:64:65:7b:a1:48:cd:3e:b8:b2:3a:31:0b:20:4a:db:
2b:5f:3b:d2:5c:73:b0:c6:e6:79:3f:31:ed:a9:2e:0b:b7:73:
db:98:d2:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaQAvpOZ3VVOc8nzqilTRiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdhZjA4ZjE5YWExNWJlZDNmNDFiZTYyYjM2MzAzZGNj
N2RjZjQwHhcNMjUwNTAyMDgwMDM2WhcNMjUwNTAzMDgwMDM2WjAzMTEwLwYDVQQD
Eyg2ZjBiZDQzM2E4ZGVmOTNjN2I2YjA5Yzk0YWU4YzE3NDRmMWU4YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2U3mWrYXikoj9H5cAt4xsb92Q64
fuonrOYb+atmqlDnKbp+DUUFh4c9SQ4znSkkpdEL5rbGB4eA2qcUjuAUAeLNASmx
DIC670A+vIm3NCb6mWtWkXVg3ETT2ZK/L2oxGpVAA/VE311ehl5wjZGyatSZ0heQ
59r6LqNqZadJGS0czw3sL2Rr9OjYeI94/grBpIsmL9+c6etiGYULtl5HZ7oWnyyU
5KluLkVTbyKZCdkmmKNI6k97S/jxGv1Oh1TnFNNk3Dd2hnVsmuf+L2TjF9IQP1H1
Trf4zTi8/760IQOjDjqllXa+kVCMUQ5xFv6JzCCts1qpHZuiKSsx17giJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8L1DOo3vk8e2sJyUrowXRPHowQMB8GA1UdIwQY
MBaAFEE3rwjxmqFb7T9BvmKzYwPcx9z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTkt
N2Y1ZWMyNzVjYWE0LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTktN2Y1ZWMyNzVjYWE0
LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIudwDkU
TTSjMkIFw1p1rOR//RHuUN7ZP1p1Vwt/upF7GjsJ9x4rCWeteJ7Lan9ZQzRVwehT
2dPbSWtrYb+Ffp+m+rjby4y8MSuIpV+V1AjR0JDnC1EjqtMcTsQjFGrxzwOH+8GP
XdgaR6YS3xZc+mF1mfQefvy0KmhjY5hnC2TGKnEFeKj26YiZl8s6BpCftFGvaruL
bOi6neFBamoV/WUxEAHW57LHl3KEJVqqDKmq5JQKmcTBT0SIFNEUDDFtqtSCpeXI
adA02drudo/ArYd/ABkZgbyuMerCZGV7oUjNPriyOjELIErbK1870lxzsMbmeT8x
7akuC7dz25jSNw==
-----END CERTIFICATE-----
Generated at Fri May 2 13:50:56 2025 by rpki-client