Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: WaShOtILNXSLLPfmPgSnMrPx7Kvs8r6/Mxy8igOgHeQ=
Subject key identifier: 8B:D8:31:91:CC:7A:79:D8:A0:D9:6A:A7:7A:6E:AD:17:D7:58:A9:3E
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 019681D9307FBB2571CAD5FE56342BCB80F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 12DE
Signing time: Tue 29 Apr 2025 14:00:16 +0000
Manifest this update: Tue 29 Apr 2025 14:00:16 +0000
Manifest next update: Wed 30 Apr 2025 14:00:16 +0000
Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: mF7XJCW6Q43M89m59U6dBjXJTkOOkOgBcEEwr68TNpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:30:7f:bb:25:71:ca:d5:fe:56:34:2b:cb:80:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Apr 29 14:00:16 2025 GMT
Not After : Apr 30 14:00:16 2025 GMT
Subject: CN=8bd83191cc7a79d8a0d96aa77a6ead17d758a93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:32:95:d9:dd:1d:ac:8f:64:00:28:21:e6:
0b:22:2d:02:6d:18:e5:b8:49:cf:c9:f1:95:8a:b7:
bf:c5:e4:67:32:be:d7:08:c4:70:b4:c4:a7:e2:30:
a0:71:7d:e8:bb:8c:9a:6a:9e:a8:a9:d9:4f:bb:dd:
12:84:8b:7f:2d:ff:62:24:4b:7d:3e:55:bf:9d:02:
e5:e9:30:78:79:fa:c0:06:db:d5:bc:e5:c7:5d:7d:
04:34:a6:68:a9:03:b9:bc:19:72:41:4c:fc:12:e4:
bf:2d:2f:5f:3e:a3:c2:67:ae:82:2b:8e:6f:a7:d8:
ea:9b:e8:f0:af:7d:cd:92:0d:91:5d:db:3f:d6:49:
3b:4e:cc:53:69:b7:8a:48:12:e4:48:0d:75:fc:a4:
45:7d:ef:6f:d6:28:23:d1:76:b0:c1:f8:57:a5:d1:
0d:11:5b:e3:c2:42:8a:bb:4e:c5:0e:e0:5d:23:b5:
8b:bc:39:ab:e1:75:9f:ee:93:14:a3:15:e5:67:1b:
d9:5d:43:0b:6f:25:5d:c0:00:db:58:f7:37:30:19:
16:e6:be:6e:22:ed:5d:65:dc:42:4d:ec:99:50:da:
2c:b2:4d:5f:98:83:0d:9e:d7:ec:b2:c1:9f:15:e5:
79:8e:22:3a:a9:ff:11:e0:05:b1:23:d1:d0:6e:60:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:31:91:CC:7A:79:D8:A0:D9:6A:A7:7A:6E:AD:17:D7:58:A9:3E
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:27:5a:97:7a:24:12:f4:8c:b5:c2:67:02:25:64:3f:38:ae:
f9:f4:ec:56:ce:0b:b4:2e:10:00:2a:81:83:85:ea:38:5e:e4:
d7:af:f8:67:12:d3:b1:03:f3:83:ff:fa:58:db:58:ad:7c:ab:
dc:7b:3d:58:df:c1:ae:cc:82:30:77:0f:fc:9f:74:b2:0c:e5:
89:ca:7e:a5:8e:13:36:9a:a5:52:a7:d7:8a:fd:37:3a:62:29:
f3:ee:6b:99:50:78:79:99:d8:e7:84:2f:dd:3e:3f:79:52:64:
e9:73:bc:b6:23:80:f8:ad:4c:43:9b:45:96:f9:73:0a:75:18:
bc:52:48:17:cb:dd:e8:fd:5e:cd:7d:8c:88:26:2a:3c:c9:6a:
8c:09:fa:2a:65:46:c2:89:16:3f:5d:4c:8e:26:41:47:85:0d:
74:61:1b:af:96:6f:14:dc:88:19:3b:86:2f:6e:0a:47:d0:91:
23:11:c4:3e:e2:a3:fb:82:26:e9:91:7d:90:2a:ec:08:8d:c0:
d5:2c:c0:c5:b2:2b:97:45:60:45:90:f4:d9:dc:dc:f4:3b:16:
e0:86:b2:ed:23:c3:fe:12:17:33:8f:bc:20:19:ba:0e:d5:15:
bb:a1:ea:ce:0e:16:54:69:a4:e6:34:61:6c:61:73:85:0a:8c:
5f:ea:3c:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaB2TB/uyVxytX+VjQry4D1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWE3YTc1NzZiMWIyMjk1OTBjMDkwZmQzNTZjMzgyZGZm
MzE1YjcwHhcNMjUwNDI5MTQwMDE2WhcNMjUwNDMwMTQwMDE2WjAzMTEwLwYDVQQD
Eyg4YmQ4MzE5MWNjN2E3OWQ4YTBkOTZhYTc3YTZlYWQxN2Q3NThhOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xMyldndHayPZAAoIeYLIi0CbRjl
uEnPyfGVire/xeRnMr7XCMRwtMSn4jCgcX3ou4yaap6oqdlPu90ShIt/Lf9iJEt9
PlW/nQLl6TB4efrABtvVvOXHXX0ENKZoqQO5vBlyQUz8EuS/LS9fPqPCZ66CK45v
p9jqm+jwr33Nkg2RXds/1kk7TsxTabeKSBLkSA11/KRFfe9v1igj0XawwfhXpdEN
EVvjwkKKu07FDuBdI7WLvDmr4XWf7pMUoxXlZxvZXUMLbyVdwADbWPc3MBkW5r5u
Iu1dZdxCTeyZUNossk1fmIMNntfsssGfFeV5jiI6qf8R4AWxI9HQbmCf3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvYMZHMennYoNlqp3purRfXWKk+MB8GA1UdIwQY
MBaAFKiqenV2sbIpWQwJD9NWw4Lf8xW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUt
Zjc1MzQ1ODQ4ZTNmLzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUtZjc1MzQ1ODQ4ZTNm
LzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSdal3ok
EvSMtcJnAiVkPziu+fTsVs4LtC4QACqBg4XqOF7k16/4ZxLTsQPzg//6WNtYrXyr
3Hs9WN/BrsyCMHcP/J90sgzlicp+pY4TNpqlUqfXiv03OmIp8+5rmVB4eZnY54Qv
3T4/eVJk6XO8tiOA+K1MQ5tFlvlzCnUYvFJIF8vd6P1ezX2MiCYqPMlqjAn6KmVG
wokWP11MjiZBR4UNdGEbr5ZvFNyIGTuGL24KR9CRIxHEPuKj+4Im6ZF9kCrsCI3A
1SzAxbIrl0VgRZD02dzc9DsW4Iay7SPD/hIXM4+8IBm6DtUVu6Hqzg4WVGmk5jRh
bGFzhQqMX+o8wQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:22:43 2025 by rpki-client