Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: 539EMrOTZ828DxVo5qZGNdNset7KMPSPZjt6/08L1ms=
Subject key identifier: 9B:F1:C4:AA:F6:5A:51:5A:7B:6D:8C:0F:7A:09:9C:01:45:25:7F:44
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 01967FB3FD7B61D2642BFA26AA7D91A60FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 07B3
Signing time: Tue 29 Apr 2025 04:00:24 +0000
Manifest this update: Tue 29 Apr 2025 04:00:24 +0000
Manifest next update: Wed 30 Apr 2025 04:00:24 +0000
Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: 00cSdh7AeJBFJlaEBMV6HwXfMaizXGsrIL63nTt5UU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b3:fd:7b:61:d2:64:2b:fa:26:aa:7d:91:a6:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: Apr 29 04:00:24 2025 GMT
Not After : Apr 30 04:00:24 2025 GMT
Subject: CN=9bf1c4aaf65a515a7b6d8c0f7a099c0145257f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:f1:30:0b:40:bb:58:12:52:e4:72:79:67:
b1:ee:15:28:4f:3a:7e:d0:2c:21:0b:35:7d:37:03:
8a:29:2f:06:29:74:32:84:1c:89:37:28:f4:cd:15:
9c:c3:04:3b:6f:62:7b:16:70:59:ab:62:cb:6a:8d:
6d:07:34:b1:3c:a8:8e:7a:e0:4c:a3:57:ef:f1:6d:
c3:83:c3:49:2d:ea:40:c4:2f:19:65:e6:4e:d0:8d:
c3:d5:4e:4f:77:49:fe:eb:29:02:c0:54:b5:46:05:
52:ab:e7:85:1d:bc:39:24:e8:4a:ca:47:2b:b0:7a:
5c:ea:20:bf:0e:d2:e1:21:4b:3a:00:a8:76:cb:2a:
03:f4:ae:31:f1:44:a0:36:04:5a:4d:56:7f:88:7b:
3e:ea:6a:4d:a6:79:58:08:85:10:ed:2b:97:67:96:
1b:0e:1f:ca:1d:58:e9:70:b4:ec:5d:71:a9:b0:d2:
82:50:84:10:d2:35:24:98:a4:ef:e1:09:57:54:92:
b1:d7:9b:16:d9:40:d0:25:b1:a1:e8:73:10:f3:94:
7a:a8:d1:cc:09:9b:3c:6d:82:d2:c9:6a:7b:00:73:
66:6b:45:48:a4:26:e7:a3:69:6a:99:94:4c:6a:50:
75:6e:ef:d9:ce:3c:53:e7:c6:5c:c8:2c:30:90:84:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:C4:AA:F6:5A:51:5A:7B:6D:8C:0F:7A:09:9C:01:45:25:7F:44
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:b6:8c:b6:ad:16:31:43:8f:e5:0d:96:00:5e:04:cf:eb:
66:83:89:7b:72:35:ba:47:59:40:07:d8:79:56:a5:56:42:4e:
16:6a:5c:02:d5:e9:66:e2:55:14:8f:0c:2c:e0:32:7c:42:52:
7c:1a:cb:4e:cf:24:a6:1b:d2:13:6f:58:06:66:e9:32:cf:5a:
c4:f4:97:1b:69:98:43:a4:56:0c:c2:fc:13:c8:e1:77:e0:81:
0f:80:b7:b7:2c:b4:3a:a9:3d:1e:a2:ab:f7:0b:cf:84:c5:dd:
1e:81:e8:e4:6b:6f:ff:62:41:ea:a8:fb:53:c0:38:9f:37:2a:
7b:e9:11:be:4b:ec:55:c8:1b:ba:27:8a:32:9e:b4:f8:20:07:
ec:7d:84:fc:a6:93:ae:ba:86:ba:97:1b:f5:9a:29:13:7c:07:
48:7e:89:7d:e7:4e:70:0b:8f:2b:05:c2:08:86:72:c4:d4:4b:
61:40:7e:ca:e5:01:45:8e:be:bf:29:60:4b:60:10:4c:d8:fc:
cf:d0:5d:45:92:7c:38:28:aa:2e:42:d3:b3:78:e5:c5:4e:ed:
5f:a2:9d:b7:82:40:da:33:32:f4:8a:5b:27:05:d1:d1:17:34:
79:e7:6d:b0:69:34:16:1f:8b:82:97:13:42:65:0c:ab:36:45:
83:96:af:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/s/17YdJkK/omqn2Rpg/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTdjMWEyNTM3ZmQwMzU0MDg3NTk5Nzg3Y2FhODQyZmVk
NjBiN2YwHhcNMjUwNDI5MDQwMDI0WhcNMjUwNDMwMDQwMDI0WjAzMTEwLwYDVQQD
Eyg5YmYxYzRhYWY2NWE1MTVhN2I2ZDhjMGY3YTA5OWMwMTQ1MjU3ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmnxMAtAu1gSUuRyeWex7hUoTzp+
0CwhCzV9NwOKKS8GKXQyhByJNyj0zRWcwwQ7b2J7FnBZq2LLao1tBzSxPKiOeuBM
o1fv8W3Dg8NJLepAxC8ZZeZO0I3D1U5Pd0n+6ykCwFS1RgVSq+eFHbw5JOhKykcr
sHpc6iC/DtLhIUs6AKh2yyoD9K4x8USgNgRaTVZ/iHs+6mpNpnlYCIUQ7SuXZ5Yb
Dh/KHVjpcLTsXXGpsNKCUIQQ0jUkmKTv4QlXVJKx15sW2UDQJbGh6HMQ85R6qNHM
CZs8bYLSyWp7AHNma0VIpCbno2lqmZRMalB1bu/ZzjxT58ZcyCwwkIR1OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvxxKr2WlFae22MD3oJnAFFJX9EMB8GA1UdIwQY
MBaAFKmnwaJTf9A1QIdZl4fKqEL+1gt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEt
NDhmMWU1MTA5MDQ3LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEtNDhmMWU1MTA5MDQ3
LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5m2jLat
FjFDj+UNlgBeBM/rZoOJe3I1ukdZQAfYeValVkJOFmpcAtXpZuJVFI8MLOAyfEJS
fBrLTs8kphvSE29YBmbpMs9axPSXG2mYQ6RWDML8E8jhd+CBD4C3tyy0Oqk9HqKr
9wvPhMXdHoHo5Gtv/2JB6qj7U8A4nzcqe+kRvkvsVcgbuieKMp60+CAH7H2E/KaT
rrqGupcb9ZopE3wHSH6JfedOcAuPKwXCCIZyxNRLYUB+yuUBRY6+vylgS2AQTNj8
z9BdRZJ8OCiqLkLTs3jlxU7tX6Kdt4JA2jMy9IpbJwXR0Rc0eedtsGk0Fh+LgpcT
QmUMqzZFg5avMA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:33:02 2025 by rpki-client