Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: AKeG5F91WiKyDiv8zBm2capM0MpxUed00oFHmqrkXJQ=
Subject key identifier: 2D:F2:DD:00:14:63:AD:90:85:50:E6:EA:76:F4:6F:E1:AD:A9:2C:1F
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 019690DEA28150617F245D749FF006AEF7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 010A
Signing time: Fri 02 May 2025 12:00:31 +0000
Manifest this update: Fri 02 May 2025 12:00:31 +0000
Manifest next update: Sat 03 May 2025 12:00:31 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: dVmAXYiwWp3SbQG0SB+mhOwsY2U/5MasJf00AcfUC2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:a2:81:50:61:7f:24:5d:74:9f:f0:06:ae:f7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: May 2 12:00:31 2025 GMT
Not After : May 3 12:00:31 2025 GMT
Subject: CN=2df2dd001463ad908550e6ea76f46fe1ada92c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:81:74:bb:e1:a7:76:7d:7b:89:31:b4:6b:
c1:7c:1a:3d:fc:68:0c:cd:98:97:05:ee:69:4c:5a:
4a:48:c6:ca:32:72:f3:bd:ea:f2:c6:0d:2d:f5:26:
11:89:c4:8e:e7:cf:f7:0e:69:87:0f:e6:ca:3d:bc:
f8:5b:c2:4d:2e:2e:2b:63:e2:f8:ff:00:80:a7:22:
a3:3d:d4:5f:11:f0:6d:90:c9:69:6b:f9:2d:08:ca:
49:cb:87:20:22:1b:6d:28:e8:ed:0a:dd:54:ff:7e:
85:b3:a9:6b:e1:f4:96:14:d4:65:20:71:41:b6:87:
2b:3a:cd:55:2a:8a:43:96:3c:dd:47:8b:79:78:4b:
dc:36:2d:80:1a:1d:c5:25:05:ff:0e:5f:b2:a2:dc:
8c:c4:6a:5c:25:02:d7:f8:53:28:2c:05:88:76:9b:
a2:9c:3a:27:db:45:01:d8:6b:fe:1c:0c:52:69:c3:
3d:c0:cc:20:8d:2e:35:fd:be:ad:7a:73:10:ec:22:
bd:a5:77:0a:6d:73:47:a3:25:67:ab:bb:39:a1:9c:
13:06:dd:d3:e1:5a:4e:ea:20:a2:82:a1:59:f8:08:
c8:b7:f2:f8:77:02:cd:15:fd:54:ce:cb:93:63:d3:
3d:df:cb:d0:75:9c:c2:47:ea:26:8c:7c:b2:ba:5c:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F2:DD:00:14:63:AD:90:85:50:E6:EA:76:F4:6F:E1:AD:A9:2C:1F
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8b:17:04:df:21:b8:3a:a6:41:8c:52:e2:aa:40:cd:d0:21:
f5:ec:06:c9:ae:ad:2b:dc:1b:4a:6f:f1:53:67:3c:fd:9e:f6:
dd:05:30:4e:bd:92:c4:1d:f6:c5:e2:95:86:eb:04:47:6c:6f:
47:52:03:d3:cf:b3:d7:cf:49:1c:26:8d:46:1a:55:5c:bf:4e:
54:fd:5d:f9:6b:1f:c8:ef:e0:93:61:e8:b3:42:8f:ff:ac:4f:
8c:c5:8d:4e:75:11:90:d5:09:37:08:a6:5c:e2:59:77:44:32:
69:e0:10:0c:6a:42:42:9b:19:9d:c9:03:05:ba:c9:05:a7:ca:
1d:ac:ec:e8:ea:5c:8b:64:01:56:21:32:92:a6:d9:05:39:8c:
90:75:bb:6e:76:d3:99:36:17:4d:22:a7:08:70:e1:98:3a:00:
55:36:ab:a9:2c:5e:b2:2c:ca:64:a9:46:75:8b:13:96:d1:af:
0f:dd:68:dc:95:6c:c9:03:a7:00:df:91:b9:6e:b0:a0:ca:9f:
9b:5a:a4:e7:53:e1:9f:68:93:02:52:ff:39:f1:96:a8:e7:0c:
05:9d:6f:aa:de:7c:8f:df:ba:55:9f:05:97:9a:0d:6d:6c:fb:
66:96:f9:77:0f:32:b4:28:82:ef:b1:b4:51:4c:b3:33:b9:40:
b0:37:af:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaQ3qKBUGF/JF10n/AGrvfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYWM2MTk3Nzk5ZmQ2OGI2ZTViYmUwYjU3ZTY1MmZkODBk
ZDM2MjEwHhcNMjUwNTAyMTIwMDMxWhcNMjUwNTAzMTIwMDMxWjAzMTEwLwYDVQQD
EygyZGYyZGQwMDE0NjNhZDkwODU1MGU2ZWE3NmY0NmZlMWFkYTkyYzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfSBdLvhp3Z9e4kxtGvBfBo9/GgM
zZiXBe5pTFpKSMbKMnLzveryxg0t9SYRicSO58/3DmmHD+bKPbz4W8JNLi4rY+L4
/wCApyKjPdRfEfBtkMlpa/ktCMpJy4cgIhttKOjtCt1U/36Fs6lr4fSWFNRlIHFB
tocrOs1VKopDljzdR4t5eEvcNi2AGh3FJQX/Dl+yotyMxGpcJQLX+FMoLAWIdpui
nDon20UB2Gv+HAxSacM9wMwgjS41/b6tenMQ7CK9pXcKbXNHoyVnq7s5oZwTBt3T
4VpO6iCigqFZ+AjIt/L4dwLNFf1UzsuTY9M938vQdZzCR+omjHyyulzW+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3y3QAUY62QhVDm6nb0b+GtqSwfMB8GA1UdIwQY
MBaAFKqsYZd5n9aLblu+C1fmUv2A3TYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYt
NWI0OWRiNjVjNTQ1LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC84ODMwMWMtYWM3OS00MDgzLTkyOGYtNWI0OWRiNjVjNTQ1
LzEvcXF4aGwzbWYxb3R1Vzc0TFYtWlNfWURkTmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIIsXBN8h
uDqmQYxS4qpAzdAh9ewGya6tK9wbSm/xU2c8/Z723QUwTr2SxB32xeKVhusER2xv
R1ID08+z189JHCaNRhpVXL9OVP1d+WsfyO/gk2Hos0KP/6xPjMWNTnURkNUJNwim
XOJZd0QyaeAQDGpCQpsZnckDBbrJBafKHazs6Opci2QBViEykqbZBTmMkHW7bnbT
mTYXTSKnCHDhmDoAVTarqSxesizKZKlGdYsTltGvD91o3JVsyQOnAN+RuW6woMqf
m1qk51Phn2iTAlL/OfGWqOcMBZ1vqt58j9+6VZ8Fl5oNbWz7Zpb5dw8ytCiC77G0
UUyzM7lAsDevsA==
-----END CERTIFICATE-----
Generated at Fri May 2 19:24:34 2025 by rpki-client