Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier: zTqe4ev6tKF3Blup5vTZw8sgOAnoqwgeWk8R4llegOc=
Subject key identifier: 92:9F:51:50:53:7D:4D:B8:ED:40:44:6A:2A:66:8B:CF:DB:B9:24:32
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 019674FA3298518454A5A9E091D12F044F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number: 0AFE
Signing time: Sun 27 Apr 2025 02:01:16 +0000
Manifest this update: Sun 27 Apr 2025 02:01:16 +0000
Manifest next update: Mon 28 Apr 2025 02:01:16 +0000
Files and hashes: 1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: sGKHeTq+2FZykGmlv+1zAPzVRAvN6nqm2nJDuKn8DZI=)
3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:32:98:51:84:54:a5:a9:e0:91:d1:2f:04:4f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Apr 27 02:01:16 2025 GMT
Not After : Apr 28 02:01:16 2025 GMT
Subject: CN=929f5150537d4db8ed40446a2a668bcfdbb92432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:b4:0d:eb:ac:c1:65:3f:d1:49:fc:8f:b5:
de:62:2c:84:9b:ac:de:80:18:cd:d7:c3:aa:a9:0a:
87:8d:16:13:3c:25:3f:97:24:53:46:53:8f:b7:9e:
5e:e0:70:99:f5:3f:59:84:4a:06:bf:c8:71:55:d8:
a2:60:c7:52:30:9f:23:b5:a8:b8:44:bc:55:56:20:
f4:6e:58:14:52:a0:5a:90:4b:70:f0:46:4d:a4:69:
56:a5:19:78:0b:52:e8:ee:20:78:9c:28:a5:b4:10:
37:26:5c:fc:c7:50:f9:38:b5:dd:e0:ce:92:e9:c1:
48:02:e0:a4:76:23:bd:b6:8b:8d:ea:fe:6a:e0:00:
d6:7f:44:f3:df:d3:12:76:df:95:96:2a:a4:72:4c:
04:96:40:9c:f9:fa:d4:36:9a:84:3e:5a:ea:a0:e9:
53:d0:71:99:bd:e7:66:6c:f2:96:16:65:3a:22:07:
1a:8d:db:08:81:77:32:9b:d0:75:fc:71:a8:99:80:
bc:12:64:dd:cf:22:7d:a9:08:81:16:dd:c0:24:c7:
3e:85:6d:c8:d9:01:30:5a:94:eb:d0:30:c5:66:ca:
a0:2a:8e:4d:92:93:29:e5:52:fd:be:36:b8:b2:bc:
b4:fa:65:cb:01:a0:1e:40:e9:9e:c6:a3:6d:89:f9:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:51:50:53:7D:4D:B8:ED:40:44:6A:2A:66:8B:CF:DB:B9:24:32
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:76:ad:05:35:1e:91:b4:0b:3a:68:38:11:4c:cb:48:67:c0:
c8:ab:0d:66:f2:aa:e6:1b:bc:76:8a:f4:70:67:76:2f:00:52:
62:94:10:4a:07:1c:33:85:0c:e5:3a:90:fb:2c:9d:1b:b6:85:
8b:75:e4:09:a3:fb:88:b0:83:18:f5:b6:d3:25:77:dc:4d:44:
13:49:e0:dc:1d:7c:02:5d:63:1d:d9:f2:1c:e2:04:1f:ad:51:
0b:71:4e:37:88:be:e9:49:ba:d9:a8:3f:31:9a:75:83:49:98:
db:fb:73:6c:70:b7:5d:c8:02:2f:25:67:5f:4b:29:c1:4f:f8:
9e:3a:10:21:66:6a:b8:ab:af:5d:09:a5:39:60:dd:a0:d4:a0:
3b:11:d8:a6:07:11:f0:97:0e:82:73:17:c2:27:71:fc:53:6d:
df:01:14:ad:29:8f:c7:cd:1e:92:17:ff:d7:ac:54:f6:7b:17:
83:5e:bf:3c:68:41:17:19:e5:c9:79:91:b7:d9:74:9d:7d:21:
14:bf:b9:e1:74:7a:48:33:4b:6a:b6:19:30:7a:b7:52:d2:b0:
dd:33:0c:63:b2:89:d2:2f:26:82:cc:86:72:53:9d:70:3a:bf:
6f:0c:49:33:9c:77:72:7c:be:2e:48:48:85:32:fe:8f:43:44:
83:5a:5e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+jKYUYRUpangkdEvBE+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2QyODBjYjRlYWU4MTU2YTc3ZGZlN2EzZmZjNWZkNGI0
ZGJmYWEwHhcNMjUwNDI3MDIwMTE2WhcNMjUwNDI4MDIwMTE2WjAzMTEwLwYDVQQD
Eyg5MjlmNTE1MDUzN2Q0ZGI4ZWQ0MDQ0NmEyYTY2OGJjZmRiYjkyNDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0q0DeuswWU/0Un8j7XeYiyEm6ze
gBjN18OqqQqHjRYTPCU/lyRTRlOPt55e4HCZ9T9ZhEoGv8hxVdiiYMdSMJ8jtai4
RLxVViD0blgUUqBakEtw8EZNpGlWpRl4C1Lo7iB4nCiltBA3Jlz8x1D5OLXd4M6S
6cFIAuCkdiO9touN6v5q4ADWf0Tz39MSdt+VliqkckwElkCc+frUNpqEPlrqoOlT
0HGZvedmbPKWFmU6IgcajdsIgXcym9B1/HGomYC8EmTdzyJ9qQiBFt3AJMc+hW3I
2QEwWpTr0DDFZsqgKo5NkpMp5VL9vja4sry0+mXLAaAeQOmexqNtifk9kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKfUVBTfU247UBEaipmi8/buSQyMB8GA1UdIwQY
MBaAFEN9KAy06ugVanff56P/xf1LTb+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4Yjct
ZWM1MGRhYWQ4MmY3LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4YjctZWM1MGRhYWQ4MmY3
LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHatBTUe
kbQLOmg4EUzLSGfAyKsNZvKq5hu8dor0cGd2LwBSYpQQSgccM4UM5TqQ+yydG7aF
i3XkCaP7iLCDGPW20yV33E1EE0ng3B18Al1jHdnyHOIEH61RC3FON4i+6Um62ag/
MZp1g0mY2/tzbHC3XcgCLyVnX0spwU/4njoQIWZquKuvXQmlOWDdoNSgOxHYpgcR
8JcOgnMXwidx/FNt3wEUrSmPx80ekhf/16xU9nsXg16/PGhBFxnlyXmRt9l0nX0h
FL+54XR6SDNLarYZMHq3UtKw3TMMY7KJ0i8mgsyGclOdcDq/bwxJM5x3cny+LkhI
hTL+j0NEg1peaQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:53 2025 by rpki-client