Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
File: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft (raw, json)
Hash identifier: w59QwgfSF4zhzhQEhpi1Pa2FfoacfKK1n+Ll8ltC97s=
Subject key identifier: 45:A3:9C:28:0E:B9:E8:FC:3E:9B:1E:2C:E1:EB:C5:93:86:5B:03:6B
Authority key identifier: A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
Certificate issuer: /CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
Certificate serial: 0196760CCCAA77E927A196F8C5B53C864178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
Manifest number: 096D
Signing time: Sun 27 Apr 2025 07:01:12 +0000
Manifest this update: Sun 27 Apr 2025 07:01:12 +0000
Manifest next update: Mon 28 Apr 2025 07:01:12 +0000
Files and hashes: 1: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl (hash: d9RilWFnN8Si5oU0U42eSPs28q6PZrJC1KA4RxNoJxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:cc:aa:77:e9:27:a1:96:f8:c5:b5:3c:86:41:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
Validity
Not Before: Apr 27 07:01:12 2025 GMT
Not After : Apr 28 07:01:12 2025 GMT
Subject: CN=45a39c280eb9e8fc3e9b1e2ce1ebc593865b036b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:d9:52:55:fa:9c:c2:b1:0e:04:0b:07:12:
23:af:47:1b:e7:6d:25:3a:6c:f9:3c:ae:61:86:04:
12:9f:94:2b:30:e8:82:f2:2d:5a:44:a8:87:79:7a:
c5:f8:55:5f:52:fd:66:94:5b:67:d9:3b:4c:60:a3:
14:1c:f8:4a:ae:e6:f5:ff:8d:c1:89:44:2e:a1:78:
02:21:6f:93:b2:85:92:2b:dc:20:52:7e:b7:a7:04:
64:6c:77:8b:53:f2:cf:18:5f:d0:2e:70:37:aa:c7:
15:4d:ca:ac:30:fc:a6:fd:ce:dc:ad:ac:96:38:a4:
28:35:88:51:8e:74:4c:15:1e:28:40:83:bf:c2:49:
7c:d6:dc:a8:63:32:50:9a:f3:58:cd:17:c7:eb:43:
de:23:f6:b9:49:ca:0b:66:c3:9e:32:62:8d:34:a7:
ec:63:4e:a9:65:92:59:8f:6c:a3:14:43:ab:1b:82:
32:08:46:2f:e1:3c:a1:fc:b1:fc:e3:23:ed:33:21:
a1:ba:4d:db:9e:f2:99:c5:2c:64:57:3e:92:fe:40:
21:7d:3e:49:eb:06:15:28:ab:c2:e6:ed:f4:89:96:
01:ce:7a:80:89:91:17:b4:95:f2:b7:46:9f:d1:3a:
e7:13:84:79:84:cd:2b:41:db:ea:34:07:07:54:7f:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A3:9C:28:0E:B9:E8:FC:3E:9B:1E:2C:E1:EB:C5:93:86:5B:03:6B
X509v3 Authority Key Identifier:
keyid:A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cb:c8:fd:6a:a5:f7:29:9c:cf:a1:93:84:b5:a8:05:49:42:
6a:ce:5a:f6:91:f4:5b:5d:60:a9:0c:97:ce:a4:54:b4:8d:ae:
67:39:1e:25:22:f5:02:7d:34:fa:76:ea:c9:a9:cc:87:66:af:
c0:6e:2d:47:f0:55:d2:81:dd:fb:ce:84:a5:6d:a9:ce:ef:c8:
ed:20:6b:9a:14:a1:e6:d5:76:a8:02:0c:05:41:93:7b:fa:8c:
31:a9:8c:8c:88:fb:cb:b8:1b:f4:8b:18:1a:10:db:c4:79:ac:
49:78:3b:9d:21:dc:53:92:dc:19:06:50:fb:fb:8c:86:5b:63:
8b:72:be:e3:3f:6e:f9:5d:9d:ce:34:95:6b:69:08:b5:96:8f:
67:93:e8:49:4f:02:26:9a:3b:e3:67:c6:6e:06:f2:d5:9b:57:
a2:71:d2:a7:6c:2a:79:28:09:37:3a:bb:fe:8c:62:fa:a5:e4:
4c:b7:dd:f3:b6:8d:65:14:9f:ed:69:ea:9b:37:b3:09:a3:54:
93:99:9d:c2:0a:37:21:83:88:c8:d8:09:ed:71:ff:70:49:26:
7e:12:69:d8:d6:03:dd:b7:47:ac:d3:c9:30:c9:ef:c8:a8:61:
0e:2d:1d:57:80:b0:55:49:bd:16:05:fc:47:1b:b0:6d:09:f6:
0f:ff:b2:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DMyqd+knoZb4xbU8hkF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjJjOWVlZTdjNzA2NGZmOTExNTk0ZmU4MzVhMmYxMjVj
OGRkNTAwHhcNMjUwNDI3MDcwMTEyWhcNMjUwNDI4MDcwMTEyWjAzMTEwLwYDVQQD
Eyg0NWEzOWMyODBlYjllOGZjM2U5YjFlMmNlMWViYzU5Mzg2NWIwMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTHZUlX6nMKxDgQLBxIjr0cb520l
Omz5PK5hhgQSn5QrMOiC8i1aRKiHeXrF+FVfUv1mlFtn2TtMYKMUHPhKrub1/43B
iUQuoXgCIW+TsoWSK9wgUn63pwRkbHeLU/LPGF/QLnA3qscVTcqsMPym/c7crayW
OKQoNYhRjnRMFR4oQIO/wkl81tyoYzJQmvNYzRfH60PeI/a5ScoLZsOeMmKNNKfs
Y06pZZJZj2yjFEOrG4IyCEYv4Tyh/LH84yPtMyGhuk3bnvKZxSxkVz6S/kAhfT5J
6wYVKKvC5u30iZYBznqAiZEXtJXyt0af0TrnE4R5hM0rQdvqNAcHVH/QOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWjnCgOuej8PpseLOHrxZOGWwNrMB8GA1UdIwQY
MBaAFKhiye7nxwZP+RFZT+g1ovElyN1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iMTdkNGUtNjE3MS00NmJmLWI3Njct
MWIwMmIxZmM3ZDBkLzEvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9iMTdkNGUtNjE3MS00NmJmLWI3NjctMWIwMmIxZmM3ZDBk
LzEvcUdMSjd1ZkhCa181RVZsUDZEV2k4U1hJM1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMvI/Wql
9ymcz6GThLWoBUlCas5a9pH0W11gqQyXzqRUtI2uZzkeJSL1An00+nbqyanMh2av
wG4tR/BV0oHd+86EpW2pzu/I7SBrmhSh5tV2qAIMBUGTe/qMMamMjIj7y7gb9IsY
GhDbxHmsSXg7nSHcU5LcGQZQ+/uMhltji3K+4z9u+V2dzjSVa2kItZaPZ5PoSU8C
Jpo742fGbgby1ZtXonHSp2wqeSgJNzq7/oxi+qXkTLfd87aNZRSf7WnqmzezCaNU
k5mdwgo3IYOIyNgJ7XH/cEkmfhJp2NYD3bdHrNPJMMnvyKhhDi0dV4CwVUm9FgX8
RxuwbQn2D/+y9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:41 2025 by rpki-client