Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft (raw, json)
Hash identifier: AKFkQ3FjpXr7tvh0qGHYOH61rPZzKJiT0EEjxpeNbOg=
Subject key identifier: 12:94:1F:1C:21:48:EC:5D:6D:FB:F7:DF:42:9E:5C:4F:96:7C:6F:53
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 019676B10BDD60613C06CD86016DE88521E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
Manifest number: 0D03
Signing time: Sun 27 Apr 2025 10:00:36 +0000
Manifest this update: Sun 27 Apr 2025 10:00:36 +0000
Manifest next update: Mon 28 Apr 2025 10:00:36 +0000
Files and hashes: 1: FBn1v2zB1JVjcRcZbhGPjhIQq-4.roa (hash: mVYwRlVF+pwgFuj92Y5wG2kGfxiuhyd+s7VwHmVtegc=)
2: q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl (hash: ayHvMGaGAJkZZtkZOG2JD6wOq36Dywvg4sYBTczVcrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:0b:dd:60:61:3c:06:cd:86:01:6d:e8:85:21:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Apr 27 10:00:36 2025 GMT
Not After : Apr 28 10:00:36 2025 GMT
Subject: CN=12941f1c2148ec5d6dfbf7df429e5c4f967c6f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:85:ad:0d:3e:e2:c3:b2:7d:f1:d9:86:5f:
d2:47:1a:a7:e9:42:78:0c:27:43:ec:80:3f:e8:e3:
f2:e8:56:8a:e7:56:6b:a7:9a:bd:63:8f:b7:82:7b:
b9:8e:47:25:f4:0b:97:6b:36:fc:e5:98:66:d9:4d:
6a:93:55:4e:55:17:00:13:c2:d5:cf:79:f2:d9:d2:
67:ba:72:86:6e:20:02:e7:68:1c:3c:2f:4b:ef:7d:
9f:26:d1:a5:97:81:58:03:09:e1:48:49:a5:c3:99:
fe:fd:af:5f:5b:bc:2e:18:11:c0:73:e3:df:84:ec:
7a:10:0e:6f:20:f5:12:b3:dd:8e:fd:94:5a:a1:9c:
86:31:70:4f:13:b4:e0:0a:c3:d8:69:b5:ce:85:c2:
a1:e3:1f:1c:53:71:18:68:d8:2f:7e:89:dd:04:78:
ab:88:9a:94:98:41:e6:c1:af:cb:ce:ec:d3:e6:51:
ab:2f:6a:f6:43:aa:f8:6c:ba:d5:98:82:56:98:ec:
00:1c:ed:d4:6e:16:99:48:49:48:ec:8b:79:e6:93:
ee:a4:42:7f:0a:eb:55:04:f6:d6:1d:ae:3e:55:61:
45:6f:0f:0e:58:a2:6f:f3:ea:f9:1e:e1:b8:e4:07:
eb:76:71:c6:7d:2a:ab:a7:f0:fc:d8:00:5f:a4:56:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:94:1F:1C:21:48:EC:5D:6D:FB:F7:DF:42:9E:5C:4F:96:7C:6F:53
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4c:d4:1b:d4:1b:5b:31:40:ed:41:5e:6f:33:b1:e0:94:ef:
0f:23:e5:a8:0d:81:c8:2b:d7:1c:01:e0:28:00:a0:16:a6:da:
06:5b:82:90:73:bb:82:38:d6:18:65:c3:f7:14:ae:e6:c8:5c:
bd:8a:f6:0c:11:be:15:7a:1b:ed:bf:06:b0:1a:9e:e1:7e:5b:
20:ce:bc:7d:84:24:85:f4:ae:ed:8a:76:b8:db:be:04:f9:6a:
8c:86:a6:fc:48:a6:51:c6:56:54:97:db:1b:92:26:60:2e:af:
56:a0:1b:6f:4a:d6:db:3a:5d:2b:e7:93:0f:94:df:3a:3f:c3:
c1:20:ff:1a:fc:4f:99:37:b0:d7:1f:1b:02:d2:8b:b6:5a:5c:
f2:b9:5d:82:45:a8:49:e4:a1:e3:e5:10:2a:f0:3e:1f:f3:6b:
cb:f8:f5:0b:6f:69:b6:09:fc:21:98:48:f5:0c:31:03:9c:1a:
61:97:45:0c:62:5e:65:3c:42:74:f6:17:f1:da:13:98:8a:cb:
0a:32:d8:be:5c:32:c6:c5:35:85:a5:8d:c9:07:47:ca:c6:69:
18:69:75:5a:ad:59:08:d9:8c:df:17:83:98:a3:6c:a2:bf:e0:
a7:b6:94:76:64:8c:d2:9e:c4:95:30:56:c5:73:70:7a:fd:01:
51:f8:78:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sQvdYGE8Bs2GAW3ohSHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNjg0ZTUwZTMzZjNhMDAxNWM4Zjg5OWM4OGJjYjEzN2Jj
ZmI1ZjkwHhcNMjUwNDI3MTAwMDM2WhcNMjUwNDI4MTAwMDM2WjAzMTEwLwYDVQQD
EygxMjk0MWYxYzIxNDhlYzVkNmRmYmY3ZGY0MjllNWM0Zjk2N2M2ZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUaFrQ0+4sOyffHZhl/SRxqn6UJ4
DCdD7IA/6OPy6FaK51Zrp5q9Y4+3gnu5jkcl9AuXazb85Zhm2U1qk1VOVRcAE8LV
z3ny2dJnunKGbiAC52gcPC9L732fJtGll4FYAwnhSEmlw5n+/a9fW7wuGBHAc+Pf
hOx6EA5vIPUSs92O/ZRaoZyGMXBPE7TgCsPYabXOhcKh4x8cU3EYaNgvfondBHir
iJqUmEHmwa/LzuzT5lGrL2r2Q6r4bLrVmIJWmOwAHO3UbhaZSElI7It55pPupEJ/
CutVBPbWHa4+VWFFbw8OWKJv8+r5HuG45AfrdnHGfSqrp/D82ABfpFaIWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKUHxwhSOxdbfv330KeXE+WfG9TMB8GA1UdIwQY
MBaAFKtoTlDjPzoAFcj4mciLyxN7z7X5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85NDcyYTYtZDAyMi00M2NlLWIzNjIt
ODBlNWQ1M2VkYjQxLzEvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85NDcyYTYtZDAyMi00M2NlLWIzNjItODBlNWQ1M2VkYjQx
LzEvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEzUG9Qb
WzFA7UFebzOx4JTvDyPlqA2ByCvXHAHgKACgFqbaBluCkHO7gjjWGGXD9xSu5shc
vYr2DBG+FXob7b8GsBqe4X5bIM68fYQkhfSu7Yp2uNu+BPlqjIam/EimUcZWVJfb
G5ImYC6vVqAbb0rW2zpdK+eTD5TfOj/DwSD/GvxPmTew1x8bAtKLtlpc8rldgkWo
SeSh4+UQKvA+H/Nry/j1C29ptgn8IZhI9QwxA5waYZdFDGJeZTxCdPYX8doTmIrL
CjLYvlwyxsU1haWNyQdHysZpGGl1Wq1ZCNmM3xeDmKNsor/gp7aUdmSM0p7ElTBW
xXNwev0BUfh4XA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:28:59 2025 by rpki-client