Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
File: QZV-DXwo4yonWu2yD4AjYbRb_1E.mft (raw, json)
Hash identifier: m5POvVaoIzMqqBTZOWl4KDYb+r8x0TV3Rv0vRwV9fbg=
Subject key identifier: 8A:DC:BF:AA:CD:DB:7D:21:C6:4D:E4:0B:EE:2F:AE:F9:42:2C:C7:BB
Authority key identifier: 41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
Certificate issuer: /CN=41957e0d7c28e32a275aedb20f802361b45bff51
Certificate serial: 01967DC5F56FE1D53BB993A59EC5328FCB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
Manifest number: 11A5
Signing time: Mon 28 Apr 2025 19:00:47 +0000
Manifest this update: Mon 28 Apr 2025 19:00:47 +0000
Manifest next update: Tue 29 Apr 2025 19:00:47 +0000
Files and hashes: 1: QZV-DXwo4yonWu2yD4AjYbRb_1E.crl (hash: JTEO7BTy8v9yqOYiy6QWEliYtQWXhzGKnmtHmsAoXxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:f5:6f:e1:d5:3b:b9:93:a5:9e:c5:32:8f:cb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41957e0d7c28e32a275aedb20f802361b45bff51
Validity
Not Before: Apr 28 19:00:47 2025 GMT
Not After : Apr 29 19:00:47 2025 GMT
Subject: CN=8adcbfaacddb7d21c64de40bee2faef9422cc7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:bf:03:e4:dc:71:24:83:73:d9:02:4e:6d:
b3:53:eb:ac:0e:70:ff:49:bc:39:73:27:c3:e8:93:
a6:9c:af:9f:bf:90:5c:e4:a5:08:0a:6c:b4:89:02:
c7:c2:cf:f2:bd:f2:ca:59:b1:05:0b:0d:94:6f:a6:
7c:da:f4:89:4f:08:f1:71:1f:d7:96:e2:43:e7:6c:
e1:26:77:8e:28:bb:e5:73:6f:c8:38:fe:29:f3:24:
ad:f2:f3:17:39:bb:23:87:db:01:0f:52:cf:8a:44:
ef:34:09:2f:0a:05:41:3d:e8:e0:a4:ef:8b:2a:70:
05:68:d7:43:bb:67:9e:b2:05:65:98:9e:f3:5f:b3:
9b:bb:2c:01:ee:e6:31:c4:a8:eb:4b:6d:a2:c0:85:
e3:4f:99:81:da:52:e8:45:1f:a3:a1:f3:7a:ca:22:
85:4c:5d:50:29:66:f3:25:41:a1:be:90:4b:59:7e:
93:29:f3:6e:06:9b:91:72:2c:0d:4d:5e:e3:9d:69:
22:88:83:48:41:ea:8e:1e:e2:da:68:57:9a:b0:69:
dc:1d:35:dc:60:d7:bb:e2:a8:94:ea:0e:9c:11:d5:
dd:67:7e:2c:4b:ca:d2:35:51:12:cd:60:6b:ab:e9:
0f:69:a6:36:d1:d1:89:7c:ac:19:62:d8:10:ef:37:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DC:BF:AA:CD:DB:7D:21:C6:4D:E4:0B:EE:2F:AE:F9:42:2C:C7:BB
X509v3 Authority Key Identifier:
keyid:41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c8:1f:13:54:4a:47:c5:d5:de:40:3a:c7:9a:dd:e8:a9:4d:
7c:64:96:a9:32:34:79:a3:d0:c8:1c:46:b3:1d:96:b5:f4:ce:
5a:a4:aa:23:1b:dc:ca:99:87:29:d2:fc:03:30:69:d6:9d:a9:
bc:31:8e:ce:d4:15:9d:32:7a:83:e9:d3:ca:f6:b0:03:06:7f:
f7:d3:3e:42:a1:fa:50:de:da:11:57:74:09:94:14:cd:b6:1a:
b1:fd:a5:d2:a8:09:7d:26:dd:18:63:20:f7:6d:3b:a2:d7:f9:
b1:25:ad:f5:eb:be:ae:6e:5b:09:6f:98:19:68:90:a4:aa:8d:
e0:dc:77:7d:dd:28:15:1c:2f:9e:12:97:61:fd:12:89:52:d8:
08:c1:74:72:9e:56:89:c5:e9:1a:79:7f:41:78:a3:83:45:00:
1a:7d:6b:19:45:0c:31:00:2b:84:dd:11:4f:0a:ce:4a:b9:8a:
48:c4:d4:24:73:36:28:5e:4b:a5:a9:fa:6a:82:c1:c5:5b:b5:
49:43:8e:0e:75:49:09:1e:f8:d5:7d:0a:c1:8b:dd:dd:35:36:
51:26:20:2b:8f:14:fc:b2:13:d6:0f:d1:cd:a3:f8:6d:02:fb:
e1:d0:34:ee:e6:64:99:cd:d6:43:87:c6:aa:90:89:92:f0:22:
50:4f:1b:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xfVv4dU7uZOlnsUyj8tMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTU3ZTBkN2MyOGUzMmEyNzVhZWRiMjBmODAyMzYxYjQ1
YmZmNTEwHhcNMjUwNDI4MTkwMDQ3WhcNMjUwNDI5MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg4YWRjYmZhYWNkZGI3ZDIxYzY0ZGU0MGJlZTJmYWVmOTQyMmNjN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3y/A+TccSSDc9kCTm2zU+usDnD/
Sbw5cyfD6JOmnK+fv5Bc5KUICmy0iQLHws/yvfLKWbEFCw2Ub6Z82vSJTwjxcR/X
luJD52zhJneOKLvlc2/IOP4p8ySt8vMXObsjh9sBD1LPikTvNAkvCgVBPejgpO+L
KnAFaNdDu2eesgVlmJ7zX7ObuywB7uYxxKjrS22iwIXjT5mB2lLoRR+jofN6yiKF
TF1QKWbzJUGhvpBLWX6TKfNuBpuRciwNTV7jnWkiiINIQeqOHuLaaFeasGncHTXc
YNe74qiU6g6cEdXdZ34sS8rSNVESzWBrq+kPaaY20dGJfKwZYtgQ7zdmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrcv6rN230hxk3kC+4vrvlCLMe7MB8GA1UdIwQY
MBaAFEGVfg18KOMqJ1rtsg+AI2G0W/9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YTFkNDUtN2YzZS00ODRkLWI3OTYt
ZDUxNzUyYmZmMTU0LzEvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YTFkNDUtN2YzZS00ODRkLWI3OTYtZDUxNzUyYmZmMTU0
LzEvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8gfE1RK
R8XV3kA6x5rd6KlNfGSWqTI0eaPQyBxGsx2WtfTOWqSqIxvcypmHKdL8AzBp1p2p
vDGOztQVnTJ6g+nTyvawAwZ/99M+QqH6UN7aEVd0CZQUzbYasf2l0qgJfSbdGGMg
9207otf5sSWt9eu+rm5bCW+YGWiQpKqN4Nx3fd0oFRwvnhKXYf0SiVLYCMF0cp5W
icXpGnl/QXijg0UAGn1rGUUMMQArhN0RTwrOSrmKSMTUJHM2KF5Lpan6aoLBxVu1
SUOODnVJCR741X0KwYvd3TU2USYgK48U/LIT1g/RzaP4bQL74dA07uZkmc3WQ4fG
qpCJkvAiUE8bSw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:01:43 2025 by rpki-client