Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
File: wq8ZpG9azIz4_QNiSmG3koqBjNA.mft (raw, json)
Hash identifier: cZSrWmfi/x7JWbZyud8dv3v63Jc+mXjM1yuo6E2NvIg=
Subject key identifier: 9E:FE:D1:BD:0A:02:D0:FC:8E:3D:F9:CF:7B:45:9D:E9:DB:07:DA:C0
Authority key identifier: C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
Certificate issuer: /CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Certificate serial: 019693047890246F85158AE2B1E0F44C0902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
Manifest number: 1519
Signing time: Fri 02 May 2025 22:01:05 +0000
Manifest this update: Fri 02 May 2025 22:01:05 +0000
Manifest next update: Sat 03 May 2025 22:01:05 +0000
Files and hashes: 1: wq8ZpG9azIz4_QNiSmG3koqBjNA.crl (hash: 7dTtnS2ZQtC3vOiWg5IXbK2Cqd6DKocgzJrG1xBiZeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:04:78:90:24:6f:85:15:8a:e2:b1:e0:f4:4c:09:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2af19a46f5acc8cf8fd03624a61b7928a818cd0
Validity
Not Before: May 2 22:01:05 2025 GMT
Not After : May 3 22:01:05 2025 GMT
Subject: CN=9efed1bd0a02d0fc8e3df9cf7b459de9db07dac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:28:67:e6:e5:c9:5b:2c:8e:6f:d2:a4:57:
1b:e3:6f:95:f6:89:61:8a:9b:df:de:30:b9:03:64:
b6:6d:ce:a0:3e:6b:51:cc:5f:35:60:73:b0:03:a1:
c9:c6:d9:2b:ec:fb:ed:07:49:bc:e3:59:e6:ee:64:
78:88:54:59:3e:0a:4a:85:11:08:6d:b3:64:fd:cb:
a4:cd:10:4a:16:3d:0c:2b:57:3e:55:30:b5:01:04:
89:96:99:64:b2:fd:f4:b5:cd:ba:8d:67:df:b4:c2:
ad:79:a8:d4:cd:53:b2:0b:a5:d3:30:d8:46:f7:39:
61:66:4c:89:4e:76:f5:12:6c:6a:d6:3f:10:ab:04:
22:80:e3:a6:2a:55:5a:7e:1f:99:71:43:7c:5b:44:
7d:72:78:39:fb:c5:79:ab:a7:48:ea:16:40:48:98:
30:47:74:64:3f:90:12:67:c1:a9:a6:7c:6d:f8:ae:
05:5f:90:6b:b8:b7:e2:a8:16:fb:8e:e7:6f:b6:f9:
4b:85:c5:1a:e2:39:85:b6:71:2c:05:d9:aa:26:40:
d4:28:5c:94:ac:02:fa:67:d0:91:9b:ab:e9:e4:c0:
71:f7:24:92:d8:01:30:85:e1:af:b7:58:00:4d:2b:
2d:e9:ba:e2:ef:62:fa:9d:df:5e:02:c8:a2:2f:67:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FE:D1:BD:0A:02:D0:FC:8E:3D:F9:CF:7B:45:9D:E9:DB:07:DA:C0
X509v3 Authority Key Identifier:
keyid:C2:AF:19:A4:6F:5A:CC:8C:F8:FD:03:62:4A:61:B7:92:8A:81:8C:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq8ZpG9azIz4_QNiSmG3koqBjNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f94ec-8337-4249-babc-5636814a9337/1/wq8ZpG9azIz4_QNiSmG3koqBjNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ef:ae:21:19:2b:6a:81:67:f1:49:b4:56:58:9d:e5:fd:c1:
2e:be:c6:83:6d:46:30:f6:3c:9a:60:41:80:52:90:cc:45:65:
07:b6:25:6c:bd:ba:cf:ab:64:4a:38:19:78:6e:1e:2c:03:e2:
c3:c6:6a:d2:5f:08:67:04:b2:a5:18:0d:af:09:93:91:2b:ff:
2e:42:ff:c0:b7:b2:50:1d:5d:47:98:1d:e9:27:ac:13:4d:8d:
19:02:d6:f1:6f:70:b3:b2:7d:ad:18:6f:fd:1f:e2:30:8a:d7:
cb:18:82:3d:9d:31:41:40:b3:85:79:53:9f:6d:63:7d:d5:55:
55:42:a4:bb:bf:ac:ed:f1:b7:59:40:70:4e:d2:df:45:4f:ca:
66:3f:c5:4e:2f:c0:4f:73:17:5e:36:30:af:f4:d2:9f:bb:be:
7b:5d:3f:95:2b:24:e4:8b:e9:f1:fb:fb:21:f2:bc:f2:2c:cf:
64:5b:e4:22:8d:d7:d2:af:05:da:6d:a3:a5:98:72:f7:af:cb:
4a:16:4a:88:89:cf:06:63:03:ed:65:e8:37:62:16:5d:c2:53:
d4:78:43:0e:93:ca:da:05:19:eb:0b:04:2d:fd:ca:cd:ad:8d:
ff:04:10:f0:97:f5:de:6b:5d:70:60:53:fb:be:40:60:10:78:
8f:4a:85:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTBHiQJG+FFYriseD0TAkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYWYxOWE0NmY1YWNjOGNmOGZkMDM2MjRhNjFiNzkyOGE4
MThjZDAwHhcNMjUwNTAyMjIwMTA1WhcNMjUwNTAzMjIwMTA1WjAzMTEwLwYDVQQD
Eyg5ZWZlZDFiZDBhMDJkMGZjOGUzZGY5Y2Y3YjQ1OWRlOWRiMDdkYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfQoZ+blyVssjm/SpFcb42+V9olh
ipvf3jC5A2S2bc6gPmtRzF81YHOwA6HJxtkr7PvtB0m841nm7mR4iFRZPgpKhREI
bbNk/cukzRBKFj0MK1c+VTC1AQSJlplksv30tc26jWfftMKteajUzVOyC6XTMNhG
9zlhZkyJTnb1Emxq1j8QqwQigOOmKlVafh+ZcUN8W0R9cng5+8V5q6dI6hZASJgw
R3RkP5ASZ8Gppnxt+K4FX5BruLfiqBb7judvtvlLhcUa4jmFtnEsBdmqJkDUKFyU
rAL6Z9CRm6vp5MBx9ySS2AEwheGvt1gATSst6bri72L6nd9eAsiiL2fQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7+0b0KAtD8jj35z3tFnenbB9rAMB8GA1UdIwQY
MBaAFMKvGaRvWsyM+P0DYkpht5KKgYzQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3E4WnBHOWF6SXo0X1FOaVNtRzNrb3FCak5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZjk0ZWMtODMzNy00MjQ5LWJhYmMt
NTYzNjgxNGE5MzM3LzEvd3E4WnBHOWF6SXo0X1FOaVNtRzNrb3FCak5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yZjk0ZWMtODMzNy00MjQ5LWJhYmMtNTYzNjgxNGE5MzM3
LzEvd3E4WnBHOWF6SXo0X1FOaVNtRzNrb3FCak5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK++uIRkr
aoFn8Um0Vlid5f3BLr7Gg21GMPY8mmBBgFKQzEVlB7YlbL26z6tkSjgZeG4eLAPi
w8Zq0l8IZwSypRgNrwmTkSv/LkL/wLeyUB1dR5gd6SesE02NGQLW8W9ws7J9rRhv
/R/iMIrXyxiCPZ0xQUCzhXlTn21jfdVVVUKku7+s7fG3WUBwTtLfRU/KZj/FTi/A
T3MXXjYwr/TSn7u+e10/lSsk5Ivp8fv7IfK88izPZFvkIo3X0q8F2m2jpZhy96/L
ShZKiInPBmMD7WXoN2IWXcJT1HhDDpPK2gUZ6wsELf3Kza2N/wQQ8Jf13mtdcGBT
+75AYBB4j0qFcg==
-----END CERTIFICATE-----
Generated at Sat May 3 05:40:02 2025 by rpki-client