Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: Thsc/BL89iHzU/to9qk+hY9FA4Kfx0p4LHpdIrociLo=
Subject key identifier: 42:17:DF:4D:4E:D5:96:ED:20:A8:25:3C:0A:DD:11:20:09:65:B6:DF
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 01968812636AFFBB73AAA3758436915CB870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 04E5
Signing time: Wed 30 Apr 2025 19:00:28 +0000
Manifest this update: Wed 30 Apr 2025 19:00:28 +0000
Manifest next update: Thu 01 May 2025 19:00:28 +0000
Files and hashes: 1: 4aDro6K4uBzQDwqf0WWWDv-WEKk.roa (hash: KqqgAJBLDDctP248xFMqsm3yeCd/FvEIq/xYuv9Vp94=)
2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: c3vsZjfJS+zRTaUZX/5Zt8c4jBHead6K2MkgUmpeLAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:63:6a:ff:bb:73:aa:a3:75:84:36:91:5c:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Apr 30 19:00:28 2025 GMT
Not After : May 1 19:00:28 2025 GMT
Subject: CN=4217df4d4ed596ed20a8253c0add11200965b6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:e9:63:a4:32:0a:10:a9:a6:70:50:f6:f4:
78:bd:01:bb:63:57:e9:49:3a:aa:43:e1:1e:53:c5:
ba:25:a1:19:c2:31:d8:9b:c9:f9:be:aa:aa:36:ba:
98:ac:53:c5:11:79:56:04:54:75:47:a2:cd:95:71:
cb:ec:b0:46:fe:b2:40:ac:7b:02:92:22:24:14:19:
4a:67:e8:c4:1b:0a:78:22:ff:df:ec:d0:11:c6:d3:
9e:0d:3e:ea:35:48:ad:dd:30:c5:c3:d8:ed:b6:e2:
15:7f:93:e8:e9:a4:0c:02:e1:e4:12:92:25:c3:77:
fe:3f:e2:c4:ff:74:78:7b:05:f3:d2:79:89:fd:a6:
b1:39:0f:4a:ef:d1:b2:79:ea:24:6a:1d:37:2b:41:
bc:3b:69:6d:3c:9b:7a:02:6c:9e:f1:4e:38:76:0b:
9e:19:15:db:b0:48:20:ab:51:a5:91:10:53:ae:2f:
b3:a4:d0:db:78:f2:0f:99:ad:b2:e7:0d:01:99:62:
76:9b:ef:1e:d4:43:86:c2:c4:bb:e7:96:45:c9:a6:
75:5b:3b:9e:2c:47:f5:a4:dd:f3:35:71:1f:07:f9:
5a:c2:da:89:4f:61:4c:39:81:75:af:ac:68:72:68:
e2:ca:24:db:a9:b7:e6:08:33:13:26:bb:cf:25:bf:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:DF:4D:4E:D5:96:ED:20:A8:25:3C:0A:DD:11:20:09:65:B6:DF
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:73:a6:61:f9:86:84:70:05:5e:bd:cc:fa:42:d4:07:d5:ae:
2d:6e:57:2a:e7:f4:97:11:1d:30:45:e2:76:69:0d:ab:b2:5d:
76:ac:8f:ba:7b:4d:0e:6a:83:a5:5f:0c:2c:2e:83:ac:6e:d4:
ce:50:ca:a5:34:e4:26:74:9b:e5:c4:d2:be:fe:5e:bd:ee:21:
03:35:ce:39:76:c3:68:21:3a:fc:29:93:56:44:67:55:d1:2e:
2f:b4:f3:41:5d:a9:1e:10:ae:cf:b4:ea:ac:19:c9:b6:d2:58:
f0:d1:1f:45:64:88:7d:95:bf:5b:7e:d7:1e:51:88:5d:21:97:
da:43:83:2e:ee:cb:11:3e:6c:c7:60:56:08:59:9b:86:9f:68:
05:a0:c7:25:e2:fb:d6:91:e1:c5:0e:4a:34:20:90:54:ed:41:
8d:b1:b6:ab:a2:ff:01:f5:07:52:ea:51:54:8a:0d:ce:f5:a6:
71:d8:68:a8:58:1d:1a:83:eb:2e:a6:0a:89:ee:97:66:cc:08:
f9:67:b3:e1:0a:f9:05:3d:dd:0d:46:9c:65:97:89:0b:3f:58:
ea:b7:24:21:82:19:3b:8e:2f:0d:ff:1a:86:f8:33:ad:3e:48:
9d:ac:84:71:ce:36:21:52:a8:14:b7:5f:c6:8c:64:c5:c0:3a:
8e:7e:58:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIEmNq/7tzqqN1hDaRXLhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy
ZTM0ZjgwHhcNMjUwNDMwMTkwMDI4WhcNMjUwNTAxMTkwMDI4WjAzMTEwLwYDVQQD
Eyg0MjE3ZGY0ZDRlZDU5NmVkMjBhODI1M2MwYWRkMTEyMDA5NjViNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+vpY6QyChCppnBQ9vR4vQG7Y1fp
STqqQ+EeU8W6JaEZwjHYm8n5vqqqNrqYrFPFEXlWBFR1R6LNlXHL7LBG/rJArHsC
kiIkFBlKZ+jEGwp4Iv/f7NARxtOeDT7qNUit3TDFw9jttuIVf5Po6aQMAuHkEpIl
w3f+P+LE/3R4ewXz0nmJ/aaxOQ9K79Gyeeokah03K0G8O2ltPJt6Amye8U44dgue
GRXbsEggq1GlkRBTri+zpNDbePIPma2y5w0BmWJ2m+8e1EOGwsS755ZFyaZ1Wzue
LEf1pN3zNXEfB/lawtqJT2FMOYF1r6xocmjiyiTbqbfmCDMTJrvPJb8/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIX301O1ZbtIKglPArdESAJZbbfMB8GA1UdIwQY
MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt
MGIwMmE0NzMyNDc5LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5
LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHOmYfmG
hHAFXr3M+kLUB9WuLW5XKuf0lxEdMEXidmkNq7JddqyPuntNDmqDpV8MLC6DrG7U
zlDKpTTkJnSb5cTSvv5eve4hAzXOOXbDaCE6/CmTVkRnVdEuL7TzQV2pHhCuz7Tq
rBnJttJY8NEfRWSIfZW/W37XHlGIXSGX2kODLu7LET5sx2BWCFmbhp9oBaDHJeL7
1pHhxQ5KNCCQVO1BjbG2q6L/AfUHUupRVIoNzvWmcdhoqFgdGoPrLqYKie6XZswI
+Wez4Qr5BT3dDUacZZeJCz9Y6rckIYIZO44vDf8ahvgzrT5InayEcc42IVKoFLdf
xoxkxcA6jn5YdA==
-----END CERTIFICATE-----
Generated at Thu May 1 03:24:26 2025 by rpki-client