Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: Gile5jxZ3/s/1e6X34T9P0EMaSd74tcO26WHktNb26w=
Subject key identifier: 59:9F:42:CF:E9:A5:6F:A4:DA:93:A4:77:EB:4C:AD:45:EA:94:13:FA
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 0196827DE36DBDFFBA75CDC9ECC617AB84EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 122B
Signing time: Tue 29 Apr 2025 17:00:10 +0000
Manifest this update: Tue 29 Apr 2025 17:00:10 +0000
Manifest next update: Wed 30 Apr 2025 17:00:10 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: Brcxc8M+fICHHJCXoSuILhzNYrxu0gaJBngmhF/p1v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:e3:6d:bd:ff:ba:75:cd:c9:ec:c6:17:ab:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: Apr 29 17:00:10 2025 GMT
Not After : Apr 30 17:00:10 2025 GMT
Subject: CN=599f42cfe9a56fa4da93a477eb4cad45ea9413fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:a9:1a:22:03:3c:ee:92:74:2d:04:c7:07:
ce:29:ce:4e:af:86:f4:62:4e:0e:dc:99:e6:2f:72:
82:0c:21:ad:a4:12:cc:57:d3:34:49:d3:65:5f:12:
33:d1:39:34:11:91:78:d2:a4:e7:a9:ca:57:78:e0:
4b:36:e6:71:2a:29:d0:5c:ab:e6:f8:6c:d2:83:c6:
5b:d7:cb:a0:ea:62:f6:0b:48:9e:99:c2:81:8b:fd:
2f:28:14:17:56:db:86:e7:4a:c0:e9:39:69:a4:58:
a9:35:f8:a2:f1:70:72:ef:88:af:19:9c:9f:4e:d0:
b3:b4:93:2a:76:bb:cd:92:a9:52:e0:b9:34:94:2a:
47:53:7e:c0:b9:9d:d4:78:be:f1:86:be:76:c3:82:
ee:0a:41:0c:df:07:02:33:89:42:63:33:84:b6:a3:
a2:8c:93:1b:d5:cd:21:c3:18:53:16:2e:af:ae:9c:
94:4e:0b:1a:8a:c7:ef:e5:99:5a:ca:ac:c0:db:8a:
b3:31:28:8e:10:90:23:d3:8d:05:e8:9d:76:03:ec:
e2:f2:aa:07:81:cd:cf:9c:63:db:06:4f:60:93:9d:
62:51:09:a9:ce:81:e7:b3:92:82:63:6f:dd:d7:ba:
73:d6:e9:f9:7d:8a:03:ab:54:eb:ce:19:d7:64:90:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9F:42:CF:E9:A5:6F:A4:DA:93:A4:77:EB:4C:AD:45:EA:94:13:FA
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c3:18:26:15:d2:7a:05:8e:a5:d1:e7:1f:b0:c0:43:9a:93:
3c:21:b0:d0:69:86:27:9b:2a:75:e6:58:a1:68:0b:91:bf:69:
3b:41:35:62:23:3d:c5:39:5b:a1:25:3c:9f:89:b5:62:7d:aa:
96:22:7f:65:67:d7:31:f1:c1:17:4f:24:d9:7c:09:7a:a3:22:
cd:2d:6c:c3:40:30:c8:74:64:48:0d:54:4d:fd:9c:10:c7:88:
8a:fc:50:49:ef:8e:7c:71:9f:13:7a:b0:c3:a4:5e:94:5a:63:
21:de:aa:16:c6:7a:8a:ba:c5:70:48:32:61:3c:ef:96:d8:33:
8f:51:1d:19:9f:9a:08:09:35:66:d9:60:69:15:62:1b:ab:84:
55:bb:29:e8:46:9f:ec:0b:88:31:8c:a1:8f:58:d1:f4:e1:25:
96:1f:0b:88:e5:a1:33:e1:48:e5:dc:4e:58:ad:2d:1c:88:0a:
f9:a5:a1:38:cc:8d:73:be:0d:ac:ff:0a:8b:dd:05:09:36:e8:
9a:14:0c:84:a6:25:5d:b0:cb:61:d6:d8:8b:ff:74:75:b2:86:
00:3f:1d:7c:c9:c2:78:ce:62:a1:79:ab:63:3d:52:7f:d5:03:
cf:e7:80:67:ef:2c:30:c8:d0:16:3f:72:f1:7b:9c:12:1a:8e:
d9:e7:e8:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfeNtvf+6dc3J7MYXq4TuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MWNmMzQ2NDdkN2UwZmJkOTA4NTEwYTgyMjNjOTIzYzc5
MjhmZTkwHhcNMjUwNDI5MTcwMDEwWhcNMjUwNDMwMTcwMDEwWjAzMTEwLwYDVQQD
Eyg1OTlmNDJjZmU5YTU2ZmE0ZGE5M2E0NzdlYjRjYWQ0NWVhOTQxM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrOpGiIDPO6SdC0ExwfOKc5Or4b0
Yk4O3JnmL3KCDCGtpBLMV9M0SdNlXxIz0Tk0EZF40qTnqcpXeOBLNuZxKinQXKvm
+GzSg8Zb18ug6mL2C0iemcKBi/0vKBQXVtuG50rA6TlppFipNfii8XBy74ivGZyf
TtCztJMqdrvNkqlS4Lk0lCpHU37AuZ3UeL7xhr52w4LuCkEM3wcCM4lCYzOEtqOi
jJMb1c0hwxhTFi6vrpyUTgsaisfv5ZlayqzA24qzMSiOEJAj040F6J12A+zi8qoH
gc3PnGPbBk9gk51iUQmpzoHns5KCY2/d17pz1un5fYoDq1TrzhnXZJDs0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmfQs/ppW+k2pOkd+tMrUXqlBP6MB8GA1UdIwQY
MBaAFKgc80ZH1+D72QhRCoIjySPHko/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJ6elJrZlg0UHZaQ0ZFS2dpUEpJOGVTai1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lYjFjZWYtMWI0NC00ZTgzLWI1ZWEt
YmZiMTE5OWJiZWZlLzEvcUJ6elJrZlg0UHZaQ0ZFS2dpUEpJOGVTai1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lYjFjZWYtMWI0NC00ZTgzLWI1ZWEtYmZiMTE5OWJiZWZl
LzEvcUJ6elJrZlg0UHZaQ0ZFS2dpUEpJOGVTai1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8MYJhXS
egWOpdHnH7DAQ5qTPCGw0GmGJ5sqdeZYoWgLkb9pO0E1YiM9xTlboSU8n4m1Yn2q
liJ/ZWfXMfHBF08k2XwJeqMizS1sw0AwyHRkSA1UTf2cEMeIivxQSe+OfHGfE3qw
w6RelFpjId6qFsZ6irrFcEgyYTzvltgzj1EdGZ+aCAk1ZtlgaRViG6uEVbsp6Eaf
7AuIMYyhj1jR9OEllh8LiOWhM+FI5dxOWK0tHIgK+aWhOMyNc74NrP8Ki90FCTbo
mhQMhKYlXbDLYdbYi/90dbKGAD8dfMnCeM5ioXmrYz1Sf9UDz+eAZ+8sMMjQFj9y
8XucEhqO2efoxA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:06:53 2025 by rpki-client