Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: io7lcxw2T58jl99v2jZ3aoZkbQ+iZXWWF0F7dIHAdnU=
Subject key identifier: D3:27:8F:CC:05:63:4E:0F:BB:47:8A:84:76:5B:04:6C:56:E6:C3:57
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 0196778CA81A8E2F5BF0AD9D2C77F76EEB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 0899
Signing time: Sun 27 Apr 2025 14:00:28 +0000
Manifest this update: Sun 27 Apr 2025 14:00:28 +0000
Manifest next update: Mon 28 Apr 2025 14:00:28 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: yn3kIaJ7jZSZJuEJ+VDpVbU1bwoMyIRpeXvRoBrz3XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:a8:1a:8e:2f:5b:f0:ad:9d:2c:77:f7:6e:eb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Apr 27 14:00:28 2025 GMT
Not After : Apr 28 14:00:28 2025 GMT
Subject: CN=d3278fcc05634e0fbb478a84765b046c56e6c357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:80:26:b4:32:2f:5c:de:9a:fe:cd:7c:ea:6f:
73:7a:46:07:c8:e0:40:38:1c:b0:74:23:76:10:93:
8a:8c:c0:8d:0d:21:ce:ff:6e:ce:ea:12:79:5f:e9:
b3:5a:53:8e:bd:d3:7d:2b:36:27:cf:b7:d1:97:c8:
aa:b4:77:98:2b:4b:cb:93:0e:f0:bc:74:7e:b5:e1:
2a:b4:f2:4e:0f:ea:35:72:c4:71:27:51:03:16:6b:
d7:07:79:40:ff:45:c4:c7:63:4d:81:27:72:31:db:
34:da:94:95:88:66:e1:05:a6:a4:ee:34:c2:ac:aa:
f0:e8:d0:42:68:a7:ab:cd:53:af:ea:f5:b9:fd:00:
08:b3:0e:8c:13:79:4f:5d:a2:25:e0:f8:54:18:62:
ff:19:88:8a:ee:1c:02:5a:a9:56:29:92:72:84:f9:
82:87:b1:6d:a3:a6:aa:34:41:e0:3e:79:6b:37:06:
a2:1f:35:68:d1:05:a2:41:d1:a3:4b:e1:e8:7f:ab:
92:2a:13:03:21:5b:af:5a:3a:07:ac:2a:6e:0f:46:
7a:75:75:bb:7c:8e:c4:bf:f5:06:d7:1b:9d:02:08:
e0:2f:67:10:d2:5d:81:7d:81:ee:6a:49:79:94:d4:
51:f3:3b:e2:c4:73:53:f6:d6:62:e7:9b:f5:6e:b7:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:27:8F:CC:05:63:4E:0F:BB:47:8A:84:76:5B:04:6C:56:E6:C3:57
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a3:8b:70:fa:4f:f2:0c:5e:32:41:eb:be:bf:af:e1:62:57:
06:db:8a:ac:49:c0:39:61:ba:08:03:89:ca:0c:cf:08:54:e6:
99:09:63:36:9c:00:b2:f6:13:14:80:d5:5c:1e:62:00:c9:c5:
2b:73:a9:4a:05:7a:20:45:d5:d7:6a:8b:52:eb:69:1a:33:66:
5d:5d:ae:a1:fc:75:3f:15:a0:a7:ff:f6:ec:4f:0a:bc:1d:ef:
6c:d2:0f:82:df:38:76:04:5d:d6:9c:3b:56:1f:da:13:4d:3a:
ea:78:74:c9:72:3b:19:54:4a:33:c0:59:5c:2a:ae:02:b5:3c:
b8:e6:16:50:81:be:d3:ea:c3:4b:70:63:47:91:0f:8f:eb:46:
fd:60:7b:1d:e8:d7:f5:7d:58:9d:fa:2f:f0:ba:b4:ab:53:9e:
aa:6b:ce:e0:40:08:a5:f5:fa:30:66:65:32:33:27:50:3e:21:
ea:d8:c5:e0:a5:df:03:fb:02:1a:cf:4c:9a:2a:e6:13:94:2c:
c2:96:7a:d3:cb:47:68:ed:6a:7e:38:f9:4f:5c:ec:01:42:0c:
78:7c:46:3b:d3:ac:97:6e:5b:dd:29:71:1f:a5:84:a3:8f:1e:
d5:94:bf:5f:e6:bc:c9:6e:ae:93:b7:80:5e:31:06:c9:fa:0e:
66:8a:ad:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jKgaji9b8K2dLHf3busiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjE3YTJkNTEzYTlmYjBmY2UxYTFjZmMyYjNjMDVjMDE4
YmQ4YzEwHhcNMjUwNDI3MTQwMDI4WhcNMjUwNDI4MTQwMDI4WjAzMTEwLwYDVQQD
EyhkMzI3OGZjYzA1NjM0ZTBmYmI0NzhhODQ3NjViMDQ2YzU2ZTZjMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54AmtDIvXN6a/s186m9zekYHyOBA
OBywdCN2EJOKjMCNDSHO/27O6hJ5X+mzWlOOvdN9KzYnz7fRl8iqtHeYK0vLkw7w
vHR+teEqtPJOD+o1csRxJ1EDFmvXB3lA/0XEx2NNgSdyMds02pSViGbhBaak7jTC
rKrw6NBCaKerzVOv6vW5/QAIsw6ME3lPXaIl4PhUGGL/GYiK7hwCWqlWKZJyhPmC
h7Fto6aqNEHgPnlrNwaiHzVo0QWiQdGjS+Hof6uSKhMDIVuvWjoHrCpuD0Z6dXW7
fI7Ev/UG1xudAgjgL2cQ0l2BfYHuakl5lNRR8zvixHNT9tZi55v1brc4zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMnj8wFY04Pu0eKhHZbBGxW5sNXMB8GA1UdIwQY
MBaAFEIhei1ROp+w/OGhz8KzwFwBi9jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYt
ZjQxZDZjMGM4NGI2LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYtZjQxZDZjMGM4NGI2
LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6OLcPpP
8gxeMkHrvr+v4WJXBtuKrEnAOWG6CAOJygzPCFTmmQljNpwAsvYTFIDVXB5iAMnF
K3OpSgV6IEXV12qLUutpGjNmXV2uofx1PxWgp//27E8KvB3vbNIPgt84dgRd1pw7
Vh/aE0066nh0yXI7GVRKM8BZXCquArU8uOYWUIG+0+rDS3BjR5EPj+tG/WB7HejX
9X1Ynfov8Lq0q1OeqmvO4EAIpfX6MGZlMjMnUD4h6tjF4KXfA/sCGs9MmirmE5Qs
wpZ608tHaO1qfjj5T1zsAUIMeHxGO9Osl25b3SlxH6WEo48e1ZS/X+a8yW6uk7eA
XjEGyfoOZoqtZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:43:52 2025 by rpki-client