Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
File: QH75-Xcjo9WiGTasNNMZl_JWHrk.mft (raw, json)
Hash identifier: 9EW7Qxs2J+bqZ/RsOpaMS/0O1varN4bLpRQgn32WFHE=
Subject key identifier: 5C:42:52:CE:7D:24:47:56:E5:A9:04:3D:67:95:83:A0:03:70:93:89
Authority key identifier: 40:7E:F9:F9:77:23:A3:D5:A2:19:36:AC:34:D3:19:97:F2:56:1E:B9
Certificate issuer: /CN=407ef9f97723a3d5a21936ac34d31997f2561eb9
Certificate serial: 01967943EB3CF108C3D360BC7A5D8ED39546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
Manifest number: 0BF0
Signing time: Sun 27 Apr 2025 22:00:16 +0000
Manifest this update: Sun 27 Apr 2025 22:00:16 +0000
Manifest next update: Mon 28 Apr 2025 22:00:16 +0000
Files and hashes: 1: QH75-Xcjo9WiGTasNNMZl_JWHrk.crl (hash: Nu0P0FphoqBy502zg2EV6sUI0uCc7pivT0zrkM/IIDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:eb:3c:f1:08:c3:d3:60:bc:7a:5d:8e:d3:95:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ef9f97723a3d5a21936ac34d31997f2561eb9
Validity
Not Before: Apr 27 22:00:16 2025 GMT
Not After : Apr 28 22:00:16 2025 GMT
Subject: CN=5c4252ce7d244756e5a9043d679583a003709389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:7e:31:fd:dd:b7:82:62:15:d7:c1:53:4d:
ed:21:de:04:83:ab:0a:2f:9a:74:10:a1:be:c6:4a:
15:4a:b4:33:d3:06:5a:5e:4a:a4:ec:40:83:a9:36:
8d:4f:5d:2c:ab:30:96:eb:8a:d9:00:4f:0a:d6:07:
a2:a2:82:a8:13:14:8b:dc:c4:2f:fe:62:a7:4f:88:
78:f7:bf:83:bb:e9:61:92:ab:df:1e:eb:30:d1:c6:
6b:79:ce:9b:55:74:e8:38:40:c6:f1:12:18:a1:1b:
70:a8:19:2c:42:3b:0f:55:83:b8:3b:06:41:e9:d0:
e3:fd:34:3f:62:c0:34:3e:7c:74:d5:39:1e:88:c8:
12:4d:76:ec:69:46:94:c6:af:bd:eb:70:e2:ea:a9:
e0:70:02:5d:2d:75:51:97:c3:a5:ce:e7:cb:0a:fa:
0c:ac:82:d4:16:03:76:cf:5b:41:35:0f:d1:be:3a:
a2:fb:fe:4e:c4:1c:d7:74:3e:e7:5e:04:4b:c7:5a:
77:c8:17:c0:40:b8:a7:a7:97:8e:4e:30:36:cb:a4:
fd:23:c2:04:29:48:c5:4d:f8:45:9a:14:aa:1c:c6:
e2:5c:c3:f2:36:a0:23:58:01:72:d1:1c:98:ef:3a:
ff:53:67:ff:54:2a:6d:d5:57:02:dc:59:8a:a1:c9:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:42:52:CE:7D:24:47:56:E5:A9:04:3D:67:95:83:A0:03:70:93:89
X509v3 Authority Key Identifier:
keyid:40:7E:F9:F9:77:23:A3:D5:A2:19:36:AC:34:D3:19:97:F2:56:1E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:84:b3:bd:78:aa:0f:0f:32:1b:be:e8:4e:44:50:0b:2a:2a:
79:b2:21:9d:34:af:a2:10:74:55:3d:52:5a:2d:64:1f:34:96:
df:5e:14:5b:6e:5d:e7:9d:07:55:41:a4:a2:41:02:2c:05:cb:
91:ab:c4:ca:ab:5f:d9:e1:d8:bb:e5:fd:f0:c5:c2:66:23:07:
69:5c:80:93:a0:89:a5:7e:f5:e2:47:4f:7d:0b:88:cf:55:40:
ce:a4:30:93:b8:4a:a6:1f:5b:4e:70:73:ca:06:0a:21:62:55:
d4:e0:b5:ff:49:f6:76:f4:97:bc:f0:0c:f7:a7:09:60:02:a3:
83:f3:fc:f2:98:8d:33:79:6a:82:81:01:47:0b:b5:1b:e3:69:
05:99:bb:8d:c1:70:cf:ba:3d:6c:12:4d:38:b1:03:46:aa:01:
9a:00:a5:fd:f9:9c:0c:e0:5d:70:39:79:5f:32:86:29:93:57:
ef:e0:9c:fb:be:9c:73:6a:b9:80:b3:cc:95:c9:85:5f:36:3d:
29:a4:ee:96:55:ac:77:e0:77:19:4a:99:c1:99:70:56:c2:ce:
90:d9:18:4e:4a:d7:07:c9:25:f9:f3:c5:e6:46:13:ae:f4:be:
11:23:87:92:34:c5:97:79:cd:bc:62:0c:f4:a9:3d:94:0d:46:
9a:a8:12:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5Q+s88QjD02C8el2O05VGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwN2VmOWY5NzcyM2EzZDVhMjE5MzZhYzM0ZDMxOTk3ZjI1
NjFlYjkwHhcNMjUwNDI3MjIwMDE2WhcNMjUwNDI4MjIwMDE2WjAzMTEwLwYDVQQD
Eyg1YzQyNTJjZTdkMjQ0NzU2ZTVhOTA0M2Q2Nzk1ODNhMDAzNzA5Mzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr5+Mf3dt4JiFdfBU03tId4Eg6sK
L5p0EKG+xkoVSrQz0wZaXkqk7ECDqTaNT10sqzCW64rZAE8K1geiooKoExSL3MQv
/mKnT4h497+Du+lhkqvfHusw0cZrec6bVXToOEDG8RIYoRtwqBksQjsPVYO4OwZB
6dDj/TQ/YsA0Pnx01TkeiMgSTXbsaUaUxq+963Di6qngcAJdLXVRl8OlzufLCvoM
rILUFgN2z1tBNQ/Rvjqi+/5OxBzXdD7nXgRLx1p3yBfAQLinp5eOTjA2y6T9I8IE
KUjFTfhFmhSqHMbiXMPyNqAjWAFy0RyY7zr/U2f/VCpt1VcC3FmKocnKwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxCUs59JEdW5akEPWeVg6ADcJOJMB8GA1UdIwQY
MBaAFEB++fl3I6PVohk2rDTTGZfyVh65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUg3NS1YY2pvOVdpR1Rhc05OTVpsX0pXSHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lMWNlNDAtMjRlNy00MDRjLThlMjQt
OGQ2NmU3MjA0MjFkLzEvUUg3NS1YY2pvOVdpR1Rhc05OTVpsX0pXSHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9lMWNlNDAtMjRlNy00MDRjLThlMjQtOGQ2NmU3MjA0MjFk
LzEvUUg3NS1YY2pvOVdpR1Rhc05OTVpsX0pXSHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYSzvXiq
Dw8yG77oTkRQCyoqebIhnTSvohB0VT1SWi1kHzSW314UW25d550HVUGkokECLAXL
kavEyqtf2eHYu+X98MXCZiMHaVyAk6CJpX714kdPfQuIz1VAzqQwk7hKph9bTnBz
ygYKIWJV1OC1/0n2dvSXvPAM96cJYAKjg/P88piNM3lqgoEBRwu1G+NpBZm7jcFw
z7o9bBJNOLEDRqoBmgCl/fmcDOBdcDl5XzKGKZNX7+Cc+76cc2q5gLPMlcmFXzY9
KaTullWsd+B3GUqZwZlwVsLOkNkYTkrXB8kl+fPF5kYTrvS+ESOHkjTFl3nNvGIM
9Kk9lA1GmqgSsg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:56 2025 by rpki-client