Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: NiuzKmUgtV5hcpdMD5ZMJAJ3Pu9291LP4HWb92qiKY8=
Subject key identifier: 91:B5:B7:8F:06:51:59:8A:56:50:A5:2D:2F:E0:AD:83:69:91:4B:76
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 0196827E27798186193FBF8F63E426A2EA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 08AE
Signing time: Tue 29 Apr 2025 17:00:27 +0000
Manifest this update: Tue 29 Apr 2025 17:00:27 +0000
Manifest next update: Wed 30 Apr 2025 17:00:27 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: /kqrkXQgDtTO2IS7k2YiKhI6naQVWkJVbxeCjaysfyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:27:79:81:86:19:3f:bf:8f:63:e4:26:a2:ea:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Apr 29 17:00:27 2025 GMT
Not After : Apr 30 17:00:27 2025 GMT
Subject: CN=91b5b78f0651598a5650a52d2fe0ad8369914b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:e4:08:18:60:6a:78:cd:04:40:89:1e:7e:
07:40:0f:02:4f:a7:f7:7f:23:cc:04:c0:47:c9:89:
a7:1a:b2:50:f4:66:27:db:1e:c3:4c:72:8c:15:5a:
fc:7e:03:bc:bd:bd:d5:29:d1:2b:1e:07:ea:18:fc:
43:e3:b2:12:6d:08:39:3e:ab:d1:2d:48:d8:36:4b:
90:04:93:07:7b:e3:fd:ce:13:e0:66:bf:55:db:b6:
5a:93:40:80:6f:00:a9:bb:71:77:47:d0:01:09:5d:
da:7d:4e:2b:2f:aa:63:26:75:ac:01:3a:3b:63:c8:
0b:61:52:39:43:77:72:12:51:f1:76:2c:8e:0d:9f:
9b:47:3c:52:8c:02:8a:3d:c5:30:24:e5:76:20:70:
bc:61:03:38:f1:77:85:8a:2f:60:9d:0d:a9:6c:60:
83:24:06:99:54:e1:fd:e9:a6:2d:dd:c8:a9:da:4f:
4b:64:8c:5a:5e:50:ec:c4:0c:1d:29:f4:4f:10:6c:
bf:0d:eb:76:fa:49:65:ef:a8:62:9f:4c:cc:47:ad:
c1:c2:03:b9:17:4a:7f:e5:f7:2e:e3:18:f0:be:62:
ba:11:5b:32:d9:1f:d3:5b:be:5b:2f:a4:a2:0b:38:
79:99:ae:ba:74:1a:26:53:7e:e8:e0:da:e7:f5:77:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B5:B7:8F:06:51:59:8A:56:50:A5:2D:2F:E0:AD:83:69:91:4B:76
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:62:9e:ed:d3:96:e1:a7:4b:d2:0f:13:ee:96:89:6d:45:fb:
61:ef:e0:63:45:82:4c:49:11:fa:29:ea:53:5a:5b:cc:a4:c9:
32:47:1a:9b:cc:0b:d9:5d:a4:49:5f:44:b2:61:ca:bf:c0:90:
73:39:0c:33:c7:60:fb:d9:7f:a4:88:f8:7b:36:da:5c:2a:68:
72:90:66:b1:db:d1:7c:e4:74:d7:8c:c3:dc:01:63:41:db:8b:
d9:aa:cd:e8:4d:7b:f8:4c:40:20:f8:6f:10:a1:4b:9f:33:4c:
e3:11:3b:b2:bb:1c:9e:fc:0f:c8:fa:69:1b:37:e8:98:4a:79:
14:9b:93:26:5a:4b:68:79:81:2e:0e:f6:9d:9a:9a:67:82:04:
2c:03:ab:97:25:40:ce:f5:fa:82:44:ce:a7:af:fc:ff:85:56:
af:b8:00:da:b6:b8:ff:ef:24:ae:e8:9c:f6:bb:fb:55:c1:a3:
54:dc:f0:e2:9d:f3:0f:6e:6b:a6:31:82:12:41:b9:c6:9d:ec:
fd:3c:da:bf:8c:a7:ad:e0:d9:0b:f7:84:82:b2:c9:46:99:bc:
38:58:26:38:e6:a0:09:3f:df:6e:18:2c:b4:6a:bf:f8:be:5d:
32:c0:78:0b:d0:ea:85:bd:7b:6d:4e:19:ab:b4:79:6e:76:86:
0f:ff:1f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfid5gYYZP7+PY+QmouoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3
ZDliMzkwHhcNMjUwNDI5MTcwMDI3WhcNMjUwNDMwMTcwMDI3WjAzMTEwLwYDVQQD
Eyg5MWI1Yjc4ZjA2NTE1OThhNTY1MGE1MmQyZmUwYWQ4MzY5OTE0Yjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDfkCBhganjNBECJHn4HQA8CT6f3
fyPMBMBHyYmnGrJQ9GYn2x7DTHKMFVr8fgO8vb3VKdErHgfqGPxD47ISbQg5PqvR
LUjYNkuQBJMHe+P9zhPgZr9V27Zak0CAbwCpu3F3R9ABCV3afU4rL6pjJnWsATo7
Y8gLYVI5Q3dyElHxdiyODZ+bRzxSjAKKPcUwJOV2IHC8YQM48XeFii9gnQ2pbGCD
JAaZVOH96aYt3cip2k9LZIxaXlDsxAwdKfRPEGy/Det2+kll76hin0zMR63BwgO5
F0p/5fcu4xjwvmK6EVsy2R/TW75bL6SiCzh5ma66dBomU37o4Nrn9XfZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG1t48GUVmKVlClLS/grYNpkUt2MB8GA1UdIwQY
MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt
N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi
LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWKe7dOW
4adL0g8T7paJbUX7Ye/gY0WCTEkR+inqU1pbzKTJMkcam8wL2V2kSV9EsmHKv8CQ
czkMM8dg+9l/pIj4ezbaXCpocpBmsdvRfOR014zD3AFjQduL2arN6E17+ExAIPhv
EKFLnzNM4xE7srscnvwPyPppGzfomEp5FJuTJlpLaHmBLg72nZqaZ4IELAOrlyVA
zvX6gkTOp6/8/4VWr7gA2ra4/+8kruic9rv7VcGjVNzw4p3zD25rpjGCEkG5xp3s
/Tzav4ynreDZC/eEgrLJRpm8OFgmOOagCT/fbhgstGq/+L5dMsB4C9Dqhb17bU4Z
q7R5bnaGD/8f/g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:55:19 2025 by rpki-client