Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier: NY0P50fvSMWHEvVDMfgTMHhPy8a50T3Tj2zzTFfHTyo=
Subject key identifier: F5:B5:A0:69:26:AA:51:80:1A:A2:3D:A8:F0:70:3F:35:03:2B:78:D0
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 019679E947A96BFC5BD64820569761D8A86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number: 1269
Signing time: Mon 28 Apr 2025 01:00:53 +0000
Manifest this update: Mon 28 Apr 2025 01:00:53 +0000
Manifest next update: Tue 29 Apr 2025 01:00:53 +0000
Files and hashes: 1: 78S4WmbXMNI8p1WLj4U6NB6Bpk8.roa (hash: bBamnPgie/uUwEiZyXlGtHo6lmaBP0c5URwdBpztxDc=)
2: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: 8uZdSUz99mDrMKSjaiVe9Qtif4Somrh1F5dRSxRIdUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:47:a9:6b:fc:5b:d6:48:20:56:97:61:d8:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Apr 28 01:00:53 2025 GMT
Not After : Apr 29 01:00:53 2025 GMT
Subject: CN=f5b5a06926aa51801aa23da8f0703f35032b78d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:79:f9:7a:a2:a4:7d:5e:15:9c:38:74:3e:
50:f0:80:70:fa:c2:cf:4b:03:4f:6a:e4:6e:a3:13:
cd:1b:6d:0d:42:c3:27:34:2e:b6:bd:5b:78:c7:4d:
d5:b5:bd:47:81:4b:a1:46:b7:1f:a3:ea:63:d9:bd:
a7:d3:17:17:29:03:4e:25:d8:12:0c:4d:a5:0d:3e:
b0:18:5b:74:73:68:80:db:3c:98:a3:74:e4:df:e5:
d2:1b:16:b8:09:61:f5:f2:8b:bf:55:72:2a:2c:23:
76:0e:2f:2b:bc:85:aa:55:7e:cb:9e:b6:04:d4:63:
be:f8:ea:30:bc:03:2d:4e:ee:67:8b:99:5f:09:d1:
a8:e3:74:9c:e6:cf:af:4c:2d:57:69:32:bd:17:84:
26:86:27:f5:5d:81:c9:a8:d8:66:48:ba:14:f5:91:
8c:20:c1:46:c2:06:11:bb:7e:2b:26:da:ec:f6:24:
6b:e3:2d:82:dd:df:5d:d8:90:e8:0b:c1:5a:49:03:
98:32:d3:a6:75:aa:8e:0d:da:a4:67:fd:98:00:0a:
3d:83:0d:2e:e2:0a:3b:67:bf:9f:d0:65:1a:42:94:
b1:86:0a:ec:7a:0f:87:2e:3e:95:61:ca:37:d9:4a:
fc:bc:03:9d:44:a0:8c:39:2a:0d:4f:2e:d3:b3:ff:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:A0:69:26:AA:51:80:1A:A2:3D:A8:F0:70:3F:35:03:2B:78:D0
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:eb:58:3a:bc:e6:e0:44:13:38:1b:1d:1d:c2:ac:67:1f:58:
50:f4:93:50:8b:8a:36:d9:bf:b8:af:01:2a:98:03:47:2e:3d:
8a:41:fd:1c:c4:31:c5:76:5f:14:41:03:8d:50:f4:2c:0a:31:
5b:5f:aa:a5:b3:97:43:af:e3:93:cc:c2:94:aa:fa:f4:fc:f9:
23:ee:c4:79:28:c1:11:c8:eb:ad:25:32:97:af:26:51:17:a6:
57:33:a6:bf:ca:30:21:9a:45:45:e0:9d:f3:03:1b:56:ac:65:
0b:f7:ff:ac:90:af:87:74:bf:d6:4e:1e:9b:4a:6b:0c:9f:27:
8b:b4:d5:0d:f9:74:5e:e9:6e:fc:75:db:ad:6e:07:fa:04:8f:
1a:57:51:bb:aa:15:59:62:ea:e5:81:9a:ff:01:6c:6d:ea:0c:
7b:13:28:72:99:b6:41:21:8b:8b:eb:4b:a9:26:61:4c:13:a4:
36:a0:ae:a4:7e:b6:d1:c6:e0:00:ca:73:69:a9:4a:e4:78:fc:
62:26:af:91:5b:99:a8:d9:e9:70:6f:be:0c:e3:1a:00:a6:5e:
01:83:61:40:65:71:dd:20:35:f8:9e:49:31:a3:d9:ff:35:18:
c5:be:eb:5f:d3:b8:2d:0c:67:19:03:8b:c1:d5:9f:4e:45:63:
14:2e:44:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56Uepa/xb1kggVpdh2KhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYmI3NmFhOTZkZjhlYjdkNjc3N2IzNTcyNTJlMTExNTUy
Mzg3ODUwHhcNMjUwNDI4MDEwMDUzWhcNMjUwNDI5MDEwMDUzWjAzMTEwLwYDVQQD
EyhmNWI1YTA2OTI2YWE1MTgwMWFhMjNkYThmMDcwM2YzNTAzMmI3OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUp5+XqipH1eFZw4dD5Q8IBw+sLP
SwNPauRuoxPNG20NQsMnNC62vVt4x03Vtb1HgUuhRrcfo+pj2b2n0xcXKQNOJdgS
DE2lDT6wGFt0c2iA2zyYo3Tk3+XSGxa4CWH18ou/VXIqLCN2Di8rvIWqVX7LnrYE
1GO++OowvAMtTu5ni5lfCdGo43Sc5s+vTC1XaTK9F4Qmhif1XYHJqNhmSLoU9ZGM
IMFGwgYRu34rJtrs9iRr4y2C3d9d2JDoC8FaSQOYMtOmdaqODdqkZ/2YAAo9gw0u
4go7Z7+f0GUaQpSxhgrseg+HLj6VYco32Ur8vAOdRKCMOSoNTy7Ts/8YnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW1oGkmqlGAGqI9qPBwPzUDK3jQMB8GA1UdIwQY
MBaAFEC7dqqW34631nd7NXJS4RFVI4eFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5Yjkt
MzVlZTdhNzM5ZmQ5LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lMzFkNjgtY2I2My00YmQxLTk5YjktMzVlZTdhNzM5ZmQ5
LzEvUUx0MnFwYmZqcmZXZDNzMWNsTGhFVlVqaDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+tYOrzm
4EQTOBsdHcKsZx9YUPSTUIuKNtm/uK8BKpgDRy49ikH9HMQxxXZfFEEDjVD0LAox
W1+qpbOXQ6/jk8zClKr69Pz5I+7EeSjBEcjrrSUyl68mURemVzOmv8owIZpFReCd
8wMbVqxlC/f/rJCvh3S/1k4em0prDJ8ni7TVDfl0Xulu/HXbrW4H+gSPGldRu6oV
WWLq5YGa/wFsbeoMexMocpm2QSGLi+tLqSZhTBOkNqCupH620cbgAMpzaalK5Hj8
YiavkVuZqNnpcG++DOMaAKZeAYNhQGVx3SA1+J5JMaPZ/zUYxb7rX9O4LQxnGQOL
wdWfTkVjFC5Eaw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:41 2025 by rpki-client