Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
File: q0U2TkncOhW-_yacOjKzwFQci2Y.mft (raw, json)
Hash identifier: EEmdGA8VqwJpt8V36kbphDl+e4kOOv2dzBHQ7wWNupY=
Subject key identifier: 19:D5:A3:73:26:56:4B:B4:5A:8B:20:8B:4F:C3:57:7A:6F:C0:D2:C4
Authority key identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
Certificate issuer: /CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Certificate serial: 0196933B32E4BB5E9B6E8CD731F63EDE3EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 23:00:52 +0000
Manifest this update: Fri 02 May 2025 23:00:52 +0000
Manifest next update: Sat 03 May 2025 23:00:52 +0000
Files and hashes: 1: Diq6O5ga68_B8MEC7x3IDqn6lbc.roa (hash: r+Ep1MU6KZ691K575NCgrIa7fSiICzMjhV/0OlU71vU=)
2: q0U2TkncOhW-_yacOjKzwFQci2Y.crl (hash: ex7Nu5y/1hPzh05pG5e4GZ/JmUQUqWX6UbiBbxGiy6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:3b:32:e4:bb:5e:9b:6e:8c:d7:31:f6:3e:de:3e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Validity
Not Before: May 2 23:00:52 2025 GMT
Not After : May 3 23:00:52 2025 GMT
Subject: CN=19d5a37326564bb45a8b208b4fc3577a6fc0d2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:eb:41:fa:4a:1f:25:9f:97:86:70:5a:c4:
4f:54:ab:b2:98:05:99:d7:f9:98:d1:57:10:f0:d4:
aa:81:f0:cc:fe:81:98:da:b7:46:d9:39:26:bb:b3:
fe:2b:ec:30:4a:9f:25:57:52:0f:3b:6d:92:d1:5b:
d0:0a:89:41:ff:f2:4c:b6:09:39:97:4b:21:fa:c9:
a1:ee:f8:11:07:a4:46:ac:1a:bc:ca:22:ba:19:fb:
80:6c:60:7b:86:88:40:68:bd:44:64:42:7b:8a:1d:
de:6c:55:26:d5:89:2d:80:8b:cd:c5:5f:f4:a0:4b:
1f:f4:0b:dc:ec:e9:46:03:41:2b:ec:e0:2b:69:03:
67:f2:a4:74:cb:7f:2e:ae:aa:02:28:31:2a:5a:2f:
32:05:76:f8:4e:47:a7:61:d2:24:59:c2:d7:f6:a5:
6c:55:8f:ef:09:33:2b:7f:8b:47:ad:fe:e2:a8:db:
c3:bd:cf:eb:45:fd:27:f6:d8:b3:68:2e:d9:d2:15:
95:95:85:e8:eb:36:dc:50:cc:f7:5d:04:c8:d3:62:
92:23:f3:07:88:99:92:9c:f4:28:02:ca:fc:8d:0c:
1b:c1:15:06:50:63:79:71:39:32:27:6c:f9:b3:35:
3d:48:65:05:55:a1:37:d6:9f:a5:c8:7e:7e:b0:71:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D5:A3:73:26:56:4B:B4:5A:8B:20:8B:4F:C3:57:7A:6F:C0:D2:C4
X509v3 Authority Key Identifier:
keyid:AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:64:0e:ee:4a:c1:52:41:df:01:92:55:93:07:77:db:c5:d9:
88:b0:f4:93:d6:aa:83:f1:13:ac:55:dd:21:b8:b2:fa:ac:8a:
f2:57:bb:b3:0c:94:4c:a1:3d:36:07:ac:fa:96:69:64:3d:46:
e0:69:e1:d2:6c:27:b7:26:da:36:b7:46:9e:69:5c:c1:ec:bf:
06:4e:19:30:31:7c:2b:6f:26:32:64:24:f8:31:6c:ba:6a:40:
d0:e5:09:fe:cc:c7:88:fa:a0:44:ed:88:17:34:52:c0:fb:31:
e1:71:40:32:ae:22:ed:23:6d:bc:d9:42:27:bf:15:67:40:82:
a0:6e:35:51:11:09:da:bb:3d:6a:8c:53:b8:c3:a0:02:38:a1:
c7:af:41:d4:34:94:0d:fd:85:48:40:02:7d:e0:5f:3c:e8:20:
92:69:1c:1b:ce:12:02:87:fa:bb:6a:21:ac:49:5a:80:89:00:
e4:5d:6c:d7:1e:01:38:e5:2b:6e:f6:3d:26:50:cd:90:1c:46:
93:fb:1e:6a:86:be:36:34:d8:ef:11:8b:2f:29:81:19:a8:0f:
d3:38:40:f6:42:2f:9f:af:b2:f8:2d:d3:fe:28:10:ee:b5:7a:
1f:fa:44:4e:40:3b:4a:3d:03:24:aa:75:aa:38:e6:83:81:0b:
72:f1:21:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTOzLku16bbozXMfY+3j6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNDUzNjRlNDlkYzNhMTViZWZmMjY5YzNhMzJiM2MwNTQx
YzhiNjYwHhcNMjUwNTAyMjMwMDUyWhcNMjUwNTAzMjMwMDUyWjAzMTEwLwYDVQQD
EygxOWQ1YTM3MzI2NTY0YmI0NWE4YjIwOGI0ZmMzNTc3YTZmYzBkMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngDrQfpKHyWfl4ZwWsRPVKuymAWZ
1/mY0VcQ8NSqgfDM/oGY2rdG2Tkmu7P+K+wwSp8lV1IPO22S0VvQColB//JMtgk5
l0sh+smh7vgRB6RGrBq8yiK6GfuAbGB7hohAaL1EZEJ7ih3ebFUm1YktgIvNxV/0
oEsf9Avc7OlGA0Er7OAraQNn8qR0y38urqoCKDEqWi8yBXb4TkenYdIkWcLX9qVs
VY/vCTMrf4tHrf7iqNvDvc/rRf0n9tizaC7Z0hWVlYXo6zbcUMz3XQTI02KSI/MH
iJmSnPQoAsr8jQwbwRUGUGN5cTkyJ2z5szU9SGUFVaE31p+lyH5+sHHZIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnVo3MmVku0Wosgi0/DV3pvwNLEMB8GA1UdIwQY
MBaAFKtFNk5J3DoVvv8mnDoys8BUHItmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTBVMlRrbmNPaFctX3lhY09qS3p3RlFjaTJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81YWFmMjUtOTc0OC00NTkyLWE0OTct
ZjhiZDI1MDQ1NGViLzEvcTBVMlRrbmNPaFctX3lhY09qS3p3RlFjaTJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81YWFmMjUtOTc0OC00NTkyLWE0OTctZjhiZDI1MDQ1NGVi
LzEvcTBVMlRrbmNPaFctX3lhY09qS3p3RlFjaTJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGQO7krB
UkHfAZJVkwd328XZiLD0k9aqg/ETrFXdIbiy+qyK8le7swyUTKE9Nges+pZpZD1G
4Gnh0mwntybaNrdGnmlcwey/Bk4ZMDF8K28mMmQk+DFsumpA0OUJ/szHiPqgRO2I
FzRSwPsx4XFAMq4i7SNtvNlCJ78VZ0CCoG41UREJ2rs9aoxTuMOgAjihx69B1DSU
Df2FSEACfeBfPOggkmkcG84SAof6u2ohrElagIkA5F1s1x4BOOUrbvY9JlDNkBxG
k/seaoa+NjTY7xGLLymBGagP0zhA9kIvn6+y+C3T/igQ7rV6H/pETkA7Sj0DJKp1
qjjmg4ELcvEhww==
-----END CERTIFICATE-----
Generated at Sat May 3 04:04:23 2025 by rpki-client