Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: JhPH4N9SlFTaP6VE0KIGVehFidPu/IG5kt7ybHSCe9w=
Subject key identifier: 0A:EB:5B:3D:80:80:23:42:CC:77:4B:88:88:CD:5D:5F:41:BA:D8:44
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 0196748C2A51E6E68334AF384CA6E878EA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 00:01:05 +0000
Manifest this update: Sun 27 Apr 2025 00:01:05 +0000
Manifest next update: Mon 28 Apr 2025 00:01:05 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: Ihn9C2QF35+wvAEAWAQBeCPDYTh6KIKkqv2PMtO9e4A=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:2a:51:e6:e6:83:34:af:38:4c:a6:e8:78:ea:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Apr 27 00:01:05 2025 GMT
Not After : Apr 28 00:01:05 2025 GMT
Subject: CN=0aeb5b3d80802342cc774b8888cd5d5f41bad844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:d3:7a:ab:b3:8c:ef:68:3d:9a:67:13:b6:
9b:2f:52:9d:46:04:6a:83:06:8f:87:a0:f2:37:e1:
22:30:69:94:53:69:f9:c8:c6:32:92:a4:c6:77:20:
50:8a:97:58:f4:31:7e:30:d4:f0:af:5e:76:28:3d:
2d:59:f8:82:7d:e1:b4:6b:dd:de:90:b0:36:2d:42:
76:0c:9f:e7:a2:40:78:2a:0d:4b:ea:a5:52:b0:a3:
1c:df:9e:03:15:82:51:1a:f7:16:0e:9a:53:40:7e:
b6:92:d5:b1:43:3f:f4:2f:4e:9b:3d:73:28:98:b6:
48:f7:70:8e:a2:b5:6b:fa:32:34:c5:b7:0b:25:f2:
ef:2c:04:21:19:21:4f:eb:d2:d8:09:55:7e:8c:94:
8f:3a:a8:51:51:72:6e:23:78:54:dc:15:df:38:d6:
11:5a:67:bd:19:b9:e3:db:1d:0b:31:85:6c:9a:86:
6d:c4:54:fe:55:9c:8a:9a:68:5e:87:aa:71:59:76:
8e:a0:9e:1f:74:db:9d:1f:bd:5c:f7:06:87:1a:7e:
4e:21:4e:ce:db:c0:de:4b:cd:f9:85:a8:d5:e8:0d:
f5:a2:d0:52:97:cf:d9:6e:63:53:da:c1:7b:d0:87:
a2:f7:43:ea:bd:7d:12:91:5f:92:fa:54:bd:0e:9a:
c7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EB:5B:3D:80:80:23:42:CC:77:4B:88:88:CD:5D:5F:41:BA:D8:44
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:f9:eb:88:78:d4:f6:67:be:97:78:62:69:23:f2:0c:28:55:
94:b9:f0:67:c7:11:b3:2e:85:bf:ef:87:15:6f:0e:d1:a9:af:
bb:56:49:05:63:5a:56:9f:3a:50:f3:2e:10:f9:7c:9b:08:1f:
40:53:e3:e6:da:70:22:c5:3a:44:a6:ce:e4:27:6e:74:68:ed:
06:43:19:21:5f:d2:45:de:4b:e1:8a:1a:e2:0b:68:f2:0e:73:
4c:f7:9c:b3:e7:b4:ab:1c:52:d2:a4:15:45:ce:2c:f5:d0:7f:
94:0d:59:29:7f:5c:85:8f:a1:24:7e:ae:51:fc:8c:51:4f:71:
24:f9:0d:e8:9c:de:da:96:87:ee:ae:84:33:c6:1e:18:1d:73:
ae:4f:a6:67:30:23:1a:4b:c6:d6:84:f6:56:15:86:26:d3:8b:
14:38:94:c6:10:d2:d9:ab:ae:f0:f1:d0:0f:d0:2b:98:bc:e3:
44:f3:70:fc:32:89:87:aa:81:f7:a0:90:6d:3f:60:e9:b7:ae:
68:0d:b8:cd:97:1c:d3:c3:47:88:06:40:99:7c:b0:e5:5e:df:
e8:cf:e8:ab:03:ce:ea:4d:dd:32:41:ff:f3:6b:09:cf:60:a8:
6f:66:f2:ed:cf:4f:02:f2:25:e7:a5:ab:b0:99:3e:77:ac:e7:
56:ad:94:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0jCpR5uaDNK84TKboeOoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3
OTBjZjcwHhcNMjUwNDI3MDAwMTA1WhcNMjUwNDI4MDAwMTA1WjAzMTEwLwYDVQQD
EygwYWViNWIzZDgwODAyMzQyY2M3NzRiODg4OGNkNWQ1ZjQxYmFkODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XrTequzjO9oPZpnE7abL1KdRgRq
gwaPh6DyN+EiMGmUU2n5yMYykqTGdyBQipdY9DF+MNTwr152KD0tWfiCfeG0a93e
kLA2LUJ2DJ/nokB4Kg1L6qVSsKMc354DFYJRGvcWDppTQH62ktWxQz/0L06bPXMo
mLZI93COorVr+jI0xbcLJfLvLAQhGSFP69LYCVV+jJSPOqhRUXJuI3hU3BXfONYR
Wme9Gbnj2x0LMYVsmoZtxFT+VZyKmmheh6pxWXaOoJ4fdNudH71c9waHGn5OIU7O
28DeS835hajV6A31otBSl8/ZbmNT2sF70Iei90PqvX0SkV+S+lS9DprHHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArrWz2AgCNCzHdLiIjNXV9ButhEMB8GA1UdIwQY
MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt
N2YyMGVmMDJmMjY0LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0
LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1vnriHjU
9me+l3hiaSPyDChVlLnwZ8cRsy6Fv++HFW8O0amvu1ZJBWNaVp86UPMuEPl8mwgf
QFPj5tpwIsU6RKbO5CdudGjtBkMZIV/SRd5L4Yoa4gto8g5zTPecs+e0qxxS0qQV
Rc4s9dB/lA1ZKX9chY+hJH6uUfyMUU9xJPkN6Jze2paH7q6EM8YeGB1zrk+mZzAj
GkvG1oT2VhWGJtOLFDiUxhDS2auu8PHQD9ArmLzjRPNw/DKJh6qB96CQbT9g6beu
aA24zZcc08NHiAZAmXyw5V7f6M/oqwPO6k3dMkH/82sJz2Cob2by7c9PAvIl56Wr
sJk+d6znVq2UTQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:45 2025 by rpki-client