Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: TC+iL9R5vP2fpJFQInn8pq+Nh0HFKpdulCiONgyf9TQ=
Subject key identifier: 13:4B:D6:5A:50:62:8F:B5:63:CC:A3:45:52:27:01:42:F4:04:97:CC
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 0196802247A51FE855C1FEE43A5F35E3EBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 06:00:52 +0000
Manifest this update: Tue 29 Apr 2025 06:00:52 +0000
Manifest next update: Wed 30 Apr 2025 06:00:52 +0000
Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: JcqlJ3FSCws9QmTtyLebFcOOWtPuaBnmvQXyhAYLgCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:47:a5:1f:e8:55:c1:fe:e4:3a:5f:35:e3:eb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Apr 29 06:00:52 2025 GMT
Not After : Apr 30 06:00:52 2025 GMT
Subject: CN=134bd65a50628fb563cca34552270142f40497cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:66:28:7d:ab:65:de:42:2f:5c:e5:9c:5a:
a6:ac:26:3d:51:58:3b:7b:1a:35:af:dd:ba:f8:97:
e9:64:7e:33:10:55:32:a6:33:2e:0d:a5:a8:a7:b9:
06:69:aa:08:19:31:26:e9:53:23:83:49:51:13:80:
02:01:25:b5:29:9d:cd:90:14:58:a0:b5:3f:b1:bd:
b0:36:7c:83:43:d6:70:cb:37:27:92:45:3f:a4:79:
01:4a:56:e9:96:33:65:b3:d9:6d:38:a8:ee:ec:8b:
cc:36:ea:22:40:ad:4f:e4:8d:e4:37:69:fd:2f:a1:
a1:51:dc:3a:ef:17:35:0e:4f:cb:60:d2:ea:02:8f:
64:c1:0b:b1:62:48:43:52:e9:32:1a:f6:5b:23:df:
d3:51:b7:7c:44:2d:15:93:4c:fc:74:40:b3:6b:8b:
c6:24:8b:10:4c:14:c9:a4:7d:9b:8c:90:8d:9f:b4:
22:8d:31:c6:2a:2a:da:53:79:56:d8:e3:96:bc:28:
b8:44:56:6f:ee:0e:db:56:7c:52:2a:19:68:f4:04:
a5:94:7d:22:c4:20:34:f7:73:c6:61:34:cb:e8:6b:
d3:71:b0:8a:9b:e2:9c:be:7a:6a:af:06:34:35:6d:
62:9b:c7:1f:4c:82:2e:5d:56:2b:1d:1c:15:33:9f:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:D6:5A:50:62:8F:B5:63:CC:A3:45:52:27:01:42:F4:04:97:CC
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:79:c9:05:4c:7a:66:b7:30:9d:92:64:60:42:a3:c4:de:6d:
9d:21:d5:09:19:82:4e:eb:f1:95:2b:61:c6:8d:43:7e:b9:aa:
1a:5e:d3:20:3c:10:56:6b:4f:2f:5d:97:fb:80:69:d7:b1:fb:
73:d0:f3:fd:aa:ec:03:d9:94:8f:32:53:f7:22:5d:bc:20:28:
29:3a:e1:20:97:d1:8a:59:20:f0:10:b0:0c:fe:df:eb:07:5b:
64:93:9f:12:7f:0e:5e:f9:23:30:16:05:fe:ab:be:95:9f:84:
c3:ff:e9:b2:86:e6:76:ef:db:08:6d:ac:22:41:fc:85:f4:60:
23:a1:40:fe:02:a5:88:f4:c6:48:b8:86:08:1a:3c:00:11:7a:
b0:f6:e3:20:e2:6f:af:46:44:a5:f8:12:0d:46:6e:56:dc:8d:
06:b4:36:ad:91:bf:29:cd:07:25:48:e8:f9:89:e6:d3:69:fe:
05:bd:28:0a:5c:ec:ab:05:f8:e6:b1:ae:b4:07:16:54:cd:58:
8a:3c:88:43:58:8f:f4:8f:20:e9:67:09:b1:5a:9f:cc:df:32:
3a:7f:27:03:a7:ba:7c:19:3a:7b:79:7f:2d:f8:f0:98:e2:5b:
02:d9:3f:7b:20:6d:2e:70:dc:cb:f8:0a:ae:0b:c2:5a:d6:cd:
0a:ba:7c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIkelH+hVwf7kOl814+vHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4
OThlY2IwHhcNMjUwNDI5MDYwMDUyWhcNMjUwNDMwMDYwMDUyWjAzMTEwLwYDVQQD
EygxMzRiZDY1YTUwNjI4ZmI1NjNjY2EzNDU1MjI3MDE0MmY0MDQ5N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKhmKH2rZd5CL1zlnFqmrCY9UVg7
exo1r926+JfpZH4zEFUypjMuDaWop7kGaaoIGTEm6VMjg0lRE4ACASW1KZ3NkBRY
oLU/sb2wNnyDQ9ZwyzcnkkU/pHkBSlbpljNls9ltOKju7IvMNuoiQK1P5I3kN2n9
L6GhUdw67xc1Dk/LYNLqAo9kwQuxYkhDUukyGvZbI9/TUbd8RC0Vk0z8dECza4vG
JIsQTBTJpH2bjJCNn7QijTHGKiraU3lW2OOWvCi4RFZv7g7bVnxSKhlo9ASllH0i
xCA093PGYTTL6GvTcbCKm+KcvnpqrwY0NW1im8cfTIIuXVYrHRwVM586QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNL1lpQYo+1Y8yjRVInAUL0BJfMMB8GA1UdIwQY
MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt
MzFkMjQ1ZjNiM2I4LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4
LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3nJBUx6
ZrcwnZJkYEKjxN5tnSHVCRmCTuvxlSthxo1DfrmqGl7TIDwQVmtPL12X+4Bp17H7
c9Dz/arsA9mUjzJT9yJdvCAoKTrhIJfRilkg8BCwDP7f6wdbZJOfEn8OXvkjMBYF
/qu+lZ+Ew//psobmdu/bCG2sIkH8hfRgI6FA/gKliPTGSLiGCBo8ABF6sPbjIOJv
r0ZEpfgSDUZuVtyNBrQ2rZG/Kc0HJUjo+Ynm02n+Bb0oClzsqwX45rGutAcWVM1Y
ijyIQ1iP9I8g6WcJsVqfzN8yOn8nA6e6fBk6e3l/LfjwmOJbAtk/eyBtLnDcy/gK
rgvCWtbNCrp8yA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:28:51 2025 by rpki-client