Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: nUoAAfEkPcAuAraIsJh7VLKVgnVsfzVub9UeHVHdg4M=
Subject key identifier: E7:0A:4B:D6:62:63:FD:DF:CE:B7:65:22:69:9E:F5:F6:F4:DC:85:33
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 01967D8E91E552A2480583B46E006C3CCAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 18:00:17 +0000
Manifest this update: Mon 28 Apr 2025 18:00:17 +0000
Manifest next update: Tue 29 Apr 2025 18:00:17 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: NGGW88f9PInnWJE497EPU4bBpPXbzJvvl5j1xBU3ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:91:e5:52:a2:48:05:83:b4:6e:00:6c:3c:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Apr 28 18:00:17 2025 GMT
Not After : Apr 29 18:00:17 2025 GMT
Subject: CN=e70a4bd66263fddfceb76522699ef5f6f4dc8533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:6d:dd:bf:32:da:38:14:83:59:71:8d:10:
3c:6d:9a:5e:33:b0:de:4b:ca:f5:53:24:49:a8:56:
4c:51:0f:d2:b2:7c:9d:fb:f1:9a:2f:fd:9c:f2:ac:
a2:64:10:f9:2b:0b:8d:b3:81:c1:54:a7:5d:a5:c1:
dd:d6:8c:bc:59:2d:4b:ed:05:c8:4b:32:8c:21:4c:
08:b2:a8:77:76:8d:dd:3a:8f:54:50:c3:33:a4:de:
07:91:56:1a:9a:93:c6:81:26:93:96:f6:b1:07:bb:
61:70:d0:b4:ce:7d:f9:94:d7:90:9b:e5:4d:b0:69:
cf:52:8d:86:9a:97:dd:2d:af:8d:89:f4:b7:60:a5:
1e:e0:03:1e:8f:8f:9f:d2:47:f8:32:98:3a:f9:ba:
16:ab:0b:72:14:4b:ca:4d:80:45:fd:8d:f9:1e:e0:
f3:ad:c1:16:ee:92:07:b6:fc:55:0b:22:e1:7a:59:
3b:4c:5d:d3:d2:fd:a3:7f:8f:c5:c6:be:9f:9d:69:
98:b8:31:71:16:22:0f:17:9b:1a:9a:5c:34:c9:47:
73:69:0e:58:56:67:ba:32:5d:ab:0a:9e:a9:9a:e0:
fb:89:5c:c8:6e:88:30:25:6e:e6:b2:66:bf:c2:d2:
8e:44:20:26:9d:97:ea:be:e4:5b:71:c0:1f:4b:3e:
24:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0A:4B:D6:62:63:FD:DF:CE:B7:65:22:69:9E:F5:F6:F4:DC:85:33
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:bd:b5:a8:a4:30:c0:d2:5d:9c:9e:d8:e5:74:12:4e:e8:
db:ec:3a:6e:e5:33:10:57:cc:f4:de:1e:06:6a:25:a3:40:db:
62:70:8a:9f:35:c3:71:09:a1:da:c9:f5:ae:f8:d5:db:82:0f:
7b:c8:db:23:01:ed:2c:75:5c:f5:56:d3:a9:19:85:78:28:b8:
8f:15:3b:7d:f6:ba:41:3a:42:e8:cf:54:37:1e:c1:04:0e:18:
3c:21:3a:3b:d6:f0:a4:80:95:da:4c:41:24:f7:9d:d7:de:51:
21:19:b4:39:81:eb:36:d2:22:f6:87:b0:e4:67:75:1a:91:79:
7c:f6:b6:68:2d:ae:d0:7b:68:02:6b:bc:30:af:6c:78:cc:d7:
4c:2c:82:13:d5:67:26:1c:a6:92:21:36:30:9c:fe:65:72:fd:
bb:88:59:db:90:32:06:01:f9:86:43:32:aa:cd:27:90:2c:59:
49:49:8b:e4:b3:39:a9:8f:98:40:d7:43:14:13:98:10:29:ef:
4c:76:29:44:58:d0:3f:19:ad:0c:be:e4:6d:f5:0d:6e:e2:17:
62:bb:75:10:0e:1f:4d:34:73:9a:52:18:52:9d:b2:27:93:8c:
c2:ab:84:bb:d5:dd:b9:22:ba:10:af:7f:52:65:5f:ec:a0:34:
0f:dc:ad:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jpHlUqJIBYO0bgBsPMqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlMmU4MTJmMDlhYzRmZTJiNDdlNDI2OWNlMWEwMjAy
MWNhMGUwHhcNMjUwNDI4MTgwMDE3WhcNMjUwNDI5MTgwMDE3WjAzMTEwLwYDVQQD
EyhlNzBhNGJkNjYyNjNmZGRmY2ViNzY1MjI2OTllZjVmNmY0ZGM4NTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHFt3b8y2jgUg1lxjRA8bZpeM7De
S8r1UyRJqFZMUQ/Ssnyd+/GaL/2c8qyiZBD5KwuNs4HBVKddpcHd1oy8WS1L7QXI
SzKMIUwIsqh3do3dOo9UUMMzpN4HkVYampPGgSaTlvaxB7thcNC0zn35lNeQm+VN
sGnPUo2GmpfdLa+NifS3YKUe4AMej4+f0kf4Mpg6+boWqwtyFEvKTYBF/Y35HuDz
rcEW7pIHtvxVCyLhelk7TF3T0v2jf4/Fxr6fnWmYuDFxFiIPF5samlw0yUdzaQ5Y
Vme6Ml2rCp6pmuD7iVzIbogwJW7msma/wtKORCAmnZfqvuRbccAfSz4kowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcKS9ZiY/3fzrdlImme9fb03IUzMB8GA1UdIwQY
MBaAFKpE4ugS8JrE/itH5Cac4aAgIcoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYt
ODY2NDBmY2EzM2JmLzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYtODY2NDBmY2EzM2Jm
LzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixm9taik
MMDSXZye2OV0Ek7o2+w6buUzEFfM9N4eBmolo0DbYnCKnzXDcQmh2sn1rvjV24IP
e8jbIwHtLHVc9VbTqRmFeCi4jxU7ffa6QTpC6M9UNx7BBA4YPCE6O9bwpICV2kxB
JPed195RIRm0OYHrNtIi9oew5Gd1GpF5fPa2aC2u0HtoAmu8MK9seMzXTCyCE9Vn
JhymkiE2MJz+ZXL9u4hZ25AyBgH5hkMyqs0nkCxZSUmL5LM5qY+YQNdDFBOYECnv
THYpRFjQPxmtDL7kbfUNbuIXYrt1EA4fTTRzmlIYUp2yJ5OMwquEu9XduSK6EK9/
UmVf7KA0D9yt9Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:36:00 2025 by rpki-client