Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: lDZ5jxzY6W5WPPDBa0d+tJCdMrdnvXOcgGEgd/wh6mA=
Subject key identifier: 94:5C:5F:24:F3:6C:DF:4F:3B:A0:0A:36:FF:D4:D5:D8:F9:54:B0:43
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 0196753031B5559E6CFBCDC35BEC4ADC8D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 11F6
Signing time: Sun 27 Apr 2025 03:00:14 +0000
Manifest this update: Sun 27 Apr 2025 03:00:14 +0000
Manifest next update: Mon 28 Apr 2025 03:00:14 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: Knmn4rAyDs8RNsx3DFThIKqPjsSFQHktXxQ7YiJMqes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:31:b5:55:9e:6c:fb:cd:c3:5b:ec:4a:dc:8d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Apr 27 03:00:14 2025 GMT
Not After : Apr 28 03:00:14 2025 GMT
Subject: CN=945c5f24f36cdf4f3ba00a36ffd4d5d8f954b043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:83:19:93:21:68:51:b0:e6:47:c5:ee:5f:
12:38:a2:49:e6:85:0a:1f:b1:a2:58:17:1a:fd:9c:
31:34:76:37:a8:4c:39:52:e1:67:88:8b:8c:c4:0d:
9a:31:73:6e:cf:4c:1b:14:ce:8f:10:a6:ef:cc:4c:
0f:b1:1e:68:16:34:c4:7e:00:48:ad:e9:fa:81:6a:
14:6c:f9:b0:fa:27:f6:e6:36:0f:53:28:5d:94:d1:
9c:bc:20:36:e5:ad:e8:1e:ac:b8:a4:89:0e:57:67:
e9:25:bd:94:dd:9a:26:c3:67:5e:62:88:35:0c:2b:
e9:8c:61:5f:0e:3a:34:86:3d:c3:6f:19:9a:f2:df:
24:7a:eb:14:d8:2e:17:13:dc:ab:92:8c:50:d4:70:
de:be:fe:32:f7:f4:31:6a:c6:a5:ec:6c:dd:b1:f8:
f1:36:12:57:0a:d2:a6:78:db:fc:dc:97:92:4e:8e:
b3:e6:c1:a1:d6:ae:c7:ec:97:2a:e1:a6:a2:01:a1:
f4:40:b2:20:2d:56:e9:39:29:37:33:fa:25:2f:55:
6d:1d:d5:42:3d:9a:39:40:bf:9c:a6:b0:d1:26:3f:
14:ab:4e:dc:13:22:75:18:c0:b1:67:94:37:d8:c3:
24:04:5f:eb:17:3b:85:70:1e:92:4a:ab:8a:1d:f0:
49:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5C:5F:24:F3:6C:DF:4F:3B:A0:0A:36:FF:D4:D5:D8:F9:54:B0:43
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:28:0a:ef:af:ff:d2:81:13:6f:66:7d:9d:cd:2f:d9:d6:34:
b4:c0:35:b8:63:90:8a:27:20:85:4d:1a:36:60:ff:f9:ad:00:
74:f5:75:94:a9:52:53:0b:00:01:51:8f:96:52:5d:d0:4e:25:
81:e3:c3:09:81:af:59:21:d5:72:81:ca:71:53:d7:1a:19:af:
dd:eb:52:8e:47:62:8f:c9:2d:0f:fb:02:67:b1:df:d5:a6:a3:
1f:fe:28:97:e5:da:e2:25:fb:e1:cc:4e:1e:d8:69:f3:3f:4a:
b9:78:e4:0e:d9:24:40:d1:5f:c0:0f:3a:b0:fe:d8:b1:83:f9:
63:8e:02:27:7d:54:47:9d:3c:2f:fb:d6:4c:f4:35:e1:9e:d2:
d8:7d:05:d3:04:55:17:4a:e2:7c:86:c7:f8:23:e8:e1:c6:47:
03:44:b6:df:43:2b:8a:05:e2:a2:c8:d9:8b:d9:ad:7b:83:d7:
4b:5e:77:31:d2:9c:a9:58:54:a7:cc:b9:51:85:da:39:3d:96:
bd:6d:d5:03:d1:51:be:33:7d:20:73:96:f0:8c:71:99:fe:10:
72:d2:24:db:fa:d7:81:ab:80:03:0f:65:f8:94:53:3b:6a:04:
7c:f6:28:ae:89:3d:8f:26:04:46:d3:26:4b:9f:f9:46:c5:f8:
d0:78:b5:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MDG1VZ5s+83DW+xK3I1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYWEwMmY0NWI5NzkzMGM3YTQ2ZDBlZjE4YTkxYzBhYWY4
OTkyZjIwHhcNMjUwNDI3MDMwMDE0WhcNMjUwNDI4MDMwMDE0WjAzMTEwLwYDVQQD
Eyg5NDVjNWYyNGYzNmNkZjRmM2JhMDBhMzZmZmQ0ZDVkOGY5NTRiMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSaDGZMhaFGw5kfF7l8SOKJJ5oUK
H7GiWBca/ZwxNHY3qEw5UuFniIuMxA2aMXNuz0wbFM6PEKbvzEwPsR5oFjTEfgBI
ren6gWoUbPmw+if25jYPUyhdlNGcvCA25a3oHqy4pIkOV2fpJb2U3Zomw2deYog1
DCvpjGFfDjo0hj3Dbxma8t8keusU2C4XE9yrkoxQ1HDevv4y9/Qxasal7Gzdsfjx
NhJXCtKmeNv83JeSTo6z5sGh1q7H7Jcq4aaiAaH0QLIgLVbpOSk3M/olL1VtHdVC
PZo5QL+cprDRJj8Uq07cEyJ1GMCxZ5Q32MMkBF/rFzuFcB6SSquKHfBJUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRcXyTzbN9PO6AKNv/U1dj5VLBDMB8GA1UdIwQY
MBaAFHKqAvRbl5MMekbQ7xipHAqviZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjct
ZDc5YjBlYzc4ZTk3LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjctZDc5YjBlYzc4ZTk3
LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCgK76//
0oETb2Z9nc0v2dY0tMA1uGOQiicghU0aNmD/+a0AdPV1lKlSUwsAAVGPllJd0E4l
gePDCYGvWSHVcoHKcVPXGhmv3etSjkdij8ktD/sCZ7Hf1aajH/4ol+Xa4iX74cxO
Hthp8z9KuXjkDtkkQNFfwA86sP7YsYP5Y44CJ31UR508L/vWTPQ14Z7S2H0F0wRV
F0rifIbH+CPo4cZHA0S230MrigXiosjZi9mte4PXS153MdKcqVhUp8y5UYXaOT2W
vW3VA9FRvjN9IHOW8Ixxmf4QctIk2/rXgauAAw9l+JRTO2oEfPYorok9jyYERtMm
S5/5RsX40Hi1gQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:17:35 2025 by rpki-client