Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: z9CP0Oron4AuInxSoUCQVNDq1QJw+igCpX0OqJoinKk=
Subject key identifier: AA:06:4D:D9:6E:BB:A1:A9:29:5D:DA:71:AC:4B:68:69:3F:37:F6:A3
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019687DBB1176E897D3ACFF6ACFBA656151C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 07F9
Signing time: Wed 30 Apr 2025 18:00:43 +0000
Manifest this update: Wed 30 Apr 2025 18:00:43 +0000
Manifest next update: Thu 01 May 2025 18:00:43 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: VmB8sw0vWbyNZx90/vbnbIMItE1R2r7/P/HB8xwjRlI=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:b1:17:6e:89:7d:3a:cf:f6:ac:fb:a6:56:15:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Apr 30 18:00:43 2025 GMT
Not After : May 1 18:00:43 2025 GMT
Subject: CN=aa064dd96ebba1a9295dda71ac4b68693f37f6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:69:01:78:9f:4f:c1:34:90:1b:99:6d:12:
b9:6f:7b:f3:85:71:51:0d:02:d7:cf:2f:a7:50:52:
a5:53:84:bf:1f:c6:64:04:a8:07:24:92:81:9f:04:
d1:ff:fd:86:25:43:7f:f0:91:38:60:92:60:ad:3d:
24:35:d0:ea:b4:0c:b9:bc:4c:3e:91:b9:37:db:dd:
1d:76:8a:99:dc:51:5e:eb:f8:53:78:d1:c2:5c:db:
f6:39:b7:99:51:94:72:e6:c1:e5:49:67:41:e7:8e:
91:ed:9c:60:d8:ef:93:ac:80:76:41:1c:be:f3:b3:
19:46:40:e2:94:d3:bd:84:39:71:5d:06:8f:ff:05:
c5:31:23:9b:31:66:b8:cb:8e:be:61:b5:3e:39:27:
96:91:70:ad:01:8e:41:d7:a2:4f:64:37:d9:8c:31:
a6:8f:89:2f:da:a9:04:2c:ed:51:22:4c:4a:0f:fc:
7c:ff:58:44:ef:85:c2:c5:35:08:f4:06:c3:be:07:
33:5b:e5:7d:ba:0a:bf:24:ec:a3:52:dd:19:1f:db:
b5:ae:b7:04:d1:15:83:dd:59:76:34:05:c5:8c:f6:
be:a2:eb:59:a8:dc:6b:94:06:75:bd:00:85:48:ab:
de:e9:e7:70:85:27:b6:22:a7:7c:50:9e:24:90:c6:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:06:4D:D9:6E:BB:A1:A9:29:5D:DA:71:AC:4B:68:69:3F:37:F6:A3
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:da:1c:cc:7d:7f:28:65:3f:66:6b:f0:24:64:1d:f4:fa:e4:
04:80:e7:f9:ca:a2:45:0b:6e:63:37:48:f0:81:36:8f:48:13:
96:e0:b0:43:c1:d8:66:a9:3a:d7:b9:be:1e:78:db:9f:27:03:
c3:4f:c5:02:e3:9b:40:be:df:11:97:56:e5:78:fe:4c:c8:51:
a2:dd:f0:88:86:26:26:0b:5d:57:6a:b2:c4:ad:ac:0d:a6:a3:
37:01:dd:aa:e1:b4:60:9c:1c:21:af:b7:69:08:bf:f1:3d:bc:
f8:cf:ed:e7:9d:07:e6:b0:bf:c1:0b:9e:fc:ff:47:75:88:77:
15:38:d0:e0:39:06:d2:b9:68:03:4a:33:dc:62:b5:92:78:ae:
a7:ac:07:f9:ad:65:62:0c:d3:34:6c:f6:05:fe:f6:86:2d:9e:
99:e3:79:51:10:c4:df:15:53:a1:b4:1b:05:54:2f:87:91:67:
99:85:c2:7b:20:12:6e:68:d8:6c:48:19:10:12:3c:b0:46:15:
41:24:b0:0b:5f:54:e9:00:3f:8b:fb:36:b8:fd:cc:1d:e8:16:
7b:50:77:6f:fb:dd:ff:6e:f5:2c:ba:2c:b5:fb:cd:03:c4:ff:
75:1e:df:5c:24:b5:98:4b:14:8a:2e:43:5c:89:89:c0:20:5b:
a5:e1:29:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH27EXbol9Os/2rPumVhUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk
NWRkNmUwHhcNMjUwNDMwMTgwMDQzWhcNMjUwNTAxMTgwMDQzWjAzMTEwLwYDVQQD
EyhhYTA2NGRkOTZlYmJhMWE5Mjk1ZGRhNzFhYzRiNjg2OTNmMzdmNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPRpAXifT8E0kBuZbRK5b3vzhXFR
DQLXzy+nUFKlU4S/H8ZkBKgHJJKBnwTR//2GJUN/8JE4YJJgrT0kNdDqtAy5vEw+
kbk3290ddoqZ3FFe6/hTeNHCXNv2ObeZUZRy5sHlSWdB546R7Zxg2O+TrIB2QRy+
87MZRkDilNO9hDlxXQaP/wXFMSObMWa4y46+YbU+OSeWkXCtAY5B16JPZDfZjDGm
j4kv2qkELO1RIkxKD/x8/1hE74XCxTUI9AbDvgczW+V9ugq/JOyjUt0ZH9u1rrcE
0RWD3Vl2NAXFjPa+outZqNxrlAZ1vQCFSKve6edwhSe2Iqd8UJ4kkMbi2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoGTdluu6GpKV3acaxLaGk/N/ajMB8GA1UdIwQY
MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt
NDhhZTcwMTYxZTc5LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5
LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9oczH1/
KGU/ZmvwJGQd9PrkBIDn+cqiRQtuYzdI8IE2j0gTluCwQ8HYZqk617m+HnjbnycD
w0/FAuObQL7fEZdW5Xj+TMhRot3wiIYmJgtdV2qyxK2sDaajNwHdquG0YJwcIa+3
aQi/8T28+M/t550H5rC/wQue/P9HdYh3FTjQ4DkG0rloA0oz3GK1kniup6wH+a1l
YgzTNGz2Bf72hi2emeN5URDE3xVTobQbBVQvh5FnmYXCeyASbmjYbEgZEBI8sEYV
QSSwC19U6QA/i/s2uP3MHegWe1B3b/vd/271LLostfvNA8T/dR7fXCS1mEsUii5D
XImJwCBbpeEpVQ==
-----END CERTIFICATE-----
Generated at Thu May 1 01:54:16 2025 by rpki-client