Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: iSJKXQTqlHGrwDWATUxrFZorKFy208p7PeM9mBi9xsI=
Subject key identifier: FA:CD:2E:A5:F3:34:28:79:68:98:7B:18:0A:55:21:50:D2:34:E5:DF
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 019679B237E2F43CDC16CFE606431F4730A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 00:00:44 +0000
Manifest this update: Mon 28 Apr 2025 00:00:44 +0000
Manifest next update: Tue 29 Apr 2025 00:00:44 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: FYYAHI8YWZhPbHe6oAnXsm/d4fTHiznOsdobt2o90Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:37:e2:f4:3c:dc:16:cf:e6:06:43:1f:47:30:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Apr 28 00:00:44 2025 GMT
Not After : Apr 29 00:00:44 2025 GMT
Subject: CN=facd2ea5f334287968987b180a552150d234e5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:23:5b:84:77:a3:a4:f9:12:13:19:f6:e8:d4:
1f:6f:a3:b3:c0:d5:19:0c:2c:e5:2a:09:cb:72:f4:
56:29:55:dc:3f:e1:69:c4:8a:6e:18:54:38:c1:6c:
46:be:7a:c7:8d:d7:06:5b:88:7c:bf:6c:18:60:f5:
40:20:56:93:8e:2b:52:8e:13:98:19:6e:bc:39:8e:
74:69:93:15:39:ff:66:61:17:34:50:cd:cd:41:b6:
f6:45:24:92:43:9e:84:44:17:2a:61:04:57:bd:ee:
e1:73:a8:dd:78:ed:58:88:34:7f:73:12:af:c2:79:
02:13:81:3e:07:8f:67:bb:69:89:e3:36:e2:ec:a4:
2c:2d:7f:d0:44:5c:17:9f:62:1b:7f:77:b0:86:a8:
75:f2:73:1e:e0:86:88:37:12:13:d3:ca:62:ae:e0:
a8:4c:ec:cd:8d:52:e6:e5:b2:5c:78:96:6c:53:b2:
34:75:60:92:2c:04:68:8a:8c:6c:34:c7:d8:3e:d4:
fb:fd:11:a2:6f:0b:18:a2:fd:d6:d6:a0:29:1f:a0:
3d:2a:83:84:69:c5:d4:fd:62:70:df:1f:2b:e4:bd:
f2:5c:89:ef:04:0b:59:2b:f2:a3:71:eb:dc:0e:74:
d2:4a:e8:82:40:c9:2a:4d:3c:21:06:14:e2:36:49:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CD:2E:A5:F3:34:28:79:68:98:7B:18:0A:55:21:50:D2:34:E5:DF
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:39:65:69:fc:ac:dd:4c:e8:d9:a1:e9:a5:30:89:ee:77:da:
d1:58:10:f8:1a:5f:04:6c:bd:88:4c:b2:fc:cb:71:20:f4:ee:
1c:cb:50:c8:4b:ab:a0:38:61:54:e8:2c:78:4b:20:10:a7:d7:
c9:66:1f:3f:f0:de:0c:02:2f:d2:51:d5:56:95:b6:bb:59:4b:
fb:af:0c:cd:61:a9:58:71:24:0b:dd:a2:7d:39:a7:d3:bd:02:
fb:2d:b8:03:d1:04:b8:66:4e:53:67:d3:09:c5:63:78:6a:9f:
ce:0c:34:f8:d4:f6:b4:6c:9c:fb:98:b0:cf:fc:aa:da:1e:4e:
c7:23:e4:56:b1:86:92:8b:f6:d1:ea:46:a5:b6:51:44:ca:00:
f4:15:19:e0:ea:3b:c2:4d:e9:11:36:d2:95:47:c1:f1:1b:f3:
12:03:bd:13:1d:16:f4:5d:9c:24:a0:49:fd:c1:45:6c:da:49:
83:13:71:b7:96:4b:57:11:c0:24:5e:5d:8a:fc:a5:69:fc:c8:
54:3d:91:5c:78:58:fa:4b:6d:33:14:df:e4:d0:42:bb:34:48:
ef:42:fa:e3:b7:28:86:bc:33:f9:d4:aa:fe:87:64:89:f1:fb:
65:4c:ac:c4:b1:3b:d6:27:7d:d2:8e:12:f7:a2:ee:45:2c:4a:
47:2c:6a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5sjfi9DzcFs/mBkMfRzChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy
Y2IzOGEwHhcNMjUwNDI4MDAwMDQ0WhcNMjUwNDI5MDAwMDQ0WjAzMTEwLwYDVQQD
EyhmYWNkMmVhNWYzMzQyODc5Njg5ODdiMTgwYTU1MjE1MGQyMzRlNWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCNbhHejpPkSExn26NQfb6OzwNUZ
DCzlKgnLcvRWKVXcP+FpxIpuGFQ4wWxGvnrHjdcGW4h8v2wYYPVAIFaTjitSjhOY
GW68OY50aZMVOf9mYRc0UM3NQbb2RSSSQ56ERBcqYQRXve7hc6jdeO1YiDR/cxKv
wnkCE4E+B49nu2mJ4zbi7KQsLX/QRFwXn2Ibf3ewhqh18nMe4IaINxIT08piruCo
TOzNjVLm5bJceJZsU7I0dWCSLARoioxsNMfYPtT7/RGibwsYov3W1qApH6A9KoOE
acXU/WJw3x8r5L3yXInvBAtZK/KjcevcDnTSSuiCQMkqTTwhBhTiNkmhkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrNLqXzNCh5aJh7GApVIVDSNOXfMB8GA1UdIwQY
MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt
OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz
LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTllafys
3Uzo2aHppTCJ7nfa0VgQ+BpfBGy9iEyy/MtxIPTuHMtQyEuroDhhVOgseEsgEKfX
yWYfP/DeDAIv0lHVVpW2u1lL+68MzWGpWHEkC92ifTmn070C+y24A9EEuGZOU2fT
CcVjeGqfzgw0+NT2tGyc+5iwz/yq2h5OxyPkVrGGkov20epGpbZRRMoA9BUZ4Oo7
wk3pETbSlUfB8RvzEgO9Ex0W9F2cJKBJ/cFFbNpJgxNxt5ZLVxHAJF5divylafzI
VD2RXHhY+kttMxTf5NBCuzRI70L647cohrwz+dSq/odkifH7ZUysxLE71id90o4S
96LuRSxKRyxqQQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:56 2025 by rpki-client