Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: i5x/Kk7pgm/gRk8w+Q1+u57kvV/XCjtWQoRTP189Do4=
Subject key identifier: E7:7E:26:4F:6B:9C:3B:B2:72:E1:FD:C9:40:97:DC:9C:23:8B:52:E0
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 0196802253653CBCF1C1BE6E5AB39B371305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 0463
Signing time: Tue 29 Apr 2025 06:00:55 +0000
Manifest this update: Tue 29 Apr 2025 06:00:55 +0000
Manifest next update: Wed 30 Apr 2025 06:00:55 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: ZKK23n44C+iOO7p5EWh4AZFG7YPGvYom/Fg7gR4CcLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:53:65:3c:bc:f1:c1:be:6e:5a:b3:9b:37:13:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Apr 29 06:00:55 2025 GMT
Not After : Apr 30 06:00:55 2025 GMT
Subject: CN=e77e264f6b9c3bb272e1fdc94097dc9c238b52e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:14:bf:63:c3:16:3d:8c:1c:86:85:1e:04:03:
0f:75:6b:a3:2b:59:75:52:8b:59:48:7c:3f:f0:7e:
6e:c8:d3:bc:16:96:3b:54:07:2e:49:74:5e:db:1e:
89:ed:d3:9e:27:ee:04:50:6b:67:0b:03:e8:1d:b8:
82:20:c9:63:bd:dc:df:61:db:a5:fb:e6:f3:57:c6:
42:53:80:a8:6d:19:ff:1e:ad:68:6a:ad:3a:ac:f2:
1b:86:3b:50:34:11:27:05:ad:6c:b0:bd:ac:8f:48:
bb:35:60:0f:ac:84:0c:59:aa:02:78:cc:77:a7:71:
b0:55:63:84:57:52:dd:98:eb:ac:ed:eb:f8:b3:2f:
b6:86:08:9a:79:e6:c0:d0:ae:23:c8:cf:9e:75:2d:
a2:3e:76:7f:f7:8e:2e:12:38:b5:a8:c9:8a:dd:54:
8b:98:5e:cd:07:a3:fc:56:37:46:45:e7:3f:61:77:
c0:e7:a7:aa:79:d0:dd:75:e3:5d:97:af:91:6f:2f:
61:a5:a0:d9:9b:e8:d0:34:c2:2b:39:ad:7c:34:05:
8e:01:dc:0d:a8:95:55:8a:77:b1:b2:45:e5:57:6b:
bd:98:d4:8a:ad:0c:b0:cd:6f:4d:62:8d:ce:70:5a:
32:23:32:42:3c:d8:79:da:78:8e:37:1a:f0:49:7a:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7E:26:4F:6B:9C:3B:B2:72:E1:FD:C9:40:97:DC:9C:23:8B:52:E0
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:20:c8:b1:c8:44:1e:81:37:63:e1:67:d9:99:75:ee:0c:c8:
fc:fb:b0:30:f9:f2:87:6d:8f:72:08:fa:7f:59:8a:c8:25:82:
85:1c:7e:92:99:ea:59:0e:a6:aa:6f:04:ad:d6:ef:23:9f:c9:
d2:c7:a4:ac:d5:1c:8e:4f:10:33:1b:24:57:9b:66:e3:0d:2e:
5c:27:98:a1:64:45:47:2a:20:70:a5:19:ad:59:66:31:c0:56:
c8:2f:7a:1a:4e:73:df:5b:fe:14:16:77:1a:51:8d:70:39:b3:
81:fc:2a:0e:23:51:af:20:cd:b5:d2:ca:bd:87:0b:b1:ee:3a:
5b:20:d2:94:2a:89:ad:6e:20:d4:5b:c0:56:b8:95:d9:46:4e:
b3:df:fb:f5:02:88:fa:79:2d:93:20:30:91:65:8e:ca:bc:f4:
ec:59:0e:57:f5:29:a3:50:0d:5d:2e:73:9f:a6:af:76:88:3e:
53:8b:29:b4:23:2a:11:62:10:8e:b1:6c:cf:f1:58:87:2f:48:
32:05:a0:d8:a0:5c:36:19:f4:e8:0e:45:98:2d:c6:b1:3f:75:
79:78:0c:ba:48:9e:9d:56:ed:ec:1f:be:bc:e7:62:36:54:f4:
a2:e9:02:a4:54:ab:ff:e9:ac:00:a8:6d:64:3f:51:db:0f:25:
68:cc:9b:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIlNlPLzxwb5uWrObNxMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5N2VlM2VkNDRiM2RiYThiODNkOGVhMTc5OWFjMGU1ODNk
NjQxNGMwHhcNMjUwNDI5MDYwMDU1WhcNMjUwNDMwMDYwMDU1WjAzMTEwLwYDVQQD
EyhlNzdlMjY0ZjZiOWMzYmIyNzJlMWZkYzk0MDk3ZGM5YzIzOGI1MmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghS/Y8MWPYwchoUeBAMPdWujK1l1
UotZSHw/8H5uyNO8FpY7VAcuSXRe2x6J7dOeJ+4EUGtnCwPoHbiCIMljvdzfYdul
++bzV8ZCU4CobRn/Hq1oaq06rPIbhjtQNBEnBa1ssL2sj0i7NWAPrIQMWaoCeMx3
p3GwVWOEV1LdmOus7ev4sy+2hgiaeebA0K4jyM+edS2iPnZ/944uEji1qMmK3VSL
mF7NB6P8VjdGRec/YXfA56eqedDddeNdl6+Rby9hpaDZm+jQNMIrOa18NAWOAdwN
qJVVinexskXlV2u9mNSKrQywzW9NYo3OcFoyIzJCPNh52niONxrwSXp0CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOd+Jk9rnDuycuH9yUCX3Jwji1LgMB8GA1UdIwQY
MBaAFKl+4+1Es9uouD2OoXmawOWD1kFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMt
NzBlMzViMGYwMTViLzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMtNzBlMzViMGYwMTVi
LzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSDIschE
HoE3Y+Fn2Zl17gzI/PuwMPnyh22Pcgj6f1mKyCWChRx+kpnqWQ6mqm8ErdbvI5/J
0sekrNUcjk8QMxskV5tm4w0uXCeYoWRFRyogcKUZrVlmMcBWyC96Gk5z31v+FBZ3
GlGNcDmzgfwqDiNRryDNtdLKvYcLse46WyDSlCqJrW4g1FvAVriV2UZOs9/79QKI
+nktkyAwkWWOyrz07FkOV/Upo1ANXS5zn6avdog+U4sptCMqEWIQjrFsz/FYhy9I
MgWg2KBcNhn06A5FmC3GsT91eXgMukienVbt7B++vOdiNlT0oukCpFSr/+msAKht
ZD9R2w8laMybkg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:23:13 2025 by rpki-client