Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: 345E9EwudDLPqmwbc6bEZrfR846IUjKRcZJh/D0IIoo=
Subject key identifier: D2:33:59:5F:33:79:89:5D:C9:22:6F:C9:83:C7:78:12:14:14:0B:68
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 0196586FEEC7EAFD4A9FA7351DFA4E5E3226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 01EC
Signing time: Mon 21 Apr 2025 13:00:52 +0000
Manifest this update: Mon 21 Apr 2025 13:00:52 +0000
Manifest next update: Tue 22 Apr 2025 13:00:52 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: kBBEX2eU9P228t6V6BDN8I7FmFYMKCcq4srgndSLBGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:ee:c7:ea:fd:4a:9f:a7:35:1d:fa:4e:5e:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Apr 21 13:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=d233595f3379895dc9226fc983c7781214140b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:f7:88:94:83:f5:44:1b:0f:c8:db:53:00:
51:83:2d:a5:40:fa:71:c7:b9:41:44:92:f7:a1:c4:
48:a9:af:d2:01:ad:28:12:ff:73:f3:93:93:7d:bd:
46:7b:b1:3a:2b:08:1b:fa:74:1d:1d:d4:11:9a:db:
70:17:79:b2:dc:b7:6e:42:e9:df:a7:02:7b:12:64:
07:8e:90:5d:7c:9d:f8:d1:d3:7a:b4:e6:78:b1:92:
ec:9f:73:0d:a9:f8:70:eb:dd:56:a0:91:fc:45:5e:
82:2d:0d:42:ee:ea:b8:4a:d2:17:30:ad:ab:7e:9a:
34:21:ea:87:69:a3:ba:ee:07:29:53:10:81:ff:78:
66:94:ab:e2:6a:5b:59:b0:db:44:66:c8:86:85:64:
b0:12:0e:7f:ac:da:1f:83:66:50:3d:75:75:32:66:
b2:39:68:2d:20:7f:24:f1:ef:89:3e:c2:f6:b6:da:
6f:7b:f7:24:b3:f6:8e:39:7c:b4:7d:03:b1:41:13:
cb:9e:40:d8:29:56:6d:97:85:70:03:e0:cb:d8:9b:
1c:3d:f6:f4:66:cb:8f:1b:02:a9:1a:57:12:ca:61:
4c:cd:c7:39:a2:4d:24:c4:56:b1:b9:17:c5:89:d5:
f5:80:80:bd:ed:71:df:44:b3:52:e3:9e:12:fe:8d:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:59:5F:33:79:89:5D:C9:22:6F:C9:83:C7:78:12:14:14:0B:68
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:31:5c:53:df:3d:68:f2:9d:4b:3a:32:fd:12:17:f8:63:05:
a3:ce:f1:f6:f5:7d:99:9b:ae:40:02:e1:f7:70:ab:fc:d7:76:
77:d9:48:98:25:7b:5d:49:f1:d9:a4:ef:13:35:15:37:a8:13:
95:aa:07:7c:c8:d9:86:4b:9a:b9:82:90:18:2c:e9:4a:3b:e0:
ce:bc:ad:99:08:7b:07:8f:35:f6:18:ea:a3:94:ea:d4:c4:86:
5a:e7:0f:dc:54:f3:88:24:fa:bc:b3:aa:76:89:df:52:bb:42:
96:83:04:06:81:3f:92:f2:06:e8:fb:ee:10:3c:5d:1d:4b:4c:
fa:a7:8f:8e:69:17:a0:89:23:bf:94:61:83:f9:d1:6c:a2:6d:
b5:9e:02:97:09:87:0d:46:90:78:00:88:73:0b:c9:84:3f:84:
43:da:ed:24:92:ab:64:3d:c6:93:bc:ba:e9:d3:59:d2:f7:05:
8e:a2:63:40:f4:fc:65:f0:63:a0:4b:90:49:91:73:2f:52:88:
f5:7f:cc:62:72:7d:99:76:da:28:89:db:07:47:67:e9:8d:0f:
da:1b:21:53:be:c1:a9:79:5d:9f:84:79:04:93:9d:f4:18:a3:
b0:36:49:41:56:63:84:7d:67:96:ac:fe:94:1b:41:0d:f4:41:
79:a0:1c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb+7H6v1Kn6c1HfpOXjImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmE2YzA1MDUwYjUwYzcwYjlhMzVkMzQyMzBiN2FjMzA5
ZDRkOWEwHhcNMjUwNDIxMTMwMDUyWhcNMjUwNDIyMTMwMDUyWjAzMTEwLwYDVQQD
EyhkMjMzNTk1ZjMzNzk4OTVkYzkyMjZmYzk4M2M3NzgxMjE0MTQwYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiD3iJSD9UQbD8jbUwBRgy2lQPpx
x7lBRJL3ocRIqa/SAa0oEv9z85OTfb1Ge7E6Kwgb+nQdHdQRmttwF3my3LduQunf
pwJ7EmQHjpBdfJ340dN6tOZ4sZLsn3MNqfhw691WoJH8RV6CLQ1C7uq4StIXMK2r
fpo0IeqHaaO67gcpUxCB/3hmlKvialtZsNtEZsiGhWSwEg5/rNofg2ZQPXV1Mmay
OWgtIH8k8e+JPsL2ttpve/cks/aOOXy0fQOxQRPLnkDYKVZtl4VwA+DL2JscPfb0
ZsuPGwKpGlcSymFMzcc5ok0kxFaxuRfFidX1gIC97XHfRLNS454S/o3ETwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIzWV8zeYldySJvyYPHeBIUFAtoMB8GA1UdIwQY
MBaAFEG6bAUFC1DHC5o100Iwt6wwnU2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgt
YjBiODU4YzBmYmE0LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgtYjBiODU4YzBmYmE0
LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzFcU989
aPKdSzoy/RIX+GMFo87x9vV9mZuuQALh93Cr/Nd2d9lImCV7XUnx2aTvEzUVN6gT
laoHfMjZhkuauYKQGCzpSjvgzrytmQh7B4819hjqo5Tq1MSGWucP3FTziCT6vLOq
donfUrtCloMEBoE/kvIG6PvuEDxdHUtM+qePjmkXoIkjv5Rhg/nRbKJttZ4ClwmH
DUaQeACIcwvJhD+EQ9rtJJKrZD3Gk7y66dNZ0vcFjqJjQPT8ZfBjoEuQSZFzL1KI
9X/MYnJ9mXbaKInbB0dn6Y0P2hshU77BqXldn4R5BJOd9BijsDZJQVZjhH1nlqz+
lBtBDfRBeaAcGg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:27 2025 by rpki-client