Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: +lBwy12YGYK5p3alD3yD7rUD4uydNQXgfxEFog/kab0=
Subject key identifier: E1:41:C4:9C:A9:E5:17:DA:2B:E8:EF:D8:69:77:84:D9:C5:C0:89:97
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 0196598205B9DBCAB3485D4CAA8193D3C08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 08E8
Signing time: Mon 21 Apr 2025 18:00:15 +0000
Manifest this update: Mon 21 Apr 2025 18:00:15 +0000
Manifest next update: Tue 22 Apr 2025 18:00:15 +0000
Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: m82s9IvyeFfqTcD0zzJvvj97Y8CwX8R2FMYTott5OQk=)
2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:05:b9:db:ca:b3:48:5d:4c:aa:81:93:d3:c0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Apr 21 18:00:15 2025 GMT
Not After : Apr 22 18:00:15 2025 GMT
Subject: CN=e141c49ca9e517da2be8efd8697784d9c5c08997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:bb:3e:83:63:93:9e:8e:80:96:da:b9:d3:
94:86:b1:39:ba:11:93:c8:d3:04:33:87:ee:bb:a4:
b4:3d:54:5e:a0:66:97:9a:ab:61:37:f8:c1:53:6e:
ad:de:36:6a:94:52:74:67:55:0d:31:fb:87:7f:f0:
a6:cc:2b:db:eb:b1:78:6f:cc:87:cd:ad:db:32:23:
e9:6b:a7:0a:38:70:ff:89:71:9a:5f:57:66:c6:85:
43:c5:9e:b2:dd:76:b8:da:67:b6:aa:1a:d5:da:3c:
11:c3:14:3b:fa:f5:bd:19:03:9e:2e:cb:36:43:43:
6b:da:3e:1a:21:7d:15:a3:a8:10:d9:f4:37:8e:96:
0b:f6:10:97:e6:4e:f3:03:af:e8:69:7a:f6:d4:fa:
7f:fe:c2:6f:87:c9:0a:0e:09:f9:96:01:70:0b:49:
03:ce:fd:06:da:ae:89:f5:9d:bc:23:68:59:aa:84:
10:a8:08:aa:b3:d6:20:41:f3:a7:0a:8c:27:8f:e8:
2b:e5:71:2c:aa:ea:c6:94:30:be:70:f4:da:0a:ec:
70:2a:10:d5:b5:04:48:3d:10:df:b1:b7:2c:8d:b1:
00:92:c5:cb:0d:1a:d6:ff:16:3b:7e:ae:d0:47:fd:
82:58:5b:e8:a3:b8:89:68:43:56:58:aa:89:7c:9a:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:41:C4:9C:A9:E5:17:DA:2B:E8:EF:D8:69:77:84:D9:C5:C0:89:97
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:2f:82:b3:30:75:5b:0d:96:cf:85:13:ab:ac:71:ac:b6:
08:44:29:3a:59:5f:bd:7b:d5:61:26:96:a5:9d:d9:a7:38:64:
a6:3c:b5:db:58:b6:fc:56:fc:8d:df:77:f2:4a:04:65:fb:9f:
a9:82:3e:08:08:bf:df:25:c4:3f:2e:8a:70:11:de:b7:e4:f0:
a5:c4:51:ce:61:7b:76:6a:75:43:bb:c9:b0:af:d9:f9:f4:e3:
c3:5f:17:6f:b7:09:52:13:e9:7d:d9:5c:cc:3a:66:8d:8f:f5:
3a:fc:f8:b9:f6:fd:3b:e7:a6:83:a6:fa:b2:ce:a7:1d:e4:ad:
ec:e5:9e:48:2c:28:1f:6c:b9:2e:ea:02:b0:ad:fe:88:cc:b1:
ad:52:b1:50:86:63:88:02:ad:68:a6:cc:ec:ce:54:af:12:08:
dd:a4:1c:8d:24:c7:d0:47:c0:d8:56:a1:48:4f:e2:f7:73:9c:
23:94:6d:17:50:49:f8:be:2a:04:cd:07:4d:aa:df:35:7a:21:
92:e4:02:b3:6f:71:67:91:a1:c3:64:7d:c3:ea:9b:b6:e6:41:
74:b2:a7:60:bf:80:97:ad:7b:55:ce:c7:a6:7a:fe:d7:66:84:
2d:cb:e2:0f:19:71:f0:f7:13:fa:47:fe:ea:f6:1e:6d:77:97:
c9:3a:17:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZggW528qzSF1MqoGT08COMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZTkwYzlkMTAwOWIzMmMxOTQ1YjZmOGU2NTg5NDgzYzVl
YTQ3NDMwHhcNMjUwNDIxMTgwMDE1WhcNMjUwNDIyMTgwMDE1WjAzMTEwLwYDVQQD
EyhlMTQxYzQ5Y2E5ZTUxN2RhMmJlOGVmZDg2OTc3ODRkOWM1YzA4OTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Oy7PoNjk56OgJbaudOUhrE5uhGT
yNMEM4fuu6S0PVReoGaXmqthN/jBU26t3jZqlFJ0Z1UNMfuHf/CmzCvb67F4b8yH
za3bMiPpa6cKOHD/iXGaX1dmxoVDxZ6y3Xa42me2qhrV2jwRwxQ7+vW9GQOeLss2
Q0Nr2j4aIX0Vo6gQ2fQ3jpYL9hCX5k7zA6/oaXr21Pp//sJvh8kKDgn5lgFwC0kD
zv0G2q6J9Z28I2hZqoQQqAiqs9YgQfOnCownj+gr5XEsqurGlDC+cPTaCuxwKhDV
tQRIPRDfsbcsjbEAksXLDRrW/xY7fq7QR/2CWFvoo7iJaENWWKqJfJoAEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFBxJyp5RfaK+jv2Gl3hNnFwImXMB8GA1UdIwQY
MBaAFELpDJ0QCbMsGUW2+OZYlIPF6kdDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUt
NjljNjI5ODQxNWY4LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85NTVhNDAtOWQ5NC00ZjgyLTg4ZTUtNjljNjI5ODQxNWY4
LzEvUXVrTW5SQUpzeXdaUmJiNDVsaVVnOFhxUjBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSUvgrMw
dVsNls+FE6uscay2CEQpOllfvXvVYSaWpZ3Zpzhkpjy121i2/Fb8jd938koEZfuf
qYI+CAi/3yXEPy6KcBHet+TwpcRRzmF7dmp1Q7vJsK/Z+fTjw18Xb7cJUhPpfdlc
zDpmjY/1Ovz4ufb9O+emg6b6ss6nHeSt7OWeSCwoH2y5LuoCsK3+iMyxrVKxUIZj
iAKtaKbM7M5UrxII3aQcjSTH0EfA2FahSE/i93OcI5RtF1BJ+L4qBM0HTarfNXoh
kuQCs29xZ5Ghw2R9w+qbtuZBdLKnYL+Al617Vc7Hpnr+12aELcviDxlx8PcT+kf+
6vYebXeXyToXZw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:34:18 2025 by rpki-client