Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: Lup6f75W43ghg2ciMvcArsKrafRqr06/8mukMwp8TdY=
Subject key identifier: 84:7C:A3:BD:F3:AE:70:55:54:B1:3A:D7:6C:61:0D:E6:C5:19:A9:A7
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 019658A6B5EE68F2BA2953DE50AE14862AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 015B
Signing time: Mon 21 Apr 2025 14:00:42 +0000
Manifest this update: Mon 21 Apr 2025 14:00:42 +0000
Manifest next update: Tue 22 Apr 2025 14:00:42 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: ZZIf0Pa5IN24c1JexJZIYEzWKN31SYyYDgtJiguxjDo=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:b5:ee:68:f2:ba:29:53:de:50:ae:14:86:2a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Apr 21 14:00:42 2025 GMT
Not After : Apr 22 14:00:42 2025 GMT
Subject: CN=847ca3bdf3ae705554b13ad76c610de6c519a9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:05:79:7c:4e:ae:b6:3a:2d:e6:06:23:40:
a0:bc:64:5b:42:78:61:55:83:ce:8d:4e:b7:4b:a5:
72:96:2f:e9:66:3b:c1:71:19:77:8d:d2:b7:cb:32:
b0:94:b5:2e:15:22:7a:f2:69:27:9b:22:2a:bf:83:
dd:4e:6f:84:e1:92:dc:62:fd:f6:4e:4f:4d:16:5b:
00:f1:a9:6b:1c:bb:5e:53:2c:98:2e:c8:30:a9:fa:
7a:ae:eb:fd:c1:f6:1d:21:25:c7:b6:5e:4f:2a:6e:
7f:19:36:61:80:a7:30:c1:72:3b:e7:9b:22:23:c6:
77:b1:1e:15:a0:f4:8b:38:55:97:02:3d:8b:fe:bb:
40:ee:6e:a4:49:24:ae:d7:1c:c0:ea:39:21:45:3f:
dd:bd:79:09:a4:1b:d8:29:02:80:05:d4:2b:05:58:
b6:35:68:f3:b1:5b:fe:df:1e:ef:5c:73:df:fc:77:
96:be:c9:6b:e3:a7:57:0b:a8:bd:79:45:36:51:c1:
b0:9b:1c:ef:ef:f0:7c:29:3a:4d:d1:1a:a2:9b:7c:
72:fb:54:55:02:5a:1b:a5:b7:3b:5d:83:ec:fd:18:
5a:ab:7c:62:36:59:d8:84:30:5e:f1:89:4c:0b:1b:
e9:cf:ff:6d:86:1c:30:52:31:68:ce:ce:bf:f0:db:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:A3:BD:F3:AE:70:55:54:B1:3A:D7:6C:61:0D:E6:C5:19:A9:A7
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:50:da:af:58:28:e0:1b:90:6c:8a:8d:76:48:1a:14:84:59:
25:32:27:32:cf:0f:32:81:da:b8:20:04:30:8e:d3:fc:c7:d9:
3e:e5:7e:92:81:3a:8a:11:ca:0e:42:7f:53:fa:7b:78:7e:80:
c7:d0:88:0c:53:e9:b5:8d:c0:c5:33:e7:56:c7:93:28:d8:93:
e5:e2:d7:fe:fe:f8:23:dc:c0:c1:9e:de:44:c9:10:c5:d9:a3:
d8:bf:a7:c7:38:44:f7:6b:0f:d6:af:e9:88:f3:2d:a4:18:9d:
0d:50:52:36:f3:2e:35:7f:65:71:9d:d7:33:22:aa:cd:37:22:
8d:09:b8:bf:bd:e9:b1:0f:f4:27:7a:c1:70:70:a6:00:a7:12:
fc:b0:eb:1f:bb:42:76:60:bb:78:c9:fb:b4:02:cb:46:e5:6d:
17:d2:45:8b:40:72:5c:05:69:69:be:4c:a3:f2:9c:15:0d:b0:
59:4e:72:92:15:90:90:a9:63:d9:11:a5:a3:7a:b4:b5:4e:ff:
48:3e:53:49:25:e5:62:a8:60:40:4f:1d:36:70:31:12:00:1e:
00:af:16:e5:54:7e:3a:47:75:c7:44:f8:70:a6:0b:3f:94:9a:
c7:30:d9:c4:19:c2:c1:d2:ff:0d:22:9e:85:b7:2d:4a:0b:e2:
43:56:a7:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYprXuaPK6KVPeUK4UhiqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk
NzMyMzcwHhcNMjUwNDIxMTQwMDQyWhcNMjUwNDIyMTQwMDQyWjAzMTEwLwYDVQQD
Eyg4NDdjYTNiZGYzYWU3MDU1NTRiMTNhZDc2YzYxMGRlNmM1MTlhOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWQFeXxOrrY6LeYGI0CgvGRbQnhh
VYPOjU63S6Vyli/pZjvBcRl3jdK3yzKwlLUuFSJ68mknmyIqv4PdTm+E4ZLcYv32
Tk9NFlsA8alrHLteUyyYLsgwqfp6ruv9wfYdISXHtl5PKm5/GTZhgKcwwXI755si
I8Z3sR4VoPSLOFWXAj2L/rtA7m6kSSSu1xzA6jkhRT/dvXkJpBvYKQKABdQrBVi2
NWjzsVv+3x7vXHPf/HeWvslr46dXC6i9eUU2UcGwmxzv7/B8KTpN0Rqim3xy+1RV
Alobpbc7XYPs/Rhaq3xiNlnYhDBe8YlMCxvpz/9thhwwUjFozs6/8NuhdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR8o73zrnBVVLE612xhDebFGamnMB8GA1UdIwQY
MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt
NTkzZDBiYjc4YmU2LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2
LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFDar1go
4BuQbIqNdkgaFIRZJTInMs8PMoHauCAEMI7T/MfZPuV+koE6ihHKDkJ/U/p7eH6A
x9CIDFPptY3AxTPnVseTKNiT5eLX/v74I9zAwZ7eRMkQxdmj2L+nxzhE92sP1q/p
iPMtpBidDVBSNvMuNX9lcZ3XMyKqzTcijQm4v73psQ/0J3rBcHCmAKcS/LDrH7tC
dmC7eMn7tALLRuVtF9JFi0ByXAVpab5Mo/KcFQ2wWU5ykhWQkKlj2RGlo3q0tU7/
SD5TSSXlYqhgQE8dNnAxEgAeAK8W5VR+Okd1x0T4cKYLP5SaxzDZxBnCwdL/DSKe
hbctSgviQ1anJA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:14 2025 by rpki-client