Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
File: qQ2awu8R1UaTddbebGv3IRKeO3E.mft (raw, json)
Hash identifier: lukgUpSWYl/uQ8U0E3r2jTSBRXpZXas/OZYnwqFlXKM=
Subject key identifier: 40:AB:14:95:A1:6B:39:FE:39:32:80:91:40:B7:62:04:32:66:F0:57
Authority key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
Certificate issuer: /CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Certificate serial: 01965A26C23584FDEA20C7A2A843407900AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
Manifest number: 1440
Signing time: Mon 21 Apr 2025 21:00:11 +0000
Manifest this update: Mon 21 Apr 2025 21:00:11 +0000
Manifest next update: Tue 22 Apr 2025 21:00:11 +0000
Files and hashes: 1: qQ2awu8R1UaTddbebGv3IRKeO3E.crl (hash: nhH4+nB9LsxTC88aZpJHF1ibB+OEBRM85JaOXBUxfWs=)
2: yuW5WVwgNaxBxObKx0w_CE3bdf0.roa (hash: bxzeDx/FJJDZscd0BPoaz8SHe0rmx/Qll6/QwchRolI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:c2:35:84:fd:ea:20:c7:a2:a8:43:40:79:00:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Validity
Not Before: Apr 21 21:00:11 2025 GMT
Not After : Apr 22 21:00:11 2025 GMT
Subject: CN=40ab1495a16b39fe3932809140b762043266f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:87:46:87:69:c8:bc:8b:b6:ad:19:65:9f:
07:a7:e1:f2:6b:e1:ad:9a:c6:04:b6:96:bd:ad:72:
44:c1:28:6e:87:61:23:d4:d3:84:1a:5a:7b:a1:a9:
5a:55:c2:84:a1:fa:67:8f:58:ad:fc:9e:7b:e0:3d:
e4:a4:fa:63:90:07:a0:86:25:f5:b8:7e:9f:a7:ff:
61:60:1b:3c:98:1c:17:2b:fe:6c:e2:90:dc:dd:85:
8d:d1:1c:79:d9:6c:3c:88:4a:11:f6:05:84:d8:cd:
eb:56:e9:cb:a3:f7:d2:3c:1a:7a:ba:89:d8:25:4f:
f2:a5:fe:46:2f:33:95:1f:ec:f0:c2:a6:11:18:88:
69:29:0b:66:5f:14:26:d8:f3:d3:bf:05:8d:ea:1d:
25:c0:60:35:b9:02:df:41:8a:e5:a0:50:60:51:28:
92:a7:d6:be:63:9a:ec:c9:76:b2:2a:ad:d5:f7:db:
d0:c1:27:61:f3:57:b4:59:30:58:b3:02:29:b8:60:
e4:84:c3:0b:3c:c3:45:9f:d0:c3:ae:9d:89:d5:c5:
8a:77:7a:51:ad:1c:50:3b:11:7f:84:08:49:98:1b:
0b:8b:fc:26:4a:47:1d:c5:f8:47:e5:49:cb:94:b8:
fc:2e:f4:80:b6:ec:1f:80:89:2b:2b:17:88:72:82:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AB:14:95:A1:6B:39:FE:39:32:80:91:40:B7:62:04:32:66:F0:57
X509v3 Authority Key Identifier:
keyid:A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:91:6d:7b:8c:11:e1:16:c5:df:50:b8:d6:6e:31:92:24:d4:
b2:f5:4f:2e:85:12:28:ff:39:ff:26:7f:25:c3:6a:49:cc:af:
ed:ef:d1:07:01:d0:1f:02:3a:a7:bc:03:00:01:11:a1:c9:b2:
6a:22:24:5f:95:8b:a0:89:f8:42:dc:8f:c9:ba:95:bd:6d:e9:
14:89:d9:13:f2:e3:bd:27:46:59:59:fb:c3:0b:92:04:fa:95:
86:be:7b:90:98:13:78:bb:b6:df:4a:98:96:27:b3:7a:da:b4:
92:61:c4:84:37:65:0e:1b:fe:6f:7d:29:b5:e9:5e:aa:4a:e1:
96:bb:f0:d0:4d:cc:f3:66:62:d8:53:b4:8e:a2:5b:30:73:85:
1c:1d:e8:58:05:4b:5f:37:6b:c0:84:39:8b:d7:0e:4b:4e:a6:
43:f0:21:0e:11:70:85:29:45:c3:9c:27:51:f7:6c:e5:7d:d2:
52:5b:fa:19:64:fc:d6:b9:42:31:98:c5:6f:8b:9d:a6:d4:9d:
b1:ff:be:b2:24:79:bb:14:bd:88:5b:dd:79:50:76:e9:40:3e:
60:a2:45:1f:c6:56:23:9b:d7:f5:81:59:53:ea:68:65:59:33:
c6:21:35:6f:e2:74:0f:90:71:73:84:0b:40:22:9d:f4:7b:3b:
71:d3:06:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaJsI1hP3qIMeiqENAeQCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGQ5YWMyZWYxMWQ1NDY5Mzc1ZDZkZTZjNmJmNzIxMTI5
ZTNiNzEwHhcNMjUwNDIxMjEwMDExWhcNMjUwNDIyMjEwMDExWjAzMTEwLwYDVQQD
Eyg0MGFiMTQ5NWExNmIzOWZlMzkzMjgwOTE0MGI3NjIwNDMyNjZmMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11SHRodpyLyLtq0ZZZ8Hp+Hya+Gt
msYEtpa9rXJEwShuh2Ej1NOEGlp7oalaVcKEofpnj1it/J574D3kpPpjkAeghiX1
uH6fp/9hYBs8mBwXK/5s4pDc3YWN0Rx52Ww8iEoR9gWE2M3rVunLo/fSPBp6uonY
JU/ypf5GLzOVH+zwwqYRGIhpKQtmXxQm2PPTvwWN6h0lwGA1uQLfQYrloFBgUSiS
p9a+Y5rsyXayKq3V99vQwSdh81e0WTBYswIpuGDkhMMLPMNFn9DDrp2J1cWKd3pR
rRxQOxF/hAhJmBsLi/wmSkcdxfhH5UnLlLj8LvSAtuwfgIkrKxeIcoJgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECrFJWhazn+OTKAkUC3YgQyZvBXMB8GA1UdIwQY
MBaAFKkNmsLvEdVGk3XW3mxr9yESnjtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVEyYXd1OFIxVWFUZGRiZWJHdjNJUktlTzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81OWMyNGUtYTIxZi00NmIyLTllYTEt
YjNhNjcwN2VhZDA0LzEvcVEyYXd1OFIxVWFUZGRiZWJHdjNJUktlTzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81OWMyNGUtYTIxZi00NmIyLTllYTEtYjNhNjcwN2VhZDA0
LzEvcVEyYXd1OFIxVWFUZGRiZWJHdjNJUktlTzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZFte4wR
4RbF31C41m4xkiTUsvVPLoUSKP85/yZ/JcNqScyv7e/RBwHQHwI6p7wDAAERocmy
aiIkX5WLoIn4QtyPybqVvW3pFInZE/LjvSdGWVn7wwuSBPqVhr57kJgTeLu230qY
liezetq0kmHEhDdlDhv+b30pteleqkrhlrvw0E3M82Zi2FO0jqJbMHOFHB3oWAVL
XzdrwIQ5i9cOS06mQ/AhDhFwhSlFw5wnUfds5X3SUlv6GWT81rlCMZjFb4udptSd
sf++siR5uxS9iFvdeVB26UA+YKJFH8ZWI5vX9YFZU+poZVkzxiE1b+J0D5Bxc4QL
QCKd9Hs7cdMG6g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:45 2025 by rpki-client