Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
File: qCYCgPNU92LV7fNMisgW4cIHG1k.mft (raw, json)
Hash identifier: kBEXfqZuIKGd7vTmrtIqnOcz0F7OVsI19X4lUP8IG/o=
Subject key identifier: 28:5C:BF:64:0C:D5:50:29:C2:5D:C7:31:5D:F4:DC:DC:26:02:EA:8C
Authority key identifier: A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
Certificate issuer: /CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Certificate serial: 01965613AE39CD864D6FF11B5C6F24DB2364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 02:00:52 +0000
Manifest this update: Mon 21 Apr 2025 02:00:52 +0000
Manifest next update: Tue 22 Apr 2025 02:00:52 +0000
Files and hashes: 1: qCYCgPNU92LV7fNMisgW4cIHG1k.crl (hash: gM+wAR2YYxxqZc4lag1sfs1/39JSwdi449RjivRa5y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:ae:39:cd:86:4d:6f:f1:1b:5c:6f:24:db:23:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Validity
Not Before: Apr 21 02:00:52 2025 GMT
Not After : Apr 22 02:00:52 2025 GMT
Subject: CN=285cbf640cd55029c25dc7315df4dcdc2602ea8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:b3:61:bd:da:a9:1c:f4:c0:d6:e6:7c:d2:
aa:29:34:83:cf:86:5d:3d:f4:db:a4:0d:dd:10:28:
d5:a0:0f:3b:c8:4e:a1:48:fc:20:ce:c2:6c:c4:b2:
2a:19:09:42:92:37:2b:2e:49:da:00:f8:2d:53:66:
3d:3d:b8:05:26:66:ef:53:e8:02:7e:9f:9e:e3:60:
6f:0b:61:75:72:cf:6f:69:f2:92:6a:74:ea:9f:dc:
e5:20:19:86:60:01:41:b8:a3:20:34:b3:b2:a7:15:
ca:6f:74:f6:70:d0:36:6a:78:17:93:84:30:67:ec:
3c:0c:5b:c4:b5:f4:8d:45:d9:2f:ca:e8:79:b2:b0:
93:9f:a3:ad:e8:d8:66:f9:1d:5b:ed:34:55:72:9b:
c2:c1:df:c2:1f:d6:95:47:d9:b8:02:11:8f:ff:2a:
d2:d8:c8:23:4d:7d:f2:b2:5e:54:46:b3:eb:fc:41:
24:c2:51:03:43:ec:af:7f:4a:90:1c:6d:57:e0:be:
60:b5:6f:7d:e2:b5:8f:0d:db:1f:d4:12:b9:c0:55:
e5:45:2f:4f:a6:cb:24:1e:aa:6d:1c:26:4e:54:41:
00:d7:16:bf:5f:df:b3:15:4b:c3:90:2f:34:0a:15:
80:e3:d5:3a:cd:82:69:0b:ce:47:c8:76:79:0a:06:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5C:BF:64:0C:D5:50:29:C2:5D:C7:31:5D:F4:DC:DC:26:02:EA:8C
X509v3 Authority Key Identifier:
keyid:A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:43:35:01:25:ac:56:8b:1d:bb:88:90:01:e1:df:68:91:4f:
45:d8:4e:53:ff:9a:31:bc:e7:6b:fd:8b:08:55:9c:6c:63:b8:
69:d2:df:bb:ce:92:aa:1a:dd:b5:ce:82:cf:1b:b0:87:8a:fd:
7e:0e:14:ce:e9:d3:94:a7:ee:4d:fd:f3:d3:19:99:76:56:56:
e0:c9:eb:81:24:62:ef:84:a9:73:54:2a:d0:13:a7:5b:74:c6:
e2:30:62:59:52:06:ff:85:37:4a:78:5a:c7:4a:96:7b:df:ed:
65:90:b4:44:c4:7c:0a:86:c8:48:29:f3:7d:58:8e:bc:ad:a7:
b6:04:15:16:ca:e3:a0:be:4e:a9:eb:c7:d9:0a:b9:3e:3e:1d:
d8:f9:b7:78:14:90:5d:67:fe:bb:30:45:38:a9:08:8a:60:82:
b8:71:92:48:eb:5f:aa:26:88:b7:03:41:f3:9b:ca:35:3f:cc:
97:70:0a:ac:91:39:15:b2:d7:c3:5b:d5:a0:cd:d6:d6:74:21:
8e:d0:37:17:4f:0e:bd:41:c9:ce:24:21:40:49:41:d5:ff:c5:
1e:7d:05:41:0f:3a:18:ab:67:48:2d:9f:7b:ed:94:97:36:29:
70:49:19:58:25:e3:c2:ac:62:f1:28:9d:25:c9:70:af:b1:3c:
8e:fa:6f:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWE645zYZNb/EbXG8k2yNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjYwMjgwZjM1NGY3NjJkNWVkZjM0YzhhYzgxNmUxYzIw
NzFiNTkwHhcNMjUwNDIxMDIwMDUyWhcNMjUwNDIyMDIwMDUyWjAzMTEwLwYDVQQD
EygyODVjYmY2NDBjZDU1MDI5YzI1ZGM3MzE1ZGY0ZGNkYzI2MDJlYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rGzYb3aqRz0wNbmfNKqKTSDz4Zd
PfTbpA3dECjVoA87yE6hSPwgzsJsxLIqGQlCkjcrLknaAPgtU2Y9PbgFJmbvU+gC
fp+e42BvC2F1cs9vafKSanTqn9zlIBmGYAFBuKMgNLOypxXKb3T2cNA2angXk4Qw
Z+w8DFvEtfSNRdkvyuh5srCTn6Ot6Nhm+R1b7TRVcpvCwd/CH9aVR9m4AhGP/yrS
2MgjTX3ysl5URrPr/EEkwlEDQ+yvf0qQHG1X4L5gtW994rWPDdsf1BK5wFXlRS9P
psskHqptHCZOVEEA1xa/X9+zFUvDkC80ChWA49U6zYJpC85HyHZ5CgaP7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChcv2QM1VApwl3HMV303NwmAuqMMB8GA1UdIwQY
MBaAFKgmAoDzVPdi1e3zTIrIFuHCBxtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNZQ2dQTlU5MkxWN2ZOTWlzZ1c0Y0lIRzFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hMzAzZmQtMzZhNi00MzhkLTk2ZGEt
MTgzYTQ3YTQ1YjJhLzEvcUNZQ2dQTlU5MkxWN2ZOTWlzZ1c0Y0lIRzFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hMzAzZmQtMzZhNi00MzhkLTk2ZGEtMTgzYTQ3YTQ1YjJh
LzEvcUNZQ2dQTlU5MkxWN2ZOTWlzZ1c0Y0lIRzFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzEM1ASWs
Vosdu4iQAeHfaJFPRdhOU/+aMbzna/2LCFWcbGO4adLfu86Sqhrdtc6Czxuwh4r9
fg4UzunTlKfuTf3z0xmZdlZW4MnrgSRi74Spc1Qq0BOnW3TG4jBiWVIG/4U3Snha
x0qWe9/tZZC0RMR8CobISCnzfViOvK2ntgQVFsrjoL5OqevH2Qq5Pj4d2Pm3eBSQ
XWf+uzBFOKkIimCCuHGSSOtfqiaItwNB85vKNT/Ml3AKrJE5FbLXw1vVoM3W1nQh
jtA3F08OvUHJziQhQElB1f/FHn0FQQ86GKtnSC2fe+2UlzYpcEkZWCXjwqxi8Sid
Jclwr7E8jvpvJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:17 2025 by rpki-client