Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: ChjyIXxyP9vxj3E/7c0oe6fT7PPe2vkNRQZ78cukhHk=
Subject key identifier: 13:53:46:9C:CF:71:26:DB:BC:2C:DF:F8:6D:E2:C6:FD:62:6D:0C:E0
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 01965DCD6F9CD28484B42FBAAFBCD9F12EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 1193
Signing time: Tue 22 Apr 2025 14:01:06 +0000
Manifest this update: Tue 22 Apr 2025 14:01:06 +0000
Manifest next update: Wed 23 Apr 2025 14:01:06 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: W/GylBKeLQXALW5xkWfAlpjcUS0KOTw5SuexIK3MmEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:6f:9c:d2:84:84:b4:2f:ba:af:bc:d9:f1:2e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Apr 22 14:01:06 2025 GMT
Not After : Apr 23 14:01:06 2025 GMT
Subject: CN=1353469ccf7126dbbc2cdff86de2c6fd626d0ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:ce:3a:3e:fa:3f:10:9b:58:9e:a5:d6:83:
39:21:1d:d5:13:32:01:d2:d1:f6:6e:7d:17:38:24:
d9:33:b9:66:06:30:39:88:a1:e4:de:66:32:e0:d5:
31:63:f8:9a:a6:bb:80:9c:27:fe:40:40:95:63:26:
ec:41:a6:07:a6:f3:b6:da:f0:66:f4:13:95:fe:d0:
f2:12:68:cf:fc:b5:9f:5d:73:c0:a6:e5:04:ae:a3:
94:29:ab:b4:56:7b:7f:3d:63:0e:5a:72:24:e5:d6:
b7:ce:f5:2f:21:cb:10:90:7b:75:9f:c6:ab:2d:93:
0a:95:fa:e8:4e:0c:66:60:3e:67:83:71:90:bb:33:
bf:8a:04:d7:5d:66:e5:fc:f3:ca:b2:e4:25:9f:e1:
32:7a:00:77:bf:9f:d9:64:31:fd:93:67:46:46:cf:
49:5c:b1:30:50:f3:71:47:48:e2:94:04:e1:33:75:
af:53:57:ed:f7:2a:b7:01:f6:e2:e3:09:22:84:2e:
9d:e4:47:46:8f:0e:57:bb:80:07:5a:72:bf:f7:51:
ef:9a:02:e4:a9:0c:c0:5c:69:d0:0c:3c:ac:f8:86:
63:60:9e:72:a0:4c:96:83:91:a9:91:26:49:fd:43:
db:70:fd:a5:75:3a:da:d0:b0:41:81:ad:08:46:e2:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:46:9C:CF:71:26:DB:BC:2C:DF:F8:6D:E2:C6:FD:62:6D:0C:E0
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f3:1b:84:4c:1c:bc:f5:b8:69:58:3f:a4:68:f0:01:c9:1c:
c4:d0:74:27:15:0e:99:53:87:e9:45:42:00:ae:95:47:1a:3a:
6d:94:34:bd:77:c5:58:7e:5c:f4:08:85:11:07:b8:ad:64:5f:
4d:6c:18:b6:31:f2:a5:9e:ba:51:ad:14:42:f5:d4:5e:34:8c:
1a:2e:bd:ac:a5:53:76:3a:84:4e:eb:28:f9:8a:c5:f7:30:98:
37:9b:ed:21:3e:db:93:8e:60:6c:1e:92:55:e3:d0:13:7f:fe:
8c:03:94:68:6e:ca:c2:50:9b:32:70:eb:2f:81:86:80:b1:87:
70:8b:b8:12:75:9a:24:bd:c6:f4:45:d3:9a:1f:ea:b9:61:cc:
8c:23:6b:a4:da:27:eb:5e:42:57:04:97:d2:f3:fc:52:93:ee:
59:00:f7:37:5c:fd:2b:b4:0a:d1:52:07:be:cd:1b:cf:47:23:
f4:f5:dc:56:d2:54:98:63:62:14:38:98:ad:8b:3c:e6:5f:5f:
4f:5b:dc:c5:86:e7:1b:ab:65:26:9f:f5:75:fc:a4:0e:f4:8b:
15:98:99:58:ba:c4:92:2f:ca:a7:7e:c3:5a:94:44:fb:79:af:
e6:d3:00:1d:e7:ce:60:12:84:2c:3f:88:75:c6:4e:8c:45:3f:
92:41:f0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdzW+c0oSEtC+6r7zZ8S7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDcyM2VhMTI1NTRkNTJmNDY3M2ExYTQ4Nzg5ZjNkMDVh
Nzg5YTAwHhcNMjUwNDIyMTQwMTA2WhcNMjUwNDIzMTQwMTA2WjAzMTEwLwYDVQQD
EygxMzUzNDY5Y2NmNzEyNmRiYmMyY2RmZjg2ZGUyYzZmZDYyNmQwY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aXOOj76PxCbWJ6l1oM5IR3VEzIB
0tH2bn0XOCTZM7lmBjA5iKHk3mYy4NUxY/iapruAnCf+QECVYybsQaYHpvO22vBm
9BOV/tDyEmjP/LWfXXPApuUErqOUKau0Vnt/PWMOWnIk5da3zvUvIcsQkHt1n8ar
LZMKlfroTgxmYD5ng3GQuzO/igTXXWbl/PPKsuQln+EyegB3v5/ZZDH9k2dGRs9J
XLEwUPNxR0jilAThM3WvU1ft9yq3Afbi4wkihC6d5EdGjw5Xu4AHWnK/91HvmgLk
qQzAXGnQDDys+IZjYJ5yoEyWg5GpkSZJ/UPbcP2ldTra0LBBga0IRuJcGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNTRpzPcSbbvCzf+G3ixv1ibQzgMB8GA1UdIwQY
MBaAFKkHI+oSVU1S9Gc6Gkh4nz0Fp4mgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80ZDMxNWQtNjNhOC00NGIwLWI4YTMt
Yjc3NGMzZWE5ZGJiLzEvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80ZDMxNWQtNjNhOC00NGIwLWI4YTMtYjc3NGMzZWE5ZGJi
LzEvcVFjajZoSlZUVkwwWnpvYVNIaWZQUVduaWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivMbhEwc
vPW4aVg/pGjwAckcxNB0JxUOmVOH6UVCAK6VRxo6bZQ0vXfFWH5c9AiFEQe4rWRf
TWwYtjHypZ66Ua0UQvXUXjSMGi69rKVTdjqETuso+YrF9zCYN5vtIT7bk45gbB6S
VePQE3/+jAOUaG7KwlCbMnDrL4GGgLGHcIu4EnWaJL3G9EXTmh/quWHMjCNrpNon
615CVwSX0vP8UpPuWQD3N1z9K7QK0VIHvs0bz0cj9PXcVtJUmGNiFDiYrYs85l9f
T1vcxYbnG6tlJp/1dfykDvSLFZiZWLrEki/Kp37DWpRE+3mv5tMAHefOYBKELD+I
dcZOjEU/kkHwZA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:27:21 2025 by rpki-client