Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: 3S2YXvXCTTRt0V92edYIID9LbqRRU2kEJTeifpPKYKs=
Subject key identifier: 61:16:35:0B:B3:3D:8A:99:9E:91:76:7F:66:1C:99:A7:2B:14:93:E7
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01965801C1D78B1812B6A7A24DF95748E215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 102E
Signing time: Mon 21 Apr 2025 11:00:32 +0000
Manifest this update: Mon 21 Apr 2025 11:00:32 +0000
Manifest next update: Tue 22 Apr 2025 11:00:32 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: o3SBGxkoZFLomtikSQgu7KYGhMIWCWpps5GNsEp/KPY=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:c1:d7:8b:18:12:b6:a7:a2:4d:f9:57:48:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Apr 21 11:00:32 2025 GMT
Not After : Apr 22 11:00:32 2025 GMT
Subject: CN=6116350bb33d8a999e91767f661c99a72b1493e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:7e:97:c6:dc:25:7b:7e:29:98:38:6a:a1:
30:ac:16:0d:28:74:99:9d:a0:4c:29:7c:e0:d5:b0:
76:24:05:25:57:0d:6f:f0:95:b7:2b:d8:88:8b:dd:
83:a4:d0:6b:bd:5f:94:a9:55:9e:35:ab:96:d2:cb:
d8:54:ad:68:18:90:1b:27:18:02:63:1e:fe:7f:11:
53:4b:b2:63:87:fa:2e:fe:ef:a4:72:e7:77:7c:9b:
5e:f9:71:82:90:e5:e2:41:de:82:6d:aa:ba:69:f3:
53:76:d8:8c:d9:01:2d:88:ce:4a:7e:1d:82:2c:5d:
1d:84:40:f6:97:93:60:84:26:37:57:53:d6:37:c2:
bf:f7:10:9d:b5:9a:43:07:70:6a:35:6c:1e:4f:f0:
d0:01:22:ae:c3:1f:9b:d9:d8:34:74:62:b2:e5:e0:
2d:c9:e5:80:b2:21:97:f2:93:a7:13:89:c2:b2:19:
b6:3d:5a:d4:8b:34:c5:b6:2a:09:e2:77:f1:2e:50:
4a:71:ec:b7:8e:ab:b4:fb:63:c8:7b:e2:bb:51:f3:
f8:ff:7f:0d:91:b7:ba:24:98:f2:6b:47:89:77:77:
91:2d:f2:8e:f3:c8:db:69:3d:22:b8:d9:ac:dc:c1:
95:b0:af:b7:cf:89:af:ec:b5:44:ee:2f:b6:7f:78:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:16:35:0B:B3:3D:8A:99:9E:91:76:7F:66:1C:99:A7:2B:14:93:E7
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:87:f9:4d:dc:53:b4:12:2b:88:a2:d4:87:71:c3:b4:87:d0:
b5:83:85:9b:13:25:11:bd:4c:27:3f:cf:7b:ef:ac:b1:31:0f:
2d:e4:8d:8d:40:80:37:ee:ed:68:3c:dd:3b:e7:a2:19:e2:89:
e7:f7:96:12:a5:2a:33:19:05:3d:ca:cc:2a:97:b8:7e:c0:fb:
f9:80:8a:ec:49:ad:d9:d5:c1:08:c2:64:c4:13:16:6b:c6:d8:
cc:bb:c7:7c:5e:2d:66:3a:be:d4:ec:ce:d4:8c:b8:8a:56:8b:
56:8b:99:0c:61:b4:c7:39:fc:4e:31:28:b4:3c:a7:4f:a9:06:
6b:15:23:9f:e2:6b:fc:d1:19:07:9d:aa:73:4d:cb:96:3a:58:
e3:93:a8:69:7b:69:97:8c:a6:78:20:bd:e5:18:03:20:db:c0:
a8:e9:6c:06:18:29:54:80:25:21:98:71:e3:2e:ba:10:d9:48:
ef:af:1f:9d:0d:6b:aa:28:98:60:b7:ec:cb:e3:da:6f:65:f9:
3a:88:a5:58:5c:14:b4:dd:fc:e2:21:1c:f5:fe:90:54:c0:bb:
87:68:a1:15:8d:d2:5b:4a:dd:15:05:b5:fe:7c:17:c6:e2:ba:
f8:6b:be:5d:e0:b3:24:c7:50:f4:9b:16:74:92:20:fa:fa:02:
4c:ee:8d:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAcHXixgStqeiTflXSOIVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk
OWNmYmUwHhcNMjUwNDIxMTEwMDMyWhcNMjUwNDIyMTEwMDMyWjAzMTEwLwYDVQQD
Eyg2MTE2MzUwYmIzM2Q4YTk5OWU5MTc2N2Y2NjFjOTlhNzJiMTQ5M2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJt+l8bcJXt+KZg4aqEwrBYNKHSZ
naBMKXzg1bB2JAUlVw1v8JW3K9iIi92DpNBrvV+UqVWeNauW0svYVK1oGJAbJxgC
Yx7+fxFTS7Jjh/ou/u+kcud3fJte+XGCkOXiQd6Cbaq6afNTdtiM2QEtiM5Kfh2C
LF0dhED2l5NghCY3V1PWN8K/9xCdtZpDB3BqNWweT/DQASKuwx+b2dg0dGKy5eAt
yeWAsiGX8pOnE4nCshm2PVrUizTFtioJ4nfxLlBKcey3jqu0+2PIe+K7UfP4/38N
kbe6JJjya0eJd3eRLfKO88jbaT0iuNms3MGVsK+3z4mv7LVE7i+2f3hNswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEWNQuzPYqZnpF2f2YcmacrFJPnMB8GA1UdIwQY
MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt
Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz
LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4f5TdxT
tBIriKLUh3HDtIfQtYOFmxMlEb1MJz/Pe++ssTEPLeSNjUCAN+7taDzdO+eiGeKJ
5/eWEqUqMxkFPcrMKpe4fsD7+YCK7Emt2dXBCMJkxBMWa8bYzLvHfF4tZjq+1OzO
1Iy4ilaLVouZDGG0xzn8TjEotDynT6kGaxUjn+Jr/NEZB52qc03LljpY45OoaXtp
l4ymeCC95RgDINvAqOlsBhgpVIAlIZhx4y66ENlI768fnQ1rqiiYYLfsy+Pab2X5
OoilWFwUtN384iEc9f6QVMC7h2ihFY3SW0rdFQW1/nwXxuK6+Gu+XeCzJMdQ9JsW
dJIg+voCTO6NNg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:15 2025 by rpki-client