Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: LxQUY8Nckc0VI9DGZWz9mZVhVkd30uKKhGiRe8oCa/U=
Subject key identifier: 38:A9:6C:96:34:62:89:76:5A:12:FA:79:C9:C9:63:F5:96:A2:FF:81
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 01966398355B7AE0A7FC42543B162992D91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 08
Signing time: Wed 23 Apr 2025 17:00:41 +0000
Manifest this update: Wed 23 Apr 2025 17:00:41 +0000
Manifest next update: Thu 24 Apr 2025 17:00:41 +0000
Files and hashes: 1: 9WCFSNeq3GtWGYrTEMgi1QZ4iF8.roa (hash: i8Np1BwcEIXM1Wv7P+uy0k4NCLXiOZxbaT5Q37bgBvA=)
2: YRj1iGRVMCy4RNf6mBvaYvGJnIA.roa (hash: Jm8MJr8XSRnuve3Kq6+Wn+2PsgepRbJEnsM8Cooldhs=)
3: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: BvomhA0IVY9zVFmvOpCIBdsYbA7bM2QihO/FiAdaED4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:98:35:5b:7a:e0:a7:fc:42:54:3b:16:29:92:d9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Apr 23 17:00:41 2025 GMT
Not After : Apr 24 17:00:41 2025 GMT
Subject: CN=38a96c96346289765a12fa79c9c963f596a2ff81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:99:9a:b0:08:d3:19:ab:9d:21:eb:8c:9c:
60:56:85:69:e8:5e:73:62:7c:e3:63:5f:47:8b:e1:
e1:71:39:7e:86:ae:25:fe:72:5f:1d:35:4d:54:10:
4b:49:3f:1d:aa:22:5f:c7:5c:2e:1f:c6:5b:83:46:
46:9a:a7:a2:d3:51:1b:ae:d2:64:0c:a0:0f:4e:41:
51:ec:4f:02:93:1f:74:31:17:62:62:17:6b:59:c8:
38:07:f9:3d:14:7e:10:1f:dd:d1:18:24:6d:62:3a:
a3:13:d0:c2:c5:4e:a2:03:40:4d:a1:96:bf:16:48:
55:c3:a5:5b:2e:83:9c:ce:59:5e:49:b8:09:bc:81:
58:62:d5:41:af:00:9d:a1:f4:23:b7:05:31:10:5a:
4f:2c:95:15:5d:56:9a:9d:68:75:9a:92:3d:e3:2e:
75:00:57:fc:fd:a0:4b:ca:b9:f7:2f:d8:d3:92:1c:
59:0f:43:c2:6e:96:1c:ce:6c:1a:01:b3:0c:c3:d0:
41:1c:47:84:e1:1a:ac:a9:1e:42:9a:67:28:37:67:
0d:d5:12:21:1f:65:0a:6c:c6:5c:ba:10:8a:02:b4:
3f:79:31:43:6d:16:cc:86:48:20:39:49:3f:e6:9b:
18:52:be:63:7d:f9:c7:75:7e:42:e3:88:8e:8a:61:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A9:6C:96:34:62:89:76:5A:12:FA:79:C9:C9:63:F5:96:A2:FF:81
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fe:ce:97:c0:f3:7e:2e:50:75:ad:b2:f5:ed:b6:c8:af:af:
91:0f:84:ee:bb:cc:df:97:33:c2:48:38:69:e8:ba:49:e6:4d:
a2:c7:03:1a:85:75:82:06:fa:52:7e:f7:09:76:52:5e:ef:78:
90:a6:64:02:c2:8d:2e:10:10:53:f9:ce:f0:a3:7d:7c:50:c6:
1e:b8:77:a0:4f:05:48:8d:e6:ef:d5:55:1d:75:28:d5:87:ea:
b3:b5:7d:6f:f0:1a:1c:e2:e5:80:d9:2e:b3:e6:80:f6:54:fd:
e1:a9:4b:73:86:fa:d5:4c:12:78:95:a0:b9:fe:c4:47:34:8f:
d1:86:c3:3e:32:a3:a1:45:e8:50:7b:59:29:35:32:7e:e2:c3:
af:81:20:8b:33:d3:e6:1d:b5:fa:97:38:4a:8b:35:a5:19:f3:
22:a4:28:19:e9:30:3d:9b:dc:e6:95:c9:b6:07:96:53:ed:44:
8a:59:e2:a3:b6:7f:cd:5c:bf:39:51:02:c3:76:2f:e4:ec:e1:
bd:d9:ef:8a:ff:8c:5a:6c:6b:22:56:ff:27:00:15:b7:46:92:
25:0f:fb:c8:13:03:83:d5:47:2b:48:1d:a5:a0:50:aa:6d:61:
d0:44:de:a4:70:e4:9b:7a:7e:63:50:f6:be:6b:c4:5c:ea:d9:
75:f7:c7:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZjmDVbeuCn/EJUOxYpktkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTNmMWI4ZTI5NjVmZDAzODc4MTBhMmY2MmNmNzE0ODE2
ZDE0OTcwHhcNMjUwNDIzMTcwMDQxWhcNMjUwNDI0MTcwMDQxWjAzMTEwLwYDVQQD
EygzOGE5NmM5NjM0NjI4OTc2NWExMmZhNzljOWM5NjNmNTk2YTJmZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnSZmrAI0xmrnSHrjJxgVoVp6F5z
YnzjY19Hi+HhcTl+hq4l/nJfHTVNVBBLST8dqiJfx1wuH8Zbg0ZGmqei01EbrtJk
DKAPTkFR7E8Ckx90MRdiYhdrWcg4B/k9FH4QH93RGCRtYjqjE9DCxU6iA0BNoZa/
FkhVw6VbLoOczlleSbgJvIFYYtVBrwCdofQjtwUxEFpPLJUVXVaanWh1mpI94y51
AFf8/aBLyrn3L9jTkhxZD0PCbpYczmwaAbMMw9BBHEeE4RqsqR5CmmcoN2cN1RIh
H2UKbMZcuhCKArQ/eTFDbRbMhkggOUk/5psYUr5jffnHdX5C44iOimFY+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDipbJY0Yol2WhL6ecnJY/WWov+BMB8GA1UdIwQY
MBaAFKlT8bjill/QOHgQovYs9xSBbRSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZTM0OTMtY2UwMy00ZDk0LWJkZmQt
YWU4NjMzYzE3Yjg3LzEvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZTM0OTMtY2UwMy00ZDk0LWJkZmQtYWU4NjMzYzE3Yjg3
LzEvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf7Ol8Dz
fi5Qda2y9e22yK+vkQ+E7rvM35czwkg4aei6SeZNoscDGoV1ggb6Un73CXZSXu94
kKZkAsKNLhAQU/nO8KN9fFDGHrh3oE8FSI3m79VVHXUo1Yfqs7V9b/AaHOLlgNku
s+aA9lT94alLc4b61UwSeJWguf7ERzSP0YbDPjKjoUXoUHtZKTUyfuLDr4EgizPT
5h21+pc4Sos1pRnzIqQoGekwPZvc5pXJtgeWU+1Eilnio7Z/zVy/OVECw3Yv5Ozh
vdnviv+MWmxrIlb/JwAVt0aSJQ/7yBMDg9VHK0gdpaBQqm1h0ETepHDkm3p+Y1D2
vmvEXOrZdffHZw==
-----END CERTIFICATE-----
Generated at Wed Apr 23 20:14:49 2025 by rpki-client