Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: YVYSzqMIqG01Kl7QLFH61UgU4/Lp5KJ8/qucm1W9hlk=
Subject key identifier: F5:A9:BD:0A:A7:2A:81:32:34:9F:5E:42:93:55:56:17:1D:6F:09:5D
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 0196531210B85B1A4EF00F92C3DE1CF26C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 12:00:14 +0000
Manifest this update: Sun 20 Apr 2025 12:00:14 +0000
Manifest next update: Mon 21 Apr 2025 12:00:14 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: V9xfj8yhTB+4iEFkHP3B62n3Tqvdtq39UevPky+dsUY=)
2: wQqY6GzbDftcPzXJa8kVYZmeUUk.roa (hash: JDvmaY6VGQlVNt+ZPlklOrTqgJ6a+KsUqH/Pcr7SIcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:10:b8:5b:1a:4e:f0:0f:92:c3:de:1c:f2:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Apr 20 12:00:14 2025 GMT
Not After : Apr 21 12:00:14 2025 GMT
Subject: CN=f5a9bd0aa72a8132349f5e42935556171d6f095d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:4d:4a:21:54:3d:73:36:b6:c8:46:40:71:
b7:ff:a6:35:eb:0a:40:c7:84:98:64:55:9d:8a:64:
b8:31:98:07:fd:9a:fa:3a:b9:90:6d:9f:ab:f2:44:
ad:9f:85:d0:2e:cd:bb:27:51:d4:28:cb:12:41:21:
eb:e9:94:d9:b1:4a:8c:d0:64:65:5b:08:58:ac:01:
a0:d3:10:94:4c:c7:9d:f4:4e:cb:68:2e:bc:b4:d6:
b4:d2:ef:66:73:33:bb:a5:7a:31:3e:6c:0f:5a:ec:
83:41:b4:70:e5:41:2d:ae:6b:7e:55:a7:ee:26:35:
01:22:41:05:50:40:8a:33:09:36:0e:26:f8:ef:bc:
c2:a3:df:6b:25:89:a2:a3:20:ee:18:0a:ee:bf:e1:
02:8e:f9:6e:e6:35:50:6f:f8:21:12:f6:c8:0d:25:
9d:89:81:db:91:af:fa:80:8d:f7:5b:8e:cb:ee:29:
c8:42:03:a4:f1:69:67:22:7c:8f:e4:df:88:ed:ec:
0f:4d:49:05:25:38:3f:aa:b6:5d:b1:f1:5b:e5:fe:
e0:75:0f:4e:8e:2f:be:0f:b0:20:48:cf:50:04:3e:
fa:ff:d6:bf:04:ae:d9:b8:64:ba:ca:8a:23:bd:bf:
50:3e:67:1d:84:2c:71:57:ae:25:6f:fe:f2:81:c6:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:BD:0A:A7:2A:81:32:34:9F:5E:42:93:55:56:17:1D:6F:09:5D
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:52:20:39:19:df:0d:ff:fd:11:7f:82:64:22:c8:ea:bf:1f:
d4:f2:03:c6:82:97:02:31:41:49:14:74:8d:03:2a:d5:da:4b:
65:fc:ec:77:f7:49:3f:a4:60:36:a4:07:bf:11:21:fd:0f:e9:
8e:1b:db:6c:f8:6c:33:cc:51:ae:0f:c3:18:d6:4f:04:fc:4d:
b2:c8:a3:ed:04:1c:c0:71:ee:79:e2:92:89:8e:31:b4:da:3e:
6b:da:e5:b4:25:ab:25:e3:a1:de:03:7c:6f:27:74:c9:59:67:
2f:71:6c:73:df:4c:b6:ed:37:5c:ec:61:3a:2c:5b:d2:ae:12:
ab:4f:71:f3:94:0b:a7:7b:db:61:73:69:b2:e0:d3:c9:6e:aa:
19:f7:d3:93:36:4f:a9:eb:b2:1f:cf:13:4f:06:7b:a1:3c:0f:
6d:81:14:bf:e3:e9:68:c8:f6:17:75:6b:c8:e2:6b:1c:b0:f6:
77:8a:84:83:6f:98:05:5b:c8:86:0c:7d:0c:a5:52:43:03:8f:
a8:a6:58:63:d0:81:4b:0c:fe:d6:01:6d:85:d2:4c:59:c9:b0:
fb:7c:1e:db:7d:81:e2:58:9a:a1:7b:fe:42:b2:82:62:2e:3a:
3b:d7:04:f6:2f:c7:a6:a8:3c:61:81:e7:24:4f:da:0c:a2:6b:
9d:0c:40:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTEhC4WxpO8A+Sw94c8mwGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNzRhNzg5NTg3NWNmMmM2Nzg1NDRmNmNlNmY0YjIzOWY0
OTI5ZmIwHhcNMjUwNDIwMTIwMDE0WhcNMjUwNDIxMTIwMDE0WjAzMTEwLwYDVQQD
EyhmNWE5YmQwYWE3MmE4MTMyMzQ5ZjVlNDI5MzU1NTYxNzFkNmYwOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog9NSiFUPXM2tshGQHG3/6Y16wpA
x4SYZFWdimS4MZgH/Zr6OrmQbZ+r8kStn4XQLs27J1HUKMsSQSHr6ZTZsUqM0GRl
WwhYrAGg0xCUTMed9E7LaC68tNa00u9mczO7pXoxPmwPWuyDQbRw5UEtrmt+Vafu
JjUBIkEFUECKMwk2Dib477zCo99rJYmioyDuGAruv+ECjvlu5jVQb/ghEvbIDSWd
iYHbka/6gI33W47L7inIQgOk8WlnInyP5N+I7ewPTUkFJTg/qrZdsfFb5f7gdQ9O
ji++D7AgSM9QBD76/9a/BK7ZuGS6yoojvb9QPmcdhCxxV64lb/7ygcZJTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWpvQqnKoEyNJ9eQpNVVhcdbwldMB8GA1UdIwQY
MBaAFEB0p4lYdc8sZ4VE9s5vSyOfSSn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMTc3ZGMtNDNiMy00YmRkLThiZjUt
ZjUyZDYwNjRkZDhiLzEvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kMTc3ZGMtNDNiMy00YmRkLThiZjUtZjUyZDYwNjRkZDhi
LzEvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1IgORnf
Df/9EX+CZCLI6r8f1PIDxoKXAjFBSRR0jQMq1dpLZfzsd/dJP6RgNqQHvxEh/Q/p
jhvbbPhsM8xRrg/DGNZPBPxNssij7QQcwHHueeKSiY4xtNo+a9rltCWrJeOh3gN8
byd0yVlnL3Fsc99Mtu03XOxhOixb0q4Sq09x85QLp3vbYXNpsuDTyW6qGffTkzZP
qeuyH88TTwZ7oTwPbYEUv+PpaMj2F3VryOJrHLD2d4qEg2+YBVvIhgx9DKVSQwOP
qKZYY9CBSwz+1gFthdJMWcmw+3we232B4liaoXv+QrKCYi46O9cE9i/Hpqg8YYHn
JE/aDKJrnQxA7g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:30:57 2025 by rpki-client