Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: R6mULbADdH22f9KnHWlnjfcsrH4+qhx/H3jIMTASQTE=
Subject key identifier: 69:98:E4:49:45:73:67:7F:FD:27:8F:F8:23:9C:3F:FA:DB:33:64:6B
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 019656814AD38AD304E7323FB4AC0999D235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 149F
Signing time: Mon 21 Apr 2025 04:00:35 +0000
Manifest this update: Mon 21 Apr 2025 04:00:35 +0000
Manifest next update: Tue 22 Apr 2025 04:00:35 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: uMi5KJCeCOGy8HsjzAJekhcZcXZ67tJSOQmFgwv24eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:4a:d3:8a:d3:04:e7:32:3f:b4:ac:09:99:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Apr 21 04:00:35 2025 GMT
Not After : Apr 22 04:00:35 2025 GMT
Subject: CN=6998e4494573677ffd278ff8239c3ffadb33646b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:75:67:e7:79:f2:2b:36:94:92:e0:1c:ba:
d3:aa:4a:e7:4c:bc:c6:37:69:6a:43:aa:3a:d0:7d:
21:24:80:80:d6:d1:87:65:97:5d:cf:f2:96:6b:2b:
1d:51:6b:ea:42:9f:e5:23:f7:3e:e2:c3:f2:7d:f4:
8c:99:15:cf:cc:17:87:c1:91:f0:f9:31:2a:aa:1c:
06:d9:f2:39:4a:c6:77:d3:1c:15:0f:c1:75:06:0f:
61:7b:7e:ff:28:4a:db:61:5d:49:21:c3:29:7e:df:
7b:90:fc:40:9c:ef:20:90:a0:a0:3b:ea:85:ab:55:
38:0b:12:e5:d4:b1:cd:a6:a0:c2:3b:e9:72:b0:6e:
29:3f:7f:59:2a:25:96:b8:cc:a3:d1:5d:07:56:6d:
9f:df:b8:b9:7f:ec:6e:a9:be:a3:b4:f8:7d:9a:a5:
89:39:c5:fd:db:3e:e9:b6:76:15:c6:1b:cf:51:b9:
62:30:04:80:5e:3e:3e:6b:25:f3:14:fc:73:6b:c9:
84:52:26:5f:26:6c:61:b7:08:d1:0d:c1:f2:02:71:
4f:94:14:ef:42:d4:24:01:df:b0:49:53:32:21:66:
76:8a:f9:c2:be:80:f3:84:c3:83:46:8a:f0:a2:24:
70:2d:63:7c:4f:55:37:a4:08:95:48:c5:3d:c0:a1:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:98:E4:49:45:73:67:7F:FD:27:8F:F8:23:9C:3F:FA:DB:33:64:6B
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:78:d8:12:d0:6c:e7:ca:9c:6b:c3:87:b3:6e:12:a9:e8:e9:
98:38:77:f6:20:23:7f:95:6c:46:3e:57:97:7c:ae:33:32:84:
ef:f9:31:2e:77:97:27:b6:a7:69:ac:6e:82:ae:bd:82:cd:9e:
ec:bb:0b:19:bf:b3:62:09:40:1c:b2:5a:30:b2:26:4a:ab:1b:
1f:13:cd:a0:f4:1f:79:b6:72:ca:1f:21:8e:b3:f8:06:b1:a8:
8a:b9:36:5b:de:05:f8:db:43:dc:ad:70:f2:29:22:b6:48:a5:
58:9c:10:ed:43:f9:80:bf:00:18:30:09:ba:e6:9d:6a:56:89:
ec:65:64:4a:90:26:a5:f8:45:54:33:84:70:32:bc:11:20:4f:
f2:89:c8:47:5a:31:85:76:39:2d:ea:2c:ff:f6:4c:74:7f:09:
8c:cd:d2:f0:e8:eb:43:8e:31:14:f2:12:ea:c2:9d:f5:9b:a2:
4f:87:a1:d5:cd:7d:8d:c3:0a:32:db:03:69:c8:4a:45:67:2f:
3f:ec:78:a0:10:3d:06:4a:4f:90:6e:ab:70:46:6c:c8:87:20:
81:50:e8:db:1e:f5:a4:5c:24:e5:40:3b:a7:87:e8:b1:0f:ee:
87:4a:11:d8:58:86:46:e1:ce:c6:69:93:ba:ba:5d:c0:e9:f7:
40:ea:ac:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgUrTitME5zI/tKwJmdI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz
N2EwYzYwHhcNMjUwNDIxMDQwMDM1WhcNMjUwNDIyMDQwMDM1WjAzMTEwLwYDVQQD
Eyg2OTk4ZTQ0OTQ1NzM2NzdmZmQyNzhmZjgyMzljM2ZmYWRiMzM2NDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIV1Z+d58is2lJLgHLrTqkrnTLzG
N2lqQ6o60H0hJICA1tGHZZddz/KWaysdUWvqQp/lI/c+4sPyffSMmRXPzBeHwZHw
+TEqqhwG2fI5SsZ30xwVD8F1Bg9he37/KErbYV1JIcMpft97kPxAnO8gkKCgO+qF
q1U4CxLl1LHNpqDCO+lysG4pP39ZKiWWuMyj0V0HVm2f37i5f+xuqb6jtPh9mqWJ
OcX92z7ptnYVxhvPUbliMASAXj4+ayXzFPxza8mEUiZfJmxhtwjRDcHyAnFPlBTv
QtQkAd+wSVMyIWZ2ivnCvoDzhMODRorwoiRwLWN8T1U3pAiVSMU9wKHBwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmY5ElFc2d//SeP+COcP/rbM2RrMB8GA1UdIwQY
MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt
OGI0NzkzZjkwZjE1LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1
LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXjYEtBs
58qca8OHs24SqejpmDh39iAjf5VsRj5Xl3yuMzKE7/kxLneXJ7anaaxugq69gs2e
7LsLGb+zYglAHLJaMLImSqsbHxPNoPQfebZyyh8hjrP4BrGoirk2W94F+NtD3K1w
8ikitkilWJwQ7UP5gL8AGDAJuuadalaJ7GVkSpAmpfhFVDOEcDK8ESBP8onIR1ox
hXY5Leos//ZMdH8JjM3S8OjrQ44xFPIS6sKd9ZuiT4eh1c19jcMKMtsDachKRWcv
P+x4oBA9BkpPkG6rcEZsyIcggVDo2x71pFwk5UA7p4fosQ/uh0oR2FiGRuHOxmmT
urpdwOn3QOqsKw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:53 2025 by rpki-client