Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: i2HbS5BjnWt5VFo8Vk1cK+OO0ovKlPYxHca/PwRd9tQ=
Subject key identifier: 99:35:3C:5B:B5:FF:4E:39:0A:1D:F0:64:3B:6D:5F:89:9C:70:49:19
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 01965BDEE13987D83489BE308F7DAF280618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 1211
Signing time: Tue 22 Apr 2025 05:00:55 +0000
Manifest this update: Tue 22 Apr 2025 05:00:55 +0000
Manifest next update: Wed 23 Apr 2025 05:00:55 +0000
Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: wq6XYMD4XMW4CW0CnWxkIz8iy5T95+0+XCMDxfYBoYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:e1:39:87:d8:34:89:be:30:8f:7d:af:28:06:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Apr 22 05:00:55 2025 GMT
Not After : Apr 23 05:00:55 2025 GMT
Subject: CN=99353c5bb5ff4e390a1df0643b6d5f899c704919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:97:18:ec:e2:9e:5d:31:11:d8:81:ad:96:
cd:6d:75:37:e5:66:2b:bc:19:84:ef:24:d9:72:37:
89:5f:93:54:eb:fa:d3:e8:10:0b:f7:e3:b8:63:5d:
f8:fe:f2:5b:12:e0:18:bf:e9:7d:d9:51:b6:fa:4a:
f6:07:e4:51:22:79:94:9f:32:78:b6:55:7c:b5:8e:
94:df:5f:1a:d0:72:bc:61:a7:f9:f7:26:25:13:0d:
bb:75:2b:00:7c:80:ca:b6:76:93:9c:cc:a2:f5:aa:
f1:dc:5a:c1:5a:f9:a5:fa:ab:05:ef:47:39:2f:f6:
c1:e8:82:51:66:9b:1e:62:fa:cd:ba:bb:aa:7a:79:
e2:5c:f7:64:07:0e:9f:e1:0b:9d:b7:56:e1:11:e7:
5f:2e:9c:6d:cb:08:52:27:df:27:78:0e:35:02:5e:
b7:4a:73:07:c8:54:7b:4a:ee:ae:99:48:a8:6a:10:
2c:12:09:33:f4:e7:6d:32:45:d3:79:3d:25:65:40:
ba:c7:07:ce:59:f7:12:e0:c1:b7:73:06:b1:29:f6:
ba:37:25:a3:b5:17:7a:da:8a:91:0a:7b:45:56:15:
f9:d1:33:70:f7:81:7b:46:d9:42:91:c0:7f:81:2e:
b1:b1:2e:65:e2:dc:0d:f5:a8:5d:d8:d1:d4:cd:a0:
c3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:3C:5B:B5:FF:4E:39:0A:1D:F0:64:3B:6D:5F:89:9C:70:49:19
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:77:90:e1:ce:7b:d3:18:4a:18:05:c2:5c:5a:3c:0c:0a:c4:
f7:5a:4b:8b:e5:27:23:84:38:31:db:f5:2b:62:6a:48:a4:4d:
51:57:b3:99:74:7b:d4:fb:cc:d1:2d:3e:c6:f9:e3:7b:f9:78:
a0:de:9c:0a:40:32:c9:b3:26:87:b9:a2:76:98:20:b9:6f:dd:
18:48:54:c3:df:38:72:b2:0a:43:34:22:7d:eb:b9:03:5e:9d:
35:da:1c:3c:b2:b7:6e:83:ed:7c:1d:d1:b9:77:18:6a:21:7e:
8b:75:de:15:08:f8:0b:1b:b5:16:4a:02:fb:35:48:18:54:33:
a2:04:7f:d3:3a:f7:c5:22:52:8c:6c:60:d3:7b:4f:0d:f8:ae:
1d:f3:8c:37:03:3d:09:cb:14:d7:16:ef:08:13:2e:bd:24:c3:
12:09:56:e5:93:5e:79:42:10:c2:47:aa:55:cd:a4:5d:00:ff:
51:59:29:8f:96:ea:af:c4:92:2c:e4:2a:41:5f:e6:00:e3:98:
a5:d5:2a:58:2a:b0:8e:22:ac:d8:a4:be:44:aa:df:f6:93:34:
c1:47:4e:7f:06:bb:31:b2:05:98:da:3b:cb:05:11:6b:0e:1c:
ed:7e:07:17:c7:06:e1:b6:24:dd:12:32:c5:a5:f3:12:5d:10:
0d:7d:6a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZb3uE5h9g0ib4wj32vKAYYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTg0OTZiOGQxZGQ4MjViNDg3MDM4ZmI4N2NhMTk5YjEz
YjkzZGYwHhcNMjUwNDIyMDUwMDU1WhcNMjUwNDIzMDUwMDU1WjAzMTEwLwYDVQQD
Eyg5OTM1M2M1YmI1ZmY0ZTM5MGExZGYwNjQzYjZkNWY4OTljNzA0OTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcuXGOzinl0xEdiBrZbNbXU35WYr
vBmE7yTZcjeJX5NU6/rT6BAL9+O4Y134/vJbEuAYv+l92VG2+kr2B+RRInmUnzJ4
tlV8tY6U318a0HK8Yaf59yYlEw27dSsAfIDKtnaTnMyi9arx3FrBWvml+qsF70c5
L/bB6IJRZpseYvrNuruqenniXPdkBw6f4Qudt1bhEedfLpxtywhSJ98neA41Al63
SnMHyFR7Su6umUioahAsEgkz9OdtMkXTeT0lZUC6xwfOWfcS4MG3cwaxKfa6NyWj
tRd62oqRCntFVhX50TNw94F7RtlCkcB/gS6xsS5l4twN9ahd2NHUzaDDdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk1PFu1/045Ch3wZDttX4mccEkZMB8GA1UdIwQY
MBaAFKiYSWuNHdgltIcDj7h8oZmxO5PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUt
MzY4NzhmNjU3ZTEyLzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUtMzY4NzhmNjU3ZTEy
LzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmneQ4c57
0xhKGAXCXFo8DArE91pLi+UnI4Q4Mdv1K2JqSKRNUVezmXR71PvM0S0+xvnje/l4
oN6cCkAyybMmh7midpgguW/dGEhUw984crIKQzQifeu5A16dNdocPLK3boPtfB3R
uXcYaiF+i3XeFQj4Cxu1FkoC+zVIGFQzogR/0zr3xSJSjGxg03tPDfiuHfOMNwM9
CcsU1xbvCBMuvSTDEglW5ZNeeUIQwkeqVc2kXQD/UVkpj5bqr8SSLOQqQV/mAOOY
pdUqWCqwjiKs2KS+RKrf9pM0wUdOfwa7MbIFmNo7ywURaw4c7X4HF8cG4bYk3RIy
xaXzEl0QDX1qnQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:12 2025 by rpki-client