Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier: FX5yyLzciUtajQ65jsLsorc+b1IrN1UohtGWSJFR1ck=
Subject key identifier: 02:11:E5:EA:93:74:E8:06:9D:71:5C:48:BE:4E:0F:53:0F:12:C7:5F
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 0196568168798C56A8CE5A64D80AC81DE340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number: 07D8
Signing time: Mon 21 Apr 2025 04:00:43 +0000
Manifest this update: Mon 21 Apr 2025 04:00:43 +0000
Manifest next update: Tue 22 Apr 2025 04:00:43 +0000
Files and hashes: 1: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (hash: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=)
2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: DbQ+dNZvstvGSrrwnYltSD8YBXqwil402/RIqQO7x68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:68:79:8c:56:a8:ce:5a:64:d8:0a:c8:1d:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Apr 21 04:00:43 2025 GMT
Not After : Apr 22 04:00:43 2025 GMT
Subject: CN=0211e5ea9374e8069d715c48be4e0f530f12c75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:9c:ed:d4:6f:b4:93:c4:2e:a6:1c:0f:31:
22:99:cd:e0:25:34:11:6a:0d:f6:80:06:8e:ba:ab:
9b:8a:ea:f6:01:6c:7b:43:e7:bb:2b:33:aa:0d:a6:
94:cb:b9:08:bf:00:9f:9f:01:69:c6:29:33:28:8f:
d7:99:eb:b0:17:81:e1:f4:d6:3b:09:8f:21:d4:c9:
16:a0:d5:e6:0b:8d:d5:27:22:e7:e1:73:6f:94:5e:
a9:6d:d6:79:d2:a7:9d:0f:ff:54:93:3b:fc:b5:0d:
92:3c:1e:2b:18:16:df:fc:84:07:2e:62:24:48:d1:
f7:63:ec:d7:f6:6f:f0:39:f3:30:8d:d0:41:4c:b4:
1b:e4:30:cf:b4:ce:f9:d1:a3:35:f0:a0:02:87:05:
10:29:20:f4:9d:85:ad:94:49:33:f7:48:13:76:51:
98:e4:57:c6:e7:f7:96:08:e3:fe:0a:65:29:e4:10:
1b:2e:e3:7d:56:88:86:2c:fe:e8:4c:9f:70:b1:44:
17:9d:fc:3d:40:98:e3:80:76:53:a8:49:a7:8b:3e:
88:a8:8b:fc:bf:52:e8:c3:68:2d:e7:ce:f2:4d:97:
e8:0e:c4:5e:ab:37:2e:e7:4b:11:47:0a:3d:25:e0:
68:3f:c3:42:fc:f4:b5:24:54:81:a6:74:06:c7:7e:
d6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:11:E5:EA:93:74:E8:06:9D:71:5C:48:BE:4E:0F:53:0F:12:C7:5F
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:31:44:96:18:fa:d6:6d:06:db:b9:34:74:cb:f8:c9:81:f7:
12:e7:8c:b2:b0:e5:98:30:49:d1:84:2b:e1:6d:01:0f:43:d1:
0b:d3:9b:3b:01:60:fc:91:ed:94:ee:aa:05:0f:b2:34:56:7b:
28:71:40:6f:62:ca:9e:84:f6:eb:fc:03:35:d2:16:af:d8:4d:
81:fd:0d:53:2c:cd:f0:d3:70:0a:52:47:31:4a:b8:49:78:39:
7e:e2:23:09:29:c5:94:00:4f:0f:80:56:b5:90:e9:62:77:5f:
30:62:f6:90:32:86:e4:5c:e9:63:98:91:48:03:89:e3:82:63:
80:f4:f4:71:38:6b:25:b0:6c:17:6d:ff:57:09:ac:d7:c4:72:
c5:8d:11:a1:46:d9:fd:b8:19:15:1c:c8:dc:6c:9a:0f:b9:0d:
42:2e:05:7b:c7:b2:a8:45:cc:2e:0c:36:48:42:58:a3:7c:bc:
b3:6d:9c:47:34:c0:14:c3:f5:f4:c1:bb:6d:e0:7a:0a:9c:8a:
bc:ca:a6:eb:8a:e8:45:19:ce:94:e8:ab:e8:fe:0e:ab:c2:d6:
2c:7c:39:01:05:b6:8b:31:95:3f:e0:d4:08:7d:ca:b2:65:6a:
91:45:4b:22:56:7f:fb:45:fc:2a:4e:15:d1:33:eb:b4:13:9e:
19:81:28:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgWh5jFaozlpk2ArIHeNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzFlZTUxMmMxYTU2MmFiOWU5NDEwYTgzMWY3MmZkNDMx
ODg5MmUwHhcNMjUwNDIxMDQwMDQzWhcNMjUwNDIyMDQwMDQzWjAzMTEwLwYDVQQD
EygwMjExZTVlYTkzNzRlODA2OWQ3MTVjNDhiZTRlMGY1MzBmMTJjNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDmc7dRvtJPELqYcDzEimc3gJTQR
ag32gAaOuqubiur2AWx7Q+e7KzOqDaaUy7kIvwCfnwFpxikzKI/XmeuwF4Hh9NY7
CY8h1MkWoNXmC43VJyLn4XNvlF6pbdZ50qedD/9Ukzv8tQ2SPB4rGBbf/IQHLmIk
SNH3Y+zX9m/wOfMwjdBBTLQb5DDPtM750aM18KAChwUQKSD0nYWtlEkz90gTdlGY
5FfG5/eWCOP+CmUp5BAbLuN9VoiGLP7oTJ9wsUQXnfw9QJjjgHZTqEmniz6IqIv8
v1Low2gt587yTZfoDsReqzcu50sRRwo9JeBoP8NC/PS1JFSBpnQGx37WqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIR5eqTdOgGnXFcSL5OD1MPEsdfMB8GA1UdIwQY
MBaAFKox7lEsGlYquelBCoMfcv1DGIkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2VmNTQtYmRiMC00NTBhLTg2NDYt
ZWUwODE0NmUzNzEzLzEvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lN2VmNTQtYmRiMC00NTBhLTg2NDYtZWUwODE0NmUzNzEz
LzEvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzFElhj6
1m0G27k0dMv4yYH3EueMsrDlmDBJ0YQr4W0BD0PRC9ObOwFg/JHtlO6qBQ+yNFZ7
KHFAb2LKnoT26/wDNdIWr9hNgf0NUyzN8NNwClJHMUq4SXg5fuIjCSnFlABPD4BW
tZDpYndfMGL2kDKG5FzpY5iRSAOJ44JjgPT0cThrJbBsF23/Vwms18RyxY0RoUbZ
/bgZFRzI3GyaD7kNQi4Fe8eyqEXMLgw2SEJYo3y8s22cRzTAFMP19MG7beB6CpyK
vMqm64roRRnOlOir6P4Oq8LWLHw5AQW2izGVP+DUCH3KsmVqkUVLIlZ/+0X8Kk4V
0TPrtBOeGYEoKA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:57:36 2025 by rpki-client