Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: aoOXs9u1hxgtsAOSg3B0/C+8NqMcp6PuOo6BILdA4A0=
Subject key identifier: 92:77:AA:F5:75:DC:B7:86:4E:19:A5:84:C1:59:77:AE:4A:14:13:54
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 019659141CF5C9B524F30693F3A81B5478CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 16:00:12 +0000
Manifest this update: Mon 21 Apr 2025 16:00:12 +0000
Manifest next update: Tue 22 Apr 2025 16:00:12 +0000
Files and hashes: 1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: Sg6GckPPN7qS+i68nO0cUuUZ6xB4dvkLo/Yy5k2Y5OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:1c:f5:c9:b5:24:f3:06:93:f3:a8:1b:54:78:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Apr 21 16:00:12 2025 GMT
Not After : Apr 22 16:00:12 2025 GMT
Subject: CN=9277aaf575dcb7864e19a584c15977ae4a141354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:4d:5c:f1:03:7a:81:af:65:55:bc:67:f2:
df:42:68:7c:63:e8:a1:1e:bb:17:d7:e2:5e:15:e4:
a1:4c:06:08:5b:d7:e8:c1:52:b9:df:2c:60:4c:13:
f4:e6:66:ab:07:f1:0f:56:1e:9e:72:1e:26:70:21:
ed:08:f8:23:6b:08:b4:9d:ea:0b:fa:9d:25:5c:4d:
93:c5:ac:4f:b4:8e:06:31:5d:5b:92:b8:ad:11:96:
1a:a7:f3:00:25:f2:33:83:e5:43:f2:38:72:6c:31:
e2:be:d4:6c:ce:a6:b1:02:13:c6:22:97:63:1a:11:
4e:15:24:ac:d2:0d:e8:c6:27:26:8a:64:b0:30:9b:
f4:9f:0a:20:80:1f:b2:5d:5b:82:92:90:7c:8f:89:
5a:4b:cb:16:c1:9a:30:40:b6:03:5a:60:91:c5:a8:
c1:8b:43:e3:91:f8:66:08:b7:5d:4b:18:6a:f7:93:
09:af:8f:55:06:58:a2:a7:8b:ff:32:42:ad:c4:b9:
2d:4c:cd:fc:8f:83:fe:76:f5:5e:4c:b1:54:96:92:
96:ed:cd:1f:fb:f6:2d:ff:b1:fa:73:a7:e6:1f:03:
06:fc:2b:44:1b:d9:a2:c4:5e:e7:7e:24:8d:28:5b:
f8:e4:a5:9d:be:0c:81:e1:4e:be:1f:6f:e3:84:33:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:77:AA:F5:75:DC:B7:86:4E:19:A5:84:C1:59:77:AE:4A:14:13:54
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:60:a7:59:4d:01:e4:db:f8:7d:7a:ad:f3:ad:6f:42:bf:42:
ef:5c:15:61:9c:96:d9:cb:b2:c9:10:e8:5c:c9:e7:b7:e4:3b:
e4:94:28:91:43:6b:69:73:38:72:f2:e8:fd:c4:c3:31:c1:58:
d8:13:73:9c:30:49:ba:a9:95:bf:d0:0d:1d:c9:89:91:50:df:
18:0f:02:ac:cd:8c:3f:da:b6:6a:a7:4e:a5:a4:fc:6a:6d:a0:
f9:db:d6:6e:ef:22:0a:1e:6e:23:87:d2:cc:24:89:92:1f:ef:
c3:54:ef:33:0e:fe:97:f1:29:49:db:b0:db:40:e1:2c:fc:df:
08:91:8e:a4:05:90:8f:c9:64:f3:8b:38:ec:b4:7c:7f:e5:4c:
69:12:2a:8d:f9:0f:1e:a8:58:4a:00:ed:4b:29:82:52:51:5c:
a0:54:4e:89:48:31:36:00:fd:1b:e8:b0:83:5a:1c:fa:e5:cd:
8e:4e:8c:11:c9:2a:20:52:74:0d:c7:b4:46:14:39:35:8d:3b:
00:48:9e:cc:6f:14:df:74:dc:73:ac:b0:e4:76:34:02:4a:56:
3f:f6:ce:b2:2b:d4:15:52:a5:77:89:6a:c2:53:1c:84:f9:91:
b6:04:75:18:24:63:28:43:7a:49:6e:9d:df:8e:a4:ff:92:e4:
da:e9:12:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFBz1ybUk8waT86gbVHjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNjRjOWFlNWJlMjY0MGE1ZmQ2OTQ1ODZhNzA0Y2EzNGMy
MDg3YmYwHhcNMjUwNDIxMTYwMDEyWhcNMjUwNDIyMTYwMDEyWjAzMTEwLwYDVQQD
Eyg5Mjc3YWFmNTc1ZGNiNzg2NGUxOWE1ODRjMTU5NzdhZTRhMTQxMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzENNXPEDeoGvZVW8Z/LfQmh8Y+ih
HrsX1+JeFeShTAYIW9fowVK53yxgTBP05marB/EPVh6ech4mcCHtCPgjawi0neoL
+p0lXE2TxaxPtI4GMV1bkritEZYap/MAJfIzg+VD8jhybDHivtRszqaxAhPGIpdj
GhFOFSSs0g3oxicmimSwMJv0nwoggB+yXVuCkpB8j4laS8sWwZowQLYDWmCRxajB
i0PjkfhmCLddSxhq95MJr49VBliip4v/MkKtxLktTM38j4P+dvVeTLFUlpKW7c0f
+/Yt/7H6c6fmHwMG/CtEG9mixF7nfiSNKFv45KWdvgyB4U6+H2/jhDPx5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJ3qvV13LeGThmlhMFZd65KFBNUMB8GA1UdIwQY
MBaAFKtkya5b4mQKX9aUWGpwTKNMIIe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTVjYmMtZTQzZC00MGNiLTg0NGYt
MzFjNTEzN2VjMzhhLzEvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNTVjYmMtZTQzZC00MGNiLTg0NGYtMzFjNTEzN2VjMzhh
LzEvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2CnWU0B
5Nv4fXqt861vQr9C71wVYZyW2cuyyRDoXMnnt+Q75JQokUNraXM4cvLo/cTDMcFY
2BNznDBJuqmVv9ANHcmJkVDfGA8CrM2MP9q2aqdOpaT8am2g+dvWbu8iCh5uI4fS
zCSJkh/vw1TvMw7+l/EpSduw20DhLPzfCJGOpAWQj8lk84s47LR8f+VMaRIqjfkP
HqhYSgDtSymCUlFcoFROiUgxNgD9G+iwg1oc+uXNjk6MEckqIFJ0Dce0RhQ5NY07
AEiezG8U33Tcc6yw5HY0AkpWP/bOsivUFVKld4lqwlMchPmRtgR1GCRjKEN6SW6d
346k/5Lk2ukS0g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:17:45 2025 by rpki-client