Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: UEfhzrBG+zJnthzYWsGGVCOboN6a52beHYbaWGSSD4E=
Subject key identifier: 14:64:E0:E1:AC:64:40:C0:D8:DD:5E:DC:15:F4:57:90:64:B1:01:83
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0196090B37E76588F0866BF7E4A0093A5887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 14E4
Signing time: Sun 06 Apr 2025 03:00:52 +0000
Manifest this update: Sun 06 Apr 2025 03:00:52 +0000
Manifest next update: Mon 07 Apr 2025 03:00:52 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: N4lb2G8VDW2BnHkxaz/KaCGU+OwthI54C8Hue+J4qHE=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:0b:37:e7:65:88:f0:86:6b:f7:e4:a0:09:3a:58:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Apr 6 03:00:52 2025 GMT
Not After : Apr 7 03:00:52 2025 GMT
Subject: CN=1464e0e1ac6440c0d8dd5edc15f4579064b10183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:2f:41:74:68:02:2d:34:82:d1:88:3e:ac:
32:3a:1d:e4:e3:44:fd:0e:1c:d4:1b:c8:c4:9d:5c:
08:c7:f2:fa:c8:73:4e:06:cc:5f:ed:a2:51:49:f3:
f6:52:37:2a:91:b8:5c:b0:87:57:3e:d7:dd:00:c3:
51:85:12:a9:97:0f:85:8e:b1:9e:71:a4:3a:0c:8f:
74:5c:6e:a8:c3:cb:20:6f:30:d8:17:5d:fc:33:0d:
8a:6e:09:1a:4e:81:51:e8:2c:76:81:8a:5f:45:2d:
e6:e6:37:03:85:98:d3:76:ab:aa:7d:d0:8e:5d:76:
36:a0:57:b8:93:31:e3:b4:02:91:61:25:06:48:1a:
bb:a5:27:40:e0:e1:7c:38:df:28:07:17:04:40:6e:
60:ac:86:0d:1a:a8:69:00:25:10:59:45:07:16:a7:
80:7e:0e:6c:6c:da:0c:25:08:4e:05:44:55:fc:e7:
b0:a2:79:93:ea:71:f7:a2:b2:91:95:ca:7c:b6:ed:
a5:19:02:0b:0b:67:d3:88:da:79:27:6a:77:2e:28:
9b:b3:eb:cc:bb:a9:52:04:23:a9:f0:20:a2:3c:26:
8c:a6:ae:a4:dd:ff:f9:3e:78:2b:7f:8d:e5:60:5c:
54:63:5e:67:70:36:e8:b1:1e:c0:81:64:e0:3d:f0:
fc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:E0:E1:AC:64:40:C0:D8:DD:5E:DC:15:F4:57:90:64:B1:01:83
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:85:12:ef:00:75:34:5d:7c:73:e1:a3:f5:bb:62:a9:f7:
7a:6c:d1:48:c3:17:61:5c:a0:93:8e:41:4f:28:9b:2c:27:c5:
41:ce:ed:e2:07:ec:06:2b:5a:40:63:a8:61:2b:52:d8:fa:a5:
21:64:39:a4:0f:59:89:70:3c:be:4e:f6:82:fe:a8:53:35:65:
82:11:d7:6a:57:b1:ee:a2:20:bd:2b:f7:29:99:39:8c:bb:3b:
2e:6f:6a:ee:e3:ff:58:65:02:c7:55:c6:2c:82:a7:43:a4:2f:
42:8d:ae:dc:55:18:67:c9:76:79:c8:02:c2:eb:db:41:d0:fd:
f7:8b:0e:4e:f9:4b:df:79:98:db:7a:15:c6:bb:6a:60:ef:a8:
63:0a:c0:35:80:bc:d6:cf:50:44:d8:46:e7:d3:f4:87:d7:d5:
f2:09:a9:6f:c2:8b:fb:32:f8:a6:83:e7:a5:bc:6d:ea:27:a6:
2f:c8:a0:87:72:ad:23:c5:98:07:6d:a6:16:0c:0d:f0:64:8d:
ea:79:d7:39:7b:20:4a:36:a5:f3:e1:1e:bd:51:a2:11:1c:18:
8c:f0:7e:b4:7d:a7:18:73:71:89:86:09:ca:bc:13:15:b1:b0:
56:f3:e2:06:e1:6e:74:19:eb:7b:a0:12:92:4f:8a:ac:70:e3:
eb:9b:15:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYJCzfnZYjwhmv35KAJOliHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjUwNDA2MDMwMDUyWhcNMjUwNDA3MDMwMDUyWjAzMTEwLwYDVQQD
EygxNDY0ZTBlMWFjNjQ0MGMwZDhkZDVlZGMxNWY0NTc5MDY0YjEwMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX8vQXRoAi00gtGIPqwyOh3k40T9
DhzUG8jEnVwIx/L6yHNOBsxf7aJRSfP2UjcqkbhcsIdXPtfdAMNRhRKplw+FjrGe
caQ6DI90XG6ow8sgbzDYF138Mw2KbgkaToFR6Cx2gYpfRS3m5jcDhZjTdquqfdCO
XXY2oFe4kzHjtAKRYSUGSBq7pSdA4OF8ON8oBxcEQG5grIYNGqhpACUQWUUHFqeA
fg5sbNoMJQhOBURV/OewonmT6nH3orKRlcp8tu2lGQILC2fTiNp5J2p3Liibs+vM
u6lSBCOp8CCiPCaMpq6k3f/5Pngrf43lYFxUY15ncDbosR7AgWTgPfD8GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRk4OGsZEDA2N1e3BX0V5BksQGDMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDqFEu8A
dTRdfHPho/W7Yqn3emzRSMMXYVygk45BTyibLCfFQc7t4gfsBitaQGOoYStS2Pql
IWQ5pA9ZiXA8vk72gv6oUzVlghHXalex7qIgvSv3KZk5jLs7Lm9q7uP/WGUCx1XG
LIKnQ6QvQo2u3FUYZ8l2ecgCwuvbQdD994sOTvlL33mY23oVxrtqYO+oYwrANYC8
1s9QRNhG59P0h9fV8gmpb8KL+zL4poPnpbxt6iemL8igh3KtI8WYB22mFgwN8GSN
6nnXOXsgSjal8+EevVGiERwYjPB+tH2nGHNxiYYJyrwTFbGwVvPiBuFudBnre6AS
kk+KrHDj65sVjQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:27:04 2025 by rpki-client