Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: GxBHuf3ZOwSXe82rw4Z0fogCGSOH85hUsKmp2WB7poY=
Subject key identifier: 82:4A:C0:7B:01:F2:77:4A:F1:B5:78:A1:E7:55:EE:AC:10:B5:D5:15
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019648C58BDB338F80A6579E904FD1A19F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 0465
Signing time: Fri 18 Apr 2025 12:00:27 +0000
Manifest this update: Fri 18 Apr 2025 12:00:27 +0000
Manifest next update: Sat 19 Apr 2025 12:00:27 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: VAcY3Fnm5xECLts29WjvzQiIiBP/F1WvVEIEOoPmTLY=)
2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:8b:db:33:8f:80:a6:57:9e:90:4f:d1:a1:9f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Apr 18 12:00:27 2025 GMT
Not After : Apr 19 12:00:27 2025 GMT
Subject: CN=824ac07b01f2774af1b578a1e755eeac10b5d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ee:cc:69:b9:10:38:e5:b0:13:68:b0:7f:fe:
c8:14:f1:f6:d3:d3:4c:47:23:ea:81:41:5f:97:69:
e2:1c:2f:2a:9d:c2:8c:90:6e:d4:7b:b2:49:ea:43:
98:11:26:dc:65:bb:63:3e:d2:fe:9e:fa:e4:77:5a:
74:4f:a2:f1:cb:42:55:5c:23:8d:cf:0d:b1:a6:38:
f7:dc:66:95:40:de:8b:33:12:b0:74:be:6d:a4:9d:
69:ba:91:83:ab:bc:65:2c:df:46:7e:e0:85:e9:04:
4d:db:93:07:13:31:e1:a1:84:0d:a1:d1:f1:ac:87:
77:3c:2f:c9:38:f6:5f:ee:00:e3:07:98:40:6d:05:
77:77:f7:ad:ab:f6:15:d7:82:e5:74:98:ed:3e:13:
d8:0f:d9:af:8e:3a:72:1e:8b:bc:21:50:c6:00:cd:
67:87:84:66:e5:f6:e2:c3:f7:a3:96:6d:7a:b8:20:
73:b9:40:a9:ce:ad:09:4f:26:f9:61:fd:a1:e9:d0:
58:52:47:f0:5f:e4:3c:60:56:65:06:94:b1:79:60:
16:77:04:32:06:e0:de:ea:d6:fe:a5:39:f1:6d:dc:
c2:30:db:4f:81:4c:2f:6b:91:bf:97:db:33:64:9e:
bf:5f:9f:6e:c8:ea:17:67:e9:11:94:2c:55:22:e2:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4A:C0:7B:01:F2:77:4A:F1:B5:78:A1:E7:55:EE:AC:10:B5:D5:15
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:46:fd:01:6f:b5:a5:26:9a:00:0a:15:39:3d:1c:4d:ff:e1:
c8:6b:7f:02:b3:b2:7d:64:9b:b9:71:93:2b:e3:af:72:3c:c3:
b1:dc:a5:4a:89:f6:eb:fe:6d:3e:d7:fc:dc:c4:e3:90:ce:ba:
0a:27:5b:02:45:b4:78:a4:66:bc:c8:bf:52:0e:35:44:14:d8:
d0:bf:0e:7c:49:cc:c6:bd:c0:21:23:44:4a:ea:94:06:73:47:
a3:cc:92:32:ef:ef:84:8a:3b:38:22:47:11:3c:af:e6:ce:0f:
b9:f6:0f:f9:07:72:ac:f0:72:f7:71:a8:cd:13:b6:73:93:7c:
8d:53:9f:0b:39:bd:81:96:46:9c:23:a0:4d:f8:92:9f:92:68:
3b:6f:e3:08:18:74:f1:db:d0:9f:6e:a0:e1:9f:91:13:cc:28:
b4:24:e0:92:a4:89:e1:d1:cd:8b:60:31:dd:75:44:ed:b4:37:
f2:0b:34:ac:3e:17:07:c7:b5:67:78:8f:51:6b:82:51:c3:f2:
0b:71:3f:31:ae:2b:87:10:5f:af:13:4c:fa:c7:34:8f:c3:a9:
05:b8:60:8d:19:36:d5:b8:3c:8d:cb:e6:a5:57:6e:6a:ad:63:
6b:dd:de:b2:35:dd:8f:8b:7b:a5:f2:20:48:b6:4d:96:fe:26:
6e:19:b9:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIxYvbM4+ApleekE/RoZ9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMGVjNWZhNjhjZjk5ZWUzZGJiZDE5NDllODIwNDQ1MDNh
MWRmNzIwHhcNMjUwNDE4MTIwMDI3WhcNMjUwNDE5MTIwMDI3WjAzMTEwLwYDVQQD
Eyg4MjRhYzA3YjAxZjI3NzRhZjFiNTc4YTFlNzU1ZWVhYzEwYjVkNTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu7MabkQOOWwE2iwf/7IFPH209NM
RyPqgUFfl2niHC8qncKMkG7Ue7JJ6kOYESbcZbtjPtL+nvrkd1p0T6Lxy0JVXCON
zw2xpjj33GaVQN6LMxKwdL5tpJ1pupGDq7xlLN9GfuCF6QRN25MHEzHhoYQNodHx
rId3PC/JOPZf7gDjB5hAbQV3d/etq/YV14LldJjtPhPYD9mvjjpyHou8IVDGAM1n
h4Rm5fbiw/ejlm16uCBzuUCpzq0JTyb5Yf2h6dBYUkfwX+Q8YFZlBpSxeWAWdwQy
BuDe6tb+pTnxbdzCMNtPgUwva5G/l9szZJ6/X59uyOoXZ+kRlCxVIuL34wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJKwHsB8ndK8bV4oedV7qwQtdUVMB8GA1UdIwQY
MBaAFHEOxfpoz5nuPbvRlJ6CBEUDod9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODct
OTI3MjJlNGFiMDQ1LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODctOTI3MjJlNGFiMDQ1
LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkb9AW+1
pSaaAAoVOT0cTf/hyGt/ArOyfWSbuXGTK+OvcjzDsdylSon26/5tPtf83MTjkM66
CidbAkW0eKRmvMi/Ug41RBTY0L8OfEnMxr3AISNESuqUBnNHo8ySMu/vhIo7OCJH
ETyv5s4PufYP+QdyrPBy93GozRO2c5N8jVOfCzm9gZZGnCOgTfiSn5JoO2/jCBh0
8dvQn26g4Z+RE8wotCTgkqSJ4dHNi2Ax3XVE7bQ38gs0rD4XB8e1Z3iPUWuCUcPy
C3E/Ma4rhxBfrxNM+sc0j8OpBbhgjRk21bg8jcvmpVduaq1ja93esjXdj4t7pfIg
SLZNlv4mbhm5mQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:04:08 2025 by rpki-client