Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: gKQLvejLBqMG6xuvGLwu4NvleUBd8+4Xu8EMF8xKwtA=
Subject key identifier: 72:1E:C3:4E:18:72:96:E8:31:01:8B:68:94:77:25:AA:8B:F7:FE:93
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 019645201ABD28653092F6083DEA48FC92F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0B76
Signing time: Thu 17 Apr 2025 19:00:53 +0000
Manifest this update: Thu 17 Apr 2025 19:00:53 +0000
Manifest next update: Fri 18 Apr 2025 19:00:53 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: JvvtpvgAbPqhbikfrdz8jV3Sd+t6OeEaCQR6VdI3H28=)
2: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (hash: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:20:1a:bd:28:65:30:92:f6:08:3d:ea:48:fc:92:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Apr 17 19:00:53 2025 GMT
Not After : Apr 18 19:00:53 2025 GMT
Subject: CN=721ec34e187296e831018b68947725aa8bf7fe93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:f0:3e:85:3a:70:df:5a:f4:75:28:ca:9f:
e3:54:04:f9:58:b8:10:69:67:c3:de:0c:77:e5:fd:
b4:e1:6e:bb:13:ac:d8:25:53:6e:33:cc:00:fa:7f:
cc:d1:d0:57:51:ed:b6:8f:9a:87:97:e8:56:e4:54:
cb:24:53:1a:05:ee:cf:86:02:48:1a:25:b3:06:58:
c5:e0:ac:a1:33:a9:d3:55:1c:23:55:c2:9e:1c:78:
39:75:22:e4:71:8e:c2:8b:3f:be:0a:c6:c9:6d:3a:
fa:72:ba:1a:c6:a3:83:15:9e:79:cd:00:88:87:7a:
0b:25:12:84:56:26:53:d7:32:20:09:68:9d:05:40:
b0:89:75:59:9d:3e:7e:49:3e:fb:c3:d1:aa:86:2d:
ef:08:49:75:ac:83:96:b3:ce:ab:8f:b3:f9:74:8a:
1c:f6:ae:47:68:ee:24:c2:b4:1b:a9:2d:01:9a:7a:
d1:2a:01:ed:cd:a8:d6:eb:ba:fd:f4:35:fb:46:40:
73:82:14:d6:b2:8f:12:1f:80:9a:96:74:35:0d:a8:
eb:eb:14:23:6d:70:27:8c:6b:cb:61:e5:96:2f:35:
c7:2d:c2:84:d8:b1:83:3a:cd:d8:0a:0b:3f:96:d4:
7c:98:ad:f9:a8:bb:95:65:46:e2:58:4f:c6:cf:5f:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1E:C3:4E:18:72:96:E8:31:01:8B:68:94:77:25:AA:8B:F7:FE:93
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e9:6f:1a:ce:6f:0b:6b:c1:03:d2:0c:3b:e8:cc:0f:2c:65:
02:e6:3b:79:c4:7e:6d:6b:f4:3e:d4:6d:2f:42:17:18:94:92:
a5:55:65:d6:1d:2b:63:43:44:06:0d:26:9e:d5:f5:96:bd:d6:
4b:2b:2d:7c:94:e4:c6:1a:02:a2:ec:f2:62:03:be:14:10:74:
1b:80:42:c6:87:d9:25:29:26:ac:0f:8e:f3:f3:89:8e:22:43:
7c:2b:cc:93:17:8a:54:8b:82:17:01:41:6d:65:72:45:e9:4a:
81:05:a2:d4:66:d6:e4:cc:16:c9:0e:26:b6:64:6e:23:b1:a3:
1f:35:bf:58:a2:29:f3:d5:d3:91:10:80:3d:cd:4d:ff:6e:ff:
3d:83:6a:eb:f0:6d:27:fd:19:44:89:17:c9:d8:8d:82:7d:46:
2f:69:99:4f:82:d3:39:2b:c0:5d:85:d0:34:61:06:fc:c6:3d:
62:da:6f:89:ad:c5:e6:7b:6d:40:95:45:a9:7d:8a:94:e0:2f:
af:f3:18:1b:4b:79:2c:eb:90:cb:61:da:89:38:14:74:d9:ca:
d1:65:c7:6a:bb:c2:3a:b8:12:4c:a2:ad:e6:58:98:29:14:b4:
92:6f:14:5d:18:5f:94:cc:7d:d7:5f:1a:e9:42:be:f4:ca:5c:
36:03:00:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZFIBq9KGUwkvYIPepI/JL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMDU3NmY4NjNkZjdlMzIxYjFjYTUwNTBjZTJjMmRkMmZj
YWRiMDkwHhcNMjUwNDE3MTkwMDUzWhcNMjUwNDE4MTkwMDUzWjAzMTEwLwYDVQQD
Eyg3MjFlYzM0ZTE4NzI5NmU4MzEwMThiNjg5NDc3MjVhYThiZjdmZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKjwPoU6cN9a9HUoyp/jVAT5WLgQ
aWfD3gx35f204W67E6zYJVNuM8wA+n/M0dBXUe22j5qHl+hW5FTLJFMaBe7PhgJI
GiWzBljF4KyhM6nTVRwjVcKeHHg5dSLkcY7Ciz++CsbJbTr6croaxqODFZ55zQCI
h3oLJRKEViZT1zIgCWidBUCwiXVZnT5+ST77w9Gqhi3vCEl1rIOWs86rj7P5dIoc
9q5HaO4kwrQbqS0BmnrRKgHtzajW67r99DX7RkBzghTWso8SH4CalnQ1Dajr6xQj
bXAnjGvLYeWWLzXHLcKE2LGDOs3YCgs/ltR8mK35qLuVZUbiWE/Gz1/CTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIew04YcpboMQGLaJR3JaqL9/6TMB8GA1UdIwQY
MBaAFP0Fdvhj334yGxylBQziwt0vytsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEt
NDAxNmY2YjQ0NWEwLzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEtNDAxNmY2YjQ0NWEw
LzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh+lvGs5v
C2vBA9IMO+jMDyxlAuY7ecR+bWv0PtRtL0IXGJSSpVVl1h0rY0NEBg0mntX1lr3W
SystfJTkxhoCouzyYgO+FBB0G4BCxofZJSkmrA+O8/OJjiJDfCvMkxeKVIuCFwFB
bWVyRelKgQWi1GbW5MwWyQ4mtmRuI7GjHzW/WKIp89XTkRCAPc1N/27/PYNq6/Bt
J/0ZRIkXydiNgn1GL2mZT4LTOSvAXYXQNGEG/MY9Ytpvia3F5nttQJVFqX2KlOAv
r/MYG0t5LOuQy2HaiTgUdNnK0WXHarvCOrgSTKKt5liYKRS0km8UXRhflMx9118a
6UK+9MpcNgMArw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:34 2025 by rpki-client