Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: ebFC77WVTcmKn2CfPufLUQ9kWfiT0PHh+izHPj3BSrc=
Subject key identifier: B7:9D:45:C5:3D:51:41:BE:25:54:F8:BA:D8:C6:E0:74:A3:95:DA:7A
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 019659B95E647203C04A80BC04403B7443D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0A75
Signing time: Mon 21 Apr 2025 19:00:42 +0000
Manifest this update: Mon 21 Apr 2025 19:00:42 +0000
Manifest next update: Tue 22 Apr 2025 19:00:42 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: HRPzGma76TeO8ghk+iGrjmDMrGk1qjUTL/mk+iX2Mbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:5e:64:72:03:c0:4a:80:bc:04:40:3b:74:43:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Apr 21 19:00:42 2025 GMT
Not After : Apr 22 19:00:42 2025 GMT
Subject: CN=b79d45c53d5141be2554f8bad8c6e074a395da7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:a7:58:1f:ed:ef:1e:1c:8b:39:be:68:03:
3a:42:c0:f8:e9:26:96:3b:da:4a:99:a2:bb:86:7b:
af:6c:45:0e:05:9a:4f:2b:55:58:dc:5e:86:85:94:
a3:52:83:50:d6:7b:6b:2f:a0:37:78:5b:d0:59:09:
2a:bc:92:c4:b8:9b:c0:ee:2f:2a:82:43:7b:be:30:
0c:47:20:35:81:98:fd:22:f9:1d:92:7d:8b:e3:af:
d0:eb:28:7b:7b:cf:35:ce:41:8b:5f:0b:59:9f:af:
e1:63:58:7d:03:4d:b0:61:b1:38:b4:c7:d1:ac:9a:
dd:eb:ed:81:2d:e1:fa:c1:2f:4d:bf:2e:d8:18:6c:
f8:29:b5:3a:9d:17:09:a8:7f:9e:4d:3f:e2:a9:4c:
db:6b:88:c8:d6:4b:c2:d8:ff:25:f7:7f:c4:a7:24:
a7:56:a8:80:3f:4c:f4:60:5f:c6:d1:86:8d:49:43:
93:3e:49:11:5c:90:54:cb:8f:8b:5a:f0:fc:4e:4e:
b7:f5:42:5f:53:af:c9:12:9e:a3:e6:54:b9:d8:3a:
7c:ff:85:4a:f0:05:e3:5c:f4:35:66:67:83:ad:9e:
65:e9:d8:e7:16:ab:36:26:8b:4d:4e:f7:8b:bc:27:
0a:f3:b6:04:fd:fa:1b:15:56:12:92:00:47:74:47:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:45:C5:3D:51:41:BE:25:54:F8:BA:D8:C6:E0:74:A3:95:DA:7A
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:b7:b4:db:54:19:d6:5e:81:9a:cd:4e:63:27:b8:f7:41:
0b:2c:5f:3f:42:78:d4:cd:24:31:3b:88:c3:ab:c5:cf:42:c5:
a0:88:52:35:17:18:e7:e1:63:56:d1:11:67:3f:5b:43:d3:af:
41:37:64:fa:dd:27:70:6e:95:86:14:b5:03:5e:4a:95:42:19:
71:8e:72:d9:1b:b1:25:28:5a:fb:d3:d5:4d:0b:86:0e:8e:a3:
05:2b:24:2b:8f:cc:b8:b6:03:ab:e4:c0:7e:6a:57:dc:b3:25:
ed:7b:83:27:47:16:74:dc:ae:42:ce:84:21:2c:2c:f5:ae:9b:
ef:87:df:fa:20:4c:9c:b1:ba:19:57:c3:d7:ca:c3:2b:10:b8:
df:40:22:9a:28:f4:c6:e7:a0:b5:5a:47:bb:46:ce:c5:81:96:
c3:ab:c2:ee:53:46:6f:47:c9:4e:ad:a0:3f:32:dc:b7:71:e0:
b1:25:25:9b:8d:b2:51:8f:a1:80:73:29:d2:ef:b7:06:78:73:
56:73:44:73:d5:32:15:9e:e8:2c:c5:0a:62:9e:de:e9:2f:8d:
ef:0f:56:93:ea:cf:36:cf:2a:a1:92:93:58:84:3e:1d:e7:d6:
3a:b9:cf:35:bb:49:5e:a2:18:b0:a2:a9:23:0a:40:b8:ce:e0:
d5:d7:9b:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZuV5kcgPASoC8BEA7dEPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTI5Y2IzNDNiZGYzY2YyMDRjNDA1YWYwYTU1MzNlYTRi
MDkzM2MwHhcNMjUwNDIxMTkwMDQyWhcNMjUwNDIyMTkwMDQyWjAzMTEwLwYDVQQD
EyhiNzlkNDVjNTNkNTE0MWJlMjU1NGY4YmFkOGM2ZTA3NGEzOTVkYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe2nWB/t7x4cizm+aAM6QsD46SaW
O9pKmaK7hnuvbEUOBZpPK1VY3F6GhZSjUoNQ1ntrL6A3eFvQWQkqvJLEuJvA7i8q
gkN7vjAMRyA1gZj9Ivkdkn2L46/Q6yh7e881zkGLXwtZn6/hY1h9A02wYbE4tMfR
rJrd6+2BLeH6wS9Nvy7YGGz4KbU6nRcJqH+eTT/iqUzba4jI1kvC2P8l93/EpySn
VqiAP0z0YF/G0YaNSUOTPkkRXJBUy4+LWvD8Tk639UJfU6/JEp6j5lS52Dp8/4VK
8AXjXPQ1ZmeDrZ5l6djnFqs2JotNTveLvCcK87YE/fobFVYSkgBHdEe5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLedRcU9UUG+JVT4utjG4HSjldp6MB8GA1UdIwQY
MBaAFKiSnLNDvfPPIExAWvClUz6ksJM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjIt
NTlkNDRlZjdlNGZmLzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjItNTlkNDRlZjdlNGZm
LzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXu3tNtU
GdZegZrNTmMnuPdBCyxfP0J41M0kMTuIw6vFz0LFoIhSNRcY5+FjVtERZz9bQ9Ov
QTdk+t0ncG6VhhS1A15KlUIZcY5y2RuxJSha+9PVTQuGDo6jBSskK4/MuLYDq+TA
fmpX3LMl7XuDJ0cWdNyuQs6EISws9a6b74ff+iBMnLG6GVfD18rDKxC430Aimij0
xuegtVpHu0bOxYGWw6vC7lNGb0fJTq2gPzLct3HgsSUlm42yUY+hgHMp0u+3Bnhz
VnNEc9UyFZ7oLMUKYp7e6S+N7w9Wk+rPNs8qoZKTWIQ+HefWOrnPNbtJXqIYsKKp
IwpAuM7g1deblw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:33:22 2025 by rpki-client