Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: 2U6qpGaVYSSes6b1M6bJuRk2DuVs9S5KG1M8xshEgEM=
Subject key identifier: 4E:A4:10:30:B5:B7:11:E6:DC:81:63:20:1A:73:33:4D:4F:8C:DF:14
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 019658DD687D1B0B00EC444D71FF5C04E5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 15:00:27 +0000
Manifest this update: Mon 21 Apr 2025 15:00:27 +0000
Manifest next update: Tue 22 Apr 2025 15:00:27 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: RmQwYXj+9ps10RCxxw/yugTlTsLabEdGieP+FGoab3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:68:7d:1b:0b:00:ec:44:4d:71:ff:5c:04:e5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Apr 21 15:00:27 2025 GMT
Not After : Apr 22 15:00:27 2025 GMT
Subject: CN=4ea41030b5b711e6dc8163201a73334d4f8cdf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:92:d6:1e:28:ae:f3:4c:d2:bf:23:02:83:
54:d7:73:55:f9:60:54:56:a5:20:43:e0:52:df:b0:
14:8d:ba:49:ce:ec:89:54:2d:67:16:b7:93:4d:a9:
6b:67:d4:af:68:c3:b8:f5:21:da:a1:d7:0e:e8:66:
12:b1:6e:e0:55:b9:d3:ca:a0:09:3d:70:7e:72:ca:
0b:0a:34:de:33:4e:65:92:23:a6:05:7b:2b:64:97:
d3:6a:db:c9:10:bb:2e:a8:44:2e:31:22:ad:6e:07:
5e:6e:0d:71:c7:82:fa:ed:e6:b3:dc:b7:d2:c4:5d:
3d:cc:45:44:f1:f6:b7:5a:98:6b:0c:38:7d:22:66:
e8:2b:5c:7f:63:39:05:8e:8c:f9:ef:00:8e:69:69:
2b:e2:c2:76:4a:94:89:aa:4b:69:d9:89:30:b4:e2:
d5:5c:75:4d:a6:a6:f7:63:42:1f:a5:f9:c7:c8:99:
ea:68:6d:64:87:d8:ae:fa:6c:ed:4b:ab:ff:39:1d:
39:96:09:a1:56:2e:3a:d6:a7:38:1a:79:ad:73:c5:
6d:de:ab:f4:f3:1a:7b:e6:65:40:f1:fb:10:e8:bc:
8f:de:77:7f:56:a5:3e:0b:ee:68:99:52:e6:63:0b:
2e:ee:d2:97:dc:f0:cd:c5:3a:38:4a:bc:b2:fc:8b:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A4:10:30:B5:B7:11:E6:DC:81:63:20:1A:73:33:4D:4F:8C:DF:14
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:5f:d7:b0:ae:1e:97:3e:fa:8f:2f:8c:1f:59:fd:b6:b0:
53:06:31:ae:76:0a:80:2f:f9:9f:4d:e6:56:e5:41:c4:a5:61:
7f:6b:e4:39:60:2c:be:3b:3e:2d:07:8b:24:29:82:61:0f:a2:
89:a5:6c:f5:d2:0e:d5:cb:25:4b:a4:88:02:75:de:23:d0:7a:
19:60:83:91:79:fe:42:e9:bc:82:f9:59:d0:f0:b6:00:0a:62:
56:94:90:02:3a:d1:b1:5d:0c:6c:4e:9d:36:1c:69:ff:cd:47:
01:fb:3c:0e:10:1c:c4:0b:f2:6f:15:7a:3d:b9:71:f5:63:9b:
82:5b:fe:c5:7d:92:9b:63:f6:dc:1e:02:2c:ce:cc:e3:33:ba:
dc:c3:58:0a:65:69:2d:20:a6:d8:e2:35:53:cc:4f:7c:61:98:
35:94:1a:71:15:50:f6:37:ab:ed:99:8c:ea:89:39:9c:ff:1d:
3b:bd:6c:3b:3e:bc:74:83:cd:c0:8a:be:b5:7a:ac:6c:eb:a8:
a4:69:f7:18:77:73:1b:64:e3:31:9d:23:2e:89:f6:14:8e:2f:
14:65:f3:34:f8:6c:38:49:9c:2d:39:5b:9b:18:b8:93:79:ba:
2c:03:c4:af:16:d7:de:3a:2e:01:85:02:49:b7:c1:44:b2:d2:
1a:33:69:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZY3Wh9GwsA7ERNcf9cBOWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMmE1OGM2OTdhMTQ0OTk3NmIwZDExZDZmMTI2MDI1ZTE0
MDg5YzYwHhcNMjUwNDIxMTUwMDI3WhcNMjUwNDIyMTUwMDI3WjAzMTEwLwYDVQQD
Eyg0ZWE0MTAzMGI1YjcxMWU2ZGM4MTYzMjAxYTczMzM0ZDRmOGNkZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33eS1h4orvNM0r8jAoNU13NV+WBU
VqUgQ+BS37AUjbpJzuyJVC1nFreTTalrZ9SvaMO49SHaodcO6GYSsW7gVbnTyqAJ
PXB+csoLCjTeM05lkiOmBXsrZJfTatvJELsuqEQuMSKtbgdebg1xx4L67eaz3LfS
xF09zEVE8fa3WphrDDh9ImboK1x/YzkFjoz57wCOaWkr4sJ2SpSJqktp2YkwtOLV
XHVNpqb3Y0IfpfnHyJnqaG1kh9iu+mztS6v/OR05lgmhVi461qc4Gnmtc8Vt3qv0
8xp75mVA8fsQ6LyP3nd/VqU+C+5omVLmYwsu7tKX3PDNxTo4Sryy/Is42QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6kEDC1txHm3IFjIBpzM01PjN8UMB8GA1UdIwQY
MBaAFKoqWMaXoUSZdrDRHW8SYCXhQInGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgt
YmU2MjJjMzEzMmRmLzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8zMTQyYTUtZDkyZC00ZDA2LTgyMjgtYmU2MjJjMzEzMmRm
LzEvcWlwWXhwZWhSSmwyc05FZGJ4SmdKZUZBaWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIpf17Cu
Hpc++o8vjB9Z/bawUwYxrnYKgC/5n03mVuVBxKVhf2vkOWAsvjs+LQeLJCmCYQ+i
iaVs9dIO1cslS6SIAnXeI9B6GWCDkXn+Qum8gvlZ0PC2AApiVpSQAjrRsV0MbE6d
Nhxp/81HAfs8DhAcxAvybxV6Pblx9WObglv+xX2Sm2P23B4CLM7M4zO63MNYCmVp
LSCm2OI1U8xPfGGYNZQacRVQ9jer7ZmM6ok5nP8dO71sOz68dIPNwIq+tXqsbOuo
pGn3GHdzG2TjMZ0jLon2FI4vFGXzNPhsOEmcLTlbmxi4k3m6LAPErxbX3jouAYUC
SbfBRLLSGjNpdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:08 2025 by rpki-client