Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: CwsbFHp2EXMyboI0qryTQCMdTSREmt2mfs/fjjwLjXc=
Subject key identifier: 00:8D:E9:0E:53:E6:D6:69:F3:14:2C:9D:57:20:55:40:5E:AF:37:6D
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 01963C8ADDB4B1BF3A19356BEAACA90C3407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 03:00:55 +0000
Manifest this update: Wed 16 Apr 2025 03:00:55 +0000
Manifest next update: Thu 17 Apr 2025 03:00:55 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: f5DvxTFisEBFGPMFMoZzLXmqD7Db4AqabIkrOHF5igY=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8a:dd:b4:b1:bf:3a:19:35:6b:ea:ac:a9:0c:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Apr 16 03:00:55 2025 GMT
Not After : Apr 17 03:00:55 2025 GMT
Subject: CN=008de90e53e6d669f3142c9d572055405eaf376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:75:f0:8a:f1:da:57:e4:9a:c2:41:55:bd:
d0:65:47:24:41:ef:78:0f:51:ad:bb:6f:d0:a5:72:
0a:15:2e:1b:46:b9:d4:ee:9f:92:ad:71:72:71:a7:
b7:68:1f:6c:fe:fd:07:6e:49:f5:67:84:1e:aa:eb:
93:6d:13:3b:1b:7d:b2:4c:ac:2f:ce:28:e3:00:17:
e8:0c:2e:c0:ab:9b:68:e1:c6:d2:9c:07:ea:82:8e:
c3:7c:6c:7c:f2:8c:a5:8c:f7:2b:0b:19:d6:e0:a5:
09:a7:ba:f0:3d:a4:6f:53:e6:5a:29:01:ca:5a:d6:
80:66:e8:bd:36:9a:1e:81:31:39:47:05:2c:0a:33:
08:28:65:a8:ea:da:96:db:24:60:c4:19:6a:5a:0d:
f1:7a:5d:55:58:fa:ac:a9:a2:a6:23:7a:4b:7c:2a:
67:7d:29:42:5b:3b:71:56:7c:0b:42:0d:41:f8:08:
d4:9f:59:7d:71:05:4d:10:7d:f4:f4:56:f9:e5:69:
cf:bf:c3:6b:82:b4:83:9c:f1:ab:51:2c:18:ae:d5:
ee:49:20:1d:37:59:dd:d0:4e:ca:70:ca:6c:65:97:
25:db:4d:e6:5d:67:36:16:1c:85:7e:3c:ea:ef:80:
a5:bf:38:c5:73:40:bc:16:ef:be:e7:c8:27:cb:0f:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:E9:0E:53:E6:D6:69:F3:14:2C:9D:57:20:55:40:5E:AF:37:6D
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:41:cf:7f:de:f6:42:30:04:28:e6:47:0b:98:15:9b:28:f9:
68:1c:21:ad:f8:03:e8:75:34:3d:75:5f:ac:82:bc:a8:99:ee:
1c:21:3d:01:f1:d8:b1:f9:2e:b8:67:60:e8:52:35:54:30:f6:
77:06:37:ba:da:9d:22:7f:d5:f9:72:19:3b:f0:eb:09:b4:4b:
a3:cd:f0:5b:ae:9f:ad:18:58:57:14:1c:81:fd:49:09:af:0e:
54:94:18:53:c2:59:e2:aa:5e:79:7c:f6:c1:9b:cc:d6:3e:4b:
99:4d:0b:f9:3a:e0:ad:99:16:8b:50:c1:68:63:28:cf:bb:ab:
4e:9a:73:f4:fc:7e:07:31:3f:f5:18:40:9f:05:d5:60:83:39:
bf:ac:a2:67:63:97:45:ab:28:bc:2a:12:ba:6f:b5:4a:6c:ec:
74:5d:92:cb:0a:c1:f9:7d:e0:6b:c3:49:cd:93:90:38:13:ba:
78:da:d3:83:ae:00:5e:45:27:68:9b:45:ab:58:58:0f:d8:66:
56:40:f8:53:0b:e6:bf:1a:ae:88:3d:29:7d:7f:e6:c3:e1:c7:
d8:93:2c:94:52:9b:4c:9f:ca:e1:27:22:0e:b9:13:eb:a9:15:
25:88:ee:ac:cb:7d:56:e4:17:28:53:f0:f8:cc:fd:02:04:97:
06:4c:3f:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8it20sb86GTVr6qypDDQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2
NTA2ODkwHhcNMjUwNDE2MDMwMDU1WhcNMjUwNDE3MDMwMDU1WjAzMTEwLwYDVQQD
EygwMDhkZTkwZTUzZTZkNjY5ZjMxNDJjOWQ1NzIwNTU0MDVlYWYzNzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P518Irx2lfkmsJBVb3QZUckQe94
D1Gtu2/QpXIKFS4bRrnU7p+SrXFycae3aB9s/v0Hbkn1Z4QequuTbRM7G32yTKwv
zijjABfoDC7Aq5to4cbSnAfqgo7DfGx88oyljPcrCxnW4KUJp7rwPaRvU+ZaKQHK
WtaAZui9NpoegTE5RwUsCjMIKGWo6tqW2yRgxBlqWg3xel1VWPqsqaKmI3pLfCpn
fSlCWztxVnwLQg1B+AjUn1l9cQVNEH309Fb55WnPv8NrgrSDnPGrUSwYrtXuSSAd
N1nd0E7KcMpsZZcl203mXWc2FhyFfjzq74ClvzjFc0C8Fu++58gnyw8ieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACN6Q5T5tZp8xQsnVcgVUBerzdtMB8GA1UdIwQY
MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct
MWY4NTZjMDkzYWU4LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4
LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0HPf972
QjAEKOZHC5gVmyj5aBwhrfgD6HU0PXVfrIK8qJnuHCE9AfHYsfkuuGdg6FI1VDD2
dwY3utqdIn/V+XIZO/DrCbRLo83wW66frRhYVxQcgf1JCa8OVJQYU8JZ4qpeeXz2
wZvM1j5LmU0L+TrgrZkWi1DBaGMoz7urTppz9Px+BzE/9RhAnwXVYIM5v6yiZ2OX
RasovCoSum+1SmzsdF2SywrB+X3ga8NJzZOQOBO6eNrTg64AXkUnaJtFq1hYD9hm
VkD4UwvmvxquiD0pfX/mw+HH2JMslFKbTJ/K4SciDrkT66kVJYjurMt9VuQXKFPw
+Mz9AgSXBkw/mA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 06:50:35 2025 by rpki-client