Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: cZRCQ1HrVf+34AoHiijzCDBwfq8QJ89YJM7olgMyUCY=
Subject key identifier: 40:95:E9:FD:2A:6E:C6:8B:51:A6:0C:33:72:73:5A:0F:F4:AE:53:85
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 01964BFDC5F86627EABD1424F9412BD8DD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 03:00:44 +0000
Manifest this update: Sat 19 Apr 2025 03:00:44 +0000
Manifest next update: Sun 20 Apr 2025 03:00:44 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: O4MkHxj2aiLQH6QWkU71weGqqOxnfmso2DDIOJqmnCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:c5:f8:66:27:ea:bd:14:24:f9:41:2b:d8:dd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Apr 19 03:00:44 2025 GMT
Not After : Apr 20 03:00:44 2025 GMT
Subject: CN=4095e9fd2a6ec68b51a60c3372735a0ff4ae5385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:25:b2:e1:3e:5f:1f:7b:f4:60:b5:00:fc:
b8:ab:fe:58:82:a5:da:8d:65:65:22:67:4f:4c:80:
8d:82:f9:41:64:dd:36:fe:28:05:a2:8c:91:7c:b9:
46:69:ba:e3:0d:46:dc:a0:c8:30:c4:b9:47:96:75:
a4:f3:88:03:88:18:db:ca:06:f6:c1:49:c3:9b:bb:
79:e7:89:b3:13:5c:6e:33:ac:84:04:9a:ce:20:33:
48:a4:aa:da:f1:31:a5:d7:bd:d2:5d:ab:3f:46:92:
82:2b:49:9c:18:57:57:cc:73:4b:a1:83:72:69:0f:
18:f1:f2:b3:5a:9f:08:68:e1:60:c0:21:59:be:fb:
1f:e7:e7:6d:d1:09:2b:a9:10:be:98:5e:99:59:44:
ac:39:22:15:ad:54:9b:b2:a7:b4:eb:41:04:0a:cf:
10:a2:fd:75:4f:16:a6:c0:db:51:06:0f:92:0a:4f:
21:3d:49:61:89:62:c4:7b:99:c0:94:57:7f:eb:2c:
27:f0:92:da:09:32:48:d5:e9:df:41:7e:aa:75:f8:
74:f7:57:d1:d3:8f:c5:76:fb:d0:20:27:ba:9f:dc:
56:e9:53:9a:b4:5b:d1:79:67:35:26:f2:cc:0c:47:
20:11:08:81:4b:10:ee:8b:1b:8f:8d:9c:94:24:12:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:E9:FD:2A:6E:C6:8B:51:A6:0C:33:72:73:5A:0F:F4:AE:53:85
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:b4:cc:a3:2b:ed:45:43:b6:65:e8:4a:ea:f6:86:07:32:
42:12:16:42:3e:e9:9f:d7:8d:0c:a8:1e:b8:33:47:16:bf:89:
d6:ea:03:6d:28:24:1c:ef:d8:a4:02:c8:89:d7:0f:21:ac:56:
01:22:92:cd:51:98:e0:17:2a:47:4e:2e:16:91:e0:b7:7a:4a:
87:a4:b6:70:b1:e3:ca:ec:47:ef:d9:df:3e:b0:ac:e8:9e:90:
7c:11:8c:8a:1e:ab:0a:80:c7:2d:0d:a9:e3:97:74:8f:84:3e:
05:e9:9c:13:81:b0:5b:35:3f:c0:d6:7b:fa:14:20:59:cc:b6:
72:80:e7:52:13:ef:6a:8a:12:50:e9:d3:0d:a3:fa:1d:a2:4d:
52:88:75:03:bd:a5:df:de:a4:60:4e:c6:24:9d:ff:6a:bf:b6:
71:c2:ff:8d:d3:6f:c6:71:ca:a0:be:79:1c:86:82:e0:4f:c3:
fd:1e:9f:cf:1e:bb:ab:50:f7:2e:fd:2e:83:dc:df:ab:d9:10:
91:06:b7:2c:7d:52:2b:67:8b:80:c5:ec:df:df:d5:4b:5e:22:
e6:e0:e4:3f:59:db:7a:8f:24:0c:8c:81:c3:0c:db:e1:5c:ac:
a9:4c:0b:3e:75:aa:d5:19:69:91:0d:a3:50:a4:5f:b6:74:da:
86:bb:da:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZL/cX4ZifqvRQk+UEr2N1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4
ZjNkYmYwHhcNMjUwNDE5MDMwMDQ0WhcNMjUwNDIwMDMwMDQ0WjAzMTEwLwYDVQQD
Eyg0MDk1ZTlmZDJhNmVjNjhiNTFhNjBjMzM3MjczNWEwZmY0YWU1Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhYlsuE+Xx979GC1APy4q/5YgqXa
jWVlImdPTICNgvlBZN02/igFooyRfLlGabrjDUbcoMgwxLlHlnWk84gDiBjbygb2
wUnDm7t554mzE1xuM6yEBJrOIDNIpKra8TGl173SXas/RpKCK0mcGFdXzHNLoYNy
aQ8Y8fKzWp8IaOFgwCFZvvsf5+dt0QkrqRC+mF6ZWUSsOSIVrVSbsqe060EECs8Q
ov11TxamwNtRBg+SCk8hPUlhiWLEe5nAlFd/6ywn8JLaCTJI1enfQX6qdfh091fR
04/FdvvQICe6n9xW6VOatFvReWc1JvLMDEcgEQiBSxDuixuPjZyUJBLX3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECV6f0qbsaLUaYMM3JzWg/0rlOFMB8GA1UdIwQY
MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt
OGZlZDUwOTA5NzcwLzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw
LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2+0zKMr
7UVDtmXoSur2hgcyQhIWQj7pn9eNDKgeuDNHFr+J1uoDbSgkHO/YpALIidcPIaxW
ASKSzVGY4BcqR04uFpHgt3pKh6S2cLHjyuxH79nfPrCs6J6QfBGMih6rCoDHLQ2p
45d0j4Q+BemcE4GwWzU/wNZ7+hQgWcy2coDnUhPvaooSUOnTDaP6HaJNUoh1A72l
396kYE7GJJ3/ar+2ccL/jdNvxnHKoL55HIaC4E/D/R6fzx67q1D3Lv0ug9zfq9kQ
kQa3LH1SK2eLgMXs39/VS14i5uDkP1nbeo8kDIyBwwzb4VysqUwLPnWq1RlpkQ2j
UKRftnTahrvaLw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:22:03 2025 by rpki-client