
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: gD1JqizAZTRt0ujZwu8VNiIsWofSIud4UbaIUPYinSk=
Subject key identifier: 4F:72:BB:36:CB:1A:43:F8:97:30:D9:BD:86:96:11:BE:21:8C:B2:71
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 019649D8806E9453D6E8FA05839997F1E940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 17:00:47 +0000
Manifest this update: Fri 18 Apr 2025 17:00:47 +0000
Manifest next update: Sat 19 Apr 2025 17:00:47 +0000
Files and hashes: 1: ZQzI8pwKz3Y9UFOTdtU4b9ctJXY.roa (hash: m2HxLCCi/fQqzx7YAu5gwnUGUYg0wp/lcNW6PdEdels=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: oMDVF4kGdIb6QJfL7vz3ZjS4JpuhYigaJX6YAe1hmBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:80:6e:94:53:d6:e8:fa:05:83:99:97:f1:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Apr 18 17:00:47 2025 GMT
Not After : Apr 19 17:00:47 2025 GMT
Subject: CN=4f72bb36cb1a43f89730d9bd869611be218cb271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:66:cc:1d:ae:aa:aa:62:0e:15:46:1b:53:
1b:0d:dc:77:c3:16:11:b4:8b:b6:0e:72:1e:cf:1a:
ba:4f:ae:1b:02:58:d7:63:72:43:48:41:61:d3:5b:
d9:c9:e5:03:8c:c9:51:1d:0c:86:5f:a5:90:c4:f2:
2e:46:54:80:2c:4c:c7:17:71:93:28:eb:fd:64:14:
28:2c:b0:1d:86:01:82:1c:4c:ea:a5:8e:99:44:7a:
af:9a:84:7a:2e:96:02:14:e1:33:23:35:2f:03:e9:
c1:a1:71:53:ab:c5:76:cf:6e:f6:0b:14:9d:94:7e:
4a:d0:c8:a2:1f:c3:ce:44:ae:db:ae:5d:a5:b8:27:
4c:74:f3:50:79:af:65:cd:07:48:53:23:6b:ac:97:
3b:9e:51:a2:4c:9a:1b:b6:c3:dd:76:2a:81:70:5a:
56:6e:d6:df:c2:69:9d:2a:25:46:2c:93:02:9a:61:
25:ad:f3:98:c7:8e:09:f8:34:6d:7e:c2:9e:7d:87:
8a:91:fe:2d:76:61:a4:18:50:c7:a7:85:dd:ad:d6:
4b:65:ab:be:5d:42:d0:8a:6b:bc:c1:32:8b:0e:86:
b4:bb:55:55:3c:08:8d:42:b2:13:ff:ac:8e:e1:78:
43:00:97:b4:cc:f1:9f:9a:48:47:2c:a4:6c:ec:a6:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:72:BB:36:CB:1A:43:F8:97:30:D9:BD:86:96:11:BE:21:8C:B2:71
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fe:69:1a:10:06:ac:c0:6f:17:b8:d8:3f:ae:b9:b3:1f:9a:
2d:37:6d:6f:94:5c:e8:ae:5c:72:4c:e1:bf:23:83:6e:e7:84:
6b:59:89:bc:96:48:df:72:dc:f7:21:38:96:2f:f7:ca:a9:4d:
26:3a:10:80:60:ad:e5:48:69:51:ac:3f:05:30:e6:5e:bb:a0:
95:9c:76:50:f0:d5:28:ed:85:0f:61:5a:b5:e7:50:e0:15:cf:
84:58:14:f0:4e:00:27:15:21:2e:f2:47:cf:7e:6c:42:bc:bb:
af:27:ab:bd:35:8c:c7:9b:46:8e:57:a9:32:12:90:4c:5c:6c:
a8:52:b5:ba:45:e3:54:36:cf:d0:91:ff:6a:3c:8e:70:e7:71:
8f:80:3b:1c:bd:bf:db:72:f2:20:6a:09:5c:47:24:cd:71:57:
b3:e9:41:c3:c2:0b:2e:ba:28:05:46:b6:f8:59:3d:3a:a8:40:
48:c1:f2:be:5c:6a:87:cb:c7:34:f8:f1:da:14:fd:f4:a0:6a:
4b:77:ad:90:d9:06:61:71:48:3d:6b:1d:b8:63:aa:5c:02:78:
4e:b4:5c:54:a1:c2:b6:c8:62:29:de:65:7d:68:be:6c:53:81:
4e:9d:e9:1c:1d:3e:1d:2c:c1:ba:af:10:9c:f9:2b:9e:84:bb:
ce:78:89:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJ2IBulFPW6PoFg5mX8elAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi
NzM4OGMwHhcNMjUwNDE4MTcwMDQ3WhcNMjUwNDE5MTcwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZjcyYmIzNmNiMWE0M2Y4OTczMGQ5YmQ4Njk2MTFiZTIxOGNiMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HZmzB2uqqpiDhVGG1MbDdx3wxYR
tIu2DnIezxq6T64bAljXY3JDSEFh01vZyeUDjMlRHQyGX6WQxPIuRlSALEzHF3GT
KOv9ZBQoLLAdhgGCHEzqpY6ZRHqvmoR6LpYCFOEzIzUvA+nBoXFTq8V2z272CxSd
lH5K0MiiH8PORK7brl2luCdMdPNQea9lzQdIUyNrrJc7nlGiTJobtsPddiqBcFpW
btbfwmmdKiVGLJMCmmElrfOYx44J+DRtfsKefYeKkf4tdmGkGFDHp4XdrdZLZau+
XULQimu8wTKLDoa0u1VVPAiNQrIT/6yO4XhDAJe0zPGfmkhHLKRs7KblNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9yuzbLGkP4lzDZvYaWEb4hjLJxMB8GA1UdIwQY
MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt
YjE4ZDc2YjAxMmU3LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3
LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/5pGhAG
rMBvF7jYP665sx+aLTdtb5Rc6K5cckzhvyODbueEa1mJvJZI33Lc9yE4li/3yqlN
JjoQgGCt5UhpUaw/BTDmXruglZx2UPDVKO2FD2FatedQ4BXPhFgU8E4AJxUhLvJH
z35sQry7ryervTWMx5tGjlepMhKQTFxsqFK1ukXjVDbP0JH/ajyOcOdxj4A7HL2/
23LyIGoJXEckzXFXs+lBw8ILLrooBUa2+Fk9OqhASMHyvlxqh8vHNPjx2hT99KBq
S3etkNkGYXFIPWsduGOqXAJ4TrRcVKHCtshiKd5lfWi+bFOBTp3pHB0+HSzBuq8Q
nPkrnoS7zniJEw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:10 2025 by rpki-client