Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier: yZ/CG1LXXFIrDQ/NBJOXWijy6MyhxorgHfvIUzbyxBU=
Subject key identifier: E8:4B:30:59:56:2D:78:B8:A1:33:D8:B2:2C:06:43:AE:D9:5C:0E:52
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial: 01958EBCB4999C6005ED03B44C52FEC6EC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number: 1494
Signing time: Thu 13 Mar 2025 09:01:26 +0000
Manifest this update: Thu 13 Mar 2025 09:01:26 +0000
Manifest next update: Fri 14 Mar 2025 09:01:26 +0000
Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: mcBzn6b9CGY8aYwTK2KRejGnRWW//9BZTStNz3J4liU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:b4:99:9c:60:05:ed:03:b4:4c:52:fe:c6:ec:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Validity
Not Before: Mar 13 09:01:26 2025 GMT
Not After : Mar 14 09:01:26 2025 GMT
Subject: CN=e84b3059562d78b8a133d8b22c0643aed95c0e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:f6:34:d4:c3:70:e6:cc:07:b7:81:5e:d1:
41:a2:22:7f:da:62:2f:8e:73:dd:53:e6:fb:2c:09:
eb:3d:a4:e6:21:a7:14:13:08:99:00:e5:57:a4:33:
44:d9:95:d9:18:2e:3b:ed:2b:39:4d:15:2d:3d:bd:
d0:e2:eb:ef:06:df:24:a7:be:06:08:7b:fb:8b:76:
d5:6a:12:f8:dc:39:e1:39:fb:b6:fe:2d:ce:97:07:
d6:f1:a3:df:20:29:f0:d5:89:03:c1:da:fa:99:e9:
d9:51:0c:78:24:78:c7:63:6a:39:50:10:7d:95:5b:
31:e1:2a:56:80:03:26:12:27:a1:b9:e2:93:48:ed:
e9:45:68:7e:e0:26:fb:1a:8d:a8:0e:b7:f7:41:42:
03:e0:c5:af:5f:45:b9:26:3d:0b:29:8f:07:88:cd:
de:95:bf:90:82:22:39:8e:c7:86:49:2b:8c:35:5a:
c1:88:5c:1f:96:e7:f8:3f:57:93:23:e3:aa:57:35:
0e:62:4f:bd:57:b4:3c:0e:c5:4f:44:90:7a:9b:45:
a8:5d:8c:72:e0:61:0f:2e:37:49:66:e5:4d:19:62:
d3:1b:20:e3:e0:45:b4:7b:81:89:3d:35:5e:e7:bc:
86:aa:6d:b6:a5:cd:c7:13:62:08:95:3a:df:04:c1:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4B:30:59:56:2D:78:B8:A1:33:D8:B2:2C:06:43:AE:D9:5C:0E:52
X509v3 Authority Key Identifier:
keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:23:5c:cc:20:2e:92:e7:68:bc:be:51:55:93:91:8a:47:80:
14:8a:94:ca:f0:42:39:cd:ef:96:a5:d1:6c:fb:a2:73:68:93:
42:68:13:3b:3d:59:ce:af:a1:99:3b:e6:ff:48:24:22:56:60:
d6:d4:04:a0:74:1a:df:f5:05:62:2f:43:9f:66:24:87:0f:d9:
f4:4e:c8:31:41:7e:75:71:43:2f:1c:24:93:26:cc:34:10:c5:
ff:4f:20:7a:27:33:2a:d2:37:8b:16:59:f2:4b:1c:31:54:14:
3d:c0:7d:01:30:89:b6:ec:4c:ea:d8:df:42:2f:38:90:bd:69:
1e:f6:5a:13:f5:74:7f:70:03:ba:99:73:4e:63:7f:f4:f4:1c:
63:02:5c:1d:81:64:52:53:8b:66:12:5d:fa:f1:0e:10:98:ca:
54:41:73:0f:62:c0:2b:37:ad:b4:3c:b2:df:39:6a:fb:5f:5e:
ac:2f:f6:6d:9d:c8:db:55:28:de:8f:69:5f:0f:53:5d:20:79:
f9:33:ed:05:9a:1d:60:31:94:3a:e7:aa:e6:ad:25:cf:cf:b6:
20:ad:9c:55:11:8d:82:a3:eb:7c:9d:b3:66:ff:9d:cc:26:69:
41:2e:ad:73:24:0a:2a:c0:f5:67:09:09:6f:e6:f4:b9:ea:f4:
ce:0d:95:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWOvLSZnGAF7QO0TFL+xuxLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MTI3ODdhYWE0NmZiMDRkYWNmYzVlYjYwNjBiMGFjYTAy
ODRiNzEwHhcNMjUwMzEzMDkwMTI2WhcNMjUwMzE0MDkwMTI2WjAzMTEwLwYDVQQD
EyhlODRiMzA1OTU2MmQ3OGI4YTEzM2Q4YjIyYzA2NDNhZWQ5NWMwZTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXv2NNTDcObMB7eBXtFBoiJ/2mIv
jnPdU+b7LAnrPaTmIacUEwiZAOVXpDNE2ZXZGC477Ss5TRUtPb3Q4uvvBt8kp74G
CHv7i3bVahL43DnhOfu2/i3OlwfW8aPfICnw1YkDwdr6menZUQx4JHjHY2o5UBB9
lVsx4SpWgAMmEiehueKTSO3pRWh+4Cb7Go2oDrf3QUID4MWvX0W5Jj0LKY8HiM3e
lb+QgiI5jseGSSuMNVrBiFwfluf4P1eTI+OqVzUOYk+9V7Q8DsVPRJB6m0WoXYxy
4GEPLjdJZuVNGWLTGyDj4EW0e4GJPTVe57yGqm22pc3HE2IIlTrfBMFqQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhLMFlWLXi4oTPYsiwGQ67ZXA5SMB8GA1UdIwQY
MBaAFKkSeHqqRvsE2s/F62BgsKygKEtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMt
ZTgxZjVmZTQ3MzhmLzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMtZTgxZjVmZTQ3Mzhm
LzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyNczCAu
kudovL5RVZORikeAFIqUyvBCOc3vlqXRbPuic2iTQmgTOz1Zzq+hmTvm/0gkIlZg
1tQEoHQa3/UFYi9Dn2Ykhw/Z9E7IMUF+dXFDLxwkkybMNBDF/08geiczKtI3ixZZ
8kscMVQUPcB9ATCJtuxM6tjfQi84kL1pHvZaE/V0f3ADuplzTmN/9PQcYwJcHYFk
UlOLZhJd+vEOEJjKVEFzD2LAKzettDyy3zlq+19erC/2bZ3I21Uo3o9pXw9TXSB5
+TPtBZodYDGUOueq5q0lz8+2IK2cVRGNgqPrfJ2zZv+dzCZpQS6tcyQKKsD1ZwkJ
b+b0uer0zg2VZA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:09 2025 by rpki-client