Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: AdTfqdP9AfxlJffsC63KbDs9eY1N8SUbocxq7DZqc/A=
Subject key identifier: 3E:80:E5:FA:1C:20:F4:95:AC:12:3F:31:1B:A6:F0:B0:2C:1C:27:F4
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 0196501137CFA1F1BDFD78E4710CD62754C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 052E
Signing time: Sat 19 Apr 2025 22:00:27 +0000
Manifest this update: Sat 19 Apr 2025 22:00:27 +0000
Manifest next update: Sun 20 Apr 2025 22:00:27 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: m9Oh9KJcd9zgcoDuW99yFOre3u/JWfK7GI6/O52hy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:37:cf:a1:f1:bd:fd:78:e4:71:0c:d6:27:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Apr 19 22:00:27 2025 GMT
Not After : Apr 20 22:00:27 2025 GMT
Subject: CN=3e80e5fa1c20f495ac123f311ba6f0b02c1c27f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:e7:41:4a:0f:05:f0:91:36:cb:75:7a:f9:
e8:6e:93:87:ad:ed:79:b4:82:56:dd:7e:fa:88:73:
09:e4:f0:8a:b1:c1:36:51:79:e8:dc:ac:6b:3a:43:
3c:ce:85:14:ac:f0:c8:9b:87:b7:50:4b:ee:7c:a5:
46:0b:6a:e0:9a:72:71:a1:a5:0d:2b:9a:64:36:6a:
cd:20:6e:85:80:68:ee:99:7a:96:62:b4:83:fb:d8:
56:d7:32:84:32:1c:c4:59:1d:76:5d:99:97:2a:a6:
86:cc:02:fa:c0:01:31:a3:22:b6:78:b6:53:f3:f4:
f3:c1:41:31:df:5b:ae:7c:14:d3:ad:e8:04:75:ed:
05:fc:52:8d:56:6a:60:f6:33:13:59:bf:c6:1e:ce:
3b:26:da:eb:56:ff:5a:50:98:0c:5b:47:74:51:0f:
d2:16:b8:0e:0f:76:af:a5:ae:ab:0c:13:a4:c7:19:
da:ed:27:ff:a4:93:ab:3d:f3:01:0c:ae:88:89:77:
5a:bc:56:3d:51:61:e6:87:d7:5f:cd:cb:4d:0c:04:
e2:60:fc:8c:e6:47:72:81:82:e7:7b:66:b3:ca:86:
30:b5:55:ec:8d:f3:4b:5e:51:ee:16:ed:54:a8:97:
14:ee:ef:2f:32:cc:99:f1:12:09:9a:35:f4:6a:89:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:E5:FA:1C:20:F4:95:AC:12:3F:31:1B:A6:F0:B0:2C:1C:27:F4
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6d:72:93:42:4a:b8:17:57:e8:f8:cc:2b:17:5a:b2:b1:0c:
09:bd:ad:71:9e:6c:05:b6:f4:05:b4:cf:c1:d1:4a:56:b3:d0:
70:3b:91:56:b5:d5:23:1d:6d:a1:fe:f1:3c:e7:ed:e9:6d:7d:
ee:fd:4d:fd:74:5f:7e:8d:09:5b:47:e6:38:bd:7c:1e:b2:64:
69:f4:fa:35:dd:b1:71:d0:1e:57:68:d1:6a:92:f9:94:3b:5f:
76:56:b1:32:ea:07:02:ab:6b:49:70:df:8d:f1:98:64:7e:27:
98:5c:78:32:fb:89:da:f6:48:86:97:b6:11:70:a6:35:c7:3e:
f1:36:c1:39:07:9b:8f:44:dd:ef:2b:4c:c0:86:58:ab:94:72:
52:2f:9b:11:72:c2:68:97:a9:68:36:d2:ce:e7:26:5f:0c:99:
29:fd:a6:fa:00:65:80:63:4e:a2:c6:56:22:09:d6:60:26:e5:
67:23:3b:73:32:50:17:7e:9b:f6:50:fb:74:98:f8:a8:84:df:
40:22:56:5a:c0:db:45:55:fe:3e:9a:af:51:d8:62:ef:5d:5d:
52:43:38:bc:19:1f:97:e3:a1:56:50:a2:b1:36:20:7c:b1:91:
78:78:db:df:bf:e0:3d:7e:67:d4:9a:ef:46:1c:e5:a5:18:e4:
f5:32:c1:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQETfPofG9/XjkcQzWJ1TBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YTIzYWNlMmMwNjdmOGUyMTJmZjM1OWRhOTZjMjA1OGI2
NGIzZWEwHhcNMjUwNDE5MjIwMDI3WhcNMjUwNDIwMjIwMDI3WjAzMTEwLwYDVQQD
EygzZTgwZTVmYTFjMjBmNDk1YWMxMjNmMzExYmE2ZjBiMDJjMWMyN2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybbnQUoPBfCRNst1evnobpOHre15
tIJW3X76iHMJ5PCKscE2UXno3KxrOkM8zoUUrPDIm4e3UEvufKVGC2rgmnJxoaUN
K5pkNmrNIG6FgGjumXqWYrSD+9hW1zKEMhzEWR12XZmXKqaGzAL6wAExoyK2eLZT
8/TzwUEx31uufBTTregEde0F/FKNVmpg9jMTWb/GHs47JtrrVv9aUJgMW0d0UQ/S
FrgOD3avpa6rDBOkxxna7Sf/pJOrPfMBDK6IiXdavFY9UWHmh9dfzctNDATiYPyM
5kdygYLne2azyoYwtVXsjfNLXlHuFu1UqJcU7u8vMsyZ8RIJmjX0aomGxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6A5focIPSVrBI/MRum8LAsHCf0MB8GA1UdIwQY
MBaAFKiiOs4sBn+OIS/zWdqWwgWLZLPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xZTBiYjYtZTQ1Ni00YThkLWI2MGIt
NzUyZDVkZTBhOTBlLzEvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xZTBiYjYtZTQ1Ni00YThkLWI2MGItNzUyZDVkZTBhOTBl
LzEvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcm1yk0JK
uBdX6PjMKxdasrEMCb2tcZ5sBbb0BbTPwdFKVrPQcDuRVrXVIx1tof7xPOft6W19
7v1N/XRffo0JW0fmOL18HrJkafT6Nd2xcdAeV2jRapL5lDtfdlaxMuoHAqtrSXDf
jfGYZH4nmFx4MvuJ2vZIhpe2EXCmNcc+8TbBOQebj0Td7ytMwIZYq5RyUi+bEXLC
aJepaDbSzucmXwyZKf2m+gBlgGNOosZWIgnWYCblZyM7czJQF36b9lD7dJj4qITf
QCJWWsDbRVX+PpqvUdhi711dUkM4vBkfl+OhVlCisTYgfLGReHjb37/gPX5n1Jrv
RhzlpRjk9TLB9Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:45 2025 by rpki-client