Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: vHpxhREHXbupzYPjdzdhVyAwYaaghhmf2QJHsqU3UWQ=
Subject key identifier: E8:F5:20:BC:F7:54:AE:7E:36:17:3C:0E:AA:15:32:24:20:9F:BA:46
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 0196414363A3A3711182DA84DC4AED0AB6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1236
Signing time: Thu 17 Apr 2025 01:00:57 +0000
Manifest this update: Thu 17 Apr 2025 01:00:57 +0000
Manifest next update: Fri 18 Apr 2025 01:00:57 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: 7+nppCN+shjVPiqLwH9PhFFOFLUmPhKOz7UVKfBDyEI=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:63:a3:a3:71:11:82:da:84:dc:4a:ed:0a:b6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Apr 17 01:00:57 2025 GMT
Not After : Apr 18 01:00:57 2025 GMT
Subject: CN=e8f520bcf754ae7e36173c0eaa153224209fba46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:e7:96:ee:45:c9:b8:d5:df:75:de:33:39:
94:04:46:91:16:c0:70:61:69:f9:53:42:3b:76:f7:
43:6a:a7:2a:30:eb:25:db:bb:3e:b2:19:b3:9a:38:
79:ef:2a:80:b3:bc:24:a6:d3:94:6e:bc:f2:b0:4f:
00:76:83:6e:b1:58:22:c4:12:d8:81:59:d6:f8:11:
09:21:b0:9c:e6:71:55:15:2c:1b:7c:b3:46:c0:24:
f7:50:67:ed:12:ec:b6:ec:4a:cb:24:1d:57:2d:d9:
40:e8:a6:ab:e8:f3:26:d3:08:1e:6a:a5:57:7a:9d:
f7:2e:82:21:f1:b3:67:29:d0:07:e6:a1:d9:84:48:
e5:5b:23:b8:b7:d0:07:ce:8a:c2:4d:84:b5:c8:ea:
8f:09:d1:66:9c:69:9a:80:20:ca:0c:3f:4d:38:7f:
ec:1a:7b:60:91:12:4d:9d:87:64:bc:81:b8:27:72:
56:53:a6:bc:e1:69:b9:db:c9:d3:b9:d6:90:11:83:
0e:b2:bb:50:73:69:b0:b7:25:e6:ad:dc:98:6a:82:
ed:80:de:f4:d5:be:50:80:9e:81:fd:a9:b4:ce:4e:
aa:01:35:a3:07:9f:94:46:71:62:15:97:c9:ee:cc:
fe:43:00:4b:55:0c:2c:ed:98:53:61:d6:68:32:eb:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:20:BC:F7:54:AE:7E:36:17:3C:0E:AA:15:32:24:20:9F:BA:46
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:77:66:4a:46:a7:f8:a7:69:76:00:67:a4:d9:85:21:39:db:
72:79:3a:43:29:10:55:78:a8:45:12:2e:29:9f:f3:1a:24:25:
a8:04:9a:ac:0c:12:6a:3a:cd:f6:b6:a7:92:63:4c:c3:59:e3:
43:41:6a:a0:0c:9c:5e:b0:22:16:5b:ec:3e:d0:63:a4:9b:69:
8d:fb:39:17:39:5f:30:a0:bb:f7:54:cf:9b:ad:f6:83:a1:ed:
5a:f5:6b:37:d8:d1:3b:20:b6:d9:bf:68:df:5d:bc:0e:1d:79:
b3:f0:1d:d9:17:71:d0:10:15:1b:2c:d8:90:58:1b:49:c0:25:
bd:1a:75:39:44:33:82:02:50:f2:2a:9e:c8:1b:b8:7f:9a:ca:
9b:1b:39:7a:75:e8:73:aa:9e:06:68:2c:37:c0:59:1e:b0:be:
6a:24:8c:2f:37:6f:af:1f:ed:9b:bc:c1:49:3f:ec:c6:cb:89:
d3:c9:6f:3a:6d:1e:da:ba:ba:59:62:fe:a7:fa:b5:2d:67:87:
66:b3:26:c9:87:b3:98:dc:a8:f7:90:9c:a9:b2:96:e2:2b:8d:
fe:4e:ec:f8:2e:b8:32:1a:7c:38:f8:55:eb:52:ce:4a:6a:68:
c2:15:94:b1:64:6a:8a:82:8f:d6:16:25:5d:28:1a:c6:c9:df:
7e:f5:c1:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZBQ2Ojo3ERgtqE3ErtCrbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODVjZGJkZGZkN2QxMzE2ODQ1YmViNGY3Mzk4ZjNjZTY0
ZmFjZDAwHhcNMjUwNDE3MDEwMDU3WhcNMjUwNDE4MDEwMDU3WjAzMTEwLwYDVQQD
EyhlOGY1MjBiY2Y3NTRhZTdlMzYxNzNjMGVhYTE1MzIyNDIwOWZiYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSXnlu5FybjV33XeMzmUBEaRFsBw
YWn5U0I7dvdDaqcqMOsl27s+shmzmjh57yqAs7wkptOUbrzysE8AdoNusVgixBLY
gVnW+BEJIbCc5nFVFSwbfLNGwCT3UGftEuy27ErLJB1XLdlA6Kar6PMm0wgeaqVX
ep33LoIh8bNnKdAH5qHZhEjlWyO4t9AHzorCTYS1yOqPCdFmnGmagCDKDD9NOH/s
GntgkRJNnYdkvIG4J3JWU6a84Wm528nTudaQEYMOsrtQc2mwtyXmrdyYaoLtgN70
1b5QgJ6B/am0zk6qATWjB5+URnFiFZfJ7sz+QwBLVQws7ZhTYdZoMuvh6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj1ILz3VK5+Nhc8DqoVMiQgn7pGMB8GA1UdIwQY
MBaAFKiFzb3f19ExaEW+tPc5jzzmT6zQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEt
ZjQ4Mjc4MDBiMGM4LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEtZjQ4Mjc4MDBiMGM4
LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3dmSkan
+KdpdgBnpNmFITnbcnk6QykQVXioRRIuKZ/zGiQlqASarAwSajrN9rankmNMw1nj
Q0FqoAycXrAiFlvsPtBjpJtpjfs5FzlfMKC791TPm632g6HtWvVrN9jROyC22b9o
3128Dh15s/Ad2Rdx0BAVGyzYkFgbScAlvRp1OUQzggJQ8iqeyBu4f5rKmxs5enXo
c6qeBmgsN8BZHrC+aiSMLzdvrx/tm7zBST/sxsuJ08lvOm0e2rq6WWL+p/q1LWeH
ZrMmyYezmNyo95CcqbKW4iuN/k7s+C64Mhp8OPhV61LOSmpowhWUsWRqioKP1hYl
XSgaxsnffvXBFg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:21:08 2025 by rpki-client