Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: wYc1aKM1YC+ZHxCiZgutldzP8qVoTEMmmLSpz23dI8Y=
Subject key identifier: 12:C4:37:6E:5C:3D:47:6F:F6:5A:FD:58:D8:DC:02:1E:12:36:42:F8
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 01965B02E90453475583ACF036B05C4E6668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 090E
Signing time: Tue 22 Apr 2025 01:00:39 +0000
Manifest this update: Tue 22 Apr 2025 01:00:39 +0000
Manifest next update: Wed 23 Apr 2025 01:00:39 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: DOpD7IgMG9FGGeqtNloROAjtec7VDSZL7F6i1f4nsTg=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:e9:04:53:47:55:83:ac:f0:36:b0:5c:4e:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Apr 22 01:00:39 2025 GMT
Not After : Apr 23 01:00:39 2025 GMT
Subject: CN=12c4376e5c3d476ff65afd58d8dc021e123642f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:65:ab:4c:6d:2f:64:3c:3b:53:e0:07:bc:
95:bd:4e:f4:75:e9:99:92:6b:9a:19:4d:15:1f:0c:
fa:fc:55:4b:f7:11:b2:11:be:6f:3c:29:2d:8e:dd:
34:05:81:18:29:04:44:d8:98:5b:b5:f1:a2:d2:58:
fe:b5:ee:45:7b:83:6c:ea:91:2a:1a:41:fa:4e:3f:
88:93:91:5a:c4:d6:d0:9b:4d:f3:ae:1b:f8:c9:18:
e9:3b:ad:2c:e1:9d:c0:0a:a4:da:b6:b9:c8:da:95:
90:e4:dc:e5:38:c3:c7:d5:cc:cc:6b:7d:5f:4c:c5:
70:5c:9f:8b:66:37:34:5c:a4:d4:3b:28:f9:e3:61:
92:0a:f9:4e:00:c7:81:8f:fd:ce:8a:7f:73:d3:16:
2d:e6:ec:bb:6f:19:53:a3:0f:0d:84:2b:09:ec:09:
4b:4b:d1:80:fe:f5:80:28:b3:02:c0:7d:17:2a:a3:
18:48:41:cd:ab:81:07:3f:18:40:2d:cd:e3:27:18:
01:fd:c6:c8:bb:99:f8:46:b6:6b:f8:30:c4:cd:19:
67:4f:80:d2:87:1c:fd:09:1f:25:d3:0b:54:9f:24:
a2:ed:9b:7c:1d:25:e9:54:94:8f:e2:9b:cb:f2:a7:
a4:b5:44:94:8e:50:a4:64:c5:39:6f:56:ed:9e:14:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C4:37:6E:5C:3D:47:6F:F6:5A:FD:58:D8:DC:02:1E:12:36:42:F8
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:97:e4:03:db:10:6d:5f:67:c6:7c:fc:de:2e:9a:4f:3c:88:
82:a1:21:2d:84:b5:e0:a8:93:f2:59:35:8d:58:e8:8a:9f:1d:
33:ba:c3:55:ec:c3:9e:f3:54:90:02:0d:0e:9c:a9:60:3f:95:
0e:20:ac:ea:16:62:53:d5:55:7e:37:bf:11:ca:33:c1:05:8d:
14:39:bb:75:21:0c:4c:f6:00:0e:b5:86:ac:b1:c3:e8:d4:5f:
15:fe:89:ee:c9:13:57:c8:6c:a9:a1:de:3c:96:7c:01:42:b1:
90:44:6e:a3:53:fc:ed:8e:c6:83:a9:38:fa:69:ac:79:e9:fa:
7d:0c:a0:bb:13:03:21:2e:29:7b:90:ec:2c:43:dd:d1:92:ed:
ed:d5:f7:f8:a9:14:57:ac:5c:1f:f7:6a:84:59:7d:9c:de:eb:
0f:9c:75:55:28:f6:e9:73:72:9f:ba:79:9a:9a:2f:94:0a:1b:
2e:8a:19:cc:8b:4d:71:f5:b4:1a:1e:6b:5a:3e:6d:08:2a:51:
be:40:48:ad:22:cc:dd:59:f3:94:56:40:dc:1b:71:5f:9e:14:
ff:8b:f3:77:9b:ca:ac:4d:8c:27:b9:c8:4a:97:12:3c:94:a5:
a6:ba:1f:cb:52:83:ba:4e:9f:6e:f9:59:8b:ae:a1:01:6a:df:
1e:71:05:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbAukEU0dVg6zwNrBcTmZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm
OWY1ODAwHhcNMjUwNDIyMDEwMDM5WhcNMjUwNDIzMDEwMDM5WjAzMTEwLwYDVQQD
EygxMmM0Mzc2ZTVjM2Q0NzZmZjY1YWZkNThkOGRjMDIxZTEyMzY0MmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+1lq0xtL2Q8O1PgB7yVvU70demZ
kmuaGU0VHwz6/FVL9xGyEb5vPCktjt00BYEYKQRE2JhbtfGi0lj+te5Fe4Ns6pEq
GkH6Tj+Ik5FaxNbQm03zrhv4yRjpO60s4Z3ACqTatrnI2pWQ5NzlOMPH1czMa31f
TMVwXJ+LZjc0XKTUOyj542GSCvlOAMeBj/3Oin9z0xYt5uy7bxlTow8NhCsJ7AlL
S9GA/vWAKLMCwH0XKqMYSEHNq4EHPxhALc3jJxgB/cbIu5n4RrZr+DDEzRlnT4DS
hxz9CR8l0wtUnySi7Zt8HSXpVJSP4pvL8qektUSUjlCkZMU5b1btnhRnowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLEN25cPUdv9lr9WNjcAh4SNkL4MB8GA1UdIwQY
MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt
MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi
LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpfkA9sQ
bV9nxnz83i6aTzyIgqEhLYS14KiT8lk1jVjoip8dM7rDVezDnvNUkAINDpypYD+V
DiCs6hZiU9VVfje/EcozwQWNFDm7dSEMTPYADrWGrLHD6NRfFf6J7skTV8hsqaHe
PJZ8AUKxkERuo1P87Y7Gg6k4+mmseen6fQyguxMDIS4pe5DsLEPd0ZLt7dX3+KkU
V6xcH/dqhFl9nN7rD5x1VSj26XNyn7p5mpovlAobLooZzItNcfW0Gh5rWj5tCCpR
vkBIrSLM3VnzlFZA3BtxX54U/4vzd5vKrE2MJ7nISpcSPJSlprofy1KDuk6fbvlZ
i66hAWrfHnEFHA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:19:04 2025 by rpki-client