Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: 9TqT+MdVZ/mibUfbneMt/wH8CI0OSY6GHrgliUTDITo=
Subject key identifier: F9:07:DE:D7:BA:8F:44:20:D2:35:3D:38:FD:04:2B:5F:40:2D:38:59
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 0196138F97D625CFFE2D4BD12A537B949AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 03CB
Signing time: Tue 08 Apr 2025 04:01:39 +0000
Manifest this update: Tue 08 Apr 2025 04:01:39 +0000
Manifest next update: Wed 09 Apr 2025 04:01:39 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: ERjwPSYmxdG/UArtB0j4uuKgBCJTwj/4NqhMfBnSm60=)
2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:97:d6:25:cf:fe:2d:4b:d1:2a:53:7b:94:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Apr 8 04:01:39 2025 GMT
Not After : Apr 9 04:01:39 2025 GMT
Subject: CN=f907ded7ba8f4420d2353d38fd042b5f402d3859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:7b:b7:bc:d6:25:51:3d:53:c4:5b:ad:56:
f0:c7:a9:2a:f5:ef:e7:f7:a7:fd:35:ee:92:32:ca:
56:e3:f8:33:b1:f1:c9:5e:cb:5e:d6:e7:11:57:5e:
ac:cc:dc:fb:a7:d8:eb:ad:38:34:40:fc:2b:cf:b2:
24:34:89:86:71:d1:90:0b:7e:f1:06:d0:45:3e:cb:
ae:d4:b3:87:2c:c3:28:2f:90:2f:24:05:b5:80:7e:
04:03:1b:85:be:39:fb:e4:4d:d5:89:3c:33:d5:2b:
7b:be:0a:75:79:a9:37:7e:2e:ec:cc:59:ed:ea:cc:
51:3d:02:0c:d9:70:62:eb:5e:2c:72:7c:14:b5:f0:
b6:6c:99:56:bf:10:a3:e0:c5:ab:ae:46:c0:72:b8:
a1:d0:9a:e2:02:6a:86:40:6a:ad:0a:56:94:67:5c:
f2:62:50:8c:6f:c7:0d:24:92:13:14:13:24:94:96:
04:51:d1:b5:f7:77:85:61:82:7b:3a:94:35:85:12:
e2:4d:9f:cb:7c:7a:04:ab:17:1a:a9:20:55:74:99:
1d:e8:d5:b8:aa:f2:97:ba:c6:4a:bd:1b:66:84:a0:
bc:aa:d4:46:24:b3:6b:ce:06:4d:94:93:b2:91:7b:
f6:5c:e0:ea:6e:56:dc:7e:da:61:7d:7d:73:b0:d2:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:07:DE:D7:BA:8F:44:20:D2:35:3D:38:FD:04:2B:5F:40:2D:38:59
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5f:70:5f:5e:ee:d0:48:be:82:93:b5:de:f6:f6:58:19:b5:
14:14:41:e9:3c:c0:a8:e3:4d:e3:5d:94:2e:94:98:00:d6:90:
f4:17:34:07:eb:a1:f5:98:2c:4c:60:a7:66:55:48:90:55:9c:
9f:c2:d0:7b:2f:15:55:ea:cf:db:c5:f4:37:ed:6e:74:93:e3:
c8:44:10:f5:a6:e7:70:ad:e0:4b:68:83:67:fe:1c:8f:73:ba:
0d:fd:d6:48:e0:83:90:9e:32:33:75:9f:ca:16:88:64:67:79:
ba:d4:fd:96:46:07:ef:08:ee:9e:bc:c0:d4:d7:1c:fe:ee:80:
14:1a:e8:20:47:9e:2c:04:01:e6:47:9e:c6:e7:6c:3e:a7:bc:
86:42:62:cb:89:52:2f:e3:f3:fb:4f:92:1c:77:9f:1d:fc:fb:
28:f4:9d:ea:af:97:fe:9f:55:4d:a8:f7:fc:8a:ce:9d:04:b9:
1e:ef:3d:20:26:a0:a9:3a:2d:94:3e:63:c6:52:87:9d:1a:33:
2a:c4:82:86:2a:a4:95:bf:d9:b9:40:64:ac:d8:d5:ad:2d:e6:
03:a4:1d:62:27:f7:42:54:35:b2:d1:4f:2d:70:4d:e9:3a:c5:
98:5b:ac:24:53:5e:e1:86:38:91:dc:cd:aa:a9:a2:2e:bd:ea:
0d:de:43:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTj5fWJc/+LUvRKlN7lJrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx
NjE4MjIwHhcNMjUwNDA4MDQwMTM5WhcNMjUwNDA5MDQwMTM5WjAzMTEwLwYDVQQD
EyhmOTA3ZGVkN2JhOGY0NDIwZDIzNTNkMzhmZDA0MmI1ZjQwMmQzODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgN7t7zWJVE9U8RbrVbwx6kq9e/n
96f9Ne6SMspW4/gzsfHJXste1ucRV16szNz7p9jrrTg0QPwrz7IkNImGcdGQC37x
BtBFPsuu1LOHLMMoL5AvJAW1gH4EAxuFvjn75E3ViTwz1St7vgp1eak3fi7szFnt
6sxRPQIM2XBi614scnwUtfC2bJlWvxCj4MWrrkbAcrih0JriAmqGQGqtClaUZ1zy
YlCMb8cNJJITFBMklJYEUdG193eFYYJ7OpQ1hRLiTZ/LfHoEqxcaqSBVdJkd6NW4
qvKXusZKvRtmhKC8qtRGJLNrzgZNlJOykXv2XODqblbcftphfX1zsNJGUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkH3te6j0Qg0jU9OP0EK19ALThZMB8GA1UdIwQY
MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt
Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw
LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF9wX17u
0Ei+gpO13vb2WBm1FBRB6TzAqONN412ULpSYANaQ9Bc0B+uh9ZgsTGCnZlVIkFWc
n8LQey8VVerP28X0N+1udJPjyEQQ9abncK3gS2iDZ/4cj3O6Df3WSOCDkJ4yM3Wf
yhaIZGd5utT9lkYH7wjunrzA1Ncc/u6AFBroIEeeLAQB5keexudsPqe8hkJiy4lS
L+Pz+0+SHHefHfz7KPSd6q+X/p9VTaj3/IrOnQS5Hu89ICagqTotlD5jxlKHnRoz
KsSChiqklb/ZuUBkrNjVrS3mA6QdYif3QlQ1stFPLXBN6TrFmFusJFNe4YY4kdzN
qqmiLr3qDd5DjQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:51:30 2025 by rpki-client