
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File: sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier: 1lDAL3Rp4tYMxXR58uEJzf/EI1RWo0gXc6w0PB6enbY=
Subject key identifier: 25:69:34:CB:6F:87:40:AD:1E:7D:23:BA:4E:A4:E8:23:26:05:E9:C8
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 019644B206189526032D131F315A040C076D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number: 0D0D
Signing time: Thu 17 Apr 2025 17:00:39 +0000
Manifest this update: Thu 17 Apr 2025 17:00:39 +0000
Manifest next update: Fri 18 Apr 2025 17:00:39 +0000
Files and hashes: 1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: fEcpBVsYQiNX959e0iMPoMYtz8T9Lo9JEZybj9OJgk8=)
2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:06:18:95:26:03:2d:13:1f:31:5a:04:0c:07:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Apr 17 17:00:39 2025 GMT
Not After : Apr 18 17:00:39 2025 GMT
Subject: CN=256934cb6f8740ad1e7d23ba4ea4e8232605e9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:9d:69:b2:4e:46:18:cb:04:5a:cd:e6:21:
8d:9f:57:b5:6c:29:11:65:2c:5a:bd:0c:99:1a:fc:
dd:2d:dc:61:b9:19:91:6f:7f:71:e8:43:f5:40:3c:
87:c4:15:cc:36:01:ef:7b:aa:80:6b:e6:88:1e:fb:
32:24:b1:0d:58:8b:24:06:70:3b:e6:2c:31:7e:ef:
e1:38:e0:b1:57:ad:1c:bf:4e:a7:1d:54:fa:81:fd:
0a:f5:a2:4a:7a:ec:65:1f:ed:d9:a5:6e:30:78:41:
f4:48:c1:72:ae:30:3b:d9:87:3b:f5:1b:c9:85:e3:
f6:80:4e:8c:c0:08:d7:82:de:87:72:69:5d:73:4d:
cc:4f:13:23:fd:83:f5:42:40:6e:a1:90:f1:1d:e4:
b4:c4:82:a0:c5:7a:33:9f:fd:f2:98:76:3c:6a:6d:
22:9e:15:79:85:11:2e:56:8e:6b:25:ab:a7:7d:79:
f0:9f:b1:b4:21:cf:37:a9:69:86:40:b1:86:c5:f0:
6f:ae:7f:ff:77:2e:28:b8:31:ed:f3:1e:af:7b:08:
c2:65:b0:07:ef:b9:3b:f4:dd:2e:fa:0c:64:52:2e:
46:64:f1:f0:4f:5e:2f:1c:e7:9d:30:e6:57:51:b3:
4b:13:75:bd:fe:e8:99:3c:d3:78:4a:2e:a3:62:d8:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:69:34:CB:6F:87:40:AD:1E:7D:23:BA:4E:A4:E8:23:26:05:E9:C8
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:53:30:dc:ac:85:e1:01:30:05:54:15:f8:f0:3d:f7:9b:3b:
41:5b:f0:59:c7:d5:af:6e:c4:dd:8a:fa:31:25:df:c3:1c:d6:
6d:6c:eb:b7:3f:03:d8:71:0d:3a:ca:f2:ba:1a:1e:e4:2f:b6:
90:45:d5:72:c2:42:5f:bb:af:38:4b:8e:f4:b6:89:b1:9f:de:
9b:8f:03:c2:50:1f:10:e9:bc:2a:29:fe:3d:63:99:e3:b4:05:
ed:7b:7d:bb:80:52:5c:25:ab:cd:b0:f6:bf:ef:43:dc:f3:80:
2d:c1:c7:85:ee:b2:b6:55:a7:3e:a2:47:f2:2f:50:44:81:7c:
34:23:7f:e8:98:5e:fd:b8:a5:97:d4:f4:a6:7d:dd:7c:53:6e:
80:47:e1:a4:b7:0e:13:fe:4b:49:be:21:8e:66:0b:79:14:0e:
38:10:65:b2:74:5a:8c:f0:10:ff:0d:2d:12:60:84:a8:70:ac:
55:6c:06:18:bc:4c:b4:c4:7f:18:8f:12:59:66:2d:33:3c:d8:
2e:53:94:6b:7d:2f:16:2e:a3:09:63:63:4f:20:43:8a:b5:c8:
5a:62:01:f7:9b:7b:17:26:62:d7:63:1f:30:bd:29:27:67:52:
6c:7b:b8:eb:d8:37:fb:b1:69:7b:20:0f:89:50:6d:17:c3:0b:
07:c8:4b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsgYYlSYDLRMfMVoEDAdtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWYxMzNkNGFjMzRiZGNmYjdiZGRjN2UxMWIyNzA1NDM2
MmY3MDkwHhcNMjUwNDE3MTcwMDM5WhcNMjUwNDE4MTcwMDM5WjAzMTEwLwYDVQQD
EygyNTY5MzRjYjZmODc0MGFkMWU3ZDIzYmE0ZWE0ZTgyMzI2MDVlOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIedabJORhjLBFrN5iGNn1e1bCkR
ZSxavQyZGvzdLdxhuRmRb39x6EP1QDyHxBXMNgHve6qAa+aIHvsyJLENWIskBnA7
5iwxfu/hOOCxV60cv06nHVT6gf0K9aJKeuxlH+3ZpW4weEH0SMFyrjA72Yc79RvJ
heP2gE6MwAjXgt6Hcmldc03MTxMj/YP1QkBuoZDxHeS0xIKgxXozn/3ymHY8am0i
nhV5hREuVo5rJaunfXnwn7G0Ic83qWmGQLGGxfBvrn//dy4ouDHt8x6vewjCZbAH
77k79N0u+gxkUi5GZPHwT14vHOedMOZXUbNLE3W9/uiZPNN4Si6jYtj5qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVpNMtvh0CtHn0juk6k6CMmBenIMB8GA1UdIwQY
MBaAFLKvEz1Kw0vc+3vdx+EbJwVDYvcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEt
ZjNlYWFlNjMzYTFlLzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEtZjNlYWFlNjMzYTFl
LzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVMw3KyF
4QEwBVQV+PA995s7QVvwWcfVr27E3Yr6MSXfwxzWbWzrtz8D2HENOsryuhoe5C+2
kEXVcsJCX7uvOEuO9LaJsZ/em48DwlAfEOm8Kin+PWOZ47QF7Xt9u4BSXCWrzbD2
v+9D3POALcHHhe6ytlWnPqJH8i9QRIF8NCN/6Jhe/bill9T0pn3dfFNugEfhpLcO
E/5LSb4hjmYLeRQOOBBlsnRajPAQ/w0tEmCEqHCsVWwGGLxMtMR/GI8SWWYtMzzY
LlOUa30vFi6jCWNjTyBDirXIWmIB95t7FyZi12MfML0pJ2dSbHu469g3+7FpeyAP
iVBtF8MLB8hLXw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:04:23 2025 by rpki-client