Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: DOPT/4xUyh1IDSi88mSlkVpyraa5w9h17A0AmeETfhs=
Subject key identifier: 68:3F:B0:38:9E:DC:6B:62:41:EF:45:77:C5:B6:9D:A7:55:AE:C5:BB
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 01962294687ABB633029DA1BA39471BFECF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 0FEC
Signing time: Fri 11 Apr 2025 02:01:13 +0000
Manifest this update: Fri 11 Apr 2025 02:01:13 +0000
Manifest next update: Sat 12 Apr 2025 02:01:13 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: UNEGOETzwFkoOoHvvuwVtPH6WvH4ZUkTRejG25aHzpk=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:22:94:68:7a:bb:63:30:29:da:1b:a3:94:71:bf:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Apr 11 02:01:13 2025 GMT
Not After : Apr 12 02:01:13 2025 GMT
Subject: CN=683fb0389edc6b6241ef4577c5b69da755aec5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:ed:e8:14:82:b2:58:d6:79:19:6a:cb:cd:
e2:79:e4:38:56:44:04:3e:b9:8e:89:52:14:19:db:
2f:69:c9:b7:0f:fd:59:01:b7:e2:59:04:df:13:fe:
79:4e:df:83:49:72:a3:be:13:ea:55:07:92:3a:45:
2b:b1:96:63:44:d9:15:18:24:29:7a:de:00:84:d2:
bf:59:23:a7:1c:73:20:2f:e4:24:70:98:6c:39:fc:
8c:ed:e8:b3:0f:92:7c:12:2f:23:64:28:3a:2c:de:
9b:cb:6b:02:f2:02:6f:cc:99:9e:bf:5b:6b:b9:8a:
9d:33:e9:54:91:e1:65:87:3d:7e:76:09:1c:89:a0:
d3:97:5a:2b:1e:a0:98:57:58:d2:fc:77:63:57:72:
e7:8b:52:10:e2:6d:9e:16:4e:a7:c2:f0:25:37:15:
ce:cb:db:e7:09:c7:de:3b:56:e0:7d:83:1a:51:c2:
bd:46:5c:48:e9:42:3d:49:63:ec:04:83:6c:7f:d3:
8c:50:a0:c5:de:a9:63:03:a0:e0:1a:5f:ce:16:7a:
c8:d0:7d:d9:51:e0:2a:fa:b0:a8:52:0f:80:cb:cd:
5a:b3:a6:52:35:f2:b5:77:be:72:18:e2:1a:d3:88:
cf:33:09:9b:a1:54:f5:ac:25:05:17:77:c1:e6:2d:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3F:B0:38:9E:DC:6B:62:41:EF:45:77:C5:B6:9D:A7:55:AE:C5:BB
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:58:4f:bc:a6:d5:4c:67:c7:5a:5b:2a:b9:36:d8:e8:8c:19:
36:46:0e:02:22:52:5a:2b:b5:be:69:41:a7:37:81:f2:f9:2a:
02:b4:db:4f:00:77:a7:ef:20:23:2e:64:6c:92:0d:b4:3d:63:
6d:1a:59:56:30:7c:41:b0:91:88:29:8d:d5:65:87:33:46:ca:
13:19:a6:c1:af:f8:1a:d6:5e:ab:c6:e8:3e:ba:ae:de:1f:b7:
4e:28:d2:90:6d:4a:c3:a8:f0:4a:18:4e:b1:92:d4:1b:a7:0c:
85:3e:7d:42:c6:ca:72:e9:30:ea:9b:e8:da:de:59:4f:c8:57:
62:eb:c5:b0:15:dd:b5:e5:2a:8d:34:96:a4:8d:7a:d0:bf:1f:
02:b2:b0:0d:17:c5:3b:85:99:a5:b4:8a:f0:8a:05:67:13:48:
a5:ad:d6:e1:f2:0e:f5:6d:16:10:91:68:ac:36:65:8b:80:85:
66:12:ef:4c:03:33:a2:7d:b2:4a:ea:80:20:7d:4e:ae:b4:19:
ea:4c:3f:55:36:6f:af:6d:dd:40:3d:fa:7a:a8:46:83:6d:ab:
54:b7:58:0a:72:95:13:41:0d:5a:3e:69:b4:0e:21:8e:93:d1:
d4:70:8e:c3:60:09:b4:5a:6b:0e:7d:88:c3:c3:8f:18:b4:d3:
14:2c:7c:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYilGh6u2MwKdobo5Rxv+zxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjUzMjQyMGEyMWU0MmI4YWQzMGRhMjRlYmY0MzQ3ZGU5
NWVmMzUwHhcNMjUwNDExMDIwMTEzWhcNMjUwNDEyMDIwMTEzWjAzMTEwLwYDVQQD
Eyg2ODNmYjAzODllZGM2YjYyNDFlZjQ1NzdjNWI2OWRhNzU1YWVjNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySft6BSCsljWeRlqy83ieeQ4VkQE
PrmOiVIUGdsvacm3D/1ZAbfiWQTfE/55Tt+DSXKjvhPqVQeSOkUrsZZjRNkVGCQp
et4AhNK/WSOnHHMgL+QkcJhsOfyM7eizD5J8Ei8jZCg6LN6by2sC8gJvzJmev1tr
uYqdM+lUkeFlhz1+dgkciaDTl1orHqCYV1jS/HdjV3Lni1IQ4m2eFk6nwvAlNxXO
y9vnCcfeO1bgfYMaUcK9RlxI6UI9SWPsBINsf9OMUKDF3qljA6DgGl/OFnrI0H3Z
UeAq+rCoUg+Ay81as6ZSNfK1d75yGOIa04jPMwmboVT1rCUFF3fB5i1hrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg/sDie3GtiQe9Fd8W2nadVrsW7MB8GA1UdIwQY
MBaAFEFlMkIKIeQritMNok6/Q0fele81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdVeVFnb2g1Q3VLMHcyaVRyOURSOTZWN3pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYt
YjZkNjRhMDAzZDllLzEvUVdVeVFnb2g1Q3VLMHcyaVRyOURSOTZWN3pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYtYjZkNjRhMDAzZDll
LzEvUVdVeVFnb2g1Q3VLMHcyaVRyOURSOTZWN3pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVhPvKbV
TGfHWlsquTbY6IwZNkYOAiJSWiu1vmlBpzeB8vkqArTbTwB3p+8gIy5kbJINtD1j
bRpZVjB8QbCRiCmN1WWHM0bKExmmwa/4GtZeq8boPrqu3h+3TijSkG1Kw6jwShhO
sZLUG6cMhT59QsbKcukw6pvo2t5ZT8hXYuvFsBXdteUqjTSWpI160L8fArKwDRfF
O4WZpbSK8IoFZxNIpa3W4fIO9W0WEJForDZli4CFZhLvTAMzon2ySuqAIH1OrrQZ
6kw/VTZvr23dQD36eqhGg22rVLdYCnKVE0ENWj5ptA4hjpPR1HCOw2AJtFprDn2I
w8OPGLTTFCx86A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:19:17 2025 by rpki-client