Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File: 1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier: CTcEdoQFrAHWTwcFVK8EUkRXmY8LEJRDJEjmCE86T4I=
Subject key identifier: 9B:2B:86:78:05:3F:B9:7D:B8:51:B7:28:41:78:4C:DD:21:00:B1:EB
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial: 01958B8436B6A48BF996D997CF14E3F560A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number: 06FB
Signing time: Wed 12 Mar 2025 18:00:52 +0000
Manifest this update: Wed 12 Mar 2025 18:00:52 +0000
Manifest next update: Thu 13 Mar 2025 18:00:52 +0000
Files and hashes: 1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: WC0OlMCH6cjnk9nvB7RC1ceEb/LcArsxEatJBLhzKOU=)
2: QM4jYEK7EtYY_E1d1aEgohaHu7E.roa (hash: qeF4D524grzc7fut+xWXsFCBjhJ1D13zM5qUNVlhkHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:36:b6:a4:8b:f9:96:d9:97:cf:14:e3:f5:60:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Validity
Not Before: Mar 12 18:00:52 2025 GMT
Not After : Mar 13 18:00:52 2025 GMT
Subject: CN=9b2b8678053fb97db851b72841784cdd2100b1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:25:b8:82:16:9b:a7:11:a0:67:97:e9:97:
12:17:5a:43:33:76:17:97:96:23:dd:dc:7b:ad:18:
30:f7:1a:26:a9:2c:ca:e2:5e:22:04:14:fd:06:62:
8d:4c:e5:09:de:6c:7f:80:8d:e5:ac:e6:35:4c:c6:
b8:fd:4a:32:9c:b7:72:72:1d:72:af:9e:63:18:6f:
e1:1d:3b:f7:56:79:a8:41:af:be:1d:30:d4:89:24:
98:a7:e7:53:98:de:13:32:bb:61:de:77:25:d3:01:
68:e2:c4:d7:9a:fc:13:9f:04:de:92:9a:c3:8a:6e:
d7:63:7d:42:9d:d2:d1:8c:55:87:52:c9:f9:2f:f9:
b7:c7:67:51:91:d3:20:13:51:02:e9:61:92:36:ff:
64:3e:1e:a9:0a:ed:b7:01:c3:ce:95:fd:bf:cc:1d:
70:72:b3:dc:19:62:ea:20:34:a8:76:2a:ce:87:e0:
44:4f:e9:d3:e5:da:0d:42:db:03:53:aa:b4:e7:f0:
c3:2b:b7:16:d3:33:ec:45:0f:57:70:45:39:53:37:
fd:2e:ff:30:f5:55:c1:cb:d1:e1:82:29:d0:81:0c:
ac:5c:14:ab:7d:13:93:04:d1:69:57:d4:e2:88:77:
4c:25:e0:0c:a9:28:07:84:06:bc:05:6f:6f:58:16:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:86:78:05:3F:B9:7D:B8:51:B7:28:41:78:4C:DD:21:00:B1:EB
X509v3 Authority Key Identifier:
keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6e:a6:34:0e:40:2b:d2:9e:0c:3a:e6:5a:3b:c3:68:1d:22:
2c:1a:00:55:c8:45:a1:ec:3a:d2:f8:94:e6:b3:18:e7:59:95:
e3:1a:27:92:15:80:b1:2a:37:26:14:eb:03:60:37:a2:fa:79:
eb:c9:2f:3e:68:14:79:ef:d7:5f:6b:5c:fb:6e:c0:4c:40:dc:
84:d3:76:37:4f:5d:fe:20:6d:c7:cf:cc:90:93:7f:0e:bc:3e:
17:3f:30:e8:2d:84:72:19:9f:5f:58:3f:ac:74:29:3f:dd:c6:
28:4d:b9:a5:02:94:f3:f9:90:4a:75:aa:55:37:b9:9b:7f:39:
4b:99:89:3d:70:c2:4a:3c:82:5e:72:e2:32:c7:da:b3:9b:39:
57:15:c7:e3:3d:fb:30:d9:e9:27:5d:1d:ef:cb:d5:bd:c2:34:
b8:7a:b6:a3:27:2f:a7:9f:36:e1:19:64:d4:05:92:4f:67:3b:
99:1c:73:d5:c3:60:39:6b:87:a0:6d:cd:4d:ac:b0:2f:36:3c:
c7:a0:88:dd:e9:58:64:47:6c:c7:24:bc:d3:9a:be:6d:ca:6a:
c5:64:3a:9f:8c:49:20:3f:2a:66:e3:23:74:76:71:0b:5f:da:
6f:ff:52:3c:5d:3f:20:d3:07:b8:80:64:13:f3:fc:a1:de:22:
94:7a:6d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhDa2pIv5ltmXzxTj9WCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NjQzM2ZiMGZiZGRjYzk3ZWIwMTU2NjkyOGQ2MDcwNmNj
YzY2MjMwHhcNMjUwMzEyMTgwMDUyWhcNMjUwMzEzMTgwMDUyWjAzMTEwLwYDVQQD
Eyg5YjJiODY3ODA1M2ZiOTdkYjg1MWI3Mjg0MTc4NGNkZDIxMDBiMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwboluIIWm6cRoGeX6ZcSF1pDM3YX
l5Yj3dx7rRgw9xomqSzK4l4iBBT9BmKNTOUJ3mx/gI3lrOY1TMa4/UoynLdych1y
r55jGG/hHTv3VnmoQa++HTDUiSSYp+dTmN4TMrth3ncl0wFo4sTXmvwTnwTekprD
im7XY31CndLRjFWHUsn5L/m3x2dRkdMgE1EC6WGSNv9kPh6pCu23AcPOlf2/zB1w
crPcGWLqIDSodirOh+BET+nT5doNQtsDU6q05/DDK7cW0zPsRQ9XcEU5Uzf9Lv8w
9VXBy9HhginQgQysXBSrfROTBNFpV9TiiHdMJeAMqSgHhAa8BW9vWBZdBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsrhngFP7l9uFG3KEF4TN0hALHrMB8GA1UdIwQY
MBaAFNZkM/sPvdzJfrAVZpKNYHBszGYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDkt
MDVkMmNkZmExNmE2LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDktMDVkMmNkZmExNmE2
LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhm6mNA5A
K9KeDDrmWjvDaB0iLBoAVchFoew60viU5rMY51mV4xonkhWAsSo3JhTrA2A3ovp5
68kvPmgUee/XX2tc+27ATEDchNN2N09d/iBtx8/MkJN/Drw+Fz8w6C2EchmfX1g/
rHQpP93GKE25pQKU8/mQSnWqVTe5m385S5mJPXDCSjyCXnLiMsfas5s5VxXH4z37
MNnpJ10d78vVvcI0uHq2oycvp5824Rlk1AWST2c7mRxz1cNgOWuHoG3NTaywLzY8
x6CI3elYZEdsxyS805q+bcpqxWQ6n4xJID8qZuMjdHZxC1/ab/9SPF0/INMHuIBk
E/P8od4ilHptWA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:02 2025 by rpki-client