Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: munTL1jYOimkmquST1IAgz0FFsstMNOY6v2AaLRjtj8=
Subject key identifier: 6B:29:97:2B:32:0C:25:85:3A:88:AD:99:C2:F0:08:FB:EE:45:7D:3C
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 01962C7332740FE363AB8BB403F5B6D214A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 0254
Signing time: Sun 13 Apr 2025 00:01:09 +0000
Manifest this update: Sun 13 Apr 2025 00:01:09 +0000
Manifest next update: Mon 14 Apr 2025 00:01:09 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: 5o0U1amdzdUTkJ3F2aAXCT/73aozv3s4aQCKokKa9wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:73:32:74:0f:e3:63:ab:8b:b4:03:f5:b6:d2:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Apr 13 00:01:09 2025 GMT
Not After : Apr 14 00:01:09 2025 GMT
Subject: CN=6b29972b320c25853a88ad99c2f008fbee457d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:ab:9f:7f:38:6f:07:e5:ae:07:2e:ce:a0:
a5:21:86:a6:8a:7c:16:b1:1e:d2:c0:75:1d:2f:40:
bc:5a:40:8c:6d:99:a9:a4:37:a4:64:af:af:dd:8a:
0c:07:8f:1a:7a:b1:f2:c5:a7:72:50:32:a2:68:5b:
25:aa:54:c6:d9:54:69:6d:7d:23:0e:3c:5f:f8:67:
c1:78:88:82:89:19:a9:7e:ee:a9:bf:97:ab:95:ad:
b3:55:b9:a7:67:01:8e:2b:b0:43:69:5c:9a:2e:f5:
32:5a:9e:be:37:b6:21:44:84:9d:39:6c:79:86:be:
88:2b:ca:30:6c:d1:54:7f:d7:d6:35:60:63:6c:ed:
d8:bf:7b:bd:d4:9c:6d:cd:16:b0:74:f9:1e:00:de:
37:be:32:a2:20:fa:2a:ab:0d:03:77:fd:fe:4a:99:
d2:fa:53:ac:0f:d4:43:59:41:6f:ae:95:a1:8a:36:
73:73:02:07:ac:9e:cf:17:8e:d6:4a:d4:bc:68:12:
0b:bd:c5:22:b1:65:31:19:82:33:fe:22:55:df:5c:
42:b4:a5:76:1e:45:3c:19:e4:83:28:6f:09:61:a8:
48:31:d8:05:5e:a6:d1:ad:29:3a:9d:96:e1:06:75:
a5:c7:bf:21:c0:87:66:68:d9:b7:e6:88:02:3d:71:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:97:2B:32:0C:25:85:3A:88:AD:99:C2:F0:08:FB:EE:45:7D:3C
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:a8:d8:91:7a:e7:12:a6:1f:05:57:f0:77:b9:3b:46:4f:
4a:ab:26:a2:70:cf:b5:cc:21:54:06:7a:6e:41:f2:6e:e0:f4:
29:9b:19:9e:dd:5f:c9:62:91:48:40:19:c0:9f:b5:c6:94:96:
1a:00:8e:36:ce:6d:b8:5c:e1:6d:76:e4:7d:08:c8:37:8a:cf:
2b:d4:f0:dc:51:f6:2f:01:fd:40:f1:87:71:9d:07:cc:15:ba:
5d:be:83:49:a5:2f:9b:0f:a2:c3:ae:e7:26:73:a0:bc:38:2f:
a3:d9:05:cd:c5:16:48:8f:05:32:da:2d:08:49:aa:85:61:5c:
fd:75:f6:10:4d:29:47:4b:2d:b8:3a:09:1f:8d:79:ed:84:c5:
c3:38:87:bd:7a:03:29:c5:1a:1f:8d:c1:19:82:00:da:a4:c9:
f6:11:f1:65:1e:62:e2:18:1e:40:12:4c:c1:b3:b9:ec:9f:7e:
fe:f9:82:5d:2f:30:22:91:f8:62:21:ff:03:94:a4:9b:9d:0f:
ad:76:ef:d3:43:83:43:b2:9a:ca:3f:b8:4b:96:41:b7:97:0c:
88:0a:83:09:dc:90:5b:e5:bf:11:98:22:f4:3d:5d:ae:88:a8:
9e:d3:24:ab:a3:be:bf:99:52:e8:6f:9d:05:6e:d6:d1:eb:9d:
6e:c4:5b:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsczJ0D+Njq4u0A/W20hSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk
NjRmZTQwHhcNMjUwNDEzMDAwMTA5WhcNMjUwNDE0MDAwMTA5WjAzMTEwLwYDVQQD
Eyg2YjI5OTcyYjMyMGMyNTg1M2E4OGFkOTljMmYwMDhmYmVlNDU3ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq2rn384bwflrgcuzqClIYaminwW
sR7SwHUdL0C8WkCMbZmppDekZK+v3YoMB48aerHyxadyUDKiaFslqlTG2VRpbX0j
Djxf+GfBeIiCiRmpfu6pv5erla2zVbmnZwGOK7BDaVyaLvUyWp6+N7YhRISdOWx5
hr6IK8owbNFUf9fWNWBjbO3Yv3u91JxtzRawdPkeAN43vjKiIPoqqw0Dd/3+SpnS
+lOsD9RDWUFvrpWhijZzcwIHrJ7PF47WStS8aBILvcUisWUxGYIz/iJV31xCtKV2
HkU8GeSDKG8JYahIMdgFXqbRrSk6nZbhBnWlx78hwIdmaNm35ogCPXGYFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsplysyDCWFOoitmcLwCPvuRX08MB8GA1UdIwQY
MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt
NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz
LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWCo2JF6
5xKmHwVX8He5O0ZPSqsmonDPtcwhVAZ6bkHybuD0KZsZnt1fyWKRSEAZwJ+1xpSW
GgCONs5tuFzhbXbkfQjIN4rPK9Tw3FH2LwH9QPGHcZ0HzBW6Xb6DSaUvmw+iw67n
JnOgvDgvo9kFzcUWSI8FMtotCEmqhWFc/XX2EE0pR0stuDoJH4157YTFwziHvXoD
KcUaH43BGYIA2qTJ9hHxZR5i4hgeQBJMwbO57J9+/vmCXS8wIpH4YiH/A5Skm50P
rXbv00ODQ7Kayj+4S5ZBt5cMiAqDCdyQW+W/EZgi9D1droiontMkq6O+v5lS6G+d
BW7W0eudbsRbDw==
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:51:59 2025 by rpki-client