Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: XmbPkjG+DahiLUT7ULVlrrPqigkzkBreY3cLgAcp3As=
Subject key identifier: 8F:84:B0:98:E0:43:7C:1E:04:B9:DF:A4:E8:A6:79:56:2A:C5:19:84
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 0196504880B5EB01C34690FF7C3150ABF003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 0E91
Signing time: Sat 19 Apr 2025 23:00:50 +0000
Manifest this update: Sat 19 Apr 2025 23:00:50 +0000
Manifest next update: Sun 20 Apr 2025 23:00:50 +0000
Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=)
2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: hLygUj77YI8XGovwmNJPK0lUmvRTAZ0KQzc0g5LfERE=)
3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=)
4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:80:b5:eb:01:c3:46:90:ff:7c:31:50:ab:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Apr 19 23:00:50 2025 GMT
Not After : Apr 20 23:00:50 2025 GMT
Subject: CN=8f84b098e0437c1e04b9dfa4e8a679562ac51984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:d7:1b:02:12:05:3d:78:66:bb:c5:da:c1:
b3:db:30:fe:e6:6e:78:44:1b:d9:a8:07:02:ce:e1:
e1:43:6a:36:9b:a2:bf:75:62:6e:03:8e:94:76:3f:
a4:c4:80:50:e3:d2:9e:3c:3e:64:44:ae:51:aa:1c:
3f:bd:61:d0:bf:8f:ae:0d:fb:4a:cb:e8:7e:c3:57:
cc:52:f0:4b:9a:f6:1a:17:59:7a:ab:14:2c:6d:41:
76:b7:22:6d:70:54:fd:22:04:83:fe:df:9c:d7:bd:
3d:cf:51:2c:03:65:18:6e:1f:39:34:0a:17:cb:c8:
27:e5:aa:1c:be:23:5f:01:7f:0d:77:be:5d:dc:de:
8c:7c:53:90:7b:e8:45:cb:a8:43:c7:7e:88:74:9b:
77:b6:f2:9d:c0:06:9c:0b:34:5d:0d:54:03:c1:7c:
99:3b:35:47:66:af:4c:06:9f:6a:e9:4d:0c:a5:4a:
40:60:5e:93:35:62:0d:6d:03:7a:89:71:45:b6:48:
86:68:33:49:1f:c3:12:16:0c:fc:8b:b4:c2:1b:08:
9a:13:47:85:7b:32:f2:c9:c6:eb:f0:6b:8d:10:49:
34:a5:45:ad:6f:38:88:6f:3b:a5:31:a2:26:e0:cc:
63:a5:d1:ef:7c:7c:6e:71:c1:a4:b4:b2:f5:93:aa:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:84:B0:98:E0:43:7C:1E:04:B9:DF:A4:E8:A6:79:56:2A:C5:19:84
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:02:fd:73:76:b6:d8:fb:04:ef:0b:b2:6c:6f:fd:6b:4f:38:
51:38:18:8a:74:b9:44:83:64:67:eb:51:72:1a:f3:b1:98:79:
74:8b:9b:a9:f4:14:a8:cc:90:73:16:f0:be:43:17:0e:d8:49:
bb:be:05:b3:6e:29:a4:48:f2:7e:32:ad:0c:bd:b4:32:27:dc:
d3:23:56:09:6c:99:60:0d:df:19:59:79:89:99:6e:2e:bd:c6:
d3:31:05:94:54:8e:09:8f:ff:25:1e:64:02:a2:bd:dc:dd:1f:
69:69:1c:02:95:8e:ff:4d:81:cb:bc:bf:c0:4d:a1:80:5b:09:
4e:a9:8b:4c:a0:06:d0:83:0d:31:ef:89:2d:c6:db:ce:f5:02:
38:8b:1d:b3:e7:ed:ea:13:bf:66:dd:88:93:1a:8e:df:07:5b:
04:11:14:0d:08:eb:5d:34:08:32:22:c2:c4:9a:66:1f:97:f0:
ea:16:89:38:dd:2d:a3:d7:16:99:40:62:07:92:38:13:3c:54:
ec:5d:c7:4d:07:c5:ff:ca:84:a9:57:07:c9:ef:5d:97:ac:31:
18:6b:0c:63:80:45:1f:b3:9e:30:e0:1c:f8:6a:e7:65:bb:f3:
bf:e2:21:a8:01:7f:5f:cc:21:a1:e0:cc:a9:f3:39:f3:e5:9d:
11:f0:9c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSIC16wHDRpD/fDFQq/ADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3
ZWMzNTQwHhcNMjUwNDE5MjMwMDUwWhcNMjUwNDIwMjMwMDUwWjAzMTEwLwYDVQQD
Eyg4Zjg0YjA5OGUwNDM3YzFlMDRiOWRmYTRlOGE2Nzk1NjJhYzUxOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG/XGwISBT14ZrvF2sGz2zD+5m54
RBvZqAcCzuHhQ2o2m6K/dWJuA46Udj+kxIBQ49KePD5kRK5Rqhw/vWHQv4+uDftK
y+h+w1fMUvBLmvYaF1l6qxQsbUF2tyJtcFT9IgSD/t+c1709z1EsA2UYbh85NAoX
y8gn5aocviNfAX8Nd75d3N6MfFOQe+hFy6hDx36IdJt3tvKdwAacCzRdDVQDwXyZ
OzVHZq9MBp9q6U0MpUpAYF6TNWINbQN6iXFFtkiGaDNJH8MSFgz8i7TCGwiaE0eF
ezLyycbr8GuNEEk0pUWtbziIbzulMaIm4MxjpdHvfHxuccGktLL1k6p3ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+EsJjgQ3weBLnfpOimeVYqxRmEMB8GA1UdIwQY
MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt
NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj
LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQL9c3a2
2PsE7wuybG/9a084UTgYinS5RINkZ+tRchrzsZh5dIubqfQUqMyQcxbwvkMXDthJ
u74Fs24ppEjyfjKtDL20Mifc0yNWCWyZYA3fGVl5iZluLr3G0zEFlFSOCY//JR5k
AqK93N0faWkcApWO/02By7y/wE2hgFsJTqmLTKAG0IMNMe+JLcbbzvUCOIsds+ft
6hO/Zt2IkxqO3wdbBBEUDQjrXTQIMiLCxJpmH5fw6haJON0to9cWmUBiB5I4EzxU
7F3HTQfF/8qEqVcHye9dl6wxGGsMY4BFH7OeMOAc+GrnZbvzv+IhqAF/X8whoeDM
qfM58+WdEfCc/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:25:35 2025 by rpki-client