Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: xZv81CnFR435J/o9E6TvQTvt4qvcVM3Wqh+k891F/HQ=
Subject key identifier: 4E:6F:30:F8:0E:D7:FC:E7:15:A3:C6:A2:D3:9B:BA:32:E0:39:7E:E9
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 0196572704D04A6BE7A0C22044D0F510925C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 07:01:36 +0000
Manifest this update: Mon 21 Apr 2025 07:01:36 +0000
Manifest next update: Tue 22 Apr 2025 07:01:36 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: qmIJNykZExGoSXfUFRE4fKSomeRqVB0TVUZeFQewU9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:27:04:d0:4a:6b:e7:a0:c2:20:44:d0:f5:10:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Apr 21 07:01:36 2025 GMT
Not After : Apr 22 07:01:36 2025 GMT
Subject: CN=4e6f30f80ed7fce715a3c6a2d39bba32e0397ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:b0:f2:88:de:d5:f8:d8:32:d7:77:df:05:
e7:c9:25:65:d0:fb:66:4e:a9:51:3c:48:8f:1d:82:
96:31:b4:90:92:cd:8b:17:5d:94:31:30:0e:cb:db:
2d:19:fe:33:fb:ee:cc:f1:7a:7a:46:50:eb:87:6b:
63:48:f6:b3:19:cd:da:65:f0:5c:df:01:de:ff:df:
5d:2d:3e:35:81:b5:7f:e5:2d:55:9f:f8:f9:a5:90:
2d:35:f7:62:8c:d8:03:8b:9d:49:dc:b1:0d:6a:25:
52:09:3e:15:55:1a:b3:b7:64:8a:33:cd:31:51:74:
46:a9:d8:6c:d7:d5:b0:5d:13:5a:c5:8f:18:17:65:
15:11:61:af:bd:60:eb:6b:6b:76:d2:6c:fa:96:c8:
ff:f8:03:53:1c:9f:e6:84:45:5f:2d:25:67:1a:53:
36:e3:a1:8e:49:7c:22:d7:61:6a:24:45:fe:eb:ca:
fa:41:73:a3:e0:a8:45:1a:56:8a:a1:ce:6f:b0:15:
89:b2:ab:c2:0c:b0:77:64:c3:4a:79:6d:19:16:0f:
5c:ec:12:d6:4f:35:1b:5e:60:24:a5:65:43:56:e5:
72:20:31:10:49:19:07:a1:89:42:26:34:00:e7:6b:
13:82:cb:1a:fa:12:f4:07:15:e2:91:2e:5f:02:d1:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:30:F8:0E:D7:FC:E7:15:A3:C6:A2:D3:9B:BA:32:E0:39:7E:E9
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0e:0f:46:6d:16:cd:a5:d1:0f:be:15:bb:76:30:16:23:86:
ee:96:fb:59:85:5e:61:95:91:4a:cb:6c:f9:5b:ac:98:f6:ce:
92:1e:ea:06:45:7a:25:29:3d:8b:c2:e0:ab:a6:d7:48:75:ba:
77:9c:ed:5a:31:a4:93:01:a8:c2:b7:88:36:85:b2:fb:08:a2:
65:d2:56:15:37:a4:d5:69:1b:8e:f9:ab:46:76:24:e4:cf:1d:
e2:6e:cf:1c:8e:f3:8d:bb:d3:2f:c4:21:49:51:83:8c:7d:75:
f1:c4:68:05:e5:de:1f:7b:61:a6:17:8b:96:6e:13:9c:f6:9d:
78:de:c7:d8:61:49:ec:31:4d:b5:6e:b9:2a:85:29:bb:98:e7:
f0:14:1e:3b:bb:b5:bd:75:90:d8:3f:5e:62:4d:a5:c5:08:41:
a1:20:4b:7b:68:c1:74:c1:02:5b:98:3a:3a:cf:f4:04:63:41:
05:95:2d:3f:7b:e2:a8:b4:97:97:53:66:85:b4:52:33:5f:93:
06:fc:7b:f7:65:cf:1d:9a:1f:37:f4:f7:fa:a8:72:d3:d2:0f:
c3:d6:c1:d7:b2:be:fa:dc:7f:26:2a:f2:41:bb:9f:40:cd:68:
81:6a:68:1f:34:62:3a:b9:92:7a:0f:2c:a9:b5:ab:87:9d:e1:
43:4a:44:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJwTQSmvnoMIgRND1EJJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDQ5MTNkMDQzZGJiMTE3Y2Y2YjkzMjNjOGFiMjQ3Y2I1
MmUyNTEwHhcNMjUwNDIxMDcwMTM2WhcNMjUwNDIyMDcwMTM2WjAzMTEwLwYDVQQD
Eyg0ZTZmMzBmODBlZDdmY2U3MTVhM2M2YTJkMzliYmEzMmUwMzk3ZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5Ow8oje1fjYMtd33wXnySVl0Ptm
TqlRPEiPHYKWMbSQks2LF12UMTAOy9stGf4z++7M8Xp6RlDrh2tjSPazGc3aZfBc
3wHe/99dLT41gbV/5S1Vn/j5pZAtNfdijNgDi51J3LENaiVSCT4VVRqzt2SKM80x
UXRGqdhs19WwXRNaxY8YF2UVEWGvvWDra2t20mz6lsj/+ANTHJ/mhEVfLSVnGlM2
46GOSXwi12FqJEX+68r6QXOj4KhFGlaKoc5vsBWJsqvCDLB3ZMNKeW0ZFg9c7BLW
TzUbXmAkpWVDVuVyIDEQSRkHoYlCJjQA52sTgssa+hL0BxXikS5fAtFh5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5vMPgO1/znFaPGotObujLgOX7pMB8GA1UdIwQY
MBaAFA0EkT0EPbsRfPa5MjyKskfLUuJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEt
OTZjODFmYjY1MWEwLzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEtOTZjODFmYjY1MWEw
LzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ4PRm0W
zaXRD74Vu3YwFiOG7pb7WYVeYZWRSsts+VusmPbOkh7qBkV6JSk9i8Lgq6bXSHW6
d5ztWjGkkwGowreINoWy+wiiZdJWFTek1WkbjvmrRnYk5M8d4m7PHI7zjbvTL8Qh
SVGDjH118cRoBeXeH3thpheLlm4TnPadeN7H2GFJ7DFNtW65KoUpu5jn8BQeO7u1
vXWQ2D9eYk2lxQhBoSBLe2jBdMECW5g6Os/0BGNBBZUtP3viqLSXl1NmhbRSM1+T
Bvx792XPHZofN/T3+qhy09IPw9bB17K++tx/JiryQbufQM1ogWpoHzRiOrmSeg8s
qbWrh53hQ0pEWg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:54:53 2025 by rpki-client