Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier: CTRquChEt6AZ/qp7swOAuow7dPUnjAZ1Chf89JLB11Y=
Subject key identifier: 6A:66:84:6D:C2:80:0D:81:03:27:94:EE:B9:65:5B:FF:5B:C5:81:BA
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial: 01964A7CF32C0C8876FDC9A1CB6BFE73B200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number: 0192
Signing time: Fri 18 Apr 2025 20:00:24 +0000
Manifest this update: Fri 18 Apr 2025 20:00:24 +0000
Manifest next update: Sat 19 Apr 2025 20:00:24 +0000
Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: NBdSgezzLaiOI7F3A2x8T6+F4A1mQVWaCRsLJ/gqJaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:f3:2c:0c:88:76:fd:c9:a1:cb:6b:fe:73:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Validity
Not Before: Apr 18 20:00:24 2025 GMT
Not After : Apr 19 20:00:24 2025 GMT
Subject: CN=6a66846dc2800d81032794eeb9655bff5bc581ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:72:82:ba:1e:4d:12:ec:1e:f8:6b:81:b4:
a4:08:60:c6:f9:88:05:f1:b9:de:2d:4f:59:30:06:
b4:fe:4d:2f:85:d1:5c:d4:41:84:4f:be:c4:1d:b7:
71:aa:92:ce:71:1a:fd:c9:e3:ce:8a:a2:79:49:70:
f5:e3:6b:6d:5e:19:e9:8b:f1:77:f2:5c:09:d1:dc:
5a:1e:63:12:15:5f:00:79:3d:81:0e:4e:b6:a1:5c:
f6:13:14:58:31:e7:e2:bd:a0:e4:03:8f:11:4b:58:
fa:77:1d:26:4d:5b:36:e7:04:0d:1f:c8:6b:48:08:
b3:8d:80:bf:b5:51:ae:39:45:08:56:40:65:3d:18:
f5:0c:35:69:58:16:e5:68:2f:d4:4e:43:44:d5:0e:
bb:91:e3:82:bd:a5:c6:e7:ff:3a:59:aa:46:33:c4:
9e:39:80:a2:01:07:7c:e3:7a:ba:89:af:06:be:84:
22:e1:e4:a7:5b:6b:26:1e:9e:a7:ad:25:50:1e:d9:
28:a8:5d:82:67:6e:85:ee:4f:ac:e2:63:a8:df:e3:
23:70:fa:9f:3e:31:8e:59:0a:00:76:3e:66:c3:02:
9b:aa:31:a2:ca:68:be:b3:7d:3f:20:f5:1d:88:1b:
b3:cc:35:40:cf:82:6f:77:b9:4a:b2:63:82:3d:29:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:66:84:6D:C2:80:0D:81:03:27:94:EE:B9:65:5B:FF:5B:C5:81:BA
X509v3 Authority Key Identifier:
keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2c:e8:81:c8:c5:78:e5:79:d3:69:61:0c:4f:94:a4:51:f4:
a4:ee:98:52:1c:d0:49:20:cf:8e:db:3d:e4:7d:96:e0:42:06:
bb:9c:f0:b6:cc:02:a6:a1:15:c1:c5:8f:0f:a8:0e:96:98:da:
d4:f4:b9:76:52:b9:8a:de:7f:07:01:be:ab:28:7f:e7:80:c3:
b6:04:cf:3b:ed:e4:6c:0c:34:8f:f2:8f:3d:ae:8a:be:0e:2f:
ac:4c:90:66:6b:bd:0c:eb:92:d5:49:c8:ed:fa:f9:35:74:16:
16:4a:a2:33:fb:cd:e4:62:1a:a5:84:fb:c6:8a:d6:b0:10:bc:
ab:bb:6b:74:c1:71:9b:28:71:55:8c:82:26:76:73:22:6f:1c:
30:16:43:bb:35:d2:23:e9:09:d9:27:04:0b:23:f5:e4:b5:e9:
18:ce:12:28:8b:8c:9a:80:e8:68:f5:c8:a1:89:e6:7c:36:2b:
b9:de:aa:ca:e0:8d:87:8f:1e:7c:82:64:b0:79:aa:7b:ec:b1:
7c:19:43:2d:bf:df:1a:23:3a:22:b7:9c:4e:ba:2d:8a:78:3d:
bc:23:d5:7d:42:3f:bf:f9:2e:c3:ec:94:1b:be:fd:4a:54:42:
70:07:55:07:a3:9a:18:d7:b2:37:f1:e3:3d:9c:60:24:61:06:
eb:e0:3e:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfPMsDIh2/cmhy2v+c7IAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZWUxZTdlY2QzMGI4MGEyMDA2ZjUzOGZjZTYzYjI0MjBj
NTdiZTkwHhcNMjUwNDE4MjAwMDI0WhcNMjUwNDE5MjAwMDI0WjAzMTEwLwYDVQQD
Eyg2YTY2ODQ2ZGMyODAwZDgxMDMyNzk0ZWViOTY1NWJmZjViYzU4MWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwlygroeTRLsHvhrgbSkCGDG+YgF
8bneLU9ZMAa0/k0vhdFc1EGET77EHbdxqpLOcRr9yePOiqJ5SXD142ttXhnpi/F3
8lwJ0dxaHmMSFV8AeT2BDk62oVz2ExRYMefivaDkA48RS1j6dx0mTVs25wQNH8hr
SAizjYC/tVGuOUUIVkBlPRj1DDVpWBblaC/UTkNE1Q67keOCvaXG5/86WapGM8Se
OYCiAQd843q6ia8GvoQi4eSnW2smHp6nrSVQHtkoqF2CZ26F7k+s4mOo3+MjcPqf
PjGOWQoAdj5mwwKbqjGiymi+s30/IPUdiBuzzDVAz4Jvd7lKsmOCPSnSEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpmhG3CgA2BAyeU7rllW/9bxYG6MB8GA1UdIwQY
MBaAFEHuHn7NMLgKIAb1OPzmOyQgxXvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMt
NTcyODhmN2YzMDg4LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNDc4NWItN2NiNi00Nzc1LWE4YWMtNTcyODhmN2YzMDg4
LzEvUWU0ZWZzMHd1QW9nQnZVNF9PWTdKQ0RGZS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHizogcjF
eOV502lhDE+UpFH0pO6YUhzQSSDPjts95H2W4EIGu5zwtswCpqEVwcWPD6gOlpja
1PS5dlK5it5/BwG+qyh/54DDtgTPO+3kbAw0j/KPPa6Kvg4vrEyQZmu9DOuS1UnI
7fr5NXQWFkqiM/vN5GIapYT7xorWsBC8q7trdMFxmyhxVYyCJnZzIm8cMBZDuzXS
I+kJ2ScECyP15LXpGM4SKIuMmoDoaPXIoYnmfDYrud6qyuCNh48efIJksHmqe+yx
fBlDLb/fGiM6IrecTroting9vCPVfUI/v/kuw+yUG779SlRCcAdVB6OaGNeyN/Hj
PZxgJGEG6+A+YA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:41:07 2025 by rpki-client