Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: Nujp/7YMTbeYIcoS41aIYogDoe3FSJFLDKTE/Gw/4Rk=
Subject key identifier: 44:73:9B:BF:EE:04:CA:F3:58:03:49:B4:EA:7C:35:EE:D1:19:FC:07
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 019644E8E96EE63F65BCF22A6E37C009546F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 18:00:36 +0000
Manifest this update: Thu 17 Apr 2025 18:00:36 +0000
Manifest next update: Fri 18 Apr 2025 18:00:36 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: gcRKjBAYCSAnAvFZfB5JnGZUTXQsLbydNH7YviPPPmo=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:e9:6e:e6:3f:65:bc:f2:2a:6e:37:c0:09:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Apr 17 18:00:36 2025 GMT
Not After : Apr 18 18:00:36 2025 GMT
Subject: CN=44739bbfee04caf3580349b4ea7c35eed119fc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:c9:53:1b:cc:20:1c:a9:49:45:29:83:a3:
83:8b:e0:fd:83:dd:4d:4d:e3:e6:cd:29:1f:3a:b6:
b1:c7:49:5a:c8:3f:da:96:fe:28:c3:ce:51:7b:6c:
d5:12:81:15:75:0a:4d:9f:f3:dd:c4:24:db:8d:4a:
34:4f:87:43:b1:f0:94:3a:7e:6e:b6:80:f8:f9:be:
77:47:62:b6:fb:3e:88:79:a2:a6:1a:23:02:19:a5:
d2:0d:8f:ea:c7:6d:6e:04:f3:93:a3:3b:ce:d7:d7:
ff:78:d1:b6:3f:4d:66:55:97:79:84:a3:e4:e2:66:
ef:15:2d:10:2b:49:2c:43:dd:76:b3:1d:5e:4a:f9:
b6:b4:77:8e:95:14:4f:3a:7e:c9:e2:f2:99:b7:ff:
e3:e1:61:98:55:e7:7f:9a:76:3e:0d:71:e8:10:0f:
81:d5:91:74:02:07:3d:f5:04:c8:a4:e9:a1:7e:57:
a5:bd:83:78:db:58:b7:d2:14:b5:5a:c6:29:00:9e:
a9:46:e5:5c:d2:2a:97:9d:b8:be:8d:20:8d:b5:ca:
9b:95:eb:11:1e:37:2e:42:74:63:95:83:97:b9:59:
0c:03:9c:be:b3:0e:30:22:68:54:dd:3e:e7:6d:e8:
08:14:9d:1e:76:ef:d5:bf:a0:08:c5:a5:cf:f9:7c:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:9B:BF:EE:04:CA:F3:58:03:49:B4:EA:7C:35:EE:D1:19:FC:07
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:66:73:4c:8b:c7:1f:ea:7f:22:5f:99:20:b2:9c:2b:5e:17:
ae:e3:a4:ad:ec:2b:f9:a3:21:57:89:8e:d1:da:95:30:72:84:
80:b5:f0:61:2b:ca:a1:e6:28:2b:98:be:48:94:91:bb:95:62:
ea:14:7c:f5:f4:7a:f9:64:c8:37:69:d4:78:7f:46:f4:1f:ac:
44:d8:82:2a:37:8d:fb:e8:5a:38:89:e2:a2:5f:dd:17:79:26:
d3:7e:7b:a1:b9:68:fa:4a:e1:a3:ee:38:c2:7d:42:e4:a8:5b:
16:52:f6:cc:dd:dd:e9:d7:1d:af:38:27:a8:6e:53:1e:6d:26:
03:95:b5:aa:1b:14:f3:90:1c:f4:b2:ee:88:86:c2:53:68:3f:
17:8e:d0:89:05:75:0c:12:5a:ee:93:19:1e:0c:50:ed:f3:07:
55:2e:6a:18:de:8e:4a:98:51:03:ec:bc:71:68:e4:da:39:7b:
89:34:27:d1:c6:d8:b1:a1:9f:4b:cd:cb:c9:55:2f:40:0b:a2:
3d:3e:5f:d0:0c:1e:ab:5f:a9:71:c5:cd:f8:e2:cb:da:c9:5e:
42:59:53:35:4a:d0:e5:57:98:28:32:64:3c:16:10:26:87:a8:
e1:12:d4:8a:ed:0f:b0:13:f7:a1:b7:f9:ae:10:95:c5:b8:aa:
73:a1:ee:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6Olu5j9lvPIqbjfACVRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk
OTM2YWQwHhcNMjUwNDE3MTgwMDM2WhcNMjUwNDE4MTgwMDM2WjAzMTEwLwYDVQQD
Eyg0NDczOWJiZmVlMDRjYWYzNTgwMzQ5YjRlYTdjMzVlZWQxMTlmYzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYfJUxvMIBypSUUpg6ODi+D9g91N
TePmzSkfOraxx0layD/alv4ow85Re2zVEoEVdQpNn/PdxCTbjUo0T4dDsfCUOn5u
toD4+b53R2K2+z6IeaKmGiMCGaXSDY/qx21uBPOTozvO19f/eNG2P01mVZd5hKPk
4mbvFS0QK0ksQ912sx1eSvm2tHeOlRRPOn7J4vKZt//j4WGYVed/mnY+DXHoEA+B
1ZF0Agc99QTIpOmhflelvYN421i30hS1WsYpAJ6pRuVc0iqXnbi+jSCNtcqblesR
HjcuQnRjlYOXuVkMA5y+sw4wImhU3T7nbegIFJ0edu/Vv6AIxaXP+XxnmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERzm7/uBMrzWANJtOp8Ne7RGfwHMB8GA1UdIwQY
MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt
YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew
LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWZzTIvH
H+p/Il+ZILKcK14XruOkrewr+aMhV4mO0dqVMHKEgLXwYSvKoeYoK5i+SJSRu5Vi
6hR89fR6+WTIN2nUeH9G9B+sRNiCKjeN++haOIniol/dF3km0357oblo+krho+44
wn1C5KhbFlL2zN3d6dcdrzgnqG5THm0mA5W1qhsU85Ac9LLuiIbCU2g/F47QiQV1
DBJa7pMZHgxQ7fMHVS5qGN6OSphRA+y8cWjk2jl7iTQn0cbYsaGfS83LyVUvQAui
PT5f0Aweq1+pccXN+OLL2sleQllTNUrQ5VeYKDJkPBYQJoeo4RLUiu0PsBP3obf5
rhCVxbiqc6HuYg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:40 2025 by rpki-client