Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: o9AiACBWNiCBTbpcEkHc1VvVbjoseYltCwDB6xnj8LI=
Subject key identifier: C7:30:67:0C:54:A5:69:E0:9E:F4:12:AE:D0:01:31:80:05:1A:C3:29
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 0196C916F2B435EF46752518C2EBDF546417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0BBB
Signing time: Tue 13 May 2025 10:00:46 +0000
Manifest this update: Tue 13 May 2025 10:00:46 +0000
Manifest next update: Wed 14 May 2025 10:00:46 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: ae2z17qDzVOf55Wd0/To+sy+fTwHfkZ21EgychjbutQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:f2:b4:35:ef:46:75:25:18:c2:eb:df:54:64:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: May 13 10:00:46 2025 GMT
Not After : May 14 10:00:46 2025 GMT
Subject: CN=c730670c54a569e09ef412aed0013180051ac329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:d0:c5:cb:61:80:3c:70:8f:c2:c7:6e:ce:
07:04:27:58:40:94:4d:ea:18:4a:5e:81:68:73:fb:
39:c9:d6:c7:a8:68:99:28:bb:53:fc:68:2b:3d:51:
82:4a:e8:63:1d:77:b1:86:d3:f3:8d:9a:47:e3:9a:
80:5d:c1:79:c1:02:5b:92:af:1b:37:4d:2d:15:7f:
c1:03:c6:f6:6b:61:84:da:d9:68:8d:a0:a6:4d:91:
be:ec:22:94:eb:be:a1:b1:8e:3d:2f:f7:6e:1d:03:
d6:e2:0d:af:d6:b0:0e:63:3f:c5:da:11:ac:03:ae:
c9:04:d1:57:9b:d0:33:a7:6e:bd:be:57:8e:60:f3:
06:98:f2:44:3f:9f:d8:b0:5e:dc:66:2f:df:da:4f:
51:b2:0c:12:52:96:3d:d1:1d:f5:73:88:cc:89:00:
da:4e:29:c6:1a:ec:e0:e6:1f:a4:ec:d1:a6:f7:9f:
f2:7e:9d:7d:9b:3c:9b:cf:d7:e5:47:66:c9:60:a7:
7e:5f:ad:3c:16:8d:23:f3:d3:31:fe:ac:67:47:85:
e5:60:02:50:ca:ac:d1:e8:40:48:f0:5a:f2:66:68:
a5:4d:7d:1a:ba:45:ca:fc:d1:89:e0:b6:bc:0b:07:
4e:88:f7:9a:89:80:f5:2b:bf:ca:b1:8a:4d:fe:42:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:30:67:0C:54:A5:69:E0:9E:F4:12:AE:D0:01:31:80:05:1A:C3:29
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b6:3c:f5:f7:09:d5:c8:03:e7:61:7b:fe:0f:a0:00:73:96:
5a:55:18:44:de:ca:ff:f6:f4:96:97:14:60:82:be:4e:28:8b:
a3:f9:e1:77:44:a3:9b:a1:35:48:56:84:cc:ec:29:83:b5:cb:
d2:95:c5:64:98:dc:95:84:46:7d:33:9b:88:b1:55:1d:e4:da:
0f:86:6f:66:0d:aa:60:08:87:74:cf:da:35:65:b3:4d:77:d7:
79:f1:34:1d:e9:5c:51:45:9e:86:f3:2e:d5:c2:1c:9d:99:5b:
b6:d3:f9:4d:4e:ea:09:fb:ed:cd:5c:d4:96:9d:f5:de:1d:87:
5b:2b:61:51:0b:bf:47:13:e7:cc:2a:e9:d6:21:df:87:d9:66:
b2:e1:74:5a:36:86:bf:6c:ba:f1:f8:e6:39:76:b5:4d:a3:7d:
77:e8:13:ea:eb:23:28:a7:e1:8d:0a:ce:22:72:97:b0:c1:08:
ce:8c:2e:c3:ef:97:9c:9e:05:c9:41:f8:38:81:ae:c4:1b:fb:
61:22:0b:28:14:1c:e9:02:76:f1:01:c4:df:bd:0f:69:e8:3e:
e2:ba:74:e7:86:dc:22:d8:fa:05:c3:f2:42:da:10:b6:99:0a:
d5:02:86:98:0d:8a:3f:5d:ac:b2:3a:f2:61:2e:7e:80:1a:b8:
0e:26:73:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJFvK0Ne9GdSUYwuvfVGQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2
MDUxNTEwHhcNMjUwNTEzMTAwMDQ2WhcNMjUwNTE0MTAwMDQ2WjAzMTEwLwYDVQQD
EyhjNzMwNjcwYzU0YTU2OWUwOWVmNDEyYWVkMDAxMzE4MDA1MWFjMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLDQxcthgDxwj8LHbs4HBCdYQJRN
6hhKXoFoc/s5ydbHqGiZKLtT/GgrPVGCSuhjHXexhtPzjZpH45qAXcF5wQJbkq8b
N00tFX/BA8b2a2GE2tlojaCmTZG+7CKU676hsY49L/duHQPW4g2v1rAOYz/F2hGs
A67JBNFXm9Azp269vleOYPMGmPJEP5/YsF7cZi/f2k9RsgwSUpY90R31c4jMiQDa
TinGGuzg5h+k7NGm95/yfp19mzybz9flR2bJYKd+X608Fo0j89Mx/qxnR4XlYAJQ
yqzR6EBI8FryZmilTX0aukXK/NGJ4La8CwdOiPeaiYD1K7/KsYpN/kKbvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcwZwxUpWngnvQSrtABMYAFGsMpMB8GA1UdIwQY
MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt
MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy
LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrY89fcJ
1cgD52F7/g+gAHOWWlUYRN7K//b0lpcUYIK+TiiLo/nhd0Sjm6E1SFaEzOwpg7XL
0pXFZJjclYRGfTObiLFVHeTaD4ZvZg2qYAiHdM/aNWWzTXfXefE0HelcUUWehvMu
1cIcnZlbttP5TU7qCfvtzVzUlp313h2HWythUQu/RxPnzCrp1iHfh9lmsuF0WjaG
v2y68fjmOXa1TaN9d+gT6usjKKfhjQrOInKXsMEIzowuw++XnJ4FyUH4OIGuxBv7
YSILKBQc6QJ28QHE370Paeg+4rp054bcItj6BcPyQtoQtpkK1QKGmA2KP12ssjry
YS5+gBq4DiZzRg==
-----END CERTIFICATE-----
Generated at Tue May 13 13:05:45 2025 by rpki-client