Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
File: QyExQaqTrYz4wmg3eFx4RUzbgYA.mft (raw, json)
Hash identifier: dCLqn9hrr1lyc/sFN2lYBThNg2vrfoN5yieNQ3eAzFo=
Subject key identifier: 04:B0:84:82:32:96:C4:C3:55:E6:75:9D:BE:6F:A6:2D:92:BF:7B:53
Authority key identifier: 43:21:31:41:AA:93:AD:8C:F8:C2:68:37:78:5C:78:45:4C:DB:81:80
Certificate issuer: /CN=43213141aa93ad8cf8c26837785c78454cdb8180
Certificate serial: 0196B9A405E27A2D1FEB6F9F300BB572772E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
Manifest number: 04C6
Signing time: Sat 10 May 2025 10:00:56 +0000
Manifest this update: Sat 10 May 2025 10:00:56 +0000
Manifest next update: Sun 11 May 2025 10:00:56 +0000
Files and hashes: 1: QyExQaqTrYz4wmg3eFx4RUzbgYA.crl (hash: e77xXZ8q/Kg+VCTp+Y/TwVf//W/SxdNrdCEE9SxKxXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:a4:05:e2:7a:2d:1f:eb:6f:9f:30:0b:b5:72:77:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43213141aa93ad8cf8c26837785c78454cdb8180
Validity
Not Before: May 10 10:00:56 2025 GMT
Not After : May 11 10:00:56 2025 GMT
Subject: CN=04b084823296c4c355e6759dbe6fa62d92bf7b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:ad:95:34:e2:31:c3:4d:da:24:bd:ff:62:
f9:9c:a9:f3:4f:fa:b6:d2:7d:2f:c9:7c:93:7e:53:
94:90:dd:29:d3:fa:eb:8f:d6:02:7d:71:00:8c:27:
20:8d:e1:bb:85:e1:e6:7a:aa:5b:84:e3:d6:79:f8:
3c:28:58:83:d5:7d:57:27:82:23:e4:52:10:e4:5a:
f5:34:26:92:3d:6e:5f:11:18:ad:7a:18:95:a1:3d:
63:4f:30:9b:a5:1a:a6:5a:d5:34:fb:64:6f:8a:f7:
21:45:6c:8f:ff:20:4c:88:38:c9:27:07:6c:ce:1c:
60:ee:7f:a4:4c:39:a5:f5:91:65:ee:8b:c4:ab:12:
f4:f7:d9:0a:55:c1:f0:0c:02:8c:e3:a2:a6:a2:ef:
7b:03:83:9a:be:3c:57:7a:bc:56:df:2b:f6:c0:40:
39:73:37:32:0a:20:b6:60:22:4e:b1:c3:6e:0d:a2:
05:5a:65:ce:e7:35:14:1e:96:a4:a2:bd:91:47:18:
76:97:ff:b9:32:bd:8f:c0:c8:b7:6f:63:80:64:c0:
8f:57:12:e4:e5:f2:6a:6c:1e:ad:e2:39:d7:22:b2:
90:d2:d8:c2:d1:e1:d0:3d:fe:62:72:2b:2f:9b:42:
77:5a:ab:b9:85:b3:be:85:6b:27:9a:04:a0:f0:8b:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:84:82:32:96:C4:C3:55:E6:75:9D:BE:6F:A6:2D:92:BF:7B:53
X509v3 Authority Key Identifier:
keyid:43:21:31:41:AA:93:AD:8C:F8:C2:68:37:78:5C:78:45:4C:DB:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:40:69:9e:59:fc:b6:42:2e:f5:dd:d0:61:55:ef:0c:15:bc:
85:ac:0a:f5:32:4a:82:b5:57:62:4e:9e:ea:d0:08:cc:28:33:
c1:f5:f0:c8:85:fb:18:53:90:c3:b3:40:7a:f8:42:8f:9f:de:
7c:bb:f9:40:68:0d:f9:81:e0:b7:42:84:25:ae:85:d6:89:bb:
f8:17:8c:bb:e5:3b:b7:9b:a9:c2:6f:59:9a:80:97:03:73:82:
4c:e0:5e:61:95:79:90:ad:82:6f:85:a9:71:64:19:c9:c9:a1:
d7:3b:e1:0b:2a:7e:99:66:50:34:57:97:f0:d4:90:0b:0d:9a:
26:a6:ce:37:0f:22:85:09:9b:79:99:a3:29:76:ca:cb:b7:f1:
ce:03:f7:c6:cf:38:c4:b4:34:d8:f9:ea:ba:84:95:f4:4e:85:
de:6a:5b:1a:b4:9a:dc:20:cc:92:b1:9e:e5:06:84:d8:d1:81:
25:59:ff:24:ef:81:af:81:00:7c:5f:dd:40:b2:7c:bf:56:8f:
78:33:8f:6f:82:d0:29:2e:f5:ef:81:fd:d5:e5:b4:41:d7:ce:
9d:74:55:b9:ed:66:31:a4:fd:41:e3:ab:52:7f:b3:47:fa:3d:
8d:c2:7f:87:1c:76:d0:ed:45:dc:1c:71:af:26:68:ec:ab:72:
12:ef:bb:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5pAXiei0f62+fMAu1cncuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMjEzMTQxYWE5M2FkOGNmOGMyNjgzNzc4NWM3ODQ1NGNk
YjgxODAwHhcNMjUwNTEwMTAwMDU2WhcNMjUwNTExMTAwMDU2WjAzMTEwLwYDVQQD
EygwNGIwODQ4MjMyOTZjNGMzNTVlNjc1OWRiZTZmYTYyZDkyYmY3YjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuutlTTiMcNN2iS9/2L5nKnzT/q2
0n0vyXyTflOUkN0p0/rrj9YCfXEAjCcgjeG7heHmeqpbhOPWefg8KFiD1X1XJ4Ij
5FIQ5Fr1NCaSPW5fERitehiVoT1jTzCbpRqmWtU0+2RvivchRWyP/yBMiDjJJwds
zhxg7n+kTDml9ZFl7ovEqxL099kKVcHwDAKM46Kmou97A4OavjxXerxW3yv2wEA5
czcyCiC2YCJOscNuDaIFWmXO5zUUHpakor2RRxh2l/+5Mr2PwMi3b2OAZMCPVxLk
5fJqbB6t4jnXIrKQ0tjC0eHQPf5icisvm0J3Wqu5hbO+hWsnmgSg8Iu76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASwhIIylsTDVeZ1nb5vpi2Sv3tTMB8GA1UdIwQY
MBaAFEMhMUGqk62M+MJoN3hceEVM24GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlFeFFhcVRyWXo0d21nM2VGeDRSVXpiZ1lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82OGQ3YTQtNGU3My00OTVjLWEwM2Ut
MGUyNzY5YWE4YWIwLzEvUXlFeFFhcVRyWXo0d21nM2VGeDRSVXpiZ1lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82OGQ3YTQtNGU3My00OTVjLWEwM2UtMGUyNzY5YWE4YWIw
LzEvUXlFeFFhcVRyWXo0d21nM2VGeDRSVXpiZ1lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUBpnln8
tkIu9d3QYVXvDBW8hawK9TJKgrVXYk6e6tAIzCgzwfXwyIX7GFOQw7NAevhCj5/e
fLv5QGgN+YHgt0KEJa6F1om7+BeMu+U7t5upwm9ZmoCXA3OCTOBeYZV5kK2Cb4Wp
cWQZycmh1zvhCyp+mWZQNFeX8NSQCw2aJqbONw8ihQmbeZmjKXbKy7fxzgP3xs84
xLQ02PnquoSV9E6F3mpbGrSa3CDMkrGe5QaE2NGBJVn/JO+Br4EAfF/dQLJ8v1aP
eDOPb4LQKS7174H91eW0QdfOnXRVue1mMaT9QeOrUn+zR/o9jcJ/hxx20O1F3Bxx
ryZo7KtyEu+73A==
-----END CERTIFICATE-----
Generated at Sat May 10 19:18:34 2025 by rpki-client