Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: po5tjYQFMwhtALNxCctU5WSWe25iO0zOntZpwYSllKk=
Subject key identifier: CD:6E:B9:76:30:D8:BF:A6:34:9A:9C:D7:82:73:7D:F0:81:5C:EB:64
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 0196C1260FB158EBFB2097BBF6FB9BB17DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 070D
Signing time: Sun 11 May 2025 21:00:19 +0000
Manifest this update: Sun 11 May 2025 21:00:19 +0000
Manifest next update: Mon 12 May 2025 21:00:19 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: H3qvecm2oKXeXdSIHCmDvZM+lbFSXJnDU27UK89FjWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:0f:b1:58:eb:fb:20:97:bb:f6:fb:9b:b1:7d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: May 11 21:00:19 2025 GMT
Not After : May 12 21:00:19 2025 GMT
Subject: CN=cd6eb97630d8bfa6349a9cd782737df0815ceb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:7d:ff:32:86:a0:df:d1:4a:5f:cd:ee:16:
ce:f9:42:91:c5:bb:01:c3:d0:2c:dd:05:41:27:b5:
61:13:f7:39:03:c8:13:d8:2e:c5:92:f4:ee:37:83:
a9:0e:c7:1e:98:c9:75:36:3b:63:d4:a2:a3:04:c7:
7f:81:58:2b:af:a0:bb:88:d7:c3:f7:90:c4:f6:3b:
68:2e:37:c5:49:c5:54:bf:ba:6f:f6:4d:8c:74:19:
72:25:ba:e3:cd:13:21:61:e5:e7:81:c0:9f:27:c4:
21:b8:43:92:cb:6b:e1:47:89:f2:e6:83:48:b9:81:
6b:43:b5:7b:15:28:13:b7:6f:5e:54:76:bb:b0:d0:
85:a9:c4:44:d0:6c:c4:eb:33:38:9d:6d:2b:e4:1a:
88:f9:e2:2f:6f:77:f1:88:6f:86:73:3a:08:6e:ea:
c9:42:c6:3e:76:7e:56:fa:b2:57:1d:54:1c:68:78:
d4:e9:6b:d9:ba:d1:72:04:e4:49:0d:c8:21:f4:6f:
a0:70:b4:20:00:fb:35:f4:b1:db:c8:10:29:61:80:
da:10:d5:71:17:05:f2:d2:9e:32:9c:7f:ba:1c:4d:
b9:c5:67:23:2a:25:b9:ca:d5:0a:c0:4d:2c:19:e2:
38:6b:42:aa:bf:b2:5c:30:cb:da:e9:5b:ab:74:88:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:B9:76:30:D8:BF:A6:34:9A:9C:D7:82:73:7D:F0:81:5C:EB:64
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:8f:ac:0c:d7:4e:f4:09:51:92:63:9e:9a:38:4c:31:84:
88:12:e8:bd:73:9f:aa:d8:68:16:2a:44:0f:4f:41:75:04:45:
1f:f3:41:77:64:e2:79:54:9f:67:58:84:c6:22:47:95:e3:42:
33:4a:1b:fc:8a:37:f0:f8:bb:91:84:5c:77:7e:75:d8:a4:c8:
78:aa:b3:12:d2:5b:56:70:57:01:ac:ee:8e:4d:df:0e:91:f0:
b0:18:47:7a:6d:4d:09:06:d2:eb:e9:0d:b0:8a:cd:db:0f:81:
ef:45:f3:3e:c5:8d:58:ba:64:51:fc:54:d7:d5:66:d6:78:cb:
ba:2b:43:2f:e4:8d:a7:ac:ab:9d:b2:38:7c:eb:a4:e5:91:7b:
db:3e:a9:71:74:84:c1:15:7e:2e:66:8f:63:63:1c:9f:12:d3:
a3:03:2a:00:b7:7b:58:a6:38:84:9d:9b:34:91:54:69:f4:89:
2c:5b:8b:50:f9:f0:e6:58:37:48:a9:1c:40:f4:33:d4:b0:8f:
25:d6:24:b6:07:94:31:f1:b9:c5:72:32:ff:10:52:c0:09:e5:
2e:ce:af:9a:f5:76:a0:4c:13:31:c9:b8:8b:c3:ba:55:58:98:
c8:84:76:6c:89:46:ad:d1:71:05:b9:8f:1a:d3:24:83:56:5c:
10:67:cf:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJg+xWOv7IJe79vubsX3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTdhNjhmMDhhMmUzMGJhN2Q3M2Q0NGM5YTZlMjQwMGZk
MGEzYjEwHhcNMjUwNTExMjEwMDE5WhcNMjUwNTEyMjEwMDE5WjAzMTEwLwYDVQQD
EyhjZDZlYjk3NjMwZDhiZmE2MzQ5YTljZDc4MjczN2RmMDgxNWNlYjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MZ9/zKGoN/RSl/N7hbO+UKRxbsB
w9As3QVBJ7VhE/c5A8gT2C7FkvTuN4OpDscemMl1Njtj1KKjBMd/gVgrr6C7iNfD
95DE9jtoLjfFScVUv7pv9k2MdBlyJbrjzRMhYeXngcCfJ8QhuEOSy2vhR4ny5oNI
uYFrQ7V7FSgTt29eVHa7sNCFqcRE0GzE6zM4nW0r5BqI+eIvb3fxiG+GczoIburJ
QsY+dn5W+rJXHVQcaHjU6WvZutFyBORJDcgh9G+gcLQgAPs19LHbyBApYYDaENVx
FwXy0p4ynH+6HE25xWcjKiW5ytUKwE0sGeI4a0Kqv7JcMMva6VurdIgdrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1uuXYw2L+mNJqc14JzffCBXOtkMB8GA1UdIwQY
MBaAFKpXpo8IouMLp9c9RMmm4kAP0KOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMt
ODQ2OGU0OWYwMGVkLzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC85YjczNzctZDQ2NS00NmI5LWE1NjMtODQ2OGU0OWYwMGVk
LzEvcWxlbWp3aWk0d3VuMXoxRXlhYmlRQV9RbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhamPrAzX
TvQJUZJjnpo4TDGEiBLovXOfqthoFipED09BdQRFH/NBd2TieVSfZ1iExiJHleNC
M0ob/Io38Pi7kYRcd3512KTIeKqzEtJbVnBXAazujk3fDpHwsBhHem1NCQbS6+kN
sIrN2w+B70XzPsWNWLpkUfxU19Vm1njLuitDL+SNp6yrnbI4fOuk5ZF72z6pcXSE
wRV+LmaPY2McnxLTowMqALd7WKY4hJ2bNJFUafSJLFuLUPnw5lg3SKkcQPQz1LCP
JdYktgeUMfG5xXIy/xBSwAnlLs6vmvV2oEwTMcm4i8O6VViYyIR2bIlGrdFxBbmP
GtMkg1ZcEGfP1w==
-----END CERTIFICATE-----
Generated at Mon May 12 01:31:11 2025 by rpki-client