Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: OLSPOB6J40beFrdq1fqEXKOOkkm26gcRgAYPhHJYEls=
Subject key identifier: 55:DF:68:1E:08:07:35:8C:B8:F9:69:D4:37:DD:BF:19:CF:67:77:96
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 0196C9F234FC12A0C8ACB10BAFA1085BF24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: 02C5
Signing time: Tue 13 May 2025 14:00:15 +0000
Manifest this update: Tue 13 May 2025 14:00:15 +0000
Manifest next update: Wed 14 May 2025 14:00:15 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: lSji2dxpINmmBawI0pb8n2URfnmPPdNtYnhnN9j+87I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:34:fc:12:a0:c8:ac:b1:0b:af:a1:08:5b:f2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: May 13 14:00:15 2025 GMT
Not After : May 14 14:00:15 2025 GMT
Subject: CN=55df681e0807358cb8f969d437ddbf19cf677796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:f4:3c:92:3b:3a:a6:ae:ca:e5:bb:7f:eb:
3f:bf:17:62:3d:8b:ac:4a:a5:89:07:4e:11:cb:13:
82:06:92:4f:18:70:9c:9e:4f:e7:ba:a2:05:20:a2:
44:9d:da:b5:66:05:98:ed:2f:a7:38:c1:ad:99:44:
a4:ae:fb:fd:53:59:a4:82:b6:90:43:2e:da:92:f9:
bc:a8:28:7a:35:f1:0a:75:ab:1b:09:84:07:0b:c9:
9e:23:14:67:8a:3e:c1:dc:07:57:95:1b:79:de:88:
d2:93:39:b4:13:bc:ad:a6:ae:c4:4b:ec:56:4f:79:
87:fc:ef:48:7c:01:b8:9e:10:21:90:94:66:1f:e1:
bb:84:ff:27:e6:cf:61:8b:0b:da:f6:ce:c8:6d:27:
e5:4f:da:dd:5b:9c:0d:04:b2:c5:20:30:aa:a0:8b:
e4:12:26:0a:eb:59:d2:0b:25:c7:47:a7:6d:00:a3:
d8:e2:bb:4d:e6:18:b3:73:51:7c:8a:43:51:f6:fc:
65:11:10:b0:f7:c6:66:41:f2:1c:44:bf:3c:8a:77:
17:85:28:34:f2:2b:8f:82:ad:6f:84:ce:9b:3b:28:
ae:70:0c:3a:51:0b:30:f5:64:47:a9:d4:6f:e1:cf:
63:2b:55:7d:de:a9:6b:27:e9:9c:8b:a1:60:53:42:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DF:68:1E:08:07:35:8C:B8:F9:69:D4:37:DD:BF:19:CF:67:77:96
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7d:68:62:12:89:d0:a8:bb:10:be:87:a8:a4:2a:86:12:88:
26:3b:df:fe:f1:26:50:86:1e:f0:1b:55:9d:f3:84:d4:e0:34:
a9:a1:29:01:a4:ff:8c:9e:7b:5b:d1:95:ca:eb:ed:a2:b1:bd:
0f:d4:aa:01:41:da:d0:38:07:ff:a7:19:3a:3a:64:8c:14:8e:
c8:ca:f1:aa:c0:9c:de:f3:02:43:75:64:ed:68:e6:d7:2b:fa:
8e:03:f1:2d:5d:1e:ba:32:da:74:9d:93:f9:9f:f6:7c:d0:14:
d0:c0:87:08:c7:91:20:63:04:ba:90:3d:c3:a8:aa:8d:61:49:
87:50:e2:8f:8e:ee:05:21:77:ff:72:04:7f:1b:fe:3c:df:96:
1a:e0:82:38:d0:93:da:97:e6:b8:34:67:42:f6:1a:06:5c:8e:
d7:a6:57:0c:97:d5:c8:82:34:b2:6d:d1:9d:28:18:e0:5b:31:
d5:7c:fb:54:69:db:ac:2c:31:cf:60:a0:89:8e:22:d9:fa:c3:
98:e5:57:0d:26:3d:22:5a:37:ca:cb:02:31:37:7d:75:1f:bb:
7c:d0:98:ee:42:2c:e8:d1:cc:cf:5d:92:07:b6:5d:d2:51:37:
6c:75:32:3c:ed:d0:05:f4:4e:a7:66:c5:da:c8:5a:60:ad:84:
34:7e:14:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJ8jT8EqDIrLELr6EIW/JLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYThjZDQ5NzliYzVkZDMxYjEwZDdiNzE4NTBlZjEyZWFj
M2NmYjUwHhcNMjUwNTEzMTQwMDE1WhcNMjUwNTE0MTQwMDE1WjAzMTEwLwYDVQQD
Eyg1NWRmNjgxZTA4MDczNThjYjhmOTY5ZDQzN2RkYmYxOWNmNjc3Nzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng30PJI7OqauyuW7f+s/vxdiPYus
SqWJB04RyxOCBpJPGHCcnk/nuqIFIKJEndq1ZgWY7S+nOMGtmUSkrvv9U1mkgraQ
Qy7akvm8qCh6NfEKdasbCYQHC8meIxRnij7B3AdXlRt53ojSkzm0E7ytpq7ES+xW
T3mH/O9IfAG4nhAhkJRmH+G7hP8n5s9hiwva9s7IbSflT9rdW5wNBLLFIDCqoIvk
EiYK61nSCyXHR6dtAKPY4rtN5hizc1F8ikNR9vxlERCw98ZmQfIcRL88incXhSg0
8iuPgq1vhM6bOyiucAw6UQsw9WRHqdRv4c9jK1V93qlrJ+mci6FgU0L8SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXfaB4IBzWMuPlp1DfdvxnPZ3eWMB8GA1UdIwQY
MBaAFEKozUl5vF3TGxDXtxhQ7xLqw8+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFqTlNYbThYZE1iRU5lM0dGRHZFdXJEejdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWU3ZjYtZjRmYi00ZWEwLThkZGYt
YmU1YTBmZmI4Y2E1LzEvUXFqTlNYbThYZE1iRU5lM0dGRHZFdXJEejdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81MWU3ZjYtZjRmYi00ZWEwLThkZGYtYmU1YTBmZmI4Y2E1
LzEvUXFqTlNYbThYZE1iRU5lM0dGRHZFdXJEejdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy31oYhKJ
0Ki7EL6HqKQqhhKIJjvf/vEmUIYe8BtVnfOE1OA0qaEpAaT/jJ57W9GVyuvtorG9
D9SqAUHa0DgH/6cZOjpkjBSOyMrxqsCc3vMCQ3Vk7Wjm1yv6jgPxLV0eujLadJ2T
+Z/2fNAU0MCHCMeRIGMEupA9w6iqjWFJh1Dij47uBSF3/3IEfxv+PN+WGuCCONCT
2pfmuDRnQvYaBlyO16ZXDJfVyII0sm3RnSgY4Fsx1Xz7VGnbrCwxz2CgiY4i2frD
mOVXDSY9Ilo3yssCMTd9dR+7fNCY7kIs6NHMz12SB7Zd0lE3bHUyPO3QBfROp2bF
2shaYK2ENH4U+w==
-----END CERTIFICATE-----
Generated at Tue May 13 20:00:29 2025 by rpki-client