Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: kxuS3igYlUZhcXAF7xKIhtuBUmTsKa576zCJOkxUXqc=
Subject key identifier: E4:76:70:61:F1:D8:08:A0:05:3B:D0:93:0F:CB:13:A6:79:01:73:E4
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 0196BF6EDBD258C276453A8E4157CBB378BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 13:00:35 +0000
Manifest this update: Sun 11 May 2025 13:00:35 +0000
Manifest next update: Mon 12 May 2025 13:00:35 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: TEBaODlmDCqhNdveSNP6xcEtL-0.roa (hash: Ni+drEe1sF+jcV53LsQ0wrDEiq7Vue9pJpbJAT7gLcE=)
3: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: oiwyWtXuC3pPjbmVVa2OCiLgpC/hScLcoummV5onZ8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:db:d2:58:c2:76:45:3a:8e:41:57:cb:b3:78:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: May 11 13:00:35 2025 GMT
Not After : May 12 13:00:35 2025 GMT
Subject: CN=e4767061f1d808a0053bd0930fcb13a6790173e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:ff:5c:38:d5:35:e9:a2:3b:8a:ec:5d:fa:
e2:1f:3f:46:c2:20:94:42:1b:fa:94:f2:67:c7:31:
8d:5e:aa:80:87:27:b2:8c:cc:ee:79:cd:b8:d5:10:
85:60:be:db:60:51:41:e0:8d:ac:89:45:45:14:42:
29:86:7a:a4:81:f0:85:2d:b2:1c:c1:1f:bc:5a:fa:
bb:19:a9:cb:46:27:1e:ad:2f:6d:ca:47:a7:49:93:
00:e2:80:a9:ad:a7:ea:ae:06:0c:2d:cc:f6:77:a3:
b3:97:a5:46:9b:74:a3:18:1d:31:96:41:00:4d:c3:
5b:b8:03:a1:83:57:96:36:d0:df:02:97:6a:20:e6:
af:f6:90:f7:0b:8b:b9:98:ae:cd:d5:07:d3:30:21:
4f:50:85:ef:5a:27:2f:1a:04:b6:38:3b:bb:24:a8:
73:9e:0f:82:4a:0b:ef:02:15:8b:2f:cf:be:10:79:
45:32:a0:af:f0:6f:5d:6a:b6:78:9f:e9:1e:de:9b:
f7:37:a1:70:51:2f:63:f6:c1:33:f1:80:91:95:6f:
b5:b1:c1:2e:61:f1:5c:67:1c:ea:12:b7:22:41:e1:
74:18:f0:da:63:37:e1:a1:cc:7a:a0:db:3b:aa:83:
4e:5b:b5:73:d0:17:de:1f:4c:88:6f:24:89:81:1f:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:70:61:F1:D8:08:A0:05:3B:D0:93:0F:CB:13:A6:79:01:73:E4
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b6:f6:47:66:cf:9c:f7:cd:a9:16:8f:5d:f6:e3:4d:dd:b9:
3d:4e:8b:ef:3b:af:e9:0c:f8:75:9a:a7:4d:b1:fc:32:1a:02:
8d:76:ea:9d:9b:36:75:09:64:6e:0a:b7:cb:3f:e0:1a:40:10:
01:9f:58:46:27:eb:49:9f:0c:52:42:cc:aa:a4:0c:94:01:8a:
56:7c:98:97:6c:48:4b:7e:45:a8:0f:ec:d3:9a:eb:e8:2c:4c:
29:b4:df:1a:5f:c3:49:97:53:ee:5e:e5:ba:72:18:56:87:85:
70:42:6d:dd:1d:21:58:78:6a:27:61:c7:a5:f4:ca:fc:a1:36:
b4:37:cb:f0:a2:f2:51:3b:a1:0d:10:35:b1:c5:4c:35:69:5a:
d6:0d:91:4d:c5:d7:28:52:66:0a:af:5f:66:05:4d:93:b7:41:
5d:94:0e:73:ca:70:c4:8a:e9:92:7b:2c:34:94:a4:3b:fb:61:
ca:de:49:78:aa:23:f1:d3:c3:e2:88:47:4d:4c:5b:61:e8:31:
39:0c:c6:87:7d:0e:55:54:15:8f:77:f1:f1:4a:b1:39:d2:3b:
20:11:66:7f:2f:21:1f:a1:98:77:95:2d:b4:72:96:19:34:6f:
34:ac:20:c9:56:5d:b0:0f:72:86:8c:ed:fe:09:5f:b5:73:a4:
25:3b:fb:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/btvSWMJ2RTqOQVfLs3i7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw
ZTk0MTgwHhcNMjUwNTExMTMwMDM1WhcNMjUwNTEyMTMwMDM1WjAzMTEwLwYDVQQD
EyhlNDc2NzA2MWYxZDgwOGEwMDUzYmQwOTMwZmNiMTNhNjc5MDE3M2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2j/XDjVNemiO4rsXfriHz9GwiCU
Qhv6lPJnxzGNXqqAhyeyjMzuec241RCFYL7bYFFB4I2siUVFFEIphnqkgfCFLbIc
wR+8Wvq7GanLRicerS9tykenSZMA4oCprafqrgYMLcz2d6Ozl6VGm3SjGB0xlkEA
TcNbuAOhg1eWNtDfApdqIOav9pD3C4u5mK7N1QfTMCFPUIXvWicvGgS2ODu7JKhz
ng+CSgvvAhWLL8++EHlFMqCv8G9darZ4n+ke3pv3N6FwUS9j9sEz8YCRlW+1scEu
YfFcZxzqErciQeF0GPDaYzfhocx6oNs7qoNOW7Vz0BfeH0yIbySJgR/o4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR2cGHx2AigBTvQkw/LE6Z5AXPkMB8GA1UdIwQY
MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt
NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx
LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbb2R2bP
nPfNqRaPXfbjTd25PU6L7zuv6Qz4dZqnTbH8MhoCjXbqnZs2dQlkbgq3yz/gGkAQ
AZ9YRifrSZ8MUkLMqqQMlAGKVnyYl2xIS35FqA/s05rr6CxMKbTfGl/DSZdT7l7l
unIYVoeFcEJt3R0hWHhqJ2HHpfTK/KE2tDfL8KLyUTuhDRA1scVMNWla1g2RTcXX
KFJmCq9fZgVNk7dBXZQOc8pwxIrpknssNJSkO/thyt5JeKoj8dPD4ohHTUxbYegx
OQzGh30OVVQVj3fx8UqxOdI7IBFmfy8hH6GYd5UttHKWGTRvNKwgyVZdsA9yhozt
/glftXOkJTv7yw==
-----END CERTIFICATE-----
Generated at Sun May 11 15:57:02 2025 by rpki-client