Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
File: QBMclDl36gqT787s000dXRyxgq8.mft (raw, json)
Hash identifier: ZyLSMj61i4ohg4ECp1o/5TIvWY6m8tHreYoyV/ydHUk=
Subject key identifier: D1:5F:DC:D9:56:E8:65:B4:2D:06:F7:16:FE:48:76:EE:31:BF:73:8C
Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Certificate serial: 0196BE256989279C373D5EEB29C266345467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
Manifest number: 0DE1
Signing time: Sun 11 May 2025 07:00:44 +0000
Manifest this update: Sun 11 May 2025 07:00:44 +0000
Manifest next update: Mon 12 May 2025 07:00:44 +0000
Files and hashes: 1: QBMclDl36gqT787s000dXRyxgq8.crl (hash: seuTg0FWMKbTu+JLd9N2lBgRXIZ5yxEk55DuVvNrNzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:69:89:27:9c:37:3d:5e:eb:29:c2:66:34:54:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Validity
Not Before: May 11 07:00:44 2025 GMT
Not After : May 12 07:00:44 2025 GMT
Subject: CN=d15fdcd956e865b42d06f716fe4876ee31bf738c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:38:77:f1:84:87:a0:4c:9f:09:79:e2:f5:
65:58:b0:0d:8a:fa:b0:61:d1:f5:37:04:00:ff:da:
e4:04:c8:83:40:75:1a:58:49:8f:80:79:32:26:78:
36:0d:f6:77:01:4c:cd:d4:b6:ac:74:33:2c:af:37:
1f:de:af:09:70:8e:a8:57:51:51:73:bb:2a:25:c4:
d0:11:a3:64:66:4a:1e:71:0e:49:2c:01:9b:68:3e:
99:24:07:89:6b:e4:4b:a6:2d:40:4c:a4:22:aa:73:
7e:91:21:e2:3e:5e:df:96:ad:6a:d9:b5:a9:0f:ba:
4b:22:d8:50:50:44:82:27:53:7f:9b:79:a6:9c:1c:
98:d5:9e:a4:3f:4f:fa:a9:e2:f2:34:43:9f:14:cb:
20:3f:e1:c2:24:1d:84:e2:c3:d3:72:2e:53:c4:ee:
52:f1:53:71:d2:77:1c:32:e0:0c:9d:d1:fb:84:b1:
df:64:23:e6:3e:a7:72:e3:da:74:cf:7e:6a:89:64:
d3:f9:b7:7c:d2:0a:4b:ca:2b:a5:3b:98:9f:e2:bd:
bf:30:76:0f:51:ab:13:f4:22:ed:dd:e9:9e:85:67:
df:e4:86:2f:f0:6f:67:78:b1:df:67:22:a5:b9:67:
ad:89:0d:10:00:1e:a2:95:c8:41:68:c7:d2:97:8f:
7a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5F:DC:D9:56:E8:65:B4:2D:06:F7:16:FE:48:76:EE:31:BF:73:8C
X509v3 Authority Key Identifier:
keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1b:e3:21:8e:90:2e:da:1a:df:53:a2:a9:d6:6d:30:ee:da:
d3:74:c0:fd:f7:bf:08:88:c4:82:18:19:29:7a:78:80:7e:41:
06:d2:c3:41:6a:12:c5:26:f0:cb:7a:b9:ee:54:b8:13:97:98:
a9:aa:fd:ab:9a:94:21:a5:48:29:b4:14:8e:b3:f5:b5:11:c9:
0a:91:a0:4c:a7:82:da:08:87:57:f3:87:e0:60:ff:22:d8:6a:
8d:77:ae:9a:b2:8b:a1:4e:27:90:e2:29:38:2b:9d:4b:8d:e6:
c4:fb:a3:69:77:c0:27:98:75:25:c6:c9:68:84:1e:a3:ec:9d:
8a:d0:80:32:00:f3:9b:3b:6b:c3:59:ca:94:9c:c4:06:28:e3:
76:bb:5a:df:4e:9e:e0:ed:b2:70:69:3c:e2:be:13:0a:b1:0f:
96:4d:4b:38:23:ea:ab:31:f0:df:bb:c6:9e:ec:f8:48:1e:1b:
98:38:f6:fd:7a:93:12:c5:34:da:e2:0e:51:ad:fb:4e:e6:71:
57:50:3e:39:7b:3f:62:b7:8d:c1:58:04:1c:36:20:77:3a:71:
d3:91:e3:d5:e7:cf:7c:d5:74:f4:48:9d:06:89:99:2b:f5:55:
55:53:f0:6d:2d:b7:df:8c:17:47:94:19:b9:66:01:4d:94:5b:
50:e4:2a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+JWmJJ5w3PV7rKcJmNFRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMTMxYzk0Mzk3N2VhMGE5M2VmY2VlY2QzNGQxZDVkMWNi
MTgyYWYwHhcNMjUwNTExMDcwMDQ0WhcNMjUwNTEyMDcwMDQ0WjAzMTEwLwYDVQQD
EyhkMTVmZGNkOTU2ZTg2NWI0MmQwNmY3MTZmZTQ4NzZlZTMxYmY3MzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbU4d/GEh6BMnwl54vVlWLANivqw
YdH1NwQA/9rkBMiDQHUaWEmPgHkyJng2DfZ3AUzN1LasdDMsrzcf3q8JcI6oV1FR
c7sqJcTQEaNkZkoecQ5JLAGbaD6ZJAeJa+RLpi1ATKQiqnN+kSHiPl7flq1q2bWp
D7pLIthQUESCJ1N/m3mmnByY1Z6kP0/6qeLyNEOfFMsgP+HCJB2E4sPTci5TxO5S
8VNx0nccMuAMndH7hLHfZCPmPqdy49p0z35qiWTT+bd80gpLyiulO5if4r2/MHYP
UasT9CLt3emehWff5IYv8G9neLHfZyKluWetiQ0QAB6ilchBaMfSl496CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFf3NlW6GW0LQb3Fv5Idu4xv3OMMB8GA1UdIwQY
MBaAFEATHJQ5d+oKk+/O7NNNHV0csYKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEt
MmI2NDlkNWViYWYzLzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEtMmI2NDlkNWViYWYz
LzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyhvjIY6Q
Ltoa31OiqdZtMO7a03TA/fe/CIjEghgZKXp4gH5BBtLDQWoSxSbwy3q57lS4E5eY
qar9q5qUIaVIKbQUjrP1tRHJCpGgTKeC2giHV/OH4GD/IthqjXeumrKLoU4nkOIp
OCudS43mxPujaXfAJ5h1JcbJaIQeo+yditCAMgDzmztrw1nKlJzEBijjdrta306e
4O2ycGk84r4TCrEPlk1LOCPqqzHw37vGnuz4SB4bmDj2/XqTEsU02uIOUa37TuZx
V1A+OXs/YreNwVgEHDYgdzpx05Hj1efPfNV09EidBomZK/VVVVPwbS2334wXR5QZ
uWYBTZRbUOQqSA==
-----END CERTIFICATE-----
Generated at Sun May 11 10:22:24 2025 by rpki-client