Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: V0SJWfccbCYnIzou7B3gqEBkjsTcGaMq5TL5XQ8GX1U=
Subject key identifier: 48:81:E0:62:CE:54:88:36:9F:4F:01:8C:CC:F5:F0:01:61:27:81:39
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 0196C1CAF16459BEDDC7C75AA75E49863D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0921
Signing time: Mon 12 May 2025 00:00:24 +0000
Manifest this update: Mon 12 May 2025 00:00:24 +0000
Manifest next update: Tue 13 May 2025 00:00:24 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: F35CJArf3JbVaYvi4dtU8wEt+JI9Bo1M8fzgHpQ/uVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:ca:f1:64:59:be:dd:c7:c7:5a:a7:5e:49:86:3d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: May 12 00:00:24 2025 GMT
Not After : May 13 00:00:24 2025 GMT
Subject: CN=4881e062ce5488369f4f018cccf5f00161278139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:97:97:58:39:4a:19:73:5b:bd:7e:e9:29:
12:d0:b0:15:8f:88:17:4c:1b:37:38:e9:ff:45:ba:
9e:4b:62:b4:eb:9d:f7:9d:7b:ff:45:18:52:72:01:
43:6d:d1:47:01:69:56:f0:d9:46:da:bf:2d:ab:f4:
de:79:86:03:53:be:a7:ff:3d:93:c2:d4:f7:3a:e3:
db:35:17:8d:fa:e6:2e:d4:28:e8:fe:9a:c4:76:76:
89:d3:a5:f3:bf:24:bd:bb:5b:69:6e:1d:c3:6c:29:
7a:7f:37:43:ab:bf:5d:bc:22:68:c2:91:21:30:57:
54:64:4c:43:5e:ca:f5:83:ff:94:eb:4a:bb:48:ca:
91:03:6b:bb:06:7c:bf:3d:4a:de:06:a4:02:e9:48:
29:c1:0d:cc:d0:88:36:6c:57:cc:8b:ef:4c:57:ba:
ac:48:ab:b1:bf:99:ba:a3:98:4e:73:f2:45:c7:18:
2b:39:b1:07:36:1c:32:b5:1f:bb:4f:3f:59:58:b5:
c1:ac:ee:29:ac:c3:97:3e:45:32:dc:8b:2e:f3:25:
b6:d2:cc:8f:37:b0:3c:45:01:b8:2d:2b:0a:7d:5c:
1a:b5:7e:f2:14:7c:12:70:0b:42:2c:28:07:e2:a8:
38:97:85:f5:62:e8:26:38:b9:a3:9e:6e:cf:60:9d:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:E0:62:CE:54:88:36:9F:4F:01:8C:CC:F5:F0:01:61:27:81:39
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:66:1a:70:98:21:d5:80:f6:a8:86:bc:da:2f:fb:23:2d:fa:
2c:e4:71:64:c7:50:cb:cb:e0:23:d3:1d:5d:10:6a:70:6a:50:
47:d1:79:b5:cf:6c:4d:49:fc:ee:10:d4:c2:a4:ed:eb:47:cc:
40:4e:38:e4:92:d7:f3:7e:2b:f5:19:af:4a:db:0d:aa:db:ee:
bf:79:10:9b:76:ae:5f:ca:26:eb:17:47:06:38:cd:67:f7:c6:
10:df:57:5c:08:df:28:86:c2:f1:71:fe:13:70:a0:b2:ea:ed:
bb:c4:63:aa:c8:dc:45:1e:c9:26:51:cf:17:5a:47:68:e1:83:
bf:b3:bf:6a:40:15:74:2f:17:23:73:7d:94:81:a0:3d:48:fe:
83:ba:94:77:e9:43:82:32:8c:12:e7:1c:70:aa:12:00:7c:28:
db:88:9c:c4:43:6f:d4:b9:21:de:e7:07:4a:a4:83:53:ce:97:
16:b2:ea:cf:8f:44:d7:73:a4:56:17:cc:d2:f8:de:a5:76:4f:
ca:f6:e5:57:49:89:64:93:92:fb:69:8c:9e:6a:26:7d:77:f9:
55:2f:b7:4d:e9:e5:52:5b:dd:ed:3b:90:6e:97:e1:0d:5c:01:
ca:b7:0b:91:64:a6:49:8c:fd:bd:a9:ee:50:d4:70:5f:c1:80:
50:a7:be:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByvFkWb7dx8dap15Jhj2cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWMyOWM5NWQyNDhjYmZmYTc0NGFiMzRlNDdlYWNjYTcz
NTUwZDEwHhcNMjUwNTEyMDAwMDI0WhcNMjUwNTEzMDAwMDI0WjAzMTEwLwYDVQQD
Eyg0ODgxZTA2MmNlNTQ4ODM2OWY0ZjAxOGNjY2Y1ZjAwMTYxMjc4MTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3juXl1g5ShlzW71+6SkS0LAVj4gX
TBs3OOn/RbqeS2K06533nXv/RRhScgFDbdFHAWlW8NlG2r8tq/TeeYYDU76n/z2T
wtT3OuPbNReN+uYu1Cjo/prEdnaJ06XzvyS9u1tpbh3DbCl6fzdDq79dvCJowpEh
MFdUZExDXsr1g/+U60q7SMqRA2u7Bny/PUreBqQC6UgpwQ3M0Ig2bFfMi+9MV7qs
SKuxv5m6o5hOc/JFxxgrObEHNhwytR+7Tz9ZWLXBrO4prMOXPkUy3Isu8yW20syP
N7A8RQG4LSsKfVwatX7yFHwScAtCLCgH4qg4l4X1YugmOLmjnm7PYJ2W2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiB4GLOVIg2n08BjMz18AFhJ4E5MB8GA1UdIwQY
MBaAFKscKcldJIy/+nRKs05H6synNVDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQt
ZWE2Njg0NDE0OWVlLzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQtZWE2Njg0NDE0OWVl
LzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2YacJgh
1YD2qIa82i/7Iy36LORxZMdQy8vgI9MdXRBqcGpQR9F5tc9sTUn87hDUwqTt60fM
QE445JLX834r9RmvStsNqtvuv3kQm3auX8om6xdHBjjNZ/fGEN9XXAjfKIbC8XH+
E3Cgsurtu8RjqsjcRR7JJlHPF1pHaOGDv7O/akAVdC8XI3N9lIGgPUj+g7qUd+lD
gjKMEucccKoSAHwo24icxENv1Lkh3ucHSqSDU86XFrLqz49E13OkVhfM0vjepXZP
yvblV0mJZJOS+2mMnmomfXf5VS+3TenlUlvd7TuQbpfhDVwByrcLkWSmSYz9vanu
UNRwX8GAUKe+iQ==
-----END CERTIFICATE-----
Generated at Mon May 12 04:13:29 2025 by rpki-client