Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: BqhFf5WB3GL89npf+SeaUpu4SrHYrZmEKhJ+mJph0zY=
Subject key identifier: 17:7F:67:78:A4:A4:8B:36:9F:1E:41:C2:66:FC:58:58:6F:B8:C1:1B
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 0196B6D9CA000683F4A4651A755A87EB703D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0AA1
Signing time: Fri 09 May 2025 21:00:48 +0000
Manifest this update: Fri 09 May 2025 21:00:48 +0000
Manifest next update: Sat 10 May 2025 21:00:48 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: tCdxKWHWHHpNXQZWOxDwmNHvgTP+yxdoFNyChOxKVAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:ca:00:06:83:f4:a4:65:1a:75:5a:87:eb:70:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: May 9 21:00:48 2025 GMT
Not After : May 10 21:00:48 2025 GMT
Subject: CN=177f6778a4a48b369f1e41c266fc58586fb8c11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:78:e8:85:2b:1a:c8:b0:bb:1f:61:56:65:ef:
e8:67:de:b6:b9:31:39:60:2a:bd:b5:ac:ce:e0:a0:
dc:cc:7b:de:12:6c:46:ac:82:38:5e:13:b6:96:9d:
2e:3f:0e:e6:bd:66:ef:0c:aa:4d:7d:44:26:6f:bd:
6b:9b:c8:67:5b:4e:ea:ce:bb:ea:ac:0a:f8:6b:ac:
21:14:02:1d:2c:b3:5a:a3:dd:40:25:ef:8d:56:c4:
f8:2d:17:1f:82:35:dd:99:c3:fb:5f:4c:99:bf:ff:
15:7c:92:67:dd:1b:be:c6:ed:bb:ac:b5:bf:b9:c6:
39:14:cb:19:a7:05:6c:bb:a6:bc:a1:4e:1b:74:c5:
d6:c7:09:31:57:4c:f4:4d:5f:06:df:96:97:0d:05:
40:19:51:ef:6e:32:34:af:3b:64:6e:a7:21:c3:43:
45:49:2e:9b:06:14:d1:32:ab:c9:28:64:59:80:1f:
ab:2c:2f:85:07:5a:0a:98:61:11:6f:2f:3a:39:6c:
23:94:c9:1c:2c:1b:12:57:f6:32:8b:14:34:2e:1f:
e9:50:be:cf:0e:83:df:88:a5:44:dd:aa:3c:8f:25:
ee:cf:d8:9d:b0:26:2c:43:03:b9:ff:bf:b2:4f:f3:
14:08:5f:f9:da:99:61:81:e1:e2:68:7f:a1:f7:0e:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7F:67:78:A4:A4:8B:36:9F:1E:41:C2:66:FC:58:58:6F:B8:C1:1B
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:63:d4:b2:2d:7b:6f:ad:ae:66:4c:41:73:15:9a:25:b5:9f:
7f:ce:c2:50:4f:eb:d4:7f:5f:d2:da:ad:5a:fc:db:9c:d2:d8:
17:36:9c:60:3d:63:4f:81:26:e1:0a:5a:88:fa:0e:24:ed:86:
bf:31:09:10:1e:33:cd:dc:a5:30:e7:4e:b6:91:79:93:d7:ea:
73:f0:84:3f:c0:9c:34:29:ec:f4:25:4e:ab:77:74:b9:1b:3a:
a9:05:7c:b1:5b:e2:53:76:ba:50:db:62:43:4c:a7:d8:1c:e4:
af:5d:5e:ba:57:38:d6:16:18:76:a6:4a:3b:87:cb:1b:1a:37:
81:e1:6f:23:e7:4c:92:99:ac:5b:75:d5:47:0a:95:a5:6e:54:
ac:55:d0:66:ec:65:11:7f:4e:3d:dd:33:6d:75:06:f5:98:13:
f1:01:83:42:64:c3:7c:2a:0d:ef:cf:89:bb:9f:80:c8:91:83:
0f:24:4a:e0:42:c2:d7:27:33:bb:29:bd:4c:e3:a8:df:e8:c5:
ee:9c:32:d7:56:34:02:2d:93:10:d1:c3:9a:75:c5:10:c5:60:
bc:80:20:d1:14:86:e4:2e:73:e4:be:4b:51:37:d5:0b:1f:92:
09:f4:45:f7:e8:87:9f:04:9e:7d:9c:7e:af:63:da:ee:72:a2:
3c:25:44:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa22coABoP0pGUadVqH63A9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk
NmU2MWMwHhcNMjUwNTA5MjEwMDQ4WhcNMjUwNTEwMjEwMDQ4WjAzMTEwLwYDVQQD
EygxNzdmNjc3OGE0YTQ4YjM2OWYxZTQxYzI2NmZjNTg1ODZmYjhjMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXjohSsayLC7H2FWZe/oZ962uTE5
YCq9tazO4KDczHveEmxGrII4XhO2lp0uPw7mvWbvDKpNfUQmb71rm8hnW07qzrvq
rAr4a6whFAIdLLNao91AJe+NVsT4LRcfgjXdmcP7X0yZv/8VfJJn3Ru+xu27rLW/
ucY5FMsZpwVsu6a8oU4bdMXWxwkxV0z0TV8G35aXDQVAGVHvbjI0rztkbqchw0NF
SS6bBhTRMqvJKGRZgB+rLC+FB1oKmGERby86OWwjlMkcLBsSV/YyixQ0Lh/pUL7P
DoPfiKVE3ao8jyXuz9idsCYsQwO5/7+yT/MUCF/52plhgeHiaH+h9w5qEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd/Z3ikpIs2nx5Bwmb8WFhvuMEbMB8GA1UdIwQY
MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt
MDViZmYzMWM1M2ZlLzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl
LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGPUsi17
b62uZkxBcxWaJbWff87CUE/r1H9f0tqtWvzbnNLYFzacYD1jT4Em4QpaiPoOJO2G
vzEJEB4zzdylMOdOtpF5k9fqc/CEP8CcNCns9CVOq3d0uRs6qQV8sVviU3a6UNti
Q0yn2Bzkr11eulc41hYYdqZKO4fLGxo3geFvI+dMkpmsW3XVRwqVpW5UrFXQZuxl
EX9OPd0zbXUG9ZgT8QGDQmTDfCoN78+Ju5+AyJGDDyRK4ELC1yczuym9TOOo3+jF
7pwy11Y0Ai2TENHDmnXFEMVgvIAg0RSG5C5z5L5LUTfVCx+SCfRF9+iHnwSefZx+
r2Pa7nKiPCVE1A==
-----END CERTIFICATE-----
Generated at Sat May 10 06:54:59 2025 by rpki-client