Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: ump/ZXGKlX6H7W/4EAecyEkYCKWI5BPVRv5J4soECLw=
Subject key identifier: CB:75:B8:89:67:F3:0D:1E:0B:E6:27:48:FA:65:01:65:5C:C4:D7:1C
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 0196AA67774B88E960553E2B793F60F36FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 12F3
Signing time: Wed 07 May 2025 11:00:29 +0000
Manifest this update: Wed 07 May 2025 11:00:29 +0000
Manifest next update: Thu 08 May 2025 11:00:29 +0000
Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: 14s6Sk5/zm0rFrIX5zujMQq8bjblmh3Ey6F6fdRVtmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:77:4b:88:e9:60:55:3e:2b:79:3f:60:f3:6f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: May 7 11:00:29 2025 GMT
Not After : May 8 11:00:29 2025 GMT
Subject: CN=cb75b88967f30d1e0be62748fa6501655cc4d71c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:e0:53:65:fa:ef:46:b3:25:e5:f1:62:c8:
b5:df:27:b7:b2:b3:e8:3b:86:ab:d2:70:13:86:e6:
3b:fc:2c:18:52:86:aa:b7:4b:7d:62:64:d5:4e:b7:
9c:33:0a:bd:fb:b4:e4:f5:37:fd:7b:1e:1f:49:c3:
44:d0:3c:10:57:a8:26:b0:6b:51:de:df:0d:67:a9:
12:15:fb:af:c2:09:0f:21:ce:7a:e3:d3:71:90:e2:
77:a9:fa:b6:0e:38:37:e2:d5:3d:8f:bd:f7:d1:60:
55:8c:a0:28:1f:90:57:d2:25:a8:c9:60:2e:2b:95:
db:90:1a:14:79:7c:c3:79:68:82:a1:e6:06:b3:af:
d9:c0:a8:d6:bc:05:6e:7e:f8:55:54:ea:25:99:62:
99:75:b5:56:0c:99:61:a5:a6:24:02:9a:1c:03:a7:
50:cd:60:09:b0:a5:59:d3:f7:37:35:a5:b8:15:a1:
a4:de:ae:e8:70:02:3c:fe:b1:c7:59:d0:5f:10:dd:
94:1f:53:25:1e:e0:1b:c1:3a:bd:49:2d:9c:f2:01:
2d:6d:63:4d:f9:8e:dc:58:99:65:d7:c7:5b:c6:ea:
ad:2d:cf:0d:21:0a:35:7c:8d:88:b8:c4:8a:ea:07:
31:6a:b6:90:43:28:9d:88:f0:f0:ae:ec:44:a6:5d:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:B8:89:67:F3:0D:1E:0B:E6:27:48:FA:65:01:65:5C:C4:D7:1C
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:72:ec:d4:6d:62:4c:f0:53:64:89:a4:7d:28:66:fd:13:43:
df:24:8d:70:a3:6f:20:36:f0:7d:07:76:d9:4c:c5:ca:02:30:
f6:db:17:b8:ed:6d:fa:94:0a:55:5f:cb:a3:95:62:d8:dc:0d:
02:4a:f1:9c:0f:ab:6b:19:fa:46:80:cb:be:a5:3a:b6:10:8c:
89:65:55:a9:e8:4a:18:67:cf:1c:1b:33:09:8d:32:67:07:17:
23:84:54:b9:40:d0:0b:76:7b:57:5c:ce:9f:c1:74:93:99:88:
c2:27:08:d2:c4:48:87:92:00:41:4b:91:d0:61:71:ae:16:c1:
ae:df:67:c9:2d:86:a9:e6:a2:58:52:5b:f5:d8:a9:77:e6:da:
f7:10:b2:a6:36:b9:f0:e7:d8:ce:85:81:ae:f9:88:0d:7b:0d:
6a:2e:6f:ec:d3:78:92:57:50:14:34:b9:8b:9f:b9:8f:39:36:
b4:a0:3c:89:ec:52:a6:5a:94:a0:d3:b4:b6:83:26:e0:af:0d:
be:b2:08:bf:69:1d:b8:14:00:c9:67:ad:ff:9c:41:ca:0c:b1:
88:08:bf:29:e5:8f:ab:ac:16:83:0d:c0:27:7e:aa:0c:21:37:
34:ab:1a:4b:29:f0:a1:86:5a:9e:f5:80:c2:8b:38:c3:57:88:
0e:7f:c0:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqZ3dLiOlgVT4reT9g82/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWE3YTc1NzZiMWIyMjk1OTBjMDkwZmQzNTZjMzgyZGZm
MzE1YjcwHhcNMjUwNTA3MTEwMDI5WhcNMjUwNTA4MTEwMDI5WjAzMTEwLwYDVQQD
EyhjYjc1Yjg4OTY3ZjMwZDFlMGJlNjI3NDhmYTY1MDE2NTVjYzRkNzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQrgU2X670azJeXxYsi13ye3srPo
O4ar0nAThuY7/CwYUoaqt0t9YmTVTrecMwq9+7Tk9Tf9ex4fScNE0DwQV6gmsGtR
3t8NZ6kSFfuvwgkPIc5649NxkOJ3qfq2Djg34tU9j7330WBVjKAoH5BX0iWoyWAu
K5XbkBoUeXzDeWiCoeYGs6/ZwKjWvAVufvhVVOolmWKZdbVWDJlhpaYkApocA6dQ
zWAJsKVZ0/c3NaW4FaGk3q7ocAI8/rHHWdBfEN2UH1MlHuAbwTq9SS2c8gEtbWNN
+Y7cWJll18dbxuqtLc8NIQo1fI2IuMSK6gcxaraQQyidiPDwruxEpl0kqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMt1uIln8w0eC+YnSPplAWVcxNccMB8GA1UdIwQY
MBaAFKiqenV2sbIpWQwJD9NWw4Lf8xW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUt
Zjc1MzQ1ODQ4ZTNmLzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9lNWVkYjMtMGVhOC00NDIyLWIxNzUtZjc1MzQ1ODQ4ZTNm
LzEvcUtwNmRYYXhzaWxaREFrUDAxYkRndF96RmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3Ls1G1i
TPBTZImkfShm/RND3ySNcKNvIDbwfQd22UzFygIw9tsXuO1t+pQKVV/Lo5Vi2NwN
AkrxnA+raxn6RoDLvqU6thCMiWVVqehKGGfPHBszCY0yZwcXI4RUuUDQC3Z7V1zO
n8F0k5mIwicI0sRIh5IAQUuR0GFxrhbBrt9nyS2GqeaiWFJb9dipd+ba9xCypja5
8OfYzoWBrvmIDXsNai5v7NN4kldQFDS5i5+5jzk2tKA8iexSplqUoNO0toMm4K8N
vrIIv2kduBQAyWet/5xBygyxiAi/KeWPq6wWgw3AJ36qDCE3NKsaSynwoYZanvWA
wos4w1eIDn/APg==
-----END CERTIFICATE-----
Generated at Wed May 7 13:31:23 2025 by rpki-client