Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: aNkNy67dOZRv+hh4eN/Mpveb042fFF6ucd15igIZZY0=
Subject key identifier: 89:73:29:EF:0C:B0:08:06:FC:6F:2E:DC:D5:66:B6:D3:E7:C6:5A:3D
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 0196B7109C4F7CC9DBD16E71CFF4DC31F071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0A12
Signing time: Fri 09 May 2025 22:00:41 +0000
Manifest this update: Fri 09 May 2025 22:00:41 +0000
Manifest next update: Sat 10 May 2025 22:00:41 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: UYLpWVh+JAK3bdHsVsi1WxLN+S6sQYROUPlteUmSRwA=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:9c:4f:7c:c9:db:d1:6e:71:cf:f4:dc:31:f0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: May 9 22:00:41 2025 GMT
Not After : May 10 22:00:41 2025 GMT
Subject: CN=897329ef0cb00806fc6f2edcd566b6d3e7c65a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:f6:52:ea:1b:fd:64:81:15:d7:b6:5f:a9:
71:0a:8b:96:72:cb:5f:a8:b5:af:85:52:29:07:0e:
06:27:b5:9c:48:84:e3:33:3e:15:32:55:6b:17:17:
2e:78:1f:d5:d8:89:8b:85:1a:42:a1:88:80:42:77:
0a:72:86:b0:e1:dd:b8:58:1e:0b:73:41:7f:d7:a6:
d8:de:87:58:08:90:db:78:ae:f6:ef:82:fb:09:9a:
c9:42:29:88:e4:36:23:13:ae:81:29:09:9a:90:cc:
50:ca:4d:b2:7b:cb:85:61:fa:e2:5a:1d:fe:54:69:
7e:68:22:60:f6:4c:17:a5:f2:42:61:11:d4:2e:22:
a1:e8:e8:36:7f:70:11:c7:2e:08:ef:c9:b6:ff:07:
e8:0d:60:09:e8:36:39:4d:0d:2b:21:2e:2b:7a:1b:
95:7d:26:6a:77:af:45:4f:43:8d:26:51:5b:df:c8:
e7:5d:cc:46:b2:5a:3c:f3:87:bf:39:b1:ed:48:dd:
3c:f6:9f:9d:af:06:f8:81:95:16:1d:63:ac:7d:12:
41:fc:50:a1:d1:b0:07:07:e8:49:db:82:a8:ca:60:
ab:3a:b0:1c:86:e6:25:f9:20:2e:7f:bc:1f:3f:f5:
67:c2:b3:99:e9:27:31:43:cc:a8:ce:89:cf:4c:18:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:29:EF:0C:B0:08:06:FC:6F:2E:DC:D5:66:B6:D3:E7:C6:5A:3D
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:92:e5:ec:2e:0b:d5:27:63:a4:98:e9:b5:b2:5a:a2:78:df:
d5:26:32:c8:62:81:28:63:fa:f9:49:31:4e:f5:ba:28:e3:5e:
26:d2:60:38:f9:60:64:42:3a:c1:07:d9:7c:f9:88:f3:cb:db:
b6:cc:e8:50:1c:69:06:71:7c:ff:19:ec:eb:12:72:a0:63:ec:
8f:8f:ce:19:36:fa:23:1e:f7:36:05:1c:c5:9c:1a:d5:f9:95:
d5:2f:aa:9c:11:d7:90:3c:04:73:35:e0:d3:7d:f7:81:8a:cf:
87:82:a0:c5:2a:28:33:a1:6c:95:ba:84:56:f9:cb:5e:a1:d3:
9d:af:28:38:6a:41:e4:e1:f8:6c:e4:1b:af:f0:60:66:15:b4:
bc:e6:72:bd:f6:1e:51:60:91:91:6a:3b:21:77:fb:96:57:3c:
e3:77:1c:e4:42:1a:27:75:6a:ba:7f:74:1e:0f:ae:c6:bd:55:
1c:f7:09:a7:9e:dd:d3:bd:aa:8a:c8:d6:ce:34:66:56:c2:65:
b3:b4:0d:4a:64:fd:a7:b9:3b:5a:91:cf:0e:26:f1:4b:8d:ec:
47:c9:1d:77:56:c2:a6:bf:0f:18:6c:e8:5f:00:26:3c:4f:d4:
9a:7b:e4:d7:0b:8b:05:46:56:49:5c:03:ec:3a:d5:5e:65:2f:
9a:69:07:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3EJxPfMnb0W5xz/TcMfBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw
MTkwODQwHhcNMjUwNTA5MjIwMDQxWhcNMjUwNTEwMjIwMDQxWjAzMTEwLwYDVQQD
Eyg4OTczMjllZjBjYjAwODA2ZmM2ZjJlZGNkNTY2YjZkM2U3YzY1YTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIX2Uuob/WSBFde2X6lxCouWcstf
qLWvhVIpBw4GJ7WcSITjMz4VMlVrFxcueB/V2ImLhRpCoYiAQncKcoaw4d24WB4L
c0F/16bY3odYCJDbeK7274L7CZrJQimI5DYjE66BKQmakMxQyk2ye8uFYfriWh3+
VGl+aCJg9kwXpfJCYRHULiKh6Og2f3ARxy4I78m2/wfoDWAJ6DY5TQ0rIS4rehuV
fSZqd69FT0ONJlFb38jnXcxGslo884e/ObHtSN089p+drwb4gZUWHWOsfRJB/FCh
0bAHB+hJ24KoymCrOrAchuYl+SAuf7wfP/VnwrOZ6ScxQ8yozonPTBjqrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlzKe8MsAgG/G8u3NVmttPnxlo9MB8GA1UdIwQY
MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt
ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw
LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZLl7C4L
1SdjpJjptbJaonjf1SYyyGKBKGP6+UkxTvW6KONeJtJgOPlgZEI6wQfZfPmI88vb
tszoUBxpBnF8/xns6xJyoGPsj4/OGTb6Ix73NgUcxZwa1fmV1S+qnBHXkDwEczXg
0333gYrPh4KgxSooM6FslbqEVvnLXqHTna8oOGpB5OH4bOQbr/BgZhW0vOZyvfYe
UWCRkWo7IXf7llc843cc5EIaJ3Vqun90Hg+uxr1VHPcJp57d072qisjWzjRmVsJl
s7QNSmT9p7k7WpHPDibxS43sR8kdd1bCpr8PGGzoXwAmPE/Umnvk1wuLBUZWSVwD
7DrVXmUvmmkH3Q==
-----END CERTIFICATE-----
Generated at Fri May 9 23:52:06 2025 by rpki-client