Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: E6tHwWe3Gsm6qRMLuOY0meEQ4guJmoLFEuA9L0VYkLs=
Subject key identifier: B3:B7:F1:4D:2B:F5:41:48:78:02:7B:0A:EA:0E:F4:F2:84:E0:81:F2
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 0196BF6E9592074FA7187C195D41202F2FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1280
Signing time: Sun 11 May 2025 13:00:17 +0000
Manifest this update: Sun 11 May 2025 13:00:17 +0000
Manifest next update: Mon 12 May 2025 13:00:17 +0000
Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: Xzj1ghC0pP4umHGN22zlSWQQYOhbUx52WlbXo5c10lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:95:92:07:4f:a7:18:7c:19:5d:41:20:2f:2f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: May 11 13:00:17 2025 GMT
Not After : May 12 13:00:17 2025 GMT
Subject: CN=b3b7f14d2bf5414878027b0aea0ef4f284e081f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:14:a0:ba:06:0e:da:18:5f:8c:9e:10:c4:
06:1d:36:d3:de:9c:f0:1f:f8:59:ef:3e:5d:0f:24:
ee:8f:e6:f6:0a:da:21:a6:3e:dc:0a:93:17:37:cb:
0a:8b:d7:fc:98:d5:b5:6c:f0:b8:c0:c7:28:05:74:
c3:0c:76:2b:3d:57:08:89:6c:24:84:f9:91:ab:da:
e4:2d:8d:d7:4e:cd:7b:ca:75:63:d9:c8:e4:c3:2e:
2e:81:21:e7:48:1c:d0:dd:fb:d2:4c:96:44:e9:58:
12:5b:29:35:15:ff:f0:78:33:25:99:25:a9:2a:4c:
d6:c1:92:03:b7:c5:44:06:72:54:06:fe:cf:e6:d9:
e3:c1:1f:dc:91:a9:c2:8d:e4:f4:2f:cc:70:3a:f7:
ec:4e:ee:65:be:ae:ee:e1:87:d8:f1:e3:25:ed:11:
b0:24:e2:9e:c8:56:c3:f4:d4:49:ea:8c:06:aa:97:
de:8e:3c:8c:8c:24:e1:fd:5f:f3:99:f6:e1:0a:6c:
da:a8:24:f2:2e:ae:26:74:f7:cf:bf:34:87:87:d1:
88:cc:7f:52:d5:0e:79:01:e9:84:84:32:a4:47:c8:
a1:1c:8c:19:2a:45:bf:76:d8:0e:dc:ae:2d:fc:e4:
16:fa:f9:d6:4b:d6:ea:b8:b1:ba:43:81:66:a3:f0:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:F1:4D:2B:F5:41:48:78:02:7B:0A:EA:0E:F4:F2:84:E0:81:F2
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e2:4a:4f:a4:cd:45:3f:fd:59:79:b8:9d:68:92:ad:96:a0:
46:15:3b:0d:c3:ea:d2:81:77:8a:1d:9e:53:12:0e:37:23:bf:
48:7e:3d:1c:c5:e1:d2:0d:1d:11:b2:03:63:dc:44:e7:b2:65:
2c:23:8a:e6:35:6b:e8:c9:7b:4d:35:30:e7:e1:54:28:31:5d:
d5:25:9f:f0:00:45:5e:21:61:70:c4:87:b9:47:51:33:8a:28:
a9:78:57:30:d8:44:83:d7:95:03:01:bc:09:f3:17:ae:65:45:
9d:20:92:ed:74:50:9d:b2:50:2c:09:51:9c:10:75:41:f9:8d:
9c:99:54:be:21:53:77:35:92:39:28:c8:b2:7f:5b:10:cd:93:
88:9e:92:69:ab:4f:aa:89:26:96:86:fa:9e:cf:69:3b:b5:ba:
21:d7:84:a5:b5:fc:9f:12:02:ea:2b:12:14:4e:26:e5:e8:14:
3e:5b:d5:31:29:d2:13:f9:24:42:a1:52:36:35:30:6d:89:a8:
af:c0:1a:14:b3:51:88:5c:de:bf:81:df:4c:6b:56:a7:48:d3:
ae:72:8a:0a:cb:a1:c5:c2:fc:db:47:c6:66:97:88:97:0c:a2:
da:dd:f5:d1:df:ba:e3:8b:a7:ae:55:7b:97:c5:32:ab:92:ab:
3f:bc:89:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/bpWSB0+nGHwZXUEgLy/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1
YmQyNDkwHhcNMjUwNTExMTMwMDE3WhcNMjUwNTEyMTMwMDE3WjAzMTEwLwYDVQQD
EyhiM2I3ZjE0ZDJiZjU0MTQ4NzgwMjdiMGFlYTBlZjRmMjg0ZTA4MWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBEUoLoGDtoYX4yeEMQGHTbT3pzw
H/hZ7z5dDyTuj+b2Ctohpj7cCpMXN8sKi9f8mNW1bPC4wMcoBXTDDHYrPVcIiWwk
hPmRq9rkLY3XTs17ynVj2cjkwy4ugSHnSBzQ3fvSTJZE6VgSWyk1Ff/weDMlmSWp
KkzWwZIDt8VEBnJUBv7P5tnjwR/ckanCjeT0L8xwOvfsTu5lvq7u4YfY8eMl7RGw
JOKeyFbD9NRJ6owGqpfejjyMjCTh/V/zmfbhCmzaqCTyLq4mdPfPvzSHh9GIzH9S
1Q55AemEhDKkR8ihHIwZKkW/dtgO3K4t/OQW+vnWS9bquLG6Q4Fmo/CkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLO38U0r9UFIeAJ7CuoO9PKE4IHyMB8GA1UdIwQY
MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt
YjU0YmNhZTE3ZDQwLzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw
LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeJKT6TN
RT/9WXm4nWiSrZagRhU7DcPq0oF3ih2eUxIONyO/SH49HMXh0g0dEbIDY9xE57Jl
LCOK5jVr6Ml7TTUw5+FUKDFd1SWf8ABFXiFhcMSHuUdRM4ooqXhXMNhEg9eVAwG8
CfMXrmVFnSCS7XRQnbJQLAlRnBB1QfmNnJlUviFTdzWSOSjIsn9bEM2TiJ6SaatP
qokmlob6ns9pO7W6IdeEpbX8nxIC6isSFE4m5egUPlvVMSnSE/kkQqFSNjUwbYmo
r8AaFLNRiFzev4HfTGtWp0jTrnKKCsuhxcL820fGZpeIlwyi2t310d+644unrlV7
l8Uyq5KrP7yJEQ==
-----END CERTIFICATE-----
Generated at Sun May 11 16:50:41 2025 by rpki-client