
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File: QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier: talNMZAsOxZm/iB4hNfiIg4E6XuNPI/GwD3D6onImew=
Subject key identifier: 8A:CE:7F:A1:CD:A2:20:17:94:EB:1F:AD:4D:A6:91:CB:3D:98:AD:03
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 0196C3829D4912616644A5FAC176E79B7E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number: 0DF9
Signing time: Mon 12 May 2025 08:00:39 +0000
Manifest this update: Mon 12 May 2025 08:00:39 +0000
Manifest next update: Tue 13 May 2025 08:00:39 +0000
Files and hashes: 1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=)
2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: nBViG0dtREuZn1+lso+kktrxp0NTAT+6+75ZeSmLOfI=)
3: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=)
4: d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa (hash: eCiVHw72+bTZlv8fotK++2o6VMWQ+UX2AuVuNcdkIqk=)
5: iXw_41SDwVWtAf5ihJuQUw9Lk8I.roa (hash: IeaHE4eJJAlQPpX43/jtDGK9a0UQu+G72Lz6Qc9LhBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:9d:49:12:61:66:44:a5:fa:c1:76:e7:9b:7e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: May 12 08:00:39 2025 GMT
Not After : May 13 08:00:39 2025 GMT
Subject: CN=8ace7fa1cda2201794eb1fad4da691cb3d98ad03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:02:f6:9d:0a:63:07:0b:a4:ed:4d:47:06:
79:51:8e:d9:ba:6d:4f:f2:db:91:3f:03:6b:06:c0:
89:ef:a2:82:09:62:08:d2:9c:e3:8f:6f:f9:eb:a1:
b3:e9:6b:e7:27:01:bf:09:b0:dd:ed:a7:91:fe:4f:
fd:c7:1e:ad:8f:c4:9a:fd:b8:51:5c:b5:2e:56:9f:
5a:fb:7f:46:f9:3e:76:bb:1f:a1:62:d5:67:1c:59:
fd:f8:b1:63:68:2c:1c:bf:23:e7:5f:bf:72:0f:05:
e1:14:24:c8:58:82:ad:23:ba:66:80:76:db:e9:1b:
54:ed:5d:fd:72:27:a7:78:b2:1f:1a:bb:f6:03:2c:
41:49:43:8f:a3:c3:fa:36:70:92:2a:01:49:5d:8a:
18:a0:7b:16:6c:43:fc:c9:dc:99:4b:27:d3:d2:48:
eb:6f:30:36:0a:d3:97:2c:c8:19:e9:22:aa:fb:37:
58:4c:fe:a5:19:67:8b:78:20:3c:f3:e6:5e:d1:9a:
c7:2b:05:51:d3:8f:e9:cd:6e:b7:8c:4f:1f:98:a9:
f4:c6:44:8b:0d:0f:25:ea:0a:c5:5e:fe:67:e5:e1:
1f:0b:22:80:e9:56:63:a0:16:e5:29:97:ea:9b:51:
64:f4:17:20:12:39:27:20:e8:c8:ce:95:88:8e:91:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CE:7F:A1:CD:A2:20:17:94:EB:1F:AD:4D:A6:91:CB:3D:98:AD:03
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1e:55:f5:0a:52:74:59:21:0a:33:18:a8:e0:37:ba:11:b6:
46:63:78:6d:b7:b5:9c:22:dd:b3:8d:00:f5:29:f5:a9:fe:1a:
d9:74:d6:d9:8c:b6:be:0e:91:c8:5b:30:1b:6e:3d:d7:13:cc:
54:7f:79:24:46:cb:5d:45:7a:b0:20:cf:8b:3a:90:e6:cd:fd:
3c:51:8c:7a:35:db:06:fd:f3:a5:c6:a5:1e:23:12:f4:0f:6a:
eb:62:a8:cc:4e:0e:09:ed:60:27:bc:9a:fc:4a:31:c0:85:9d:
c4:da:9b:68:da:cd:21:22:30:7a:81:f1:0f:de:b8:07:59:f0:
7e:45:dc:ae:c8:ef:c6:5c:9e:8d:b8:0a:de:85:0a:01:af:f1:
b0:ad:2e:9f:58:01:b5:24:f4:0b:03:53:de:3e:05:bb:6b:0b:
0c:30:ee:92:50:49:d2:09:28:de:3a:d9:0d:f5:cd:0a:c3:a2:
63:47:13:e9:71:a1:cb:5c:11:ec:6b:ea:d6:8e:2b:02:cb:d3:
ca:48:5b:1a:4f:47:8c:68:6b:75:48:2e:f4:41:e6:a9:a8:c5:
55:41:5c:b0:8c:cf:9c:a1:73:65:ee:93:a8:d7:5e:3a:55:6f:
3c:36:d0:1c:4f:d3:93:37:96:05:b6:67:1f:dc:e9:90:56:00:
3a:6d:44:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDgp1JEmFmRKX6wXbnm36YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTYyMzBlNThkZWNjMGNiY2ZiMTVmNTZhYTY0ZGVkZDFm
Mzg5ZjUwHhcNMjUwNTEyMDgwMDM5WhcNMjUwNTEzMDgwMDM5WjAzMTEwLwYDVQQD
Eyg4YWNlN2ZhMWNkYTIyMDE3OTRlYjFmYWQ0ZGE2OTFjYjNkOThhZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojgC9p0KYwcLpO1NRwZ5UY7Zum1P
8tuRPwNrBsCJ76KCCWII0pzjj2/566Gz6WvnJwG/CbDd7aeR/k/9xx6tj8Sa/bhR
XLUuVp9a+39G+T52ux+hYtVnHFn9+LFjaCwcvyPnX79yDwXhFCTIWIKtI7pmgHbb
6RtU7V39cieneLIfGrv2AyxBSUOPo8P6NnCSKgFJXYoYoHsWbEP8ydyZSyfT0kjr
bzA2CtOXLMgZ6SKq+zdYTP6lGWeLeCA88+Ze0ZrHKwVR04/pzW63jE8fmKn0xkSL
DQ8l6grFXv5n5eEfCyKA6VZjoBblKZfqm1Fk9BcgEjknIOjIzpWIjpHgmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrOf6HNoiAXlOsfrU2mkcs9mK0DMB8GA1UdIwQY
MBaAFEGWIw5Y3swMvPsV9WqmTe3R84n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQt
MmJlZmZmZDU3ZmI3LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3
LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR5V9QpS
dFkhCjMYqOA3uhG2RmN4bbe1nCLds40A9Sn1qf4a2XTW2Yy2vg6RyFswG2491xPM
VH95JEbLXUV6sCDPizqQ5s39PFGMejXbBv3zpcalHiMS9A9q62KozE4OCe1gJ7ya
/EoxwIWdxNqbaNrNISIweoHxD964B1nwfkXcrsjvxlyejbgK3oUKAa/xsK0un1gB
tST0CwNT3j4Fu2sLDDDuklBJ0gko3jrZDfXNCsOiY0cT6XGhy1wR7Gvq1o4rAsvT
ykhbGk9HjGhrdUgu9EHmqajFVUFcsIzPnKFzZe6TqNdeOlVvPDbQHE/TkzeWBbZn
H9zpkFYAOm1E1w==
-----END CERTIFICATE-----
Generated at Mon May 12 15:56:55 2025 by rpki-client