Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: BzQd1eseMVv1QXn4zVrf0755N5ATcloVnSJT6UYUeKc=
Subject key identifier: 44:08:8E:7C:AF:3D:15:E1:FB:21:B7:37:3A:78:16:AC:94:7E:DE:F1
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 0196BAB67540BDDC3C4297C0974F78A76C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 15:00:41 +0000
Manifest this update: Sat 10 May 2025 15:00:41 +0000
Manifest next update: Sun 11 May 2025 15:00:41 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: yUBclQVboPpeqbxoYA7LJSg4v9IlE5j7nxkcJf06FWw=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:75:40:bd:dc:3c:42:97:c0:97:4f:78:a7:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: May 10 15:00:41 2025 GMT
Not After : May 11 15:00:41 2025 GMT
Subject: CN=44088e7caf3d15e1fb21b7373a7816ac947edef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:54:ae:0a:15:21:fc:7f:f7:32:ee:c0:99:
97:69:16:04:4d:e1:96:c9:44:ad:3b:5b:20:21:45:
4b:b6:22:64:7c:88:e1:e1:28:3a:c2:67:fb:bc:b3:
5a:5d:d2:e2:0e:58:fc:0a:87:10:b0:dc:7e:47:27:
62:bb:d3:6b:7b:79:f1:9e:b0:06:21:84:e8:da:ec:
a4:83:5b:c0:3f:8e:67:cc:9e:3a:99:07:29:f8:1a:
35:de:5c:bc:d1:a2:64:e5:05:27:c0:83:d2:f5:b7:
90:08:cc:75:54:63:eb:4d:b7:1f:9d:c1:b1:32:f0:
0d:07:59:a1:33:e1:7b:49:ba:84:74:15:a2:47:4b:
49:e4:e1:68:fb:95:ed:76:de:10:dc:22:2d:cb:8c:
06:9f:0b:6c:4f:55:ee:82:5f:ba:9d:df:e8:3a:8c:
a5:df:a3:8e:3d:06:f7:95:01:26:61:62:58:e7:a7:
f9:e5:e9:44:e2:21:6e:cb:06:6d:b6:b7:53:82:25:
a8:4d:f1:b0:22:d0:09:70:2d:0c:8e:cf:e2:c8:8a:
29:7e:74:e5:d9:96:e4:e8:d9:cc:52:eb:53:ad:7a:
bd:82:ec:18:62:37:85:2b:aa:e6:20:a9:6b:d9:76:
1c:0d:62:fb:ce:47:98:91:f7:f9:56:c8:a3:1b:0c:
58:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:8E:7C:AF:3D:15:E1:FB:21:B7:37:3A:78:16:AC:94:7E:DE:F1
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:40:da:37:cb:39:cc:49:28:e4:54:c9:b5:28:4f:58:52:94:
3d:75:a7:33:a9:f2:1b:f0:5f:88:cb:f0:d6:7e:d0:17:b2:d3:
e1:51:b1:61:b4:f6:da:05:01:51:dd:8e:c4:7f:a0:b4:a9:49:
87:be:fd:49:3b:81:a6:67:72:de:90:e4:2c:c6:e9:0c:eb:ee:
74:7c:d2:6d:6f:35:19:d1:e5:2f:a6:38:92:01:f6:81:73:63:
5e:f4:76:ac:c9:64:c7:3c:92:9a:3e:0a:d7:7e:12:99:f4:9c:
0e:3d:a7:29:2e:db:28:75:58:6d:aa:7f:0e:22:ae:b2:7d:32:
5c:56:1c:10:10:3a:d8:b4:d2:b7:8c:45:cd:65:d7:6e:c7:a9:
b9:55:33:9a:36:0d:d1:0d:ce:d1:a1:39:74:b4:36:83:e4:6a:
23:45:5e:66:af:5e:87:20:c0:24:2b:96:30:bf:aa:60:fd:42:
8e:2e:1e:3c:fe:ff:5e:98:8d:a8:c5:76:9a:21:bb:dc:86:70:
10:94:7c:46:2a:82:60:e1:20:fb:05:46:af:c9:5d:15:2f:9c:
f1:eb:ef:75:cc:8d:8e:71:78:20:90:ab:ac:1d:61:a1:99:d5:
4d:6e:e3:92:fc:71:c0:8d:f7:ef:44:65:ae:84:47:2d:a5:0c:
26:38:08:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tnVAvdw8QpfAl094p2wGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWM1ZDgyYThlYjVkOThjZTc2ZTYxZGFmZTUxNzY2MWZj
NGU2NzUwHhcNMjUwNTEwMTUwMDQxWhcNMjUwNTExMTUwMDQxWjAzMTEwLwYDVQQD
Eyg0NDA4OGU3Y2FmM2QxNWUxZmIyMWI3MzczYTc4MTZhYzk0N2VkZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UpUrgoVIfx/9zLuwJmXaRYETeGW
yUStO1sgIUVLtiJkfIjh4Sg6wmf7vLNaXdLiDlj8CocQsNx+Rydiu9Nre3nxnrAG
IYTo2uykg1vAP45nzJ46mQcp+Bo13ly80aJk5QUnwIPS9beQCMx1VGPrTbcfncGx
MvANB1mhM+F7SbqEdBWiR0tJ5OFo+5Xtdt4Q3CIty4wGnwtsT1Xugl+6nd/oOoyl
36OOPQb3lQEmYWJY56f55elE4iFuywZttrdTgiWoTfGwItAJcC0Mjs/iyIopfnTl
2Zbk6NnMUutTrXq9guwYYjeFK6rmIKlr2XYcDWL7zkeYkff5VsijGwxY5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQIjnyvPRXh+yG3Nzp4FqyUft7xMB8GA1UdIwQY
MBaAFEDsXYKo612YznbmHa/lF2YfxOZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU94ZGdxanJYWmpPZHVZZHItVVhaaF9FNW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82N2U3NTUtM2M1NC00NWRiLTg5YjUt
ZGYzMTc0NWNjMjI5LzEvUU94ZGdxanJYWmpPZHVZZHItVVhaaF9FNW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82N2U3NTUtM2M1NC00NWRiLTg5YjUtZGYzMTc0NWNjMjI5
LzEvUU94ZGdxanJYWmpPZHVZZHItVVhaaF9FNW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkDaN8s5
zEko5FTJtShPWFKUPXWnM6nyG/BfiMvw1n7QF7LT4VGxYbT22gUBUd2OxH+gtKlJ
h779STuBpmdy3pDkLMbpDOvudHzSbW81GdHlL6Y4kgH2gXNjXvR2rMlkxzySmj4K
134SmfScDj2nKS7bKHVYbap/DiKusn0yXFYcEBA62LTSt4xFzWXXbsepuVUzmjYN
0Q3O0aE5dLQ2g+RqI0VeZq9ehyDAJCuWML+qYP1Cji4ePP7/XpiNqMV2miG73IZw
EJR8RiqCYOEg+wVGr8ldFS+c8evvdcyNjnF4IJCrrB1hoZnVTW7jkvxxwI3370Rl
roRHLaUMJjgIew==
-----END CERTIFICATE-----
Generated at Sun May 11 00:50:29 2025 by rpki-client