Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
File: QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json)
Hash identifier: itNIyhC79uf53uF2VfUUi8uZ6QVtLlUCm2N53hONmdQ=
Subject key identifier: 06:57:60:55:DD:9E:4A:48:47:FC:4A:23:A0:56:3C:16:1B:0C:13:B0
Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
Certificate issuer: /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Certificate serial: 0196BDEE94A61A0A23FE3146AB6C749A0D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
Manifest number: 152F
Signing time: Sun 11 May 2025 06:00:51 +0000
Manifest this update: Sun 11 May 2025 06:00:51 +0000
Manifest next update: Mon 12 May 2025 06:00:51 +0000
Files and hashes: 1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: ft8c+MqijT1jo+r+kW5z8BQHwldOiHCyVVveNXPUiXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:94:a6:1a:0a:23:fe:31:46:ab:6c:74:9a:0d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Validity
Not Before: May 11 06:00:51 2025 GMT
Not After : May 12 06:00:51 2025 GMT
Subject: CN=06576055dd9e4a4847fc4a23a0563c161b0c13b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:d0:62:79:90:17:a5:bf:b4:f9:17:e6:4c:
10:39:6b:77:2f:2d:04:e9:11:0e:db:6c:90:e1:a5:
53:ed:b2:71:b4:b4:3a:1e:0f:e9:fb:b9:18:0a:17:
64:79:ae:a0:e2:46:1d:13:05:e4:c9:b5:66:0a:0f:
d7:e5:b8:12:ff:82:ff:a2:56:84:4e:0e:cf:95:b9:
4a:83:36:99:e1:f1:70:95:90:af:3b:0e:e6:7f:32:
02:68:3b:0d:24:92:72:62:a7:40:df:23:0c:10:ef:
d3:10:12:cc:bb:68:1a:71:db:fa:29:74:c0:4c:17:
0b:86:84:31:fa:4a:10:e4:77:5a:5b:e2:43:b9:36:
90:fa:56:dd:cd:13:5c:6d:0b:88:ce:01:3a:33:32:
d1:e3:20:37:0b:58:22:b4:aa:12:23:80:1f:2f:40:
14:18:f8:f6:7f:10:5f:35:e3:29:ca:5f:84:ad:08:
38:76:38:32:dc:11:ba:e6:f2:06:17:fb:ce:ad:5c:
8f:3d:db:f9:23:1c:9e:93:61:f9:33:eb:ec:b9:96:
72:d2:f4:a8:aa:83:1a:e2:5b:9c:ad:95:93:33:49:
38:11:27:c6:0a:d2:fd:dd:4b:85:3d:a8:6d:0a:c4:
cf:91:34:b3:62:a5:1d:74:8a:b5:9d:98:29:dc:a0:
aa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:60:55:DD:9E:4A:48:47:FC:4A:23:A0:56:3C:16:1B:0C:13:B0
X509v3 Authority Key Identifier:
keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e6:4e:30:f8:69:2a:28:27:32:7c:c4:63:a3:3d:e0:cb:82:
87:04:8d:e0:68:5c:a9:69:00:16:c1:56:58:81:2b:cd:41:44:
05:fe:64:cb:00:c4:c6:c6:49:28:b0:d6:6a:f1:33:22:51:c9:
13:64:0e:2c:0e:55:de:52:21:48:5a:64:a7:e4:42:09:ed:2f:
d4:1c:3f:ba:4f:de:b5:90:46:f1:80:c5:3e:a8:c7:86:e5:a4:
d8:b7:8e:4c:d6:f9:ea:d0:9a:aa:5e:45:41:12:3d:39:16:68:
02:68:ff:01:e1:c5:66:e1:ad:71:ef:74:bb:5d:b5:5a:af:b2:
51:d8:2c:15:33:0f:0d:39:6d:73:a8:d4:80:3c:86:db:d0:f7:
56:ae:87:51:42:b5:6f:0d:b3:16:f3:f6:f4:67:c7:d7:3c:74:
28:25:1a:67:c2:f1:98:66:67:b1:84:da:15:dd:82:67:5b:65:
24:e2:7c:1e:e9:da:de:28:e7:1f:2a:32:c8:b2:b5:40:9e:cf:
99:f4:ef:cd:ab:b2:e1:af:2e:63:c1:db:8f:ba:08:00:af:50:
37:41:a9:4a:01:7d:c5:33:80:bc:0f:c5:af:3a:29:eb:ce:c6:
74:32:5c:72:84:ab:f6:11:04:f3:73:dc:66:67:0d:7a:de:76:
d8:9e:9a:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97pSmGgoj/jFGq2x0mg0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOWZjNjkzOGUzZDVlMGI5Mjc0N2IzMmY2ZDcwZmRhZjBl
NTBhMTUwHhcNMjUwNTExMDYwMDUxWhcNMjUwNTEyMDYwMDUxWjAzMTEwLwYDVQQD
EygwNjU3NjA1NWRkOWU0YTQ4NDdmYzRhMjNhMDU2M2MxNjFiMGMxM2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRfQYnmQF6W/tPkX5kwQOWt3Ly0E
6REO22yQ4aVT7bJxtLQ6Hg/p+7kYChdkea6g4kYdEwXkybVmCg/X5bgS/4L/olaE
Tg7PlblKgzaZ4fFwlZCvOw7mfzICaDsNJJJyYqdA3yMMEO/TEBLMu2gacdv6KXTA
TBcLhoQx+koQ5HdaW+JDuTaQ+lbdzRNcbQuIzgE6MzLR4yA3C1gitKoSI4AfL0AU
GPj2fxBfNeMpyl+ErQg4djgy3BG65vIGF/vOrVyPPdv5Ixyek2H5M+vsuZZy0vSo
qoMa4lucrZWTM0k4ESfGCtL93UuFPahtCsTPkTSzYqUddIq1nZgp3KCq1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZXYFXdnkpIR/xKI6BWPBYbDBOwMB8GA1UdIwQY
MBaAFEGfxpOOPV4LknR7MvbXD9rw5QoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80YTFhZWItOGJkNi00NDMzLTk3Y2Qt
OWJjZWIwMjlkNTI4LzEvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80YTFhZWItOGJkNi00NDMzLTk3Y2QtOWJjZWIwMjlkNTI4
LzEvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+ZOMPhp
KignMnzEY6M94MuChwSN4GhcqWkAFsFWWIErzUFEBf5kywDExsZJKLDWavEzIlHJ
E2QOLA5V3lIhSFpkp+RCCe0v1Bw/uk/etZBG8YDFPqjHhuWk2LeOTNb56tCaql5F
QRI9ORZoAmj/AeHFZuGtce90u121Wq+yUdgsFTMPDTltc6jUgDyG29D3Vq6HUUK1
bw2zFvP29GfH1zx0KCUaZ8LxmGZnsYTaFd2CZ1tlJOJ8Huna3ijnHyoyyLK1QJ7P
mfTvzauy4a8uY8Hbj7oIAK9QN0GpSgF9xTOAvA/Frzop687GdDJccoSr9hEE83Pc
ZmcNet522J6aUQ==
-----END CERTIFICATE-----
Generated at Sun May 11 13:00:50 2025 by rpki-client