Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: okl+XxPL1ejqnC51kOuibpFcJvjaqpFzEF/RrtJkKDY=
Subject key identifier: 4E:23:CB:D0:43:A6:05:1D:38:0E:40:47:E6:71:D4:A4:A8:34:F8:3A
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 0196C15E0CAC9C491CDE206D38E10FADCD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 22:01:28 +0000
Manifest this update: Sun 11 May 2025 22:01:28 +0000
Manifest next update: Mon 12 May 2025 22:01:28 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: 4zhU3HYvtjQIb18xq3Ak4b/sDg/LarefdalAEO+Xqhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5e:0c:ac:9c:49:1c:de:20:6d:38:e1:0f:ad:cd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: May 11 22:01:28 2025 GMT
Not After : May 12 22:01:28 2025 GMT
Subject: CN=4e23cbd043a6051d380e4047e671d4a4a834f83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:23:51:3d:ba:d3:53:98:d9:56:da:ca:02:
c8:86:32:00:ac:61:2b:bd:85:c3:5e:ff:ba:cd:e2:
8a:da:1c:8a:09:e8:39:1b:0f:b7:ec:5f:9d:fe:5b:
fd:e2:c3:20:b4:79:25:b7:0d:1c:69:0a:af:f7:62:
02:ab:ce:64:b7:61:93:16:ab:8e:fb:0d:07:e2:bf:
71:27:42:85:c3:f3:2a:c3:8a:e2:b8:20:d2:f3:cf:
1c:fe:02:f6:bc:85:6c:a1:a3:bf:18:dd:46:1e:bd:
42:ae:b9:59:75:72:03:5b:ff:98:f7:31:78:cb:19:
f0:14:89:9d:7c:0e:f0:32:fc:69:7f:ab:f4:55:70:
4a:3d:74:0e:c1:0d:e6:02:f6:db:62:3b:1f:cf:84:
75:ff:a0:5b:91:2e:93:66:99:a2:1e:09:6d:52:cf:
ee:e6:45:a9:da:cd:7b:ba:7f:92:a4:74:b4:ca:d8:
26:a6:f7:63:90:31:6d:0f:68:31:3e:52:7d:cd:76:
ed:6c:25:63:f3:63:13:6b:23:2e:40:5b:36:49:9d:
f4:d5:14:10:18:d0:c8:19:ed:75:98:6b:69:59:d7:
c3:29:b8:dd:52:9d:57:2f:0a:30:b8:b3:b6:22:07:
f4:bb:84:e2:0b:0a:17:b8:65:37:9c:9f:57:17:02:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:CB:D0:43:A6:05:1D:38:0E:40:47:E6:71:D4:A4:A8:34:F8:3A
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a6:72:c4:20:40:75:0b:a2:bb:7b:50:e5:19:71:47:a7:56:
31:b9:64:50:53:eb:98:19:6d:00:8e:00:4a:3d:e3:f7:79:2c:
2a:25:5e:fd:91:7f:be:e3:36:80:aa:b3:d8:0b:c0:a6:b9:22:
40:cc:51:45:13:b8:7b:b4:8c:d7:b3:a2:00:0d:90:fd:42:ea:
18:63:bc:05:9f:bb:e2:71:6b:64:f4:f8:2e:f1:9d:df:67:07:
8b:2c:18:f3:ac:c7:c8:a0:63:c7:2a:4d:0b:da:e4:d1:0c:fa:
1a:97:2b:69:a6:f4:4d:9c:34:73:ca:0e:0c:13:8f:3c:49:87:
e9:c8:19:04:fb:0f:fe:00:a3:25:87:05:f7:25:b4:d4:c6:04:
d6:12:32:2d:6f:09:5c:b7:f8:b0:51:89:c0:b7:6d:80:cf:d8:
c8:9d:47:b8:9e:0c:1e:57:86:bf:87:ef:5b:00:5c:9f:91:35:
0c:eb:80:a8:48:f2:f1:4b:00:13:d2:dc:3d:8f:0a:61:ca:2d:
68:43:ee:01:94:47:5e:f7:27:2c:08:38:a9:e9:c8:90:14:3c:
8b:4e:b8:3a:e0:17:1d:43:0c:51:76:3f:c6:b2:ce:d1:e4:f2:
6e:83:84:d4:fd:c9:fa:56:33:63:80:a1:e7:ab:79:2b:6e:08:
38:35:f7:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXgysnEkc3iBtOOEPrc19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2
NTlhYjkwHhcNMjUwNTExMjIwMTI4WhcNMjUwNTEyMjIwMTI4WjAzMTEwLwYDVQQD
Eyg0ZTIzY2JkMDQzYTYwNTFkMzgwZTQwNDdlNjcxZDRhNGE4MzRmODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs00jUT2601OY2VbaygLIhjIArGEr
vYXDXv+6zeKK2hyKCeg5Gw+37F+d/lv94sMgtHkltw0caQqv92ICq85kt2GTFquO
+w0H4r9xJ0KFw/Mqw4riuCDS888c/gL2vIVsoaO/GN1GHr1CrrlZdXIDW/+Y9zF4
yxnwFImdfA7wMvxpf6v0VXBKPXQOwQ3mAvbbYjsfz4R1/6BbkS6TZpmiHgltUs/u
5kWp2s17un+SpHS0ytgmpvdjkDFtD2gxPlJ9zXbtbCVj82MTayMuQFs2SZ301RQQ
GNDIGe11mGtpWdfDKbjdUp1XLwowuLO2Igf0u4TiCwoXuGU3nJ9XFwJ5gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4jy9BDpgUdOA5AR+Zx1KSoNPg6MB8GA1UdIwQY
MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It
NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi
LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuaZyxCBA
dQuiu3tQ5RlxR6dWMblkUFPrmBltAI4ASj3j93ksKiVe/ZF/vuM2gKqz2AvAprki
QMxRRRO4e7SM17OiAA2Q/ULqGGO8BZ+74nFrZPT4LvGd32cHiywY86zHyKBjxypN
C9rk0Qz6Gpcraab0TZw0c8oODBOPPEmH6cgZBPsP/gCjJYcF9yW01MYE1hIyLW8J
XLf4sFGJwLdtgM/YyJ1HuJ4MHleGv4fvWwBcn5E1DOuAqEjy8UsAE9LcPY8KYcot
aEPuAZRHXvcnLAg4qenIkBQ8i064OuAXHUMMUXY/xrLO0eTyboOE1P3J+lYzY4Ch
56t5K24IODX3Fw==
-----END CERTIFICATE-----
Generated at Mon May 12 05:28:24 2025 by rpki-client