Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: kjbHmLXNpWmufCNGdgxnZzDFLWxajvD6jdzrFeY/hzM=
Subject key identifier: AC:7A:35:0B:E8:AE:17:E0:2B:6A:D4:D2:34:46:C8:7D:96:97:71:DE
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 01969E2C9698CB7332FEA6BAB8696E0A9DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 08AD
Signing time: Mon 05 May 2025 02:00:44 +0000
Manifest this update: Mon 05 May 2025 02:00:44 +0000
Manifest next update: Tue 06 May 2025 02:00:44 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: Ua2Ai7N5JpeANgyCgPUbuKlbXCw1P0C+dqullwFNWCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:96:98:cb:73:32:fe:a6:ba:b8:69:6e:0a:9d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: May 5 02:00:44 2025 GMT
Not After : May 6 02:00:44 2025 GMT
Subject: CN=ac7a350be8ae17e02b6ad4d23446c87d969771de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:a1:74:c6:c8:c3:0b:f3:f0:3c:32:f7:c4:
94:2c:32:dc:eb:9e:33:af:4c:84:61:32:28:12:8f:
9c:c3:b6:0b:12:72:75:3b:0b:82:a3:1b:8a:85:6c:
73:89:3c:bb:13:29:72:99:38:c3:9b:62:a9:52:d7:
0e:fd:ac:45:34:4a:bc:ca:34:3a:43:66:f5:6b:da:
be:76:3c:de:c9:49:2d:07:92:f3:8c:8e:15:81:05:
50:51:f9:f3:5e:47:b8:04:46:25:2e:96:9f:86:f1:
98:6e:aa:33:88:ce:45:61:bc:82:be:43:e6:9e:dc:
26:41:c9:ed:91:5d:92:27:fa:3d:8a:e1:32:93:3b:
de:f3:b8:5a:1f:1d:53:35:be:cc:6d:ea:79:84:3f:
ea:a7:38:9a:10:17:cc:91:11:78:da:b1:b2:f3:c5:
60:14:45:c2:2b:53:fa:1b:77:79:e5:01:6e:27:5e:
f8:65:90:41:61:67:40:cf:a7:a1:3a:a9:53:f4:7f:
f1:b2:5c:4d:09:76:d8:db:6e:25:05:ad:ef:cf:a7:
00:b0:21:2f:86:54:b4:2a:e0:d6:54:79:36:9c:d7:
5c:0b:3f:b2:ec:54:fe:90:74:40:3b:d7:22:60:57:
46:b9:8e:cc:87:8c:64:2e:95:20:94:3b:c3:0d:82:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7A:35:0B:E8:AE:17:E0:2B:6A:D4:D2:34:46:C8:7D:96:97:71:DE
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:17:40:fa:e5:a5:8a:6e:a2:09:ad:07:87:17:f1:48:21:d4:
6e:2d:ad:5d:ca:6b:c9:77:ef:64:ae:19:4f:42:e6:ca:d8:fc:
c0:53:98:bf:d8:15:23:8c:d4:d7:a8:9f:5d:ee:a7:e1:0b:3c:
78:19:2d:82:22:35:cc:0d:12:21:fa:ee:56:d4:21:8b:cb:ea:
77:0c:31:0f:82:8e:81:c5:0b:63:1e:b6:30:e1:da:ea:00:0a:
2b:c2:0e:4d:fb:24:86:c1:31:e0:4d:20:3d:72:44:d3:90:12:
c9:d9:55:d2:5c:32:91:1f:1b:3c:3c:b2:c3:50:c8:35:84:6d:
02:87:76:1d:5e:4a:a1:19:d4:a1:f8:5b:cf:40:6c:8c:4b:52:
aa:75:89:c2:17:45:51:56:02:e2:0e:0d:51:c0:42:54:0a:f2:
3e:8a:20:53:f9:b9:a6:7c:ce:cd:73:99:52:c8:68:51:82:04:
79:27:47:d8:81:d3:7d:1a:cd:ea:06:cb:b0:c9:05:4f:d3:13:
35:69:e2:aa:61:ae:e3:1b:5b:e7:ca:58:91:de:53:a5:fc:85:
a2:21:12:9d:23:ef:9c:74:c5:f7:42:8c:d1:11:1f:ec:3a:b9:
d6:db:ec:e8:1c:9a:34:c7:9a:e1:da:4e:34:4a:0c:e3:7e:8c:
0b:a3:28:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLJaYy3My/qa6uGluCp3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjE3YTJkNTEzYTlmYjBmY2UxYTFjZmMyYjNjMDVjMDE4
YmQ4YzEwHhcNMjUwNTA1MDIwMDQ0WhcNMjUwNTA2MDIwMDQ0WjAzMTEwLwYDVQQD
EyhhYzdhMzUwYmU4YWUxN2UwMmI2YWQ0ZDIzNDQ2Yzg3ZDk2OTc3MWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kGhdMbIwwvz8Dwy98SULDLc654z
r0yEYTIoEo+cw7YLEnJ1OwuCoxuKhWxziTy7EylymTjDm2KpUtcO/axFNEq8yjQ6
Q2b1a9q+djzeyUktB5LzjI4VgQVQUfnzXke4BEYlLpafhvGYbqoziM5FYbyCvkPm
ntwmQcntkV2SJ/o9iuEykzve87haHx1TNb7Mbep5hD/qpziaEBfMkRF42rGy88Vg
FEXCK1P6G3d55QFuJ174ZZBBYWdAz6ehOqlT9H/xslxNCXbY224lBa3vz6cAsCEv
hlS0KuDWVHk2nNdcCz+y7FT+kHRAO9ciYFdGuY7Mh4xkLpUglDvDDYJVpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKx6NQvorhfgK2rU0jRGyH2Wl3HeMB8GA1UdIwQY
MBaAFEIhei1ROp+w/OGhz8KzwFwBi9jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYt
ZjQxZDZjMGM4NGI2LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYtZjQxZDZjMGM4NGI2
LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhdA+uWl
im6iCa0HhxfxSCHUbi2tXcpryXfvZK4ZT0Lmytj8wFOYv9gVI4zU16ifXe6n4Qs8
eBktgiI1zA0SIfruVtQhi8vqdwwxD4KOgcULYx62MOHa6gAKK8IOTfskhsEx4E0g
PXJE05ASydlV0lwykR8bPDyyw1DINYRtAod2HV5KoRnUofhbz0BsjEtSqnWJwhdF
UVYC4g4NUcBCVAryPoogU/m5pnzOzXOZUshoUYIEeSdH2IHTfRrN6gbLsMkFT9MT
NWniqmGu4xtb58pYkd5TpfyFoiESnSPvnHTF90KM0REf7Dq51tvs6ByaNMea4dpO
NEoM436MC6MoJA==
-----END CERTIFICATE-----
Generated at Mon May 5 12:05:47 2025 by rpki-client