Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: WgkmrPHNOvh8XGFm0wSCIpXIcIubeTjRNtCT2oAO4pw=
Subject key identifier: 3C:33:14:CF:B0:D8:F4:8C:08:EF:2D:A8:C5:01:A0:F3:F3:2C:41:6D
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0196BD808A6D5DDA9C347D69FA6D7CFDC14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 1551
Signing time: Sun 11 May 2025 04:00:39 +0000
Manifest this update: Sun 11 May 2025 04:00:39 +0000
Manifest next update: Mon 12 May 2025 04:00:39 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
4: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
5: _PaUGjvJShI2nma6rn1q_5nZsbw.roa (hash: IISCWbKH8fVMYSEIH2kdkWijGfyVlaENW4tYYQwgOus=)
6: f7reVcrHhHE-i0os8pjDmr_KSH4.roa (hash: jXh5JkKzxulogW8DJqArisPnpXo5ZeSQOy/vsvzYL7E=)
7: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: DewCKgChlQBoBL55B/d0o6UVUCxlLNDiEvfqVereATo=)
9: vJ-NNcH9s58i_6pVtY2137W58sA.roa (hash: gaXJVcSt6ugw0X061/2eBl5dxytqTi7AFjDEgazcu8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:8a:6d:5d:da:9c:34:7d:69:fa:6d:7c:fd:c1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: May 11 04:00:39 2025 GMT
Not After : May 12 04:00:39 2025 GMT
Subject: CN=3c3314cfb0d8f48c08ef2da8c501a0f3f32c416d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:4d:25:90:a5:b1:d2:ac:f5:36:83:13:3f:
be:24:ce:5a:e9:81:df:f5:3d:ea:ad:f4:03:d7:8e:
73:94:58:8b:34:17:90:e7:e1:38:7a:d6:90:16:5d:
89:b1:e0:11:77:e8:18:4e:88:fc:7d:9d:39:9e:a5:
6d:c2:70:61:81:ec:da:0a:f8:5e:64:2b:eb:df:d6:
14:e7:f6:ba:c4:b8:9b:c7:29:e6:32:a7:10:5b:4a:
67:a9:e3:2f:3d:9b:cd:86:43:83:36:f1:a2:5d:0f:
34:54:a7:ef:2f:41:dd:45:71:bd:33:55:ed:2a:b3:
33:59:98:b9:88:d9:cc:92:69:bc:2c:63:76:3a:4b:
66:c2:14:fd:8b:6f:87:ee:3e:32:a7:b6:ee:94:2f:
5a:ed:5c:71:2a:2d:ff:ec:ae:6a:58:62:59:bd:a4:
5a:f1:d6:80:2c:d4:44:94:6b:b2:d2:a1:6f:1c:2e:
57:dc:84:d5:e5:ac:05:8a:34:2a:0a:86:35:7e:a8:
fe:e5:1a:67:1d:1b:25:12:b9:80:7f:14:47:c7:95:
57:43:4e:c1:a3:60:f8:87:b5:8e:ec:ae:84:21:81:
3e:e7:b1:b9:ba:02:c4:c0:19:db:0e:d0:ec:4e:45:
85:e8:05:cf:b4:7e:25:51:9e:31:76:50:19:19:bc:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:33:14:CF:B0:D8:F4:8C:08:EF:2D:A8:C5:01:A0:F3:F3:2C:41:6D
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d3:0e:b6:73:72:35:96:f3:91:55:aa:fa:54:bb:f6:25:a3:
41:02:4d:ab:15:98:86:37:13:59:54:18:c5:60:f4:64:08:34:
76:8c:ee:a2:e8:8d:67:cf:93:e1:5b:b8:ce:53:67:f3:33:a2:
f0:1a:f9:70:83:ef:fa:3c:24:e3:c0:1e:8f:03:3a:a3:aa:37:
d1:2e:d3:41:db:c1:84:9d:b0:0e:20:c2:b0:7a:bd:35:90:dd:
d2:4a:69:20:13:82:6c:dd:ec:2f:46:75:f5:a3:c7:c0:a8:af:
91:8f:cb:36:ac:76:bf:5b:5f:27:2a:3b:b5:04:c1:8d:86:9b:
d6:57:aa:11:f1:cf:2f:60:0b:95:72:f9:6d:8f:46:1d:d4:ec:
c9:e4:86:1f:4f:89:e6:16:4b:49:c5:0b:e9:58:7a:7e:65:24:
f2:b6:d7:f3:4b:85:5d:79:7f:51:a4:e0:dd:e0:0b:4f:f8:36:
b1:bd:6a:04:71:07:db:fa:5c:61:3d:94:9d:9f:d5:14:69:ff:
a1:7d:58:77:2a:95:51:1b:c0:4b:e8:43:2d:5d:02:60:bc:b1:
5c:d3:aa:5a:bd:4a:86:13:d7:3c:aa:28:74:71:9b:25:92:34:
fd:79:6b:f3:88:fc:47:c4:e2:80:9a:d8:c0:de:de:0b:87:de:
2a:99:fb:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gIptXdqcNH1p+m18/cFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl
NzYxZmIwHhcNMjUwNTExMDQwMDM5WhcNMjUwNTEyMDQwMDM5WjAzMTEwLwYDVQQD
EygzYzMzMTRjZmIwZDhmNDhjMDhlZjJkYThjNTAxYTBmM2YzMmM0MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt19NJZClsdKs9TaDEz++JM5a6YHf
9T3qrfQD145zlFiLNBeQ5+E4etaQFl2JseARd+gYToj8fZ05nqVtwnBhgezaCvhe
ZCvr39YU5/a6xLibxynmMqcQW0pnqeMvPZvNhkODNvGiXQ80VKfvL0HdRXG9M1Xt
KrMzWZi5iNnMkmm8LGN2OktmwhT9i2+H7j4yp7bulC9a7VxxKi3/7K5qWGJZvaRa
8daALNRElGuy0qFvHC5X3ITV5awFijQqCoY1fqj+5RpnHRslErmAfxRHx5VXQ07B
o2D4h7WO7K6EIYE+57G5ugLEwBnbDtDsTkWF6AXPtH4lUZ4xdlAZGbzhMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwzFM+w2PSMCO8tqMUBoPPzLEFtMB8GA1UdIwQY
MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt
NmZkOTc4OTIwNWJhLzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh
LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNMOtnNy
NZbzkVWq+lS79iWjQQJNqxWYhjcTWVQYxWD0ZAg0dozuouiNZ8+T4Vu4zlNn8zOi
8Br5cIPv+jwk48AejwM6o6o30S7TQdvBhJ2wDiDCsHq9NZDd0kppIBOCbN3sL0Z1
9aPHwKivkY/LNqx2v1tfJyo7tQTBjYab1leqEfHPL2ALlXL5bY9GHdTsyeSGH0+J
5hZLScUL6Vh6fmUk8rbX80uFXXl/UaTg3eALT/g2sb1qBHEH2/pcYT2UnZ/VFGn/
oX1YdyqVURvAS+hDLV0CYLyxXNOqWr1KhhPXPKoodHGbJZI0/Xlr84j8R8TigJrY
wN7eC4feKpn7wA==
-----END CERTIFICATE-----
Generated at Sun May 11 12:32:23 2025 by rpki-client