Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: Gdx1V2BRS0uai/ehkUuACKGurJHfBa8i1aHW2zo6aTg=
Subject key identifier: DF:D4:B6:B7:52:BB:90:86:95:3A:55:72:03:7C:2D:2F:53:F0:17:81
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 0196C2028A8D0FFF550163E7A88FA136A9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0A53
Signing time: Mon 12 May 2025 01:01:08 +0000
Manifest this update: Mon 12 May 2025 01:01:08 +0000
Manifest next update: Tue 13 May 2025 01:01:08 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: 5CZ3mzmipWLtImWhwb9cNnC5ICmWk+tyh5ZxD74Auek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:8a:8d:0f:ff:55:01:63:e7:a8:8f:a1:36:a9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: May 12 01:01:08 2025 GMT
Not After : May 13 01:01:08 2025 GMT
Subject: CN=dfd4b6b752bb9086953a5572037c2d2f53f01781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:68:18:79:bd:35:a6:cb:a2:a4:15:c1:29:
f5:db:be:c5:4a:31:a7:48:fe:2d:26:f5:06:7a:83:
d2:7b:2d:bb:b7:ed:72:4d:79:c1:80:12:d6:73:c2:
7f:79:2b:ce:58:c7:2b:32:cf:01:b2:b5:42:bc:97:
b6:bf:f4:3e:8b:6f:de:6e:36:15:5f:d9:2a:d2:d7:
4b:2f:b7:f1:17:01:dd:ba:6e:b7:b3:d0:d8:d6:e8:
fe:1c:0b:7d:45:4a:ac:3c:c4:d9:b2:9b:23:ce:8d:
2b:07:6c:cb:15:d7:0d:7b:f4:ec:8b:65:d4:f5:d2:
4e:5e:5c:0d:84:08:fe:de:1c:1e:48:58:1b:3b:5f:
ea:2d:13:0d:78:c6:2b:b9:32:79:0b:eb:b5:76:44:
4b:aa:7e:a7:2f:f8:e2:d3:68:c1:ed:99:3a:01:68:
40:64:87:0f:4e:20:e9:5b:77:86:5d:0e:60:21:dc:
f0:bc:af:5c:a8:57:2b:7e:72:ce:72:6b:7d:6f:b7:
29:11:8a:05:b3:40:d2:03:f3:f4:d9:f6:be:df:97:
7c:0d:8f:77:11:5d:98:72:07:94:14:00:63:0f:5f:
30:db:17:11:33:e6:8f:fa:f8:dd:25:9b:b2:e8:da:
d7:22:78:45:00:e1:24:89:a5:53:b2:5a:ba:60:2a:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D4:B6:B7:52:BB:90:86:95:3A:55:72:03:7C:2D:2F:53:F0:17:81
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7f:c8:ac:c1:f0:33:bb:90:12:8f:d0:1f:99:a3:41:de:f2:
b2:1a:62:42:3f:6f:17:f7:74:f5:68:83:53:03:d4:99:25:89:
78:ad:78:82:db:ab:5b:8f:06:09:e9:59:14:ac:aa:fa:17:5a:
f5:35:6e:6c:87:7b:f6:aa:88:32:8e:87:3d:8e:78:cc:ef:b8:
89:79:a4:a1:f1:48:d2:1c:5d:ff:e2:b5:49:59:2e:fe:bd:f2:
ef:0b:87:3e:eb:ad:91:84:42:89:97:1b:b3:09:da:08:36:7c:
e5:0b:ee:b1:1c:2c:9e:ed:a2:dc:5c:f2:c0:b9:36:2a:4e:87:
3c:ce:2d:fe:6a:3f:2a:c5:e1:8a:aa:06:38:b1:f1:06:a3:1d:
93:31:1d:8d:dc:df:f7:63:5c:22:72:15:cf:b3:3f:39:25:26:
d2:c9:89:6f:a6:7d:d3:6c:e9:58:67:c7:33:8b:f7:12:92:c8:
0a:73:13:46:39:a4:e6:f5:35:58:d2:bb:83:fd:5a:83:92:36:
0c:ef:19:19:f8:ee:92:d5:42:9a:5e:70:9d:8d:dc:87:aa:75:
f8:cf:b3:b1:c3:38:f5:f2:11:87:15:81:de:ac:28:f6:f5:66:
47:e1:43:6a:3e:59:8d:16:2c:94:38:b9:d9:63:e7:be:80:0d:
bb:04:d8:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAoqND/9VAWPnqI+hNqn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm
N2U4MzIwHhcNMjUwNTEyMDEwMTA4WhcNMjUwNTEzMDEwMTA4WjAzMTEwLwYDVQQD
EyhkZmQ0YjZiNzUyYmI5MDg2OTUzYTU1NzIwMzdjMmQyZjUzZjAxNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKdoGHm9NabLoqQVwSn1277FSjGn
SP4tJvUGeoPSey27t+1yTXnBgBLWc8J/eSvOWMcrMs8BsrVCvJe2v/Q+i2/ebjYV
X9kq0tdLL7fxFwHdum63s9DY1uj+HAt9RUqsPMTZspsjzo0rB2zLFdcNe/Tsi2XU
9dJOXlwNhAj+3hweSFgbO1/qLRMNeMYruTJ5C+u1dkRLqn6nL/ji02jB7Zk6AWhA
ZIcPTiDpW3eGXQ5gIdzwvK9cqFcrfnLOcmt9b7cpEYoFs0DSA/P02fa+35d8DY93
EV2YcgeUFABjD18w2xcRM+aP+vjdJZuy6NrXInhFAOEkiaVTslq6YCocKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/UtrdSu5CGlTpVcgN8LS9T8BeBMB8GA1UdIwQY
MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt
MjJmYzU4OGJjNjZmLzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm
LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX/IrMHw
M7uQEo/QH5mjQd7yshpiQj9vF/d09WiDUwPUmSWJeK14gturW48GCelZFKyq+hda
9TVubId79qqIMo6HPY54zO+4iXmkofFI0hxd/+K1SVku/r3y7wuHPuutkYRCiZcb
swnaCDZ85QvusRwsnu2i3FzywLk2Kk6HPM4t/mo/KsXhiqoGOLHxBqMdkzEdjdzf
92NcInIVz7M/OSUm0smJb6Z902zpWGfHM4v3EpLICnMTRjmk5vU1WNK7g/1ag5I2
DO8ZGfjuktVCml5wnY3ch6p1+M+zscM49fIRhxWB3qwo9vVmR+FDaj5ZjRYslDi5
2WPnvoANuwTYhw==
-----END CERTIFICATE-----
Generated at Mon May 12 08:12:41 2025 by rpki-client