Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: JeuAbVqiCSJPV75FvVMzDRZAMZrjn/oeOUHwVERuO0c=
Subject key identifier: C4:C9:34:41:2F:2B:5D:0E:F8:B8:7E:B4:0E:CA:67:8F:C3:5C:7E:8A
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 0196B66BFFE039E5A8C41D48B662835DB290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 1425
Signing time: Fri 09 May 2025 19:00:53 +0000
Manifest this update: Fri 09 May 2025 19:00:53 +0000
Manifest next update: Sat 10 May 2025 19:00:53 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: 42j/3DTPXhe4KkyBRJeGr3z8i29bgvjHaq73AMrxTRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:ff:e0:39:e5:a8:c4:1d:48:b6:62:83:5d:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: May 9 19:00:53 2025 GMT
Not After : May 10 19:00:53 2025 GMT
Subject: CN=c4c934412f2b5d0ef8b87eb40eca678fc35c7e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:9f:01:ee:b9:9f:fc:8e:88:16:54:b9:a7:
ca:4c:ed:d9:89:4a:71:71:3e:2a:9b:ee:f8:40:34:
19:8f:ee:2f:58:7c:c0:65:a1:07:bd:d8:32:72:ac:
a5:29:e8:ff:32:16:33:c0:af:3a:ef:da:fe:4e:8d:
29:bd:3e:c4:52:9e:44:e3:84:5f:0c:8d:16:fd:5e:
3f:13:0e:a5:a8:aa:6a:5f:34:54:11:92:33:3d:df:
56:4a:b7:c3:74:e3:1b:07:ee:43:f5:ac:84:8d:5f:
f2:67:98:a8:c2:d5:bd:4b:8b:80:c3:a7:5a:1d:4d:
99:ec:4a:0e:71:63:e1:19:e3:dd:16:5e:34:eb:12:
95:dc:90:9a:0f:4a:5d:06:05:8a:73:5c:28:e4:df:
14:08:30:cf:08:ee:48:7a:a4:68:e3:c1:68:c9:41:
49:65:b5:6a:17:75:a8:3a:0b:ff:5b:c1:56:9b:f5:
05:63:c5:6b:ad:20:06:06:54:88:3d:33:22:0b:69:
d8:59:9e:c6:fb:07:4d:53:7c:b7:f4:4e:75:93:b6:
7f:d0:be:16:49:bb:49:02:6e:ea:ac:d9:40:78:d6:
4d:48:9b:4c:ba:ef:fc:4b:68:d8:3b:72:aa:2f:c6:
6e:b3:7f:20:2b:c1:6e:58:19:88:68:f9:02:1d:3f:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C9:34:41:2F:2B:5D:0E:F8:B8:7E:B4:0E:CA:67:8F:C3:5C:7E:8A
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:71:c4:04:f5:20:00:10:c9:75:06:20:43:55:cd:72:9d:18:
36:21:b9:37:3b:58:b5:82:bc:7c:b3:6c:c9:a2:f2:f0:1b:bf:
24:df:c8:71:d0:0b:d9:21:fe:03:7e:78:88:7e:ef:0e:00:f8:
af:15:a2:6f:cb:b0:43:27:2b:cb:69:65:e0:50:bd:be:d6:30:
17:89:25:58:1c:f5:35:03:35:2f:8d:61:ab:86:ca:9c:e2:e0:
5c:16:f7:b0:06:1b:50:d1:57:42:32:d4:c5:5d:bb:e5:e2:6a:
cb:04:44:71:c7:97:06:92:c8:3f:e3:2a:77:c1:71:6b:cd:b9:
8c:29:bd:65:a5:63:f8:77:ef:d8:3c:af:b4:16:f8:6b:ec:42:
20:64:99:30:d6:2e:c3:c6:1b:83:bb:8e:33:f3:37:27:46:db:
96:17:74:d0:78:4e:a6:7e:b3:61:5e:38:f4:34:6f:cd:12:00:
02:05:1f:b1:37:c1:86:c8:9b:04:88:a0:ef:c4:af:e7:c7:8f:
d8:3a:7b:03:78:05:a3:75:fa:86:e6:84:c2:18:91:0c:03:5f:
60:d6:9e:4c:9a:81:93:de:78:b9:5e:1e:d6:bc:39:55:45:67:
eb:2b:a2:66:e3:a0:00:1f:98:43:b8:be:d0:4a:5d:e8:42:21:
a2:2c:17:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa2a//gOeWoxB1ItmKDXbKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjAyMzE4ZjJjZTk3MmU3MjQwOGNjY2M3ZDMyMGFmMzBj
ZDJiMGQwHhcNMjUwNTA5MTkwMDUzWhcNMjUwNTEwMTkwMDUzWjAzMTEwLwYDVQQD
EyhjNGM5MzQ0MTJmMmI1ZDBlZjhiODdlYjQwZWNhNjc4ZmMzNWM3ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIGfAe65n/yOiBZUuafKTO3ZiUpx
cT4qm+74QDQZj+4vWHzAZaEHvdgycqylKej/MhYzwK8679r+To0pvT7EUp5E44Rf
DI0W/V4/Ew6lqKpqXzRUEZIzPd9WSrfDdOMbB+5D9ayEjV/yZ5iowtW9S4uAw6da
HU2Z7EoOcWPhGePdFl406xKV3JCaD0pdBgWKc1wo5N8UCDDPCO5IeqRo48FoyUFJ
ZbVqF3WoOgv/W8FWm/UFY8VrrSAGBlSIPTMiC2nYWZ7G+wdNU3y39E51k7Z/0L4W
SbtJAm7qrNlAeNZNSJtMuu/8S2jYO3KqL8Zus38gK8FuWBmIaPkCHT9X8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTJNEEvK10O+Lh+tA7KZ4/DXH6KMB8GA1UdIwQY
MBaAFKjwIxjyzpcuckCMzMfTIK8wzSsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgt
NzU0NGRmMzAwNGIyLzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgtNzU0NGRmMzAwNGIy
LzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnHEBPUg
ABDJdQYgQ1XNcp0YNiG5NztYtYK8fLNsyaLy8Bu/JN/IcdAL2SH+A354iH7vDgD4
rxWib8uwQycry2ll4FC9vtYwF4klWBz1NQM1L41hq4bKnOLgXBb3sAYbUNFXQjLU
xV275eJqywREcceXBpLIP+Mqd8Fxa825jCm9ZaVj+Hfv2DyvtBb4a+xCIGSZMNYu
w8Ybg7uOM/M3J0bblhd00HhOpn6zYV449DRvzRIAAgUfsTfBhsibBIig78Sv58eP
2Dp7A3gFo3X6huaEwhiRDANfYNaeTJqBk954uV4e1rw5VUVn6yuiZuOgAB+YQ7i+
0Epd6EIhoiwXyA==
-----END CERTIFICATE-----
Generated at Fri May 9 23:54:41 2025 by rpki-client