Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: sZ/DloV3Lpj22V+iJh+pYWqVLcf1FqOIN58tuzYWGN8=
Subject key identifier: 6B:FB:1C:D4:93:9F:CE:94:84:7E:D2:61:41:6F:E4:C3:C0:64:BC:F3
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 0196C45E261217E258653BF1992F8728DB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 022B
Signing time: Mon 12 May 2025 12:00:26 +0000
Manifest this update: Mon 12 May 2025 12:00:26 +0000
Manifest next update: Tue 13 May 2025 12:00:26 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: XXS9N1JATqet9DsNP5CQJ0koKQb+UewglLRvrXSBqSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:26:12:17:e2:58:65:3b:f1:99:2f:87:28:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: May 12 12:00:26 2025 GMT
Not After : May 13 12:00:26 2025 GMT
Subject: CN=6bfb1cd4939fce94847ed261416fe4c3c064bcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:6f:d7:de:d0:c7:fa:18:45:78:d3:6c:75:
ad:21:a6:b1:9d:8e:e9:05:4d:ac:41:b9:6d:42:dd:
c8:e3:fe:18:99:a5:f2:cf:74:2f:eb:87:45:63:32:
02:6d:77:88:05:c0:68:42:68:49:f9:77:a3:ff:99:
11:c0:7b:cb:5b:ff:1b:14:64:fe:1e:2c:a1:da:a2:
02:e1:25:3d:d7:de:14:97:d6:a6:b4:2a:85:86:33:
61:ce:6a:56:71:c0:dc:8e:d0:9b:68:40:eb:30:f5:
76:dc:8e:4b:40:5f:0a:ce:48:96:8b:70:f8:68:f6:
a5:29:c4:3b:e3:fd:0a:9f:7e:21:c3:17:8d:a1:eb:
5f:01:f2:82:75:d4:b0:47:98:04:c4:c5:5a:87:c0:
e2:b1:9c:ec:15:b0:aa:55:b8:46:cc:75:41:89:91:
5b:af:ba:76:81:55:53:73:ce:5f:8f:82:78:1d:8d:
02:ad:74:63:1d:7f:46:61:6d:c3:b9:76:58:2c:3c:
1e:84:9c:44:72:93:b6:0a:35:33:b2:ae:9a:13:1f:
27:8b:f8:6f:93:2f:69:05:17:fa:f4:fc:88:72:29:
ef:da:d6:72:7a:e6:f9:4f:b1:fb:6f:8f:90:50:2d:
10:ab:78:09:2d:14:23:92:73:bc:68:80:a9:77:04:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FB:1C:D4:93:9F:CE:94:84:7E:D2:61:41:6F:E4:C3:C0:64:BC:F3
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ee:97:68:8f:d3:4a:88:a1:b3:e3:ae:9c:94:b4:50:d8:55:
57:d0:cd:54:20:a4:40:6f:34:b1:57:ac:54:1a:96:ba:73:0c:
7e:8b:c5:8a:c6:f1:3a:c7:95:f8:cc:0a:af:e1:81:41:74:2f:
f7:ca:be:01:8e:6c:79:d9:c5:cc:8b:de:2d:1f:8d:7c:33:3d:
dc:6f:ac:0f:1d:39:89:f2:0d:54:66:9d:09:be:3c:08:4e:15:
8f:44:87:41:e5:88:1b:09:47:38:a9:a4:dc:94:0c:73:72:18:
c5:d5:9b:de:0c:ee:56:dc:fa:54:ff:41:5e:dc:3a:89:d8:5b:
98:d3:6f:f3:31:59:f4:f3:ab:66:47:7f:0b:12:e8:59:af:64:
ba:07:b6:e1:87:51:41:3a:de:91:77:e4:f0:01:b1:50:5c:c8:
9d:39:50:93:8c:c8:61:59:b8:39:0d:c3:f2:38:67:f5:e8:ed:
0f:ad:20:7e:70:74:b1:cf:1f:5f:57:2b:95:0a:7c:48:a0:f1:
01:d2:f7:fd:da:c0:1f:2c:42:03:f4:db:29:6d:80:2c:64:21:
15:42:53:7f:40:30:02:55:b3:ed:36:2e:76:8f:04:7b:60:41:
b5:95:23:f8:a3:65:44:1b:ac:70:34:6e:ac:27:62:f1:d6:d5:
5f:ff:15:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXiYSF+JYZTvxmS+HKNtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYWViOGZmNTViZDQ2NTAwYjI3ZGI5Y2YxZGVjMjU2Mjc2
YjJiNmEwHhcNMjUwNTEyMTIwMDI2WhcNMjUwNTEzMTIwMDI2WjAzMTEwLwYDVQQD
Eyg2YmZiMWNkNDkzOWZjZTk0ODQ3ZWQyNjE0MTZmZTRjM2MwNjRiY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArblv197Qx/oYRXjTbHWtIaaxnY7p
BU2sQbltQt3I4/4YmaXyz3Qv64dFYzICbXeIBcBoQmhJ+Xej/5kRwHvLW/8bFGT+
Hiyh2qIC4SU9194Ul9amtCqFhjNhzmpWccDcjtCbaEDrMPV23I5LQF8KzkiWi3D4
aPalKcQ74/0Kn34hwxeNoetfAfKCddSwR5gExMVah8DisZzsFbCqVbhGzHVBiZFb
r7p2gVVTc85fj4J4HY0CrXRjHX9GYW3DuXZYLDwehJxEcpO2CjUzsq6aEx8ni/hv
ky9pBRf69PyIcinv2tZyeub5T7H7b4+QUC0Qq3gJLRQjknO8aICpdwScqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv7HNSTn86UhH7SYUFv5MPAZLzzMB8GA1UdIwQY
MBaAFEOuuP9VvUZQCyfbnPHewlYnaytqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgt
MmMyZmJhZDJmMDExLzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgtMmMyZmJhZDJmMDEx
LzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfu6XaI/T
Soihs+OunJS0UNhVV9DNVCCkQG80sVesVBqWunMMfovFisbxOseV+MwKr+GBQXQv
98q+AY5sednFzIveLR+NfDM93G+sDx05ifINVGadCb48CE4Vj0SHQeWIGwlHOKmk
3JQMc3IYxdWb3gzuVtz6VP9BXtw6idhbmNNv8zFZ9POrZkd/CxLoWa9kuge24YdR
QTrekXfk8AGxUFzInTlQk4zIYVm4OQ3D8jhn9ejtD60gfnB0sc8fX1crlQp8SKDx
AdL3/drAHyxCA/TbKW2ALGQhFUJTf0AwAlWz7TYudo8Ee2BBtZUj+KNlRBuscDRu
rCdi8dbVX/8V2g==
-----END CERTIFICATE-----
Generated at Mon May 12 20:07:58 2025 by rpki-client