Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: 41O8jhI7dppAVD6YAyUBuzNCkjhI/N3RMS7Y0ULSf8s=
Subject key identifier: A7:CC:41:11:3F:DE:DB:13:82:DF:FD:20:51:A7:48:A3:B0:D2:BB:0B
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 0196C871C7F4D9ADEC284CB0C9A4530052E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 07:00:22 +0000
Manifest this update: Tue 13 May 2025 07:00:22 +0000
Manifest next update: Wed 14 May 2025 07:00:22 +0000
Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=)
2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=)
3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: hBmakQBlfZOsmW6zCwD3dxaAHW2DlzYkkQu6ARU9Plo=)
4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:c7:f4:d9:ad:ec:28:4c:b0:c9:a4:53:00:52:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: May 13 07:00:22 2025 GMT
Not After : May 14 07:00:22 2025 GMT
Subject: CN=a7cc41113fdedb1382dffd2051a748a3b0d2bb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bb:41:2e:af:38:d8:49:a7:69:0a:4e:ba:85:
2d:ef:c8:7e:14:de:bb:55:5c:8d:3f:22:91:0b:b3:
50:b7:fa:db:78:6f:ec:3d:12:4e:5b:a4:39:8f:02:
3e:ba:27:ee:10:2f:0e:60:7f:91:02:ca:2d:be:57:
ab:f9:e1:4b:e1:72:30:6d:e0:7c:19:0b:a8:18:84:
73:78:96:20:fb:a0:2a:84:0f:f7:47:f4:9b:cd:fd:
1b:ba:5c:c0:42:27:da:d7:85:e8:4f:b3:43:b1:45:
35:4e:88:6e:0b:2c:35:d3:8f:33:cc:82:54:1f:e4:
c6:bf:6c:72:4b:9a:a5:12:9b:9e:a2:7a:98:1a:fa:
26:92:ed:c6:9e:d4:6a:04:90:17:2a:00:9e:d6:cf:
f0:bc:15:b6:a0:5c:df:8b:c7:15:4c:40:1f:22:c7:
5a:b1:8c:42:28:46:36:f0:f1:ac:ff:89:6c:95:f6:
13:e7:53:5e:52:88:14:11:96:b8:67:7f:0d:1f:67:
bb:c6:1b:4f:22:f6:af:5f:14:24:db:34:97:b1:de:
25:84:64:e5:2f:cd:c8:78:e1:b3:e9:60:60:b2:dd:
e5:18:6a:26:de:f7:d7:c5:30:d0:26:c7:88:cc:f4:
59:4b:8b:d8:45:06:d6:63:cb:1f:39:b8:f9:09:c1:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CC:41:11:3F:DE:DB:13:82:DF:FD:20:51:A7:48:A3:B0:D2:BB:0B
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d1:11:83:f1:1e:9a:ff:a3:c3:bc:9d:7f:74:a2:1c:02:44:
2f:3d:5a:35:0b:04:f5:c2:82:f6:64:32:82:fd:1b:de:6b:6a:
ce:8c:84:73:80:2a:5e:c7:a8:6b:34:7f:74:17:a8:dd:0f:b2:
54:25:fa:dc:b1:25:33:30:a5:f0:ff:48:e5:1f:d3:23:50:4f:
24:9c:bb:0c:58:06:9e:78:98:31:34:ff:2d:23:b6:76:68:8d:
29:f6:93:55:bd:f8:34:8c:a9:f4:8b:5c:8a:ea:bd:73:5c:8a:
d5:24:97:dc:18:71:eb:48:28:57:78:54:5e:2e:98:3b:6e:65:
16:ba:cc:1e:d9:ae:08:74:30:a5:51:3b:ee:90:88:04:4d:99:
10:3a:d5:88:43:ca:a8:64:49:8a:be:55:c0:45:37:4e:44:4a:
0b:5f:f2:62:d9:92:29:84:b7:8f:15:ec:cd:55:37:ee:a0:a9:
a9:24:6e:86:fa:5e:8a:07:09:c1:37:39:68:e4:0a:3c:8e:1b:
50:33:19:f2:0d:b2:1c:08:77:00:c5:5c:65:19:ad:5c:7b:b4:
57:7c:34:a9:ff:a0:00:6c:50:8b:4c:ac:f3:2d:fd:7c:50:91:
68:96:d2:db:a9:41:30:17:b6:b7:c6:7d:b3:fa:bc:25:f8:b4:
f6:38:db:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIccf02a3sKEywyaRTAFLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODgyY2Q2ZDE5NmFlMWY5Njg3MmFjYWU3ODMyMWJlN2E5
MmI4ZWIwHhcNMjUwNTEzMDcwMDIyWhcNMjUwNTE0MDcwMDIyWjAzMTEwLwYDVQQD
EyhhN2NjNDExMTNmZGVkYjEzODJkZmZkMjA1MWE3NDhhM2IwZDJiYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7btBLq842EmnaQpOuoUt78h+FN67
VVyNPyKRC7NQt/rbeG/sPRJOW6Q5jwI+uifuEC8OYH+RAsotvler+eFL4XIwbeB8
GQuoGIRzeJYg+6AqhA/3R/Sbzf0bulzAQifa14XoT7NDsUU1TohuCyw1048zzIJU
H+TGv2xyS5qlEpueonqYGvomku3GntRqBJAXKgCe1s/wvBW2oFzfi8cVTEAfIsda
sYxCKEY28PGs/4lslfYT51NeUogUEZa4Z38NH2e7xhtPIvavXxQk2zSXsd4lhGTl
L83IeOGz6WBgst3lGGom3vfXxTDQJseIzPRZS4vYRQbWY8sfObj5CcHzMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfMQRE/3tsTgt/9IFGnSKOw0rsLMB8GA1UdIwQY
MBaAFKuILNbRlq4flocqyueDIb56krjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTct
OTUwYzE4MDU5NmQwLzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTctOTUwYzE4MDU5NmQw
LzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdERg/Ee
mv+jw7ydf3SiHAJELz1aNQsE9cKC9mQygv0b3mtqzoyEc4AqXseoazR/dBeo3Q+y
VCX63LElMzCl8P9I5R/TI1BPJJy7DFgGnniYMTT/LSO2dmiNKfaTVb34NIyp9Itc
iuq9c1yK1SSX3Bhx60goV3hUXi6YO25lFrrMHtmuCHQwpVE77pCIBE2ZEDrViEPK
qGRJir5VwEU3TkRKC1/yYtmSKYS3jxXszVU37qCpqSRuhvpeigcJwTc5aOQKPI4b
UDMZ8g2yHAh3AMVcZRmtXHu0V3w0qf+gAGxQi0ys8y39fFCRaJbS26lBMBe2t8Z9
s/q8Jfi09jjbJw==
-----END CERTIFICATE-----
Generated at Tue May 13 13:24:41 2025 by rpki-client