Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: icZNpLzlxSESGMNhUXO8xEwfNUoSwROeT4mdKQuCBqQ=
Subject key identifier: 24:39:67:19:05:CA:7B:24:AB:49:A3:7E:52:D7:3E:01:92:C9:61:A4
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 0196A4D387B20CF1C9C5213E9882788FF9E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 042A
Signing time: Tue 06 May 2025 09:00:48 +0000
Manifest this update: Tue 06 May 2025 09:00:48 +0000
Manifest next update: Wed 07 May 2025 09:00:48 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: XpanYU6LKeWnvDZbUj54wVbgXy/B/DHorTB+ClsAZ7s=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d3:87:b2:0c:f1:c9:c5:21:3e:98:82:78:8f:f9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: May 6 09:00:48 2025 GMT
Not After : May 7 09:00:48 2025 GMT
Subject: CN=2439671905ca7b24ab49a37e52d73e0192c961a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:27:1a:d4:ff:bf:32:a2:6c:7d:dc:49:93:59:
a6:5f:3c:46:2f:09:5a:73:f4:d6:7e:68:dc:97:dd:
8d:4c:c6:e0:e9:b3:61:30:6d:1b:e8:44:32:0a:52:
1a:0e:5c:4d:e8:ad:ac:f5:a1:b0:bb:fd:0b:fa:a0:
ad:a2:81:81:52:87:31:1c:25:39:3a:e4:0d:d6:60:
21:5e:c5:58:ed:4a:a9:9f:60:43:de:99:6a:65:64:
2d:83:39:2f:0b:f5:e0:c8:ce:6c:9b:92:b2:53:65:
ba:7b:bc:87:d2:cf:d1:35:a0:26:f3:ce:6a:6d:b2:
88:54:a0:83:f4:25:7c:4c:34:4a:bc:c1:8f:e2:22:
f4:96:41:e1:c5:0d:77:5d:0b:1a:98:59:f6:0c:7b:
78:29:5e:cd:4f:d1:5b:7e:4c:b0:b1:ac:08:82:ea:
59:23:40:14:7d:2d:00:ee:fc:60:2e:ab:16:94:03:
7e:f1:28:8d:7e:33:5a:77:35:0d:f0:39:17:e8:e7:
31:e6:a5:9a:aa:a1:b8:dc:59:d1:5f:6b:00:ae:0c:
45:0d:7f:d2:8c:5a:4d:7f:b8:3e:c7:e8:8a:02:95:
a4:5a:97:f2:a1:7d:35:e2:13:05:3f:60:f5:ae:5c:
a3:43:be:ce:84:78:f8:2e:82:fc:8b:31:50:08:19:
63:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:39:67:19:05:CA:7B:24:AB:49:A3:7E:52:D7:3E:01:92:C9:61:A4
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:62:85:25:3e:e9:5e:93:de:e3:cf:f8:d6:11:48:6b:04:39:
18:5b:7d:b2:b3:39:31:48:b8:ad:52:90:4f:7f:d8:a6:23:17:
76:2d:4f:b4:65:e0:01:45:96:5a:bc:b4:c1:9e:e5:89:3e:81:
e0:61:5e:2c:b9:94:e6:c9:e1:13:34:90:dd:32:75:5f:c7:58:
7f:7c:c1:46:45:ab:a0:4f:1a:bd:73:7a:98:81:f1:52:0d:f3:
3a:6a:a1:5c:ff:7e:37:d8:b3:df:1c:68:80:44:5d:07:15:29:
b1:c8:e0:1d:23:8a:e8:fd:9c:79:7f:70:75:b0:58:9f:9a:2a:
73:70:73:24:74:f5:14:af:6c:ec:0f:3f:0d:fa:d8:d9:60:34:
5a:03:f8:86:0b:eb:78:4b:10:9e:ea:2b:31:c3:06:92:cf:69:
10:23:ac:80:d0:08:e4:07:bd:62:98:c8:8f:b6:9c:cf:02:50:
95:46:35:f9:2e:52:4a:ce:81:02:ce:a0:aa:7c:a5:72:3f:bf:
1a:2b:89:28:94:54:56:9f:75:8e:d8:9b:07:3b:49:a7:5b:fa:
2d:8a:72:e4:68:7f:19:96:57:4d:fe:3a:fc:49:62:cb:4a:85:
12:fa:56:37:29:28:3d:5c:7b:c1:7b:7c:42:14:d1:98:f6:f8:
8e:7a:ee:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZak04eyDPHJxSE+mIJ4j/nmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw
MzBjOWQwHhcNMjUwNTA2MDkwMDQ4WhcNMjUwNTA3MDkwMDQ4WjAzMTEwLwYDVQQD
EygyNDM5NjcxOTA1Y2E3YjI0YWI0OWEzN2U1MmQ3M2UwMTkyYzk2MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yca1P+/MqJsfdxJk1mmXzxGLwla
c/TWfmjcl92NTMbg6bNhMG0b6EQyClIaDlxN6K2s9aGwu/0L+qCtooGBUocxHCU5
OuQN1mAhXsVY7Uqpn2BD3plqZWQtgzkvC/XgyM5sm5KyU2W6e7yH0s/RNaAm885q
bbKIVKCD9CV8TDRKvMGP4iL0lkHhxQ13XQsamFn2DHt4KV7NT9FbfkywsawIgupZ
I0AUfS0A7vxgLqsWlAN+8SiNfjNadzUN8DkX6Ocx5qWaqqG43FnRX2sArgxFDX/S
jFpNf7g+x+iKApWkWpfyoX014hMFP2D1rlyjQ77OhHj4LoL8izFQCBljFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQ5ZxkFynskq0mjflLXPgGSyWGkMB8GA1UdIwQY
MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt
MjJkZDBmMzkyOGQ1LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1
LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWKFJT7p
XpPe48/41hFIawQ5GFt9srM5MUi4rVKQT3/YpiMXdi1PtGXgAUWWWry0wZ7liT6B
4GFeLLmU5snhEzSQ3TJ1X8dYf3zBRkWroE8avXN6mIHxUg3zOmqhXP9+N9iz3xxo
gERdBxUpscjgHSOK6P2ceX9wdbBYn5oqc3BzJHT1FK9s7A8/DfrY2WA0WgP4hgvr
eEsQnuorMcMGks9pECOsgNAI5Ae9YpjIj7aczwJQlUY1+S5SSs6BAs6gqnylcj+/
GiuJKJRUVp91jtibBztJp1v6LYpy5Gh/GZZXTf46/Eliy0qFEvpWNykoPVx7wXt8
QhTRmPb4jnrudg==
-----END CERTIFICATE-----
Generated at Tue May 6 12:36:47 2025 by rpki-client