Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier: Ie83hF4q5k5lhIlCJuOfu6w6QqHeGe54pZxa6VSy4vg=
Subject key identifier: BB:C9:85:8A:9C:2A:D7:1F:7A:5B:AC:47:DF:1F:99:B3:DE:FE:C5:42
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial: 0196C45E528F2947593A0892D1CB9CDC4724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number: 0E0C
Signing time: Mon 12 May 2025 12:00:37 +0000
Manifest this update: Mon 12 May 2025 12:00:37 +0000
Manifest next update: Tue 13 May 2025 12:00:37 +0000
Files and hashes: 1: Fy-RDVpoQYqhk9YIhC0_OXJ7Ngw.roa (hash: MSpbkpTae0BKWb0wW1Z5MLxX2eex/b1uULBuB1GrJoU=)
2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: zBFstl9PAdW7C5G1hesYsa7645sS7flq89l9i/4SoRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:52:8f:29:47:59:3a:08:92:d1:cb:9c:dc:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Validity
Not Before: May 12 12:00:37 2025 GMT
Not After : May 13 12:00:37 2025 GMT
Subject: CN=bbc9858a9c2ad71f7a5bac47df1f99b3defec542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:54:32:52:c5:42:b4:a7:60:ae:31:f5:92:
88:7c:1f:e7:b7:11:c9:49:6b:be:e2:17:13:b7:f4:
90:9f:61:16:ff:6b:c2:5d:2e:ad:5b:23:25:4b:30:
18:3c:14:bf:95:a8:fe:f1:cd:e7:e5:4a:7b:d6:5c:
f3:4e:92:b2:99:c1:fb:de:db:b6:db:f6:7a:3e:7d:
73:72:50:35:3c:1a:2c:4d:d7:f7:44:dd:19:14:95:
d1:93:c9:de:14:d8:27:e8:41:99:ec:47:80:c7:b2:
bf:cb:6d:bb:43:bc:64:87:94:58:ca:2a:6b:64:f5:
31:52:bf:f2:e2:1c:c8:cd:75:74:9b:29:4b:fc:3d:
87:73:a5:88:a8:38:e2:74:cb:e0:29:54:27:7f:13:
79:2f:d9:f1:b3:11:02:e0:47:bf:95:d1:66:8a:8d:
00:b1:0c:be:85:b8:8c:2d:82:d3:06:81:ff:d4:03:
fa:bb:6c:43:c7:b3:61:d1:df:8a:97:64:4b:4b:af:
af:f7:28:79:44:07:f3:a6:4f:70:3e:28:50:77:8c:
65:1c:9f:66:05:d9:5e:cc:72:e7:29:9c:5b:a5:46:
04:1c:91:f8:52:ac:0e:63:8d:89:2c:9f:1f:22:a1:
b7:54:c2:4a:33:db:ce:98:37:c8:d7:2c:6d:40:a4:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:85:8A:9C:2A:D7:1F:7A:5B:AC:47:DF:1F:99:B3:DE:FE:C5:42
X509v3 Authority Key Identifier:
keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9e:5f:c6:df:e6:c0:9a:ef:01:50:41:15:ee:fc:3d:05:e8:
a8:2c:ee:8f:4b:33:ee:26:d1:7d:40:29:a3:47:d3:46:52:79:
47:64:3b:1d:cb:ef:45:2b:a3:67:4f:10:a7:90:3d:45:d3:cd:
d9:8a:97:df:f9:de:d9:c7:56:7d:de:4c:4f:90:59:9a:1a:b5:
8a:f7:3a:ae:5f:9f:c8:14:51:41:2a:91:23:3d:cf:1c:42:16:
45:b3:fd:1b:d2:27:1c:74:86:87:90:73:80:3f:05:06:48:39:
a7:af:7f:9a:ec:63:6a:a4:86:15:01:83:55:da:9e:c7:ce:78:
3e:be:14:0a:ad:8a:7c:d3:01:08:b3:f2:87:ac:fb:9e:57:99:
74:76:70:96:01:99:8b:cd:4d:20:98:8f:1e:bb:84:c3:1c:cd:
b7:7d:36:af:f1:6a:0f:70:82:f2:82:d1:de:16:be:d1:2f:8e:
53:63:92:c0:77:99:a0:fd:40:dd:69:35:14:12:22:40:26:fe:
c6:5a:89:23:b0:79:5e:58:5e:6b:2a:87:77:eb:a8:0a:57:36:
d9:9f:6d:5c:d6:16:fe:bf:2b:1d:89:f5:bf:bb:82:95:04:28:
b7:43:48:bb:c0:b4:f0:d6:bd:08:1b:c4:c3:64:12:b8:27:43:
ee:cf:0b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXlKPKUdZOgiS0cuc3EckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZmQ5MzYyZTgzYjg1MmYzZmQzMzExYjA5MDk2ZjYyODlh
NmEwZjgwHhcNMjUwNTEyMTIwMDM3WhcNMjUwNTEzMTIwMDM3WjAzMTEwLwYDVQQD
EyhiYmM5ODU4YTljMmFkNzFmN2E1YmFjNDdkZjFmOTliM2RlZmVjNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8VUMlLFQrSnYK4x9ZKIfB/ntxHJ
SWu+4hcTt/SQn2EW/2vCXS6tWyMlSzAYPBS/laj+8c3n5Up71lzzTpKymcH73tu2
2/Z6Pn1zclA1PBosTdf3RN0ZFJXRk8neFNgn6EGZ7EeAx7K/y227Q7xkh5RYyipr
ZPUxUr/y4hzIzXV0mylL/D2Hc6WIqDjidMvgKVQnfxN5L9nxsxEC4Ee/ldFmio0A
sQy+hbiMLYLTBoH/1AP6u2xDx7Nh0d+Kl2RLS6+v9yh5RAfzpk9wPihQd4xlHJ9m
BdlezHLnKZxbpUYEHJH4UqwOY42JLJ8fIqG3VMJKM9vOmDfI1yxtQKRRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvJhYqcKtcfelusR98fmbPe/sVCMB8GA1UdIwQY
MBaAFEP9k2LoO4UvP9MxGwkJb2KJpqD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODkt
NjU0N2JiMWI4MGMyLzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODktNjU0N2JiMWI4MGMy
LzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARp5fxt/m
wJrvAVBBFe78PQXoqCzuj0sz7ibRfUApo0fTRlJ5R2Q7HcvvRSujZ08Qp5A9RdPN
2YqX3/ne2cdWfd5MT5BZmhq1ivc6rl+fyBRRQSqRIz3PHEIWRbP9G9InHHSGh5Bz
gD8FBkg5p69/muxjaqSGFQGDVdqex854Pr4UCq2KfNMBCLPyh6z7nleZdHZwlgGZ
i81NIJiPHruEwxzNt302r/FqD3CC8oLR3ha+0S+OU2OSwHeZoP1A3Wk1FBIiQCb+
xlqJI7B5XlheayqHd+uoClc22Z9tXNYW/r8rHYn1v7uClQQot0NIu8C08Na9CBvE
w2QSuCdD7s8L9A==
-----END CERTIFICATE-----
Generated at Mon May 12 20:37:51 2025 by rpki-client