Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: NTafZF/8BX55IPc8uxXIFWO16At4pYFnCyZ0uESpuVw=
Subject key identifier: 27:D7:9E:05:46:E2:25:4D:52:A7:8B:35:E2:77:35:1A:11:1E:F6:4D
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 0196C796304D6EA1F7356896571EE4358445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 05D2
Signing time: Tue 13 May 2025 03:00:30 +0000
Manifest this update: Tue 13 May 2025 03:00:30 +0000
Manifest next update: Wed 14 May 2025 03:00:30 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: m/E6HvnWLpRCDegCT+uQ204hoLChm29mubbbU86XUuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:96:30:4d:6e:a1:f7:35:68:96:57:1e:e4:35:84:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: May 13 03:00:30 2025 GMT
Not After : May 14 03:00:30 2025 GMT
Subject: CN=27d79e0546e2254d52a78b35e277351a111ef64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:92:cc:3e:3a:08:c9:4f:d7:e1:0e:7e:24:
9b:da:9b:70:70:6f:f5:40:35:7c:cf:f4:38:49:24:
f6:a8:b6:69:25:ca:16:c7:7d:05:60:4f:e2:db:94:
5e:2a:a7:7a:fe:bb:09:ab:5e:ef:ea:b4:69:65:82:
1c:10:58:76:76:f5:5f:08:ab:0a:b5:fb:78:b4:6c:
6f:81:ce:f1:e2:3a:f8:e0:50:34:a5:8e:54:2a:d8:
c2:f4:f2:fa:c5:12:6c:98:53:db:74:44:33:61:7b:
47:e4:9d:a7:19:02:93:d9:38:56:76:ae:30:77:8a:
62:df:61:c9:d2:b0:ef:9c:d4:37:bb:da:c0:04:d3:
b9:d2:38:56:71:2b:b3:10:78:d6:c2:ec:84:55:6c:
06:ca:05:7e:93:89:9c:5e:3a:47:cd:0d:32:5c:61:
5b:bb:27:0f:d0:88:fa:df:f0:3f:80:4b:ec:83:b7:
96:1d:cf:7d:a8:79:f9:43:87:9c:ef:76:0d:fb:87:
6e:45:97:b6:60:e3:5d:8e:e3:f5:fe:bd:52:9f:d4:
04:60:fd:ff:1e:a2:03:46:e4:ef:6c:f1:d7:a5:3d:
93:b4:02:84:66:26:5b:a1:11:ae:63:80:e7:2f:58:
bd:c2:19:5d:85:05:8c:bb:81:2a:cc:ed:16:23:1b:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:9E:05:46:E2:25:4D:52:A7:8B:35:E2:77:35:1A:11:1E:F6:4D
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:12:a2:6d:50:2b:08:84:be:94:79:0f:04:c5:c7:d7:05:b4:
93:4a:0d:6f:5a:23:18:f1:a5:46:42:5f:4d:20:71:48:e9:b6:
bb:26:33:0e:09:eb:0d:5c:d0:c7:98:61:2d:15:37:2b:db:17:
3b:0a:56:5f:fc:00:d3:8e:10:e9:8e:7d:1b:83:8c:e8:f7:79:
14:27:83:9b:2d:5c:33:e6:b6:d0:5c:d0:e9:90:d9:9d:e0:f3:
b2:35:85:8f:e1:84:04:e7:a6:f3:a5:e5:ae:35:62:0f:e0:f6:
3e:db:cd:c3:8c:c9:5f:b2:d1:75:b5:5c:42:cb:02:78:d5:c6:
fa:34:ff:61:5d:77:66:e6:c9:60:fb:3e:6a:5b:e5:c3:ba:aa:
fe:8d:77:f4:62:78:3e:69:12:36:8c:99:5b:1e:43:e3:b4:da:
99:03:9a:c0:f8:94:61:56:2c:ad:ad:a0:7a:0f:90:61:1f:ed:
68:99:63:c8:ff:b8:74:e1:d1:83:9a:ad:79:5b:37:63:c0:3a:
af:05:f7:7f:ba:ab:b2:86:51:bf:6f:f2:25:9e:11:8f:7c:f6:
4c:38:47:e1:93:04:07:1e:86:de:0b:54:1c:0f:bb:dd:fe:4d:
c6:ec:49:aa:c0:30:c6:35:ad:ef:b1:f2:3a:82:22:30:b4:b7:
2d:96:2b:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHljBNbqH3NWiWVx7kNYRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmNGEwNjExZjcyYTg5MmMzMGQ4MjEyZDIxZjg2Y2Mx
M2E5NjcwHhcNMjUwNTEzMDMwMDMwWhcNMjUwNTE0MDMwMDMwWjAzMTEwLwYDVQQD
EygyN2Q3OWUwNTQ2ZTIyNTRkNTJhNzhiMzVlMjc3MzUxYTExMWVmNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLCSzD46CMlP1+EOfiSb2ptwcG/1
QDV8z/Q4SST2qLZpJcoWx30FYE/i25ReKqd6/rsJq17v6rRpZYIcEFh2dvVfCKsK
tft4tGxvgc7x4jr44FA0pY5UKtjC9PL6xRJsmFPbdEQzYXtH5J2nGQKT2ThWdq4w
d4pi32HJ0rDvnNQ3u9rABNO50jhWcSuzEHjWwuyEVWwGygV+k4mcXjpHzQ0yXGFb
uycP0Ij63/A/gEvsg7eWHc99qHn5Q4ec73YN+4duRZe2YONdjuP1/r1Sn9QEYP3/
HqIDRuTvbPHXpT2TtAKEZiZboRGuY4DnL1i9whldhQWMu4EqzO0WIxttFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfXngVG4iVNUqeLNeJ3NRoRHvZNMB8GA1UdIwQY
MBaAFKo19KBhH3KoksMNghLSH4bME6lnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgt
NmJiZmU1OGExY2EwLzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgtNmJiZmU1OGExY2Ew
LzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxKibVAr
CIS+lHkPBMXH1wW0k0oNb1ojGPGlRkJfTSBxSOm2uyYzDgnrDVzQx5hhLRU3K9sX
OwpWX/wA044Q6Y59G4OM6Pd5FCeDmy1cM+a20FzQ6ZDZneDzsjWFj+GEBOem86Xl
rjViD+D2PtvNw4zJX7LRdbVcQssCeNXG+jT/YV13ZubJYPs+alvlw7qq/o139GJ4
PmkSNoyZWx5D47TamQOawPiUYVYsra2geg+QYR/taJljyP+4dOHRg5qteVs3Y8A6
rwX3f7qrsoZRv2/yJZ4Rj3z2TDhH4ZMEBx6G3gtUHA+73f5NxuxJqsAwxjWt77Hy
OoIiMLS3LZYrnQ==
-----END CERTIFICATE-----
Generated at Tue May 13 06:13:56 2025 by rpki-client