Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: mPCYr6e7COsL9sShC6pKdA8fS4cqdZfPMF6w6RXTVKs=
Subject key identifier: 77:E7:39:BA:86:A4:55:B9:75:CA:95:5D:88:DF:59:3A:72:59:A9:7C
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 01969E9A48370BAD8120F88E6E1D0A04A1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0B56
Signing time: Mon 05 May 2025 04:00:33 +0000
Manifest this update: Mon 05 May 2025 04:00:33 +0000
Manifest next update: Tue 06 May 2025 04:00:33 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: zqTxyEi465RWyK8DPkvSqcgwqboVchIsm9l778QBuao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:48:37:0b:ad:81:20:f8:8e:6e:1d:0a:04:a1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: May 5 04:00:33 2025 GMT
Not After : May 6 04:00:33 2025 GMT
Subject: CN=77e739ba86a455b975ca955d88df593a7259a97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:43:bf:01:00:bd:8a:f8:9c:e6:0a:4c:cf:90:
15:fc:78:35:df:9b:67:c2:df:00:4a:78:92:7b:d9:
75:0d:54:00:ed:fc:4a:7f:42:02:07:f6:ce:53:a1:
fb:be:5b:da:d8:19:30:1c:81:e4:15:44:b1:12:c1:
20:e2:4f:4c:ac:3c:35:cd:58:35:4a:7d:4f:27:d3:
50:20:c2:b9:d5:2a:4e:61:99:d0:a9:7c:5d:34:3d:
3c:ea:a3:13:c0:98:67:34:b6:4f:1e:4a:cd:6c:fe:
48:2d:6d:32:8d:2e:af:38:06:f1:eb:7a:d7:4c:ce:
89:f3:d0:1a:68:e7:c4:21:43:85:94:a8:f9:d1:90:
e6:a4:e3:6c:f5:a7:69:6f:49:e8:c0:a0:16:32:9f:
4c:5d:f3:1e:b6:9b:ad:bd:2d:e5:49:0b:32:e1:de:
51:0c:4d:a1:90:c3:99:c0:29:e3:dd:03:3e:09:d4:
dc:83:4b:2a:ca:ae:bf:5c:89:68:d5:7c:b1:0f:e0:
d6:d9:e4:11:32:7d:d8:fc:9f:7b:02:a1:63:4f:1b:
e7:f8:3c:ae:7b:e6:52:80:54:33:27:16:27:aa:6a:
f3:4b:0c:64:ea:cb:9a:b3:26:34:c2:a9:ed:3c:21:
a2:5a:8b:6b:70:19:44:11:b3:a3:74:83:84:2e:08:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E7:39:BA:86:A4:55:B9:75:CA:95:5D:88:DF:59:3A:72:59:A9:7C
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fc:4b:c0:70:b3:ab:c9:9f:6b:25:7a:af:65:ee:44:87:ff:
a4:c0:50:a7:8d:03:0b:34:f0:3c:14:b9:4b:98:91:17:d0:72:
dc:d6:8d:02:72:a7:46:b2:54:14:aa:b0:ee:6f:7b:b2:99:40:
cf:a1:36:47:b6:b1:e1:8a:8f:95:04:a3:b7:5f:be:30:74:e5:
1c:cb:72:63:be:e8:7c:19:5e:c6:6e:0e:bb:c7:be:9a:31:68:
cc:9c:fc:ff:6e:45:26:bd:8b:87:e6:97:31:89:9a:1f:53:9a:
f7:cb:1b:29:cc:c7:e3:08:ab:be:28:f6:10:0f:97:15:08:75:
83:af:aa:8f:df:9d:b0:5f:a1:a3:7e:f7:db:d4:b8:c4:17:eb:
70:a8:91:65:48:06:10:96:02:0a:64:67:ec:a7:18:fb:ea:12:
e2:75:41:17:76:a8:ec:4d:f5:78:1a:a3:62:9b:f0:27:67:78:
8e:a5:3e:91:59:40:c6:a4:e9:7d:62:f2:d6:41:e7:2d:69:0c:
f9:1d:81:58:1b:41:aa:90:d2:03:a8:cb:49:cf:eb:6d:4f:7e:
ff:4f:90:80:2f:bd:05:b0:2e:51:ba:8d:4b:ce:6b:bf:a7:71:
d1:29:d6:b8:54:00:a2:0a:80:d3:dd:93:48:70:b4:4c:19:f7:
8e:aa:a8:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemkg3C62BIPiObh0KBKGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj
NGFkZmYwHhcNMjUwNTA1MDQwMDMzWhcNMjUwNTA2MDQwMDMzWjAzMTEwLwYDVQQD
Eyg3N2U3MzliYTg2YTQ1NWI5NzVjYTk1NWQ4OGRmNTkzYTcyNTlhOTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kO/AQC9ivic5gpMz5AV/Hg135tn
wt8ASniSe9l1DVQA7fxKf0ICB/bOU6H7vlva2BkwHIHkFUSxEsEg4k9MrDw1zVg1
Sn1PJ9NQIMK51SpOYZnQqXxdND086qMTwJhnNLZPHkrNbP5ILW0yjS6vOAbx63rX
TM6J89AaaOfEIUOFlKj50ZDmpONs9adpb0nowKAWMp9MXfMetputvS3lSQsy4d5R
DE2hkMOZwCnj3QM+CdTcg0sqyq6/XIlo1XyxD+DW2eQRMn3Y/J97AqFjTxvn+Dyu
e+ZSgFQzJxYnqmrzSwxk6suasyY0wqntPCGiWotrcBlEEbOjdIOELgjaLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfnObqGpFW5dcqVXYjfWTpyWal8MB8GA1UdIwQY
MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt
MmJiODJhODM3YjdiLzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi
LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvxLwHCz
q8mfayV6r2XuRIf/pMBQp40DCzTwPBS5S5iRF9By3NaNAnKnRrJUFKqw7m97splA
z6E2R7ax4YqPlQSjt1++MHTlHMtyY77ofBlexm4Ou8e+mjFozJz8/25FJr2Lh+aX
MYmaH1Oa98sbKczH4wirvij2EA+XFQh1g6+qj9+dsF+ho37329S4xBfrcKiRZUgG
EJYCCmRn7KcY++oS4nVBF3ao7E31eBqjYpvwJ2d4jqU+kVlAxqTpfWLy1kHnLWkM
+R2BWBtBqpDSA6jLSc/rbU9+/0+QgC+9BbAuUbqNS85rv6dx0SnWuFQAogqA092T
SHC0TBn3jqqorw==
-----END CERTIFICATE-----
Generated at Mon May 5 06:46:32 2025 by rpki-client