Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: PtjDYodDcxoSPvrI+UfheqmUmHKuGqI2afD566+q6/4=
Subject key identifier: 3A:41:5F:BD:A1:90:47:72:9A:56:45:32:B3:E0:A0:E9:68:1B:3E:C3
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 0196C5A8659CC8E66A5A5F2E7222BCFB4E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0819
Signing time: Mon 12 May 2025 18:01:09 +0000
Manifest this update: Mon 12 May 2025 18:01:09 +0000
Manifest next update: Tue 13 May 2025 18:01:09 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: D9uwxoz/Gm+qQIFbonQeZbTVTf4dwgYpWZfJ0ovSEIw=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:65:9c:c8:e6:6a:5a:5f:2e:72:22:bc:fb:4e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: May 12 18:01:09 2025 GMT
Not After : May 13 18:01:09 2025 GMT
Subject: CN=3a415fbda19047729a564532b3e0a0e9681b3ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b0:aa:63:3b:05:b8:37:3c:46:4b:13:45:72:
1c:18:6e:98:3c:06:ca:28:d7:b9:13:ed:7c:f7:af:
49:7e:1d:30:d3:51:67:28:bc:e8:fc:f1:81:b0:fa:
1c:c4:6a:25:04:62:3e:e1:3b:0f:a1:93:2c:c6:8e:
60:f8:1f:cc:80:93:41:c7:25:91:1d:c2:9b:26:0f:
65:35:9a:5b:4b:39:a5:b6:b2:ce:33:ee:84:5b:b3:
ee:df:22:ef:98:c5:f1:a4:c4:4e:50:68:27:5c:cb:
28:d4:8e:18:5a:cc:15:f5:6d:bd:c2:20:ed:26:49:
cf:fa:61:44:06:69:e1:dd:3e:8e:5e:4e:09:5f:87:
96:c9:15:64:18:5e:f5:2d:3b:b5:38:58:5f:be:b7:
b4:d7:df:a1:76:bd:b1:98:35:7b:fe:15:a8:40:35:
15:b1:e4:d5:1a:3a:1c:3d:3a:be:51:5d:c4:a5:9d:
6a:e3:ff:01:c7:75:d4:ab:d8:1b:74:16:4f:cb:45:
76:8b:fb:3f:7a:df:6c:48:7d:22:78:1c:63:5a:26:
9e:f2:3b:4d:22:54:43:b6:7c:c7:71:20:20:cb:ba:
a3:38:c6:67:aa:bd:fa:a9:43:ff:6b:fa:aa:e6:fd:
4b:06:82:6e:32:81:34:c9:8a:ac:aa:56:fe:8a:17:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:41:5F:BD:A1:90:47:72:9A:56:45:32:B3:E0:A0:E9:68:1B:3E:C3
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ee:ce:61:dd:30:8c:ee:6e:52:10:5e:5d:36:b8:71:f7:b5:
23:40:7b:9e:70:d9:7a:e7:79:17:bb:65:ae:6f:1f:99:e3:d9:
bc:39:32:71:6b:c9:ca:7a:a1:be:93:43:21:07:38:b6:4a:b6:
96:ef:b9:e4:18:27:c4:8e:12:99:a7:4d:ed:82:55:7d:29:5a:
32:ee:84:34:e6:7d:ca:ce:1e:5b:16:56:4d:aa:4a:be:4b:0e:
7d:61:1c:5d:05:50:61:ff:1a:4a:a7:0a:c5:c6:9c:72:b9:be:
5b:92:53:b4:5a:42:6d:e7:7b:79:04:1e:41:5a:0f:f0:a1:df:
54:5e:0c:d9:9f:06:1c:1c:77:41:72:f4:29:63:30:1d:d1:e6:
3c:ae:4c:2d:15:51:3e:02:c9:60:41:de:cb:db:e6:38:d5:41:
d1:a0:d1:3b:49:cf:1f:1f:ca:a9:23:67:a0:18:ca:fd:f7:b2:
94:0c:c2:5b:ff:46:65:2b:0e:7c:ba:ba:ec:25:0e:e6:b6:46:
58:1d:3a:99:d2:d2:bf:4a:d5:77:7a:ca:04:43:28:ee:6e:3a:
9e:85:08:6a:68:44:97:a8:a1:7a:6d:9a:bc:a7:72:f3:11:d7:
75:09:96:02:b3:2c:99:62:cd:b3:fd:a6:0d:87:4e:3b:6e:33:
c7:e4:fe:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFqGWcyOZqWl8uciK8+04qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk
NWRkNmUwHhcNMjUwNTEyMTgwMTA5WhcNMjUwNTEzMTgwMTA5WjAzMTEwLwYDVQQD
EygzYTQxNWZiZGExOTA0NzcyOWE1NjQ1MzJiM2UwYTBlOTY4MWIzZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bCqYzsFuDc8RksTRXIcGG6YPAbK
KNe5E+18969Jfh0w01FnKLzo/PGBsPocxGolBGI+4TsPoZMsxo5g+B/MgJNBxyWR
HcKbJg9lNZpbSzmltrLOM+6EW7Pu3yLvmMXxpMROUGgnXMso1I4YWswV9W29wiDt
JknP+mFEBmnh3T6OXk4JX4eWyRVkGF71LTu1OFhfvre019+hdr2xmDV7/hWoQDUV
seTVGjocPTq+UV3EpZ1q4/8Bx3XUq9gbdBZPy0V2i/s/et9sSH0ieBxjWiae8jtN
IlRDtnzHcSAgy7qjOMZnqr36qUP/a/qq5v1LBoJuMoE0yYqsqlb+ihfG8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpBX72hkEdymlZFMrPgoOloGz7DMB8GA1UdIwQY
MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt
NDhhZTcwMTYxZTc5LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5
LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANe7OYd0w
jO5uUhBeXTa4cfe1I0B7nnDZeud5F7tlrm8fmePZvDkycWvJynqhvpNDIQc4tkq2
lu+55BgnxI4SmadN7YJVfSlaMu6ENOZ9ys4eWxZWTapKvksOfWEcXQVQYf8aSqcK
xcaccrm+W5JTtFpCbed7eQQeQVoP8KHfVF4M2Z8GHBx3QXL0KWMwHdHmPK5MLRVR
PgLJYEHey9vmONVB0aDRO0nPHx/KqSNnoBjK/feylAzCW/9GZSsOfLq67CUO5rZG
WB06mdLSv0rVd3rKBEMo7m46noUIamhEl6ihem2avKdy8xHXdQmWArMsmWLNs/2m
DYdOO24zx+T+lQ==
-----END CERTIFICATE-----
Generated at Tue May 13 01:20:03 2025 by rpki-client