Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: a3mKGJHR8k4yHrSnNgtN6m8nV6++TLQayShZmqZy6xc=
Subject key identifier: 35:2B:72:CE:90:DB:5E:EE:E8:62:3E:DB:AD:78:4D:EB:F8:BA:61:64
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 0196C26F8F42A8BB22543B1E5AE9367C2E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 153C
Signing time: Mon 12 May 2025 03:00:13 +0000
Manifest this update: Mon 12 May 2025 03:00:13 +0000
Manifest next update: Tue 13 May 2025 03:00:13 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: BYleb3nNIbgbHCjbhelTDSIOb3WW14+vkco60rv2+ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:8f:42:a8:bb:22:54:3b:1e:5a:e9:36:7c:2e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: May 12 03:00:13 2025 GMT
Not After : May 13 03:00:13 2025 GMT
Subject: CN=352b72ce90db5eeee8623edbad784debf8ba6164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:f2:ab:5a:46:c6:ad:fb:93:83:3c:3e:44:
da:47:cb:d7:41:36:dc:0c:be:06:cf:ae:a7:e7:9c:
f6:73:0e:a1:b5:29:42:d4:9c:3a:4c:34:00:64:a2:
a7:c9:d7:bf:03:c4:68:c0:b6:68:20:a8:b2:97:ba:
ae:e9:2b:fc:64:b5:54:72:09:a9:61:9d:86:ce:85:
75:9b:d7:29:fa:e9:58:5c:46:31:62:56:12:76:aa:
bf:ed:f4:5b:01:cf:83:8f:8e:d2:93:0d:f5:43:02:
40:0d:e1:1c:85:e9:f9:4c:aa:7d:aa:b1:e9:4a:ce:
43:01:e7:4b:94:1b:7a:65:41:cd:a8:f5:a8:1c:ff:
68:64:7d:e8:72:13:74:15:c0:ce:b8:1c:d0:f1:43:
53:96:d2:d6:74:34:0b:8c:db:d1:0f:19:93:b5:75:
5b:50:79:ef:c0:ba:5e:db:e9:bc:0a:69:c1:a2:6f:
c4:cf:e0:4b:20:db:c0:f2:25:d3:e5:33:58:f2:f9:
36:07:c1:9c:d1:fe:15:fd:79:bb:7c:b3:e7:63:dd:
76:63:92:15:e2:c2:4e:91:60:b5:6d:e2:cc:f0:4e:
fc:80:48:11:c7:21:f4:30:54:62:17:3f:31:92:38:
75:db:99:67:43:45:dc:ab:66:c0:91:02:c2:0f:3e:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2B:72:CE:90:DB:5E:EE:E8:62:3E:DB:AD:78:4D:EB:F8:BA:61:64
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:65:fb:0b:ce:5e:c9:13:cb:1d:43:80:84:07:a5:65:50:7c:
ca:2f:c2:72:3d:63:b3:93:85:03:bc:0b:79:30:07:d8:04:71:
64:9e:4e:49:ef:b7:dc:67:87:04:aa:22:4c:ae:af:45:6d:64:
5c:cc:d8:17:72:ac:a0:e7:e2:43:15:db:40:8b:39:bb:46:2b:
96:0b:9e:93:11:3b:45:3f:70:1d:ed:27:ef:72:db:77:8f:29:
76:4c:4d:2c:5d:26:de:66:3e:3e:32:29:12:3f:d7:b9:a5:17:
92:f1:05:64:09:54:20:e5:9c:1a:7c:13:51:5b:c4:49:5f:6e:
ee:0f:1d:cb:1c:e3:76:27:ad:1e:e6:6b:37:f0:8b:1e:45:6c:
b8:05:64:00:b0:06:04:41:8b:74:b4:fd:c2:e0:5c:60:1b:ee:
79:ea:b2:3c:39:e9:d2:8b:74:70:3f:4c:0e:76:f6:ca:ac:4d:
e5:09:84:0f:73:be:0f:90:c9:e3:41:10:1c:1c:a9:12:8b:ac:
19:a5:7f:f5:da:db:cc:fb:54:7c:cf:eb:9f:2d:17:ad:39:09:
4b:dd:24:d0:f0:c0:5d:b6:50:2f:62:17:a5:b9:21:df:77:ad:
15:1a:30:97:ac:70:65:8d:b8:6c:4d:c0:0c:20:0f:eb:66:7a:
06:a6:40:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb49CqLsiVDseWuk2fC4IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz
NzdkNmQwHhcNMjUwNTEyMDMwMDEzWhcNMjUwNTEzMDMwMDEzWjAzMTEwLwYDVQQD
EygzNTJiNzJjZTkwZGI1ZWVlZTg2MjNlZGJhZDc4NGRlYmY4YmE2MTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33Pyq1pGxq37k4M8PkTaR8vXQTbc
DL4Gz66n55z2cw6htSlC1Jw6TDQAZKKnyde/A8RowLZoIKiyl7qu6Sv8ZLVUcgmp
YZ2GzoV1m9cp+ulYXEYxYlYSdqq/7fRbAc+Dj47Skw31QwJADeEchen5TKp9qrHp
Ss5DAedLlBt6ZUHNqPWoHP9oZH3ochN0FcDOuBzQ8UNTltLWdDQLjNvRDxmTtXVb
UHnvwLpe2+m8CmnBom/Ez+BLINvA8iXT5TNY8vk2B8Gc0f4V/Xm7fLPnY912Y5IV
4sJOkWC1beLM8E78gEgRxyH0MFRiFz8xkjh125lnQ0Xcq2bAkQLCDz6O+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUrcs6Q217u6GI+2614Tev4umFkMB8GA1UdIwQY
MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt
MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz
LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomX7C85e
yRPLHUOAhAelZVB8yi/Ccj1js5OFA7wLeTAH2ARxZJ5OSe+33GeHBKoiTK6vRW1k
XMzYF3KsoOfiQxXbQIs5u0YrlguekxE7RT9wHe0n73Lbd48pdkxNLF0m3mY+PjIp
Ej/XuaUXkvEFZAlUIOWcGnwTUVvESV9u7g8dyxzjdietHuZrN/CLHkVsuAVkALAG
BEGLdLT9wuBcYBvueeqyPDnp0ot0cD9MDnb2yqxN5QmED3O+D5DJ40EQHBypEous
GaV/9drbzPtUfM/rny0XrTkJS90k0PDAXbZQL2IXpbkh33etFRowl6xwZY24bE3A
DCAP62Z6BqZAjA==
-----END CERTIFICATE-----
Generated at Mon May 12 11:05:12 2025 by rpki-client