Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: 4TOb8Tf2moIM3G2KRQbOIQajbTdUkwHML/cSrVXS5sM=
Subject key identifier: BB:EC:27:AF:4D:BC:70:F2:D0:9B:00:56:32:D3:05:F6:59:2E:13:54
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 0196A01AB735085383C721F4F423847B22EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 02EF
Signing time: Mon 05 May 2025 11:00:27 +0000
Manifest this update: Mon 05 May 2025 11:00:27 +0000
Manifest next update: Tue 06 May 2025 11:00:27 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: OLxKMomdsdlLr5Pkgc3HTTkhVzZUJ7icjA8KJLKab/M=)
3: nz1XOf28Ogcs8fiWug2xbFcdTSI.roa (hash: ztlz9ATge0wUo5eGVXQllv/BlyjO+lbBdkDSEy3I//E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:b7:35:08:53:83:c7:21:f4:f4:23:84:7b:22:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: May 5 11:00:27 2025 GMT
Not After : May 6 11:00:27 2025 GMT
Subject: CN=bbec27af4dbc70f2d09b005632d305f6592e1354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:5e:5e:a3:ba:50:95:e9:b8:83:e9:94:27:
d8:11:c8:0c:8f:77:44:10:91:a5:3d:42:cd:a8:f6:
82:5a:ef:68:57:9e:a5:fa:92:5d:53:bc:85:45:af:
9d:67:68:b7:41:f0:37:03:26:ef:eb:02:fc:19:fe:
46:d9:81:31:ad:72:0e:1d:ec:8c:79:25:f3:f3:f5:
73:a6:4f:16:05:e7:a3:4f:ef:10:fe:76:a6:98:a1:
fa:bd:28:2f:82:f6:c0:72:9a:52:3e:96:36:ca:c7:
9e:c7:17:db:54:a9:b9:92:84:91:d7:12:7b:64:8b:
fc:9b:3e:60:58:d5:ab:88:ee:ac:61:cf:c0:23:d1:
5e:25:13:79:28:17:18:b5:ba:00:9a:97:97:38:07:
bc:fb:dc:bf:24:29:29:2e:07:72:ad:f7:b5:29:c8:
5b:2f:e9:41:2d:34:73:99:7a:10:26:e6:b1:ae:9c:
80:e4:44:15:32:42:74:a4:ea:29:88:ba:ea:e2:ac:
f4:59:d2:94:00:84:a1:c3:96:48:75:ea:26:85:06:
94:42:52:9d:9a:3f:08:7e:d0:a3:d7:b0:f4:77:a7:
91:48:a8:08:ab:ee:e2:59:74:3b:cb:aa:d8:26:cc:
4e:97:3d:63:41:c9:d7:a4:b4:73:68:56:4e:ec:e3:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:27:AF:4D:BC:70:F2:D0:9B:00:56:32:D3:05:F6:59:2E:13:54
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:43:83:c2:2d:3e:6b:2e:17:8f:85:9d:95:d2:71:65:0c:84:
7b:2c:56:f6:e3:4e:13:2a:a4:32:0c:41:09:cc:08:43:8b:6e:
30:82:a0:ba:75:fc:7e:16:c9:8c:ef:e0:af:1a:a0:0e:67:7b:
f7:b5:c3:5c:bf:d8:01:34:2f:d4:5c:51:4e:c1:14:c0:51:e9:
ca:5d:a7:8b:9c:e1:fb:7d:38:f5:3b:d6:e0:7f:79:db:c7:d4:
4f:42:15:bb:e7:49:b7:6e:ba:86:ff:bb:1a:74:f0:37:8e:f8:
67:b0:d2:6b:7e:d5:c1:87:b9:80:22:08:15:2f:70:35:cd:d7:
b8:04:20:0d:f4:1b:03:e6:80:d1:90:c9:de:8c:00:a1:8b:1a:
49:02:66:c8:81:53:6c:91:87:b9:bc:cb:06:d4:f7:84:c5:1f:
a0:60:93:69:40:da:c9:76:1f:d4:d2:44:e5:61:11:67:34:97:
ba:7a:66:f7:6d:2b:da:6d:57:9c:79:3b:a5:56:60:dc:e8:50:
ee:d9:67:4c:68:2d:08:19:c5:f7:67:eb:cf:b9:c4:8f:c0:4e:
c8:28:c7:84:83:8c:30:94:ce:19:83:9c:9e:44:10:59:e1:72:
1d:1b:9b:f0:de:ce:19:65:f1:d4:36:8f:4a:a8:44:a2:1c:32:
1c:75:7b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGrc1CFODxyH09COEeyLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm
NjM1YjcwHhcNMjUwNTA1MTEwMDI3WhcNMjUwNTA2MTEwMDI3WjAzMTEwLwYDVQQD
EyhiYmVjMjdhZjRkYmM3MGYyZDA5YjAwNTYzMmQzMDVmNjU5MmUxMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UxeXqO6UJXpuIPplCfYEcgMj3dE
EJGlPULNqPaCWu9oV56l+pJdU7yFRa+dZ2i3QfA3Aybv6wL8Gf5G2YExrXIOHeyM
eSXz8/Vzpk8WBeejT+8Q/nammKH6vSgvgvbAcppSPpY2yseexxfbVKm5koSR1xJ7
ZIv8mz5gWNWriO6sYc/AI9FeJRN5KBcYtboAmpeXOAe8+9y/JCkpLgdyrfe1Kchb
L+lBLTRzmXoQJuaxrpyA5EQVMkJ0pOopiLrq4qz0WdKUAIShw5ZIdeomhQaUQlKd
mj8IftCj17D0d6eRSKgIq+7iWXQ7y6rYJsxOlz1jQcnXpLRzaFZO7OMvjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvsJ69NvHDy0JsAVjLTBfZZLhNUMB8GA1UdIwQY
MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt
NTFkYzJiMDk2ZGVmLzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm
LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr0ODwi0+
ay4Xj4WdldJxZQyEeyxW9uNOEyqkMgxBCcwIQ4tuMIKgunX8fhbJjO/grxqgDmd7
97XDXL/YATQv1FxRTsEUwFHpyl2ni5zh+3049TvW4H9528fUT0IVu+dJt266hv+7
GnTwN474Z7DSa37VwYe5gCIIFS9wNc3XuAQgDfQbA+aA0ZDJ3owAoYsaSQJmyIFT
bJGHubzLBtT3hMUfoGCTaUDayXYf1NJE5WERZzSXunpm920r2m1XnHk7pVZg3OhQ
7tlnTGgtCBnF92frz7nEj8BOyCjHhIOMMJTOGYOcnkQQWeFyHRub8N7OGWXx1DaP
SqhEohwyHHV7Dg==
-----END CERTIFICATE-----
Generated at Mon May 5 17:06:55 2025 by rpki-client