
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
File: q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft (raw, json)
Hash identifier: 9LIvDVs8u16gugIPpsjtgsL/J3wHg1DwRuu4w+x/y2g=
Subject key identifier: 74:2F:7D:23:C1:93:1A:90:36:44:13:24:E5:B2:3C:BF:38:78:6C:3E
Authority key identifier: AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B
Certificate issuer: /CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
Certificate serial: 0196C04A785A600C136BE253A222FE532333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
Manifest number: 10A3
Signing time: Sun 11 May 2025 17:00:27 +0000
Manifest this update: Sun 11 May 2025 17:00:27 +0000
Manifest next update: Mon 12 May 2025 17:00:27 +0000
Files and hashes: 1: q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl (hash: iY4/nQBk3WuVZQq+ETHW65E4lmArvBSaHo3NPYhy74M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:78:5a:60:0c:13:6b:e2:53:a2:22:fe:53:23:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab73bf62bd1a3f49dd9249078e39d1b94eae6d2b
Validity
Not Before: May 11 17:00:27 2025 GMT
Not After : May 12 17:00:27 2025 GMT
Subject: CN=742f7d23c1931a9036441324e5b23cbf38786c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:59:07:1c:0d:33:65:02:92:b6:f1:d1:77:
2e:4b:aa:ee:52:15:e1:e1:a9:a6:4e:e7:40:94:b9:
50:00:b9:5b:e3:42:e3:1b:77:fb:83:e9:c4:c0:07:
35:64:01:2b:9a:d9:8f:92:90:c1:e7:26:85:71:4b:
78:c3:5f:40:f5:d5:96:3d:f0:2c:3d:02:e9:9e:8e:
26:b5:58:1d:27:9e:49:d8:d4:9c:8f:ae:22:2a:5e:
82:91:03:3c:a7:f3:74:94:a9:75:a4:7b:2a:97:44:
0f:09:ff:23:bb:fa:9c:8f:4b:91:c0:7c:35:a2:85:
3a:41:b2:87:53:d5:8f:e1:0e:bd:40:56:d9:c5:c0:
f6:97:10:aa:58:34:5a:e9:83:51:d5:d7:13:cd:6b:
4b:b3:15:5e:22:77:c4:fb:63:c8:b8:f0:12:29:07:
94:be:5d:b6:03:63:9e:e7:09:40:43:59:06:3a:7a:
32:93:dd:67:b3:37:d0:03:09:c6:d5:26:57:80:19:
c5:80:0a:67:72:a9:dc:f3:fc:5d:7b:1d:e4:2c:9f:
e2:59:1f:ce:d3:af:17:54:42:53:70:44:fc:b9:59:
cb:ae:6d:84:78:46:58:a3:9a:00:54:c5:4f:5e:78:
ca:41:35:ea:a6:d1:ed:bc:21:52:9d:d0:07:85:be:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2F:7D:23:C1:93:1A:90:36:44:13:24:E5:B2:3C:BF:38:78:6C:3E
X509v3 Authority Key Identifier:
keyid:AB:73:BF:62:BD:1A:3F:49:DD:92:49:07:8E:39:D1:B9:4E:AE:6D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e938bf-c2a6-4e2c-bfc5-5ac56398c721/1/q3O_Yr0aP0ndkkkHjjnRuU6ubSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:69:14:4f:cb:4f:c6:22:28:37:e3:dc:10:03:f7:7c:c8:e4:
66:5f:80:28:6c:13:2f:b5:f4:89:6d:8b:ab:87:d2:e2:6a:62:
20:f6:7f:9a:55:1e:4e:0f:3a:07:62:72:75:6f:f5:0c:f7:15:
d7:0a:f6:f2:0e:a5:9f:b7:8c:d7:43:93:e6:d0:0a:70:d3:0c:
95:5c:87:33:43:5a:26:e3:fb:b5:6f:80:e2:2e:c4:8a:8f:d7:
a4:32:b7:66:0e:be:74:80:91:04:ed:f8:c9:a7:f8:de:27:25:
7c:31:4e:ae:2f:af:55:ea:f8:92:be:87:75:b3:4a:cf:bd:a9:
b9:55:9b:03:ba:ba:2b:d6:e2:d0:7e:b5:2c:b4:ca:ff:55:88:
72:10:f1:76:b0:58:7f:b3:67:2f:01:b9:83:bc:34:96:82:93:
7d:6c:95:d8:5a:67:0c:e3:5b:51:d4:ca:05:b2:1b:24:4e:cc:
ea:a1:a5:3e:56:6b:12:d4:32:6c:af:5c:5f:ee:49:67:fb:3c:
78:22:bb:69:95:e5:42:10:a8:40:9c:a7:bc:99:22:4c:d6:a7:
77:c8:4b:67:33:6a:8c:e9:ab:55:a7:2e:0d:44:c6:26:a3:57:
21:21:bb:6f:35:de:5b:51:9a:e6:9f:3f:01:77:15:f0:5b:f2:
e5:da:9d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASnhaYAwTa+JToiL+UyMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzNiZjYyYmQxYTNmNDlkZDkyNDkwNzhlMzlkMWI5NGVh
ZTZkMmIwHhcNMjUwNTExMTcwMDI3WhcNMjUwNTEyMTcwMDI3WjAzMTEwLwYDVQQD
Eyg3NDJmN2QyM2MxOTMxYTkwMzY0NDEzMjRlNWIyM2NiZjM4Nzg2YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCNZBxwNM2UCkrbx0XcuS6ruUhXh
4ammTudAlLlQALlb40LjG3f7g+nEwAc1ZAErmtmPkpDB5yaFcUt4w19A9dWWPfAs
PQLpno4mtVgdJ55J2NScj64iKl6CkQM8p/N0lKl1pHsql0QPCf8ju/qcj0uRwHw1
ooU6QbKHU9WP4Q69QFbZxcD2lxCqWDRa6YNR1dcTzWtLsxVeInfE+2PIuPASKQeU
vl22A2Oe5wlAQ1kGOnoyk91nszfQAwnG1SZXgBnFgApncqnc8/xdex3kLJ/iWR/O
068XVEJTcET8uVnLrm2EeEZYo5oAVMVPXnjKQTXqptHtvCFSndAHhb6gqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQvfSPBkxqQNkQTJOWyPL84eGw+MB8GA1UdIwQY
MBaAFKtzv2K9Gj9J3ZJJB4450blOrm0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNPX1lyMGFQMG5ka2trSGpqblJ1VTZ1YlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lOTM4YmYtYzJhNi00ZTJjLWJmYzUt
NWFjNTYzOThjNzIxLzEvcTNPX1lyMGFQMG5ka2trSGpqblJ1VTZ1YlNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lOTM4YmYtYzJhNi00ZTJjLWJmYzUtNWFjNTYzOThjNzIx
LzEvcTNPX1lyMGFQMG5ka2trSGpqblJ1VTZ1YlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmkUT8tP
xiIoN+PcEAP3fMjkZl+AKGwTL7X0iW2Lq4fS4mpiIPZ/mlUeTg86B2JydW/1DPcV
1wr28g6ln7eM10OT5tAKcNMMlVyHM0NaJuP7tW+A4i7Eio/XpDK3Zg6+dICRBO34
yaf43iclfDFOri+vVer4kr6HdbNKz72puVWbA7q6K9bi0H61LLTK/1WIchDxdrBY
f7NnLwG5g7w0loKTfWyV2FpnDONbUdTKBbIbJE7M6qGlPlZrEtQybK9cX+5JZ/s8
eCK7aZXlQhCoQJynvJkiTNand8hLZzNqjOmrVacuDUTGJqNXISG7bzXeW1Ga5p8/
AXcV8Fvy5dqdnQ==
-----END CERTIFICATE-----
Generated at Mon May 12 01:58:58 2025 by rpki-client