Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: 0JCGDFKyljEqmJHs+ZHDwosoyJR6ETUyNi2lXaMaM0w=
Subject key identifier: 38:58:8A:92:2C:7B:09:08:F4:28:C5:8E:CD:36:94:AF:01:5B:54:6F
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 0196CCF4622F22BF1E800116829C358E2B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 153B
Signing time: Wed 14 May 2025 04:01:30 +0000
Manifest this update: Wed 14 May 2025 04:01:30 +0000
Manifest next update: Thu 15 May 2025 04:01:30 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: cJ1AN+ZK4K5fWOziqwAd4dWbADfpIpYAoBPME7Li5JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f4:62:2f:22:bf:1e:80:01:16:82:9c:35:8e:2b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: May 14 04:01:30 2025 GMT
Not After : May 15 04:01:30 2025 GMT
Subject: CN=38588a922c7b0908f428c58ecd3694af015b546f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:50:30:79:90:2d:27:fc:94:f0:c5:c4:98:
a1:94:16:00:69:8e:d7:d9:93:d2:aa:59:e5:fc:6b:
d0:86:73:dd:8c:90:73:4e:50:96:8f:a5:02:2d:2e:
aa:79:8b:bc:10:b6:5e:d6:00:fb:93:7c:b6:f1:99:
7f:17:6b:db:99:42:67:98:a1:68:ce:db:f4:c8:2f:
da:a5:69:0f:e4:fe:4b:a3:bf:8a:a0:fd:1c:02:d3:
ef:ae:15:70:e5:98:ea:74:17:d4:15:1e:8f:2c:40:
2f:53:06:66:e6:cf:0f:c2:37:36:5f:7f:9e:b4:29:
72:08:10:2d:4d:c8:26:39:f4:ad:e3:80:3e:c7:94:
d8:e9:15:17:f9:55:a6:ed:58:d0:b5:0a:0b:a5:43:
40:48:94:bd:d9:16:d9:5b:44:b0:4a:ef:af:d2:f5:
5f:13:b9:08:13:94:40:bf:ee:0a:6e:e3:7f:8e:c6:
71:15:57:c7:79:39:f4:bf:cc:30:ca:c2:2c:2f:89:
0d:38:68:41:e8:32:e9:d0:ed:1d:e3:2c:f9:fc:e8:
02:f3:c0:68:32:e7:71:04:16:0e:36:20:b1:82:0c:
7f:ce:70:36:5e:42:bd:c2:49:05:05:e8:0d:bc:41:
04:c1:07:d3:26:57:ee:d7:40:cb:eb:56:18:4a:7b:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:58:8A:92:2C:7B:09:08:F4:28:C5:8E:CD:36:94:AF:01:5B:54:6F
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:93:3a:24:fa:da:b6:d1:b8:7b:54:21:cc:37:a4:67:09:8e:
d7:13:07:aa:8d:64:88:2c:f3:de:97:52:1a:a5:97:9b:56:1b:
1f:b7:f9:e5:c6:9f:81:95:e4:16:8c:de:5f:d5:a8:4d:df:46:
09:26:c8:bf:11:26:65:38:40:07:7f:8e:9d:08:14:d7:af:c6:
2a:4e:c1:85:15:ff:90:83:30:77:e1:32:da:1f:1f:a8:81:f2:
53:10:92:01:dc:47:c0:8f:7d:2e:bf:05:9e:74:2d:f0:27:d7:
7f:83:39:4a:c1:6e:ef:03:90:ac:30:31:71:78:0c:84:88:4b:
ba:49:0c:cf:51:0c:ba:7c:c0:a1:ff:05:d2:55:e3:b6:8c:e9:
17:67:a2:80:98:9f:ef:8e:f4:6a:bc:c3:c0:94:3f:2c:46:27:
5d:4f:0c:af:b6:aa:63:cd:ba:ea:43:98:4f:63:2d:89:60:92:
18:f5:db:62:9c:e7:43:6f:bc:fd:88:3c:4f:fd:6b:b7:7e:42:
36:e0:cc:72:df:f9:3b:fa:6b:c8:c5:13:23:15:92:58:33:c8:
6f:f5:4e:6a:1f:56:28:e4:8e:f7:09:ec:f6:7a:f7:5d:ef:78:
14:a6:28:45:a0:d1:da:d6:ef:80:e9:62:37:fc:bf:48:80:2c:
f3:c3:6b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM9GIvIr8egAEWgpw1jisiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh
ZTMxNDgwHhcNMjUwNTE0MDQwMTMwWhcNMjUwNTE1MDQwMTMwWjAzMTEwLwYDVQQD
EygzODU4OGE5MjJjN2IwOTA4ZjQyOGM1OGVjZDM2OTRhZjAxNWI1NDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTlQMHmQLSf8lPDFxJihlBYAaY7X
2ZPSqlnl/GvQhnPdjJBzTlCWj6UCLS6qeYu8ELZe1gD7k3y28Zl/F2vbmUJnmKFo
ztv0yC/apWkP5P5Lo7+KoP0cAtPvrhVw5ZjqdBfUFR6PLEAvUwZm5s8Pwjc2X3+e
tClyCBAtTcgmOfSt44A+x5TY6RUX+VWm7VjQtQoLpUNASJS92RbZW0SwSu+v0vVf
E7kIE5RAv+4KbuN/jsZxFVfHeTn0v8wwysIsL4kNOGhB6DLp0O0d4yz5/OgC88Bo
MudxBBYONiCxggx/znA2XkK9wkkFBegNvEEEwQfTJlfu10DL61YYSnshsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhYipIsewkI9CjFjs02lK8BW1RvMB8GA1UdIwQY
MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt
YjZmMWNmYWE2OTg1LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1
LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpM6JPra
ttG4e1QhzDekZwmO1xMHqo1kiCzz3pdSGqWXm1YbH7f55cafgZXkFozeX9WoTd9G
CSbIvxEmZThAB3+OnQgU16/GKk7BhRX/kIMwd+Ey2h8fqIHyUxCSAdxHwI99Lr8F
nnQt8CfXf4M5SsFu7wOQrDAxcXgMhIhLukkMz1EMunzAof8F0lXjtozpF2eigJif
7470arzDwJQ/LEYnXU8Mr7aqY8266kOYT2MtiWCSGPXbYpznQ2+8/Yg8T/1rt35C
NuDMct/5O/pryMUTIxWSWDPIb/VOah9WKOSO9wns9nr3Xe94FKYoRaDR2tbvgOli
N/y/SIAs88NrfQ==
-----END CERTIFICATE-----
Generated at Wed May 14 12:05:31 2025 by rpki-client