Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: zraFSek1+pySiLUiyrG+x3dUgD8hdoREfQzDpfEHP/E=
Subject key identifier: 1C:81:47:1E:DB:33:7E:CB:71:D9:36:2D:42:A4:97:86:CE:AD:9C:A7
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 01976F2CDA02DEF2AC70B423A1073FA1FEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 0F8B
Signing time: Sat 14 Jun 2025 16:01:39 +0000
Manifest this update: Sat 14 Jun 2025 16:01:39 +0000
Manifest next update: Sun 15 Jun 2025 16:01:39 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: BruKU8ij6X65qm+tKdbb/dSEzFr+iGeeJy9ts4+4tDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:da:02:de:f2:ac:70:b4:23:a1:07:3f:a1:fe:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Jun 14 16:01:39 2025 GMT
Not After : Jun 15 16:01:39 2025 GMT
Subject: CN=1c81471edb337ecb71d9362d42a49786cead9ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:7a:f5:35:fb:e1:33:fd:a7:47:a4:d7:50:
7e:1e:f8:31:80:80:57:86:6a:0b:8a:54:e0:3e:eb:
c5:c2:6e:47:ff:3d:6d:33:e9:27:0d:0b:27:86:c0:
6c:c9:e1:95:44:7c:3a:c0:b1:da:12:b0:af:72:28:
95:59:7a:00:5c:80:b4:49:b0:96:7f:0b:6b:7f:f5:
c3:34:59:9a:ba:59:90:25:ae:4c:fb:26:ef:2e:02:
af:b5:a4:08:f7:e6:f9:a2:87:11:be:d7:35:1a:bb:
73:8f:da:40:59:30:8c:e1:60:f0:07:d0:e6:96:2e:
dc:92:52:57:98:be:0a:cf:c4:37:be:ad:b5:2c:5e:
d5:53:63:84:13:ef:e7:24:c9:de:7f:0d:fe:37:ed:
0f:6b:57:e9:cb:bb:61:e6:bb:ba:b6:1d:e2:6e:d8:
6a:65:33:89:99:3b:0e:3e:b8:27:a0:f3:a6:89:90:
1d:7e:ac:36:a1:dc:93:7f:c2:d7:db:f3:22:2f:8c:
9c:39:35:0f:62:08:ae:7f:b6:7f:3f:cb:2a:5e:10:
7c:5f:2e:03:e7:2a:07:e0:36:39:87:56:a9:ec:bf:
12:11:22:de:ca:54:d8:8f:bf:08:11:61:54:61:fb:
db:22:f5:b7:41:3d:df:19:71:3f:7a:29:76:36:29:
43:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:81:47:1E:DB:33:7E:CB:71:D9:36:2D:42:A4:97:86:CE:AD:9C:A7
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:bb:6c:1d:9c:88:d5:c5:0d:e5:16:e8:37:f1:cc:73:6c:18:
cc:b9:f6:0b:b4:2d:3c:7a:cd:4e:f4:f4:09:87:9c:9b:f3:2a:
a3:df:bb:5e:f6:03:cc:ea:7a:0d:4f:33:e0:fa:1f:9c:fd:85:
1d:6d:04:3b:77:27:40:5a:75:e7:11:d1:f3:f9:9d:ae:b1:7e:
51:c6:ce:aa:f3:ae:66:07:26:4b:ce:6f:54:81:63:61:f2:3e:
c9:56:23:1f:93:4e:61:4e:ee:be:06:68:5f:ca:da:c4:9d:e5:
92:27:93:77:d0:39:db:f5:47:6b:c5:58:9f:9a:8b:67:c9:05:
f4:df:d7:5d:ed:a5:4b:bb:09:21:c5:1f:07:eb:bf:b9:e0:93:
c1:79:d7:40:fe:c9:00:de:5a:a6:e2:eb:d9:a4:a5:b4:ee:87:
7d:83:1e:c0:24:24:af:47:c6:f4:95:1c:28:00:59:f1:78:bb:
07:d1:19:6b:5f:02:66:11:70:10:87:e4:f7:48:6b:29:c7:11:
86:96:ab:4e:02:28:c5:86:aa:13:58:8b:a0:f9:9f:cf:66:4e:
0f:d0:5a:3c:3d:3c:b0:d5:63:06:70:69:72:e0:c3:29:26:3f:
2b:61:6a:8f:04:5d:67:dc:34:61:59:4a:f9:7b:93:d8:05:f5:
36:aa:c8:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLNoC3vKscLQjoQc/of7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNGFhYmJmYWI5ZGU3MTI2YjdkMTE5ZGI1MjRkYTQxMTFm
MDRhZmUwHhcNMjUwNjE0MTYwMTM5WhcNMjUwNjE1MTYwMTM5WjAzMTEwLwYDVQQD
EygxYzgxNDcxZWRiMzM3ZWNiNzFkOTM2MmQ0MmE0OTc4NmNlYWQ5Y2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8F69TX74TP9p0ek11B+HvgxgIBX
hmoLilTgPuvFwm5H/z1tM+knDQsnhsBsyeGVRHw6wLHaErCvciiVWXoAXIC0SbCW
fwtrf/XDNFmaulmQJa5M+ybvLgKvtaQI9+b5oocRvtc1Grtzj9pAWTCM4WDwB9Dm
li7cklJXmL4Kz8Q3vq21LF7VU2OEE+/nJMnefw3+N+0Pa1fpy7th5ru6th3ibthq
ZTOJmTsOPrgnoPOmiZAdfqw2odyTf8LX2/MiL4ycOTUPYgiuf7Z/P8sqXhB8Xy4D
5yoH4DY5h1ap7L8SESLeylTYj78IEWFUYfvbIvW3QT3fGXE/eil2NilD+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByBRx7bM37Lcdk2LUKkl4bOrZynMB8GA1UdIwQY
MBaAFEBKq7+rnecSa30RnbUk2kER8Er+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYt
NzFhMjdlZjgxNzg2LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYtNzFhMjdlZjgxNzg2
LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbtsHZyI
1cUN5RboN/HMc2wYzLn2C7QtPHrNTvT0CYecm/Mqo9+7XvYDzOp6DU8z4PofnP2F
HW0EO3cnQFp15xHR8/mdrrF+UcbOqvOuZgcmS85vVIFjYfI+yVYjH5NOYU7uvgZo
X8raxJ3lkieTd9A52/VHa8VYn5qLZ8kF9N/XXe2lS7sJIcUfB+u/ueCTwXnXQP7J
AN5apuLr2aSltO6HfYMewCQkr0fG9JUcKABZ8Xi7B9EZa18CZhFwEIfk90hrKccR
hparTgIoxYaqE1iLoPmfz2ZOD9BaPD08sNVjBnBpcuDDKSY/K2FqjwRdZ9w0YVlK
+XuT2AX1NqrIgw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:37 2025 by rpki-client