Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
File: QnbajwSHyFCAm0qYcoysIXKycD0.mft (raw, json)
Hash identifier: F6WrLJULbVWNGkGvM4iIrbJTeXB9L9mr847p85pidRk=
Subject key identifier: 5F:0C:F3:F9:D2:5F:F9:A3:B9:4C:5D:A8:7A:62:4B:82:3A:DD:6F:0D
Authority key identifier: 42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
Certificate issuer: /CN=4276da8f0487c850809b4a98728cac2172b2703d
Certificate serial: 01976D3D65D7CEEF55623D89A092896E2F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 07:00:29 +0000
Manifest this update: Sat 14 Jun 2025 07:00:29 +0000
Manifest next update: Sun 15 Jun 2025 07:00:29 +0000
Files and hashes: 1: QnbajwSHyFCAm0qYcoysIXKycD0.crl (hash: +3PVpCDn2TqTLq6CumM8iQDTq5dArA+U5jgwNyTT0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:65:d7:ce:ef:55:62:3d:89:a0:92:89:6e:2f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4276da8f0487c850809b4a98728cac2172b2703d
Validity
Not Before: Jun 14 07:00:29 2025 GMT
Not After : Jun 15 07:00:29 2025 GMT
Subject: CN=5f0cf3f9d25ff9a3b94c5da87a624b823add6f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:21:bf:a0:61:be:57:17:13:e5:90:2f:15:
26:d3:78:18:1b:05:d5:87:69:0f:35:55:6e:28:4d:
63:69:0b:bf:3d:f5:26:6e:ac:90:63:07:c7:8e:16:
33:9b:9a:ad:3c:13:a1:85:e5:31:6e:09:8b:cb:39:
a6:3c:67:60:f1:ef:de:e0:d7:03:f7:c4:a4:40:ab:
24:0f:aa:91:fd:f9:e3:de:a6:60:63:b6:37:86:de:
a6:5a:37:97:44:ea:9a:11:f1:7e:53:44:52:94:4e:
94:a6:58:e1:e9:03:e9:4d:64:75:80:13:58:52:4e:
e5:dc:a6:ee:e4:6e:28:26:21:2e:c8:d6:c3:fe:24:
4a:07:4e:49:2a:a6:ed:82:e9:d4:4a:a1:ec:d0:a5:
68:a8:2a:bc:ec:4a:0c:76:43:d0:87:55:3d:b1:b1:
0c:1d:eb:47:6b:b3:cf:29:28:32:a6:1e:1a:4d:8b:
71:95:28:2e:ef:81:4b:e3:bf:21:e3:ba:ec:ce:1f:
aa:2d:78:f2:c5:4b:36:b1:ce:fb:bd:76:be:d3:6a:
46:27:38:61:c2:dd:15:89:f2:23:b0:80:32:b3:50:
fc:00:ff:01:a9:49:7b:ac:00:a6:2a:7f:cf:2b:79:
6e:22:74:60:7a:ca:dc:bd:e1:16:31:80:6d:68:64:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0C:F3:F9:D2:5F:F9:A3:B9:4C:5D:A8:7A:62:4B:82:3A:DD:6F:0D
X509v3 Authority Key Identifier:
keyid:42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ac:f5:aa:e1:13:1f:6e:0f:c0:8f:50:cb:23:a1:e4:21:8f:
29:e7:be:a6:df:57:fb:5c:13:f4:0c:89:e6:83:dc:45:4f:81:
a8:20:68:12:de:d4:7b:53:d7:86:19:28:b2:7b:ee:ec:f2:0f:
8c:6b:22:34:40:e1:5f:68:fa:8d:b3:ab:c8:e2:6d:a6:83:f2:
37:64:74:d2:bc:f5:af:e2:47:66:b6:5c:c3:61:c4:85:c1:87:
10:a9:6f:e0:5b:bd:64:01:eb:72:e1:ec:66:bf:0d:4e:67:49:
4d:96:94:6a:27:41:21:dd:50:2b:fd:db:c6:25:68:fb:97:93:
db:b8:ab:2c:a6:15:4a:64:98:5f:f8:a6:90:0f:c9:a3:0e:19:
58:07:c4:a5:c9:ce:0c:ba:4c:22:5c:a6:42:73:f6:52:b0:54:
c0:14:21:8d:5e:c1:d0:2b:55:bc:f9:71:d4:7d:9d:fd:42:c7:
b6:db:d6:77:c6:77:04:d4:3e:fe:b0:63:54:33:8c:41:0a:1c:
c7:83:3a:94:92:9d:45:49:4c:35:d3:3a:d4:9d:8e:85:10:5d:
df:c6:c3:a6:b1:26:c6:83:c7:3e:d0:7f:85:1a:85:64:97:2c:
90:c4:b0:bf:ee:80:b0:93:54:7c:38:6a:67:13:7d:41:0a:af:
47:64:ea:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPWXXzu9VYj2JoJKJbi9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNzZkYThmMDQ4N2M4NTA4MDliNGE5ODcyOGNhYzIxNzJi
MjcwM2QwHhcNMjUwNjE0MDcwMDI5WhcNMjUwNjE1MDcwMDI5WjAzMTEwLwYDVQQD
Eyg1ZjBjZjNmOWQyNWZmOWEzYjk0YzVkYTg3YTYyNGI4MjNhZGQ2ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKghv6BhvlcXE+WQLxUm03gYGwXV
h2kPNVVuKE1jaQu/PfUmbqyQYwfHjhYzm5qtPBOhheUxbgmLyzmmPGdg8e/e4NcD
98SkQKskD6qR/fnj3qZgY7Y3ht6mWjeXROqaEfF+U0RSlE6Upljh6QPpTWR1gBNY
Uk7l3Kbu5G4oJiEuyNbD/iRKB05JKqbtgunUSqHs0KVoqCq87EoMdkPQh1U9sbEM
HetHa7PPKSgyph4aTYtxlSgu74FL478h47rszh+qLXjyxUs2sc77vXa+02pGJzhh
wt0VifIjsIAys1D8AP8BqUl7rACmKn/PK3luInRgesrcveEWMYBtaGTqCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8M8/nSX/mjuUxdqHpiS4I63W8NMB8GA1UdIwQY
MBaAFEJ22o8Eh8hQgJtKmHKMrCFysnA9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5iYWp3U0h5RkNBbTBxWWNveXNJWEt5Y0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9lYTEwNzItZjMyNi00ZTUxLWFkZjEt
YmE5YjBmYTFiN2EyLzEvUW5iYWp3U0h5RkNBbTBxWWNveXNJWEt5Y0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9lYTEwNzItZjMyNi00ZTUxLWFkZjEtYmE5YjBmYTFiN2Ey
LzEvUW5iYWp3U0h5RkNBbTBxWWNveXNJWEt5Y0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnKz1quET
H24PwI9QyyOh5CGPKee+pt9X+1wT9AyJ5oPcRU+BqCBoEt7Ue1PXhhkosnvu7PIP
jGsiNEDhX2j6jbOryOJtpoPyN2R00rz1r+JHZrZcw2HEhcGHEKlv4Fu9ZAHrcuHs
Zr8NTmdJTZaUaidBId1QK/3bxiVo+5eT27irLKYVSmSYX/imkA/Jow4ZWAfEpcnO
DLpMIlymQnP2UrBUwBQhjV7B0CtVvPlx1H2d/ULHttvWd8Z3BNQ+/rBjVDOMQQoc
x4M6lJKdRUlMNdM61J2OhRBd38bDprEmxoPHPtB/hRqFZJcskMSwv+6AsJNUfDhq
ZxN9QQqvR2TqcA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:32 2025 by rpki-client