Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: Me1Z20vNG2ublV/WWnHCpokWQXcPZuepU495mDMhPSw=
Subject key identifier: BE:DC:66:6E:4F:B9:CC:1D:97:10:B2:25:A7:9E:C6:B4:4E:35:D0:83
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 01976CCFE263C60CC808E62E23C66D6DF6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: 0215
Signing time: Sat 14 Jun 2025 05:00:52 +0000
Manifest this update: Sat 14 Jun 2025 05:00:52 +0000
Manifest next update: Sun 15 Jun 2025 05:00:52 +0000
Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: szcxnbhjRZuASogrROjN1lgaUAwO7Qtz4FL7X3YoZdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:e2:63:c6:0c:c8:08:e6:2e:23:c6:6d:6d:f6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Jun 14 05:00:52 2025 GMT
Not After : Jun 15 05:00:52 2025 GMT
Subject: CN=bedc666e4fb9cc1d9710b225a79ec6b44e35d083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:c8:c2:54:22:d1:07:fb:f1:b6:49:68:47:
ac:4e:da:8f:d8:af:ea:5a:55:7d:4c:69:77:e5:74:
c1:84:15:a6:46:ee:ff:18:2a:a9:62:35:7d:e9:e8:
3e:57:ad:f8:0b:e0:da:c1:8b:de:80:c4:3a:9c:c8:
03:70:bd:4e:02:40:89:65:47:be:30:cf:5b:cf:ad:
44:be:e3:39:38:23:5d:b1:fd:55:98:89:20:77:c6:
fb:b1:d9:31:dc:0f:c1:7a:7c:51:cd:10:22:ba:29:
b8:aa:a8:3b:96:67:3f:a0:29:32:9a:fd:60:d5:b8:
f3:3a:0f:39:38:fb:15:27:8f:39:03:cb:42:aa:6c:
e3:b4:d1:e8:bf:28:fd:06:7d:43:e2:2a:3b:cc:2b:
5f:7f:cb:a9:47:d6:83:3c:e0:c2:90:fc:99:9d:bf:
1d:6e:ad:e5:41:43:15:57:a1:46:18:33:94:72:6a:
96:d1:cd:f5:0b:06:2f:2e:a7:29:0d:0c:10:5a:ba:
8d:f0:c9:01:79:d6:e7:9d:5c:1f:75:96:52:5e:67:
59:a6:d3:16:69:51:5d:db:f8:b1:b8:4a:4a:5f:28:
e5:ce:e5:b5:87:a1:41:a4:99:a1:c4:e9:aa:15:3e:
04:b2:18:7d:ab:17:be:63:98:60:36:0d:10:ab:71:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:66:6E:4F:B9:CC:1D:97:10:B2:25:A7:9E:C6:B4:4E:35:D0:83
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:7e:c4:38:07:a2:a7:91:e0:ec:a3:a1:13:62:d3:6f:6f:
0d:5b:dd:3f:e1:89:6f:a0:44:82:c2:90:b8:77:ea:9c:0c:02:
11:21:26:9e:e3:5b:72:24:61:24:54:e8:a5:f2:ba:2d:da:fb:
3f:34:33:30:e5:30:5b:62:41:34:e8:5e:a6:ea:ea:01:d3:82:
fc:24:0d:84:5c:1c:fb:cf:d4:c0:40:77:90:a7:95:96:71:34:
fc:56:a2:24:50:ff:03:75:e7:a3:24:c7:6b:57:c1:80:52:21:
88:84:62:db:cb:92:04:cf:fe:6e:31:f5:63:e0:16:b5:b1:db:
ae:36:3b:95:93:79:57:71:bf:d1:91:32:fb:13:92:bf:0e:4b:
b5:58:f8:37:03:41:08:a1:f9:43:f7:cd:12:2b:1d:87:40:88:
19:e9:ed:d1:07:da:30:9d:c4:63:f7:07:a2:7b:c3:7b:0b:dc:
43:24:cf:9e:31:ac:a0:d4:a9:be:94:bb:54:28:e1:8f:99:ec:
13:b5:73:e3:c1:d6:d1:3b:a5:9c:c0:57:3e:6e:0e:1e:29:83:
7a:f9:0a:28:de:a3:34:e6:73:54:e9:08:e8:6b:13:d0:73:04:
c0:8c:52:94:3c:e0:4b:6c:8f:2e:85:0f:f9:64:4d:b4:81:9c:
d9:b2:24:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz+JjxgzICOYuI8ZtbfbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODViNTUyMWQyMDkwMTg4MjQ3OGYwZjA5NDE5NjJjM2U5
Yzk0ZmEwHhcNMjUwNjE0MDUwMDUyWhcNMjUwNjE1MDUwMDUyWjAzMTEwLwYDVQQD
EyhiZWRjNjY2ZTRmYjljYzFkOTcxMGIyMjVhNzllYzZiNDRlMzVkMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ifIwlQi0Qf78bZJaEesTtqP2K/q
WlV9TGl35XTBhBWmRu7/GCqpYjV96eg+V634C+DawYvegMQ6nMgDcL1OAkCJZUe+
MM9bz61EvuM5OCNdsf1VmIkgd8b7sdkx3A/BenxRzRAiuim4qqg7lmc/oCkymv1g
1bjzOg85OPsVJ485A8tCqmzjtNHovyj9Bn1D4io7zCtff8upR9aDPODCkPyZnb8d
bq3lQUMVV6FGGDOUcmqW0c31CwYvLqcpDQwQWrqN8MkBedbnnVwfdZZSXmdZptMW
aVFd2/ixuEpKXyjlzuW1h6FBpJmhxOmqFT4Eshh9qxe+Y5hgNg0Qq3G7RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7cZm5PucwdlxCyJaeexrRONdCDMB8GA1UdIwQY
MBaAFKmFtVIdIJAYgkePDwlBliw+nJT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUt
NjAwM2Q1YWVlZDFmLzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUtNjAwM2Q1YWVlZDFm
LzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiR+xDgH
oqeR4OyjoRNi029vDVvdP+GJb6BEgsKQuHfqnAwCESEmnuNbciRhJFTopfK6Ldr7
PzQzMOUwW2JBNOhepurqAdOC/CQNhFwc+8/UwEB3kKeVlnE0/FaiJFD/A3XnoyTH
a1fBgFIhiIRi28uSBM/+bjH1Y+AWtbHbrjY7lZN5V3G/0ZEy+xOSvw5LtVj4NwNB
CKH5Q/fNEisdh0CIGent0QfaMJ3EY/cHonvDewvcQyTPnjGsoNSpvpS7VCjhj5ns
E7Vz48HW0TulnMBXPm4OHimDevkKKN6jNOZzVOkI6GsT0HMEwIxSlDzgS2yPLoUP
+WRNtIGc2bIkHA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:26 2025 by rpki-client