Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: D7XgUxWblSomJX7QN8+c43va11rttBtbMwkEns5cG/A=
Subject key identifier: 1D:18:80:AA:7F:59:71:A1:C1:2F:17:C4:CC:FB:AD:0C:82:38:0A:C9
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 01976C98F03B4EAC8733D11CE9355B598F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 04:00:51 +0000
Manifest this update: Sat 14 Jun 2025 04:00:51 +0000
Manifest next update: Sun 15 Jun 2025 04:00:51 +0000
Files and hashes: 1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: twuPAXZuR4ptS4w4Y6S5BO8/e26ya+vp19kr/xwUTSU=)
2: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (hash: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=)
3: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (hash: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f0:3b:4e:ac:87:33:d1:1c:e9:35:5b:59:8f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Jun 14 04:00:51 2025 GMT
Not After : Jun 15 04:00:51 2025 GMT
Subject: CN=1d1880aa7f5971a1c12f17c4ccfbad0c82380ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3d:f1:da:65:52:89:21:e1:b8:51:16:76:55:
ac:11:0c:b9:9b:4f:a6:b9:65:62:c1:6c:b6:ec:52:
2e:7e:8b:3b:b1:2f:9a:35:a7:25:ed:79:ca:ee:9a:
d3:f0:f1:cf:82:db:29:99:cf:61:76:d9:93:24:5f:
5c:a8:db:0b:cc:5e:c9:b6:65:ff:d6:1c:74:3b:ff:
20:20:18:09:5f:b8:ce:5e:fc:8c:51:d8:71:c5:b5:
1f:08:e8:f9:a9:e1:07:e1:66:cf:23:65:b1:db:a2:
19:b2:e8:02:79:e9:a4:f4:ef:1e:aa:13:8a:39:bb:
f7:13:c8:ce:d4:e4:f6:26:bd:1b:ef:65:2f:a6:82:
21:9b:16:51:4f:c9:e0:7f:b1:da:d1:31:c9:b0:af:
0d:dc:49:dc:24:49:94:27:c7:67:4a:75:89:4e:1f:
63:f4:9e:1d:a8:9b:c2:51:0f:14:bc:c4:38:22:7f:
1d:7d:1f:41:58:59:dd:98:c2:d9:47:a8:29:14:cc:
c9:ec:38:23:e7:2c:1d:1f:f5:ad:70:c3:a3:a5:61:
9c:85:a7:e0:90:43:1e:26:87:54:65:a3:4f:da:14:
57:06:18:f7:f9:2b:0c:ed:39:21:50:be:19:cf:f0:
57:aa:12:29:55:71:97:4f:3a:e2:17:e9:12:7b:fd:
6e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:80:AA:7F:59:71:A1:C1:2F:17:C4:CC:FB:AD:0C:82:38:0A:C9
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8c:e5:82:e9:2e:88:2c:e7:75:d4:eb:68:3f:48:f3:f7:9d:
33:40:ba:99:c5:65:c5:d0:9a:a1:30:9a:ac:82:d0:ed:df:ec:
5e:33:f2:23:9a:05:88:4e:ce:60:dc:90:3d:b4:a3:cc:ed:62:
e7:3d:44:2f:3d:6c:b5:ff:fe:ef:8d:48:da:f8:12:3c:27:d0:
37:52:06:7b:53:91:b5:4c:28:39:c5:9f:e1:4a:49:43:91:6b:
3b:cb:54:76:89:fd:5f:61:0b:5f:3d:8f:ae:89:77:52:b6:48:
3b:62:5e:1b:d3:32:24:74:4b:8a:86:cb:11:89:a9:e9:7e:f3:
cf:dd:a3:a0:0f:d3:5e:9b:19:10:c2:ab:97:d7:69:2f:c5:40:
33:d5:99:f8:d2:da:32:98:b4:45:82:2a:2d:ec:e3:2e:d0:68:
78:a3:24:b6:f3:38:e8:fb:c6:60:db:a3:69:e5:58:d4:ae:9b:
11:37:1e:48:11:e0:02:49:96:11:61:a8:16:7c:2a:ca:a8:45:
df:ff:75:d1:59:4f:ee:e7:61:66:1d:b6:b8:63:15:4d:ae:dd:
97:dc:27:b6:58:cd:10:54:e0:55:53:7c:0b:02:18:2b:c1:a6:
d9:d2:f2:dd:9d:3f:00:70:c5:32:b3:05:f9:26:0d:49:fd:4e:
d7:8e:86:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmPA7TqyHM9Ec6TVbWY81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl
NzgzYjIwHhcNMjUwNjE0MDQwMDUxWhcNMjUwNjE1MDQwMDUxWjAzMTEwLwYDVQQD
EygxZDE4ODBhYTdmNTk3MWExYzEyZjE3YzRjY2ZiYWQwYzgyMzgwYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz3x2mVSiSHhuFEWdlWsEQy5m0+m
uWViwWy27FIufos7sS+aNacl7XnK7prT8PHPgtspmc9hdtmTJF9cqNsLzF7JtmX/
1hx0O/8gIBgJX7jOXvyMUdhxxbUfCOj5qeEH4WbPI2Wx26IZsugCeemk9O8eqhOK
Obv3E8jO1OT2Jr0b72UvpoIhmxZRT8ngf7Ha0THJsK8N3EncJEmUJ8dnSnWJTh9j
9J4dqJvCUQ8UvMQ4In8dfR9BWFndmMLZR6gpFMzJ7Dgj5ywdH/WtcMOjpWGchafg
kEMeJodUZaNP2hRXBhj3+SsM7TkhUL4Zz/BXqhIpVXGXTzriF+kSe/1u3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0YgKp/WXGhwS8XxMz7rQyCOArJMB8GA1UdIwQY
MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt
ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz
LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4zlguku
iCznddTraD9I8/edM0C6mcVlxdCaoTCarILQ7d/sXjPyI5oFiE7OYNyQPbSjzO1i
5z1ELz1stf/+741I2vgSPCfQN1IGe1ORtUwoOcWf4UpJQ5FrO8tUdon9X2ELXz2P
rol3UrZIO2JeG9MyJHRLiobLEYmp6X7zz92joA/TXpsZEMKrl9dpL8VAM9WZ+NLa
Mpi0RYIqLezjLtBoeKMktvM46PvGYNujaeVY1K6bETceSBHgAkmWEWGoFnwqyqhF
3/910VlP7udhZh22uGMVTa7dl9wntljNEFTgVVN8CwIYK8Gm2dLy3Z0/AHDFMrMF
+SYNSf1O146GaA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:34 2025 by rpki-client