Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
File: nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft (raw, json)
Hash identifier: dLv5m/Tr7F59gYRyo/qg55lKRDsLHUPG6Zr/AFp5kBM=
Subject key identifier: FA:A7:A8:41:81:5D:D5:3E:B4:C3:78:C5:8C:AA:C3:59:21:FB:26:81
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 019787A257504493BB7C630A112B0CA053D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
Manifest number: 15AD
Signing time: Thu 19 Jun 2025 10:00:52 +0000
Manifest this update: Thu 19 Jun 2025 10:00:52 +0000
Manifest next update: Fri 20 Jun 2025 10:00:52 +0000
Files and hashes: 1: XTN0FV8C4mD4Sc_8vyQmb4SgIPI.roa (hash: BGUozoIWxfNXYZv8C7K/va/x94laPWjXcWXXKyL1Cm4=)
2: nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl (hash: uyNRXPzTu++YaxspnaVlfohcj/gxDoDj8XOEIV4sR+0=)
3: tN6Y02H2IthdzXGYlMBx0_9eJb4.roa (hash: QzcILUbWO03GK+EwTtmgiEaoxKfOPkWsQwGCPvmQB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a2:57:50:44:93:bb:7c:63:0a:11:2b:0c:a0:53:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Jun 19 10:00:52 2025 GMT
Not After : Jun 20 10:00:52 2025 GMT
Subject: CN=faa7a841815dd53eb4c378c58caac35921fb2681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:06:c0:c1:20:0b:30:1e:10:8c:23:6a:8a:
5c:c2:23:9a:49:ce:e8:a0:9c:ee:28:7f:c0:86:47:
81:ff:de:4d:4c:c3:3a:ec:59:db:73:42:46:89:29:
46:2e:fc:37:e1:1c:02:89:ba:d9:76:62:4b:51:53:
f3:f6:99:bc:0d:bc:34:2c:c9:c0:77:97:b7:88:76:
a0:ba:c4:86:2d:d9:bd:51:d4:16:bb:13:c8:56:74:
88:b7:88:5f:9e:10:06:46:c4:97:80:06:3d:e9:e6:
aa:8e:0c:b3:be:98:e4:8b:9d:36:3a:2e:bd:aa:95:
56:8f:ec:13:6c:95:08:98:27:20:cd:bd:9a:1b:7e:
64:52:7a:09:68:26:17:08:f6:06:18:a0:93:f4:53:
4b:ab:37:ae:0b:22:e2:75:21:aa:9a:5d:91:9c:ef:
b6:d9:77:ef:59:29:c6:80:b4:e5:bd:f3:54:7a:5e:
ed:e6:f6:bb:5a:dc:78:fb:31:f2:4e:91:ff:b7:d2:
58:60:39:38:5d:7d:5d:79:f1:a5:e3:4b:8f:2d:7d:
73:2b:f0:1b:0c:98:9e:2a:47:46:b4:1a:ee:7f:40:
34:8f:f0:41:75:15:bc:6b:85:76:11:97:cd:94:0b:
4f:40:53:23:0e:fc:7a:27:87:06:d4:b0:06:9d:fd:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A7:A8:41:81:5D:D5:3E:B4:C3:78:C5:8C:AA:C3:59:21:FB:26:81
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:07:d8:bf:78:c6:ad:de:64:ea:90:8a:df:cc:0f:26:38:e1:
51:9d:4c:e9:f8:c2:1c:87:78:ac:59:ca:b1:ed:51:f2:11:9b:
48:e0:a0:1a:fa:e4:a6:47:68:c6:58:42:bc:55:6b:b9:25:d3:
2f:4e:26:26:e9:b9:71:e3:e9:49:e1:36:c2:57:90:3e:86:ea:
5d:21:d4:a2:96:cd:f8:ad:e7:b1:a9:0a:38:7e:4e:f3:09:bb:
0a:58:00:04:3b:92:93:0c:a0:b9:6f:a1:60:6f:6f:2a:65:ae:
9b:83:ae:ca:7b:d3:e3:ed:81:13:6f:8e:c6:21:78:29:73:a2:
0e:5c:2d:49:52:cd:5a:e0:2e:43:4f:f2:f3:1e:eb:47:bf:ff:
3e:32:db:cf:bc:e0:6d:fa:67:4a:86:f7:78:fc:51:1e:ff:c8:
c1:e5:18:58:35:28:9d:de:29:5c:0e:aa:13:df:41:47:f8:f4:
bf:05:e8:51:58:d1:d1:c7:e6:30:38:e6:6a:aa:ff:1f:e8:71:
c3:b3:34:13:1f:2c:0c:8e:29:95:d0:e8:84:c8:bc:e5:96:bf:
49:c3:f3:fc:21:a8:b8:7a:09:82:d7:39:bd:4a:c0:69:4d:df:
ba:d6:c1:5a:d9:9e:f2:b5:3a:27:b1:cd:20:fc:87:4d:2d:55:
46:8e:22:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeHoldQRJO7fGMKESsMoFPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx
ZmU1YjEwHhcNMjUwNjE5MTAwMDUyWhcNMjUwNjIwMTAwMDUyWjAzMTEwLwYDVQQD
EyhmYWE3YTg0MTgxNWRkNTNlYjRjMzc4YzU4Y2FhYzM1OTIxZmIyNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RQGwMEgCzAeEIwjaopcwiOaSc7o
oJzuKH/AhkeB/95NTMM67Fnbc0JGiSlGLvw34RwCibrZdmJLUVPz9pm8Dbw0LMnA
d5e3iHagusSGLdm9UdQWuxPIVnSIt4hfnhAGRsSXgAY96eaqjgyzvpjki502Oi69
qpVWj+wTbJUImCcgzb2aG35kUnoJaCYXCPYGGKCT9FNLqzeuCyLidSGqml2RnO+2
2XfvWSnGgLTlvfNUel7t5va7Wtx4+zHyTpH/t9JYYDk4XX1defGl40uPLX1zK/Ab
DJieKkdGtBruf0A0j/BBdRW8a4V2EZfNlAtPQFMjDvx6J4cG1LAGnf3kbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqnqEGBXdU+tMN4xYyqw1kh+yaBMB8GA1UdIwQY
MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt
M2VmMDJkNTE0MGI3LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3
LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwfYv3jG
rd5k6pCK38wPJjjhUZ1M6fjCHId4rFnKse1R8hGbSOCgGvrkpkdoxlhCvFVruSXT
L04mJum5cePpSeE2wleQPobqXSHUopbN+K3nsakKOH5O8wm7ClgABDuSkwyguW+h
YG9vKmWum4OuynvT4+2BE2+OxiF4KXOiDlwtSVLNWuAuQ0/y8x7rR7//PjLbz7zg
bfpnSob3ePxRHv/IweUYWDUond4pXA6qE99BR/j0vwXoUVjR0cfmMDjmaqr/H+hx
w7M0Ex8sDI4pldDohMi85Za/ScPz/CGouHoJgtc5vUrAaU3futbBWtme8rU6J7HN
IPyHTS1VRo4iQw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 20:56:06 2025 by rpki-client