Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: p79/HK1Ors2OFq/kNvReP/2kptVWKiiYUBvcyye/Sxs=
Subject key identifier: A8:37:90:FA:76:4F:01:B2:EA:45:41:E1:D9:33:87:A1:73:E7:4E:0C
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 019776E5DA1D83FCDA2ACE3B8322AC176647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 05A8
Signing time: Mon 16 Jun 2025 04:01:04 +0000
Manifest this update: Mon 16 Jun 2025 04:01:04 +0000
Manifest next update: Tue 17 Jun 2025 04:01:04 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: e5/Tzt6D8jjh/IvwKcCHiD02px4uiupmO0Fi83DxIm4=)
2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:da:1d:83:fc:da:2a:ce:3b:83:22:ac:17:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Jun 16 04:01:04 2025 GMT
Not After : Jun 17 04:01:04 2025 GMT
Subject: CN=a83790fa764f01b2ea4541e1d93387a173e74e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:17:5b:a8:9a:f2:43:be:b1:95:98:17:3d:
c6:af:ea:66:be:c4:ca:b3:03:88:23:e5:f1:3d:71:
0c:4b:3a:b0:02:22:20:55:c5:30:38:5c:75:0c:51:
6b:71:cd:7d:6f:d2:40:8c:7a:e1:eb:73:5e:60:89:
06:41:d6:f6:40:6d:7c:7d:11:e1:57:3d:af:dd:a6:
3b:30:e2:e7:7c:ab:8b:d8:66:67:0d:2b:d0:e4:1e:
d6:b9:45:2e:3f:76:0e:be:e6:fe:84:97:70:1c:5d:
c5:4b:25:6d:bb:50:9f:2e:f5:c5:ce:43:f0:2a:d8:
f7:ac:42:45:10:af:82:8f:7f:30:31:f8:4f:1a:91:
18:cc:4d:44:15:6a:69:44:22:eb:f5:1b:8e:2e:e7:
89:28:c2:21:8b:95:45:06:2f:9a:98:8a:3e:bb:a8:
78:f4:88:9b:49:18:92:f2:df:fa:67:60:bc:58:97:
3e:ab:6a:c9:20:59:f0:1e:bf:20:a6:03:2e:0f:df:
bd:dd:7e:60:dd:0c:1d:f9:68:b3:b5:14:ac:c1:c2:
0f:90:64:0a:0a:ae:5e:e0:1d:af:07:e5:ed:31:20:
39:43:60:48:17:2d:b2:3f:f6:9f:9f:89:43:24:ca:
72:04:3b:a2:1b:01:3e:cf:86:39:cf:86:41:aa:12:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:90:FA:76:4F:01:B2:EA:45:41:E1:D9:33:87:A1:73:E7:4E:0C
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:63:bc:b1:43:58:42:40:64:5d:73:f6:74:56:82:d7:44:5b:
ff:86:73:9f:15:8f:59:cc:3f:96:96:75:2f:d7:57:a2:5c:9f:
3a:9d:7c:4c:9e:2c:ca:07:69:f5:8a:20:12:e6:8f:e9:6f:8a:
c3:2c:8b:01:a8:2e:6c:ce:09:37:d0:7b:56:dc:4a:60:a1:c7:
7e:b8:16:7c:33:57:5f:1d:15:18:df:9d:15:11:d7:b1:4b:17:
5d:14:41:29:b9:84:95:31:37:07:92:8f:7e:c6:64:a1:17:88:
87:bd:75:be:22:2e:82:95:4b:4e:29:64:e5:bc:db:83:dd:6d:
61:04:7b:55:6e:81:e7:dc:00:7c:03:29:61:27:33:fa:f7:17:
68:46:ad:a5:65:42:f0:ab:2b:9a:f7:ba:41:fa:d4:e9:77:36:
f1:71:b4:c4:e6:ec:32:1d:9a:cd:57:39:7a:bf:71:69:12:cf:
e0:80:e7:d9:03:48:32:90:92:96:20:ec:40:02:a4:90:5c:5a:
6b:cd:ca:22:8d:5f:08:94:5e:6f:a9:af:47:c2:da:f1:02:07:
94:1b:8c:b5:33:8a:4b:ee:2c:5a:8b:4c:aa:04:e2:84:f0:c6:
49:6c:89:63:9b:fb:21:d0:82:12:18:9f:0c:8f:22:d5:aa:ed:
c4:4f:41:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25dodg/zaKs47gyKsF2ZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYjkyZWMyYjBlMzJjYjdiMmRiMTNlMzc2NTI5OGQ2ZDJl
NTg1Y2QwHhcNMjUwNjE2MDQwMTA0WhcNMjUwNjE3MDQwMTA0WjAzMTEwLwYDVQQD
EyhhODM3OTBmYTc2NGYwMWIyZWE0NTQxZTFkOTMzODdhMTczZTc0ZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2QXW6ia8kO+sZWYFz3Gr+pmvsTK
swOII+XxPXEMSzqwAiIgVcUwOFx1DFFrcc19b9JAjHrh63NeYIkGQdb2QG18fRHh
Vz2v3aY7MOLnfKuL2GZnDSvQ5B7WuUUuP3YOvub+hJdwHF3FSyVtu1CfLvXFzkPw
Ktj3rEJFEK+Cj38wMfhPGpEYzE1EFWppRCLr9RuOLueJKMIhi5VFBi+amIo+u6h4
9IibSRiS8t/6Z2C8WJc+q2rJIFnwHr8gpgMuD9+93X5g3Qwd+WiztRSswcIPkGQK
Cq5e4B2vB+XtMSA5Q2BIFy2yP/afn4lDJMpyBDuiGwE+z4Y5z4ZBqhKWZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg3kPp2TwGy6kVB4dkzh6Fz504MMB8GA1UdIwQY
MBaAFEO5LsKw4yy3stsT43ZSmNbS5YXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTI4NmYtMGU1OS00NjI2LWE2MTct
NjAyMTUxNTIyYTA5LzEvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84OTI4NmYtMGU1OS00NjI2LWE2MTctNjAyMTUxNTIyYTA5
LzEvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWO8sUNY
QkBkXXP2dFaC10Rb/4ZznxWPWcw/lpZ1L9dXolyfOp18TJ4sygdp9YogEuaP6W+K
wyyLAagubM4JN9B7VtxKYKHHfrgWfDNXXx0VGN+dFRHXsUsXXRRBKbmElTE3B5KP
fsZkoReIh711viIugpVLTilk5bzbg91tYQR7VW6B59wAfAMpYScz+vcXaEatpWVC
8Ksrmve6QfrU6Xc28XG0xObsMh2azVc5er9xaRLP4IDn2QNIMpCSliDsQAKkkFxa
a83KIo1fCJReb6mvR8La8QIHlBuMtTOKS+4sWotMqgTihPDGSWyJY5v7IdCCEhif
DI8i1artxE9Bdg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:45 2025 by rpki-client