Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: I8A//tehPfJa66SNCbu8kkzmajS1lY48yJ2F+5AEvYs=
Subject key identifier: 5D:23:2B:74:97:93:9E:7F:62:FF:BD:1A:FB:F2:7E:98:8D:29:FF:6E
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01976DAB83DA64F223665423C4A06AE6CF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 0F41
Signing time: Sat 14 Jun 2025 09:00:46 +0000
Manifest this update: Sat 14 Jun 2025 09:00:46 +0000
Manifest next update: Sun 15 Jun 2025 09:00:46 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: 9AsHaRFpUV4h5yTRpEc4AOdWpffnj1RZpgxfFtsvdiY=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:83:da:64:f2:23:66:54:23:c4:a0:6a:e6:cf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jun 14 09:00:46 2025 GMT
Not After : Jun 15 09:00:46 2025 GMT
Subject: CN=5d232b7497939e7f62ffbd1afbf27e988d29ff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:aa:f8:64:7b:57:94:55:39:32:b9:21:cc:
71:72:89:2d:74:e5:ab:c1:64:c7:7d:f7:9c:fc:5c:
e8:09:ff:77:f9:42:39:ff:8a:42:b4:0d:cd:40:d8:
2d:2a:a0:ba:b6:20:e2:85:16:c7:14:84:76:d4:56:
ea:a4:a9:85:04:5e:fb:46:35:36:1b:dd:77:6d:d7:
70:52:e7:f9:56:58:d7:cb:96:8b:ac:08:0c:ec:a3:
a6:4f:e7:3c:f8:09:06:03:53:55:ac:ff:a4:3d:88:
09:7a:73:92:7c:0f:cc:1f:4a:6e:51:64:16:ba:08:
ab:60:ab:3c:b7:68:55:e5:c1:60:36:fe:71:64:fe:
f4:50:72:97:31:d9:7a:fe:85:dd:9d:6f:06:1c:d2:
dd:5d:37:16:07:7b:ec:05:28:4d:98:7b:23:89:0b:
66:42:43:d2:e0:fa:e7:3f:f0:eb:0f:3a:14:23:ef:
5f:56:d6:90:ea:54:6c:ed:f1:43:60:74:13:bf:c5:
b6:83:ba:56:06:be:84:e4:c7:a8:2b:09:d0:c5:58:
b4:0e:f6:be:5e:8f:97:c4:00:03:22:11:2d:44:70:
19:7c:00:1e:ba:4a:04:45:e3:03:17:be:50:61:96:
8d:09:ca:c8:46:77:76:cd:82:d8:d6:9c:f3:7e:d5:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:23:2B:74:97:93:9E:7F:62:FF:BD:1A:FB:F2:7E:98:8D:29:FF:6E
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:43:b4:11:7a:ec:21:6c:3c:e4:75:93:a5:4c:66:00:82:59:
50:e8:bf:ab:5e:64:3d:49:11:8d:6b:ac:47:7b:b9:1a:62:8f:
a4:de:9a:64:96:32:10:c5:20:ba:d6:37:9d:bc:a0:d9:90:32:
ca:84:e2:19:74:ec:28:46:e0:b4:57:a3:92:e8:82:a0:0e:2e:
eb:fc:3c:a0:f7:20:56:33:a3:2c:39:6f:7f:8a:e9:c2:3f:60:
7f:9b:b2:ca:1e:5d:6a:a1:8e:02:96:4b:89:45:76:08:a9:1c:
16:fc:df:3c:6e:51:2d:ce:18:14:43:18:8a:7b:ac:7b:76:41:
a0:e0:68:ed:75:6d:3a:2f:60:3e:42:cc:24:a6:75:23:1b:11:
36:42:5d:26:57:75:a0:9e:b0:38:04:a3:7e:52:43:df:73:b1:
f3:15:55:62:4d:19:c7:e3:1f:ef:ec:22:63:f8:af:af:50:10:
f8:4b:67:eb:92:33:1b:02:78:1e:4e:4d:62:b1:f6:ac:35:bf:
da:00:61:52:79:64:6a:43:99:d8:66:d2:df:42:92:61:6d:d3:
58:c5:2b:0b:98:d2:06:ce:e5:81:7c:f4:e7:61:80:a4:81:d9:
9e:cc:18:9e:2d:49:33:f5:79:bc:a2:7b:9c:e8:3c:87:f9:26:
88:0b:52:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq4PaZPIjZlQjxKBq5s8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDRlNjQxZTU1YTQ4YWVlMDE0MWUyYzBkMjYyMjcxMDJj
YWE2ZDQwHhcNMjUwNjE0MDkwMDQ2WhcNMjUwNjE1MDkwMDQ2WjAzMTEwLwYDVQQD
Eyg1ZDIzMmI3NDk3OTM5ZTdmNjJmZmJkMWFmYmYyN2U5ODhkMjlmZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud2q+GR7V5RVOTK5IcxxcoktdOWr
wWTHffec/FzoCf93+UI5/4pCtA3NQNgtKqC6tiDihRbHFIR21FbqpKmFBF77RjU2
G913bddwUuf5VljXy5aLrAgM7KOmT+c8+AkGA1NVrP+kPYgJenOSfA/MH0puUWQW
ugirYKs8t2hV5cFgNv5xZP70UHKXMdl6/oXdnW8GHNLdXTcWB3vsBShNmHsjiQtm
QkPS4PrnP/DrDzoUI+9fVtaQ6lRs7fFDYHQTv8W2g7pWBr6E5MeoKwnQxVi0Dva+
Xo+XxAADIhEtRHAZfAAeukoEReMDF75QYZaNCcrIRnd2zYLY1pzzftWfnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0jK3SXk55/Yv+9GvvyfpiNKf9uMB8GA1UdIwQY
MBaAFNUE5kHlWkiu4BQeLA0mInECyqbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEt
NmJmZmNiN2MwZjBhLzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMDFmMzUtMmNjYS00ZTVhLTgyOGEtNmJmZmNiN2MwZjBh
LzEvMVFUbVFlVmFTSzdnRkI0c0RTWWljUUxLcHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkO0EXrs
IWw85HWTpUxmAIJZUOi/q15kPUkRjWusR3u5GmKPpN6aZJYyEMUgutY3nbyg2ZAy
yoTiGXTsKEbgtFejkuiCoA4u6/w8oPcgVjOjLDlvf4rpwj9gf5uyyh5daqGOApZL
iUV2CKkcFvzfPG5RLc4YFEMYinuse3ZBoOBo7XVtOi9gPkLMJKZ1IxsRNkJdJld1
oJ6wOASjflJD33Ox8xVVYk0Zx+Mf7+wiY/ivr1AQ+Etn65IzGwJ4Hk5NYrH2rDW/
2gBhUnlkakOZ2GbS30KSYW3TWMUrC5jSBs7lgXz052GApIHZnswYni1JM/V5vKJ7
nOg8h/kmiAtSmw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:46 2025 by rpki-client