Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: 24lnUIoTaU0jpY6wIqLvta3igirWcTHRvymRFOWLwDo=
Subject key identifier: 91:08:36:DD:D8:73:7B:A1:02:12:42:7E:78:46:9B:6A:40:AF:25:DF
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 0197782F6E73838589AE5EC51BCB9AFA81F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0C15
Signing time: Mon 16 Jun 2025 10:01:03 +0000
Manifest this update: Mon 16 Jun 2025 10:01:03 +0000
Manifest next update: Tue 17 Jun 2025 10:01:03 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: rrqGsLeplXd8PwGjb53aQwzJ7zeE2maA0Sz/3g11vNc=)
2: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (hash: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:6e:73:83:85:89:ae:5e:c5:1b:cb:9a:fa:81:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Jun 16 10:01:03 2025 GMT
Not After : Jun 17 10:01:03 2025 GMT
Subject: CN=910836ddd8737ba10212427e78469b6a40af25df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:1c:c6:21:4e:fd:97:ff:c4:66:87:e2:40:
e0:a0:3e:57:90:07:72:1c:75:a7:fa:2d:5a:4c:8c:
34:32:ce:08:0f:5d:fd:ab:4d:7d:32:61:81:ce:24:
a4:7c:1f:80:04:c0:25:00:cd:72:d2:34:f5:77:72:
cc:22:c6:08:32:0e:0c:b8:f9:76:cd:e1:cc:e5:e7:
6c:03:47:1c:4e:d7:de:36:b7:df:5b:7f:d9:68:73:
3f:13:3a:d3:1a:e7:73:37:6e:17:b0:d7:71:c3:26:
5a:27:bd:52:4a:ae:dc:ce:a9:f5:51:e0:b9:79:16:
c8:62:29:ec:44:87:59:1a:aa:68:fd:e9:ea:6b:3b:
f2:c0:ce:a3:e0:b9:87:22:ce:65:cb:6c:94:3b:ea:
db:86:58:77:34:2a:c2:4a:d7:25:b4:fa:d3:4c:33:
a9:79:10:91:20:11:a8:1b:f2:83:19:0d:17:76:78:
d4:22:af:62:0b:9b:d1:ee:d5:76:0c:4a:c1:9c:10:
43:8b:e9:ef:9e:96:4a:fb:c9:db:38:a2:1f:cb:18:
08:88:77:9a:fb:84:32:f1:f9:f3:ce:49:5f:d3:72:
58:ef:b6:b8:db:dd:b4:58:bc:46:ef:a0:20:62:b8:
91:c4:91:36:8f:e4:7f:1c:df:f9:42:2c:76:c2:9d:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:08:36:DD:D8:73:7B:A1:02:12:42:7E:78:46:9B:6A:40:AF:25:DF
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:82:15:8c:1f:82:07:3a:95:9f:85:12:0f:85:60:67:ec:ae:
c2:36:2b:f3:fc:39:36:4b:d0:1d:a0:52:a7:0f:ea:64:88:07:
56:b6:a0:f7:0e:d7:0b:a6:2c:15:90:44:43:3a:66:be:cb:7c:
84:06:88:f9:7e:d2:9a:8a:52:65:5f:4f:7b:89:31:c9:ad:76:
14:0d:ef:78:e8:40:e0:79:d8:87:f8:75:49:2c:dc:a5:a5:5c:
8f:80:75:86:45:35:cb:46:fd:a0:36:fe:aa:a8:ba:d9:f9:65:
3c:19:80:b7:36:02:af:2e:c0:da:5f:07:d0:57:8d:b6:1a:ea:
42:c6:bb:6a:d5:43:10:23:19:ac:e6:ef:2c:27:0b:03:d9:ef:
ad:e6:df:cc:8b:e2:45:a5:d2:a4:e0:8f:2d:78:6d:4b:3b:8a:
4d:e1:c1:fe:2c:7c:2e:aa:4b:72:df:52:ee:9a:79:aa:eb:7d:
d3:bd:86:a2:03:21:e4:64:0e:68:44:cc:dc:51:49:3f:20:ea:
c2:77:5d:81:e3:a9:2a:77:6b:a6:fe:da:f5:af:63:55:e8:bb:
03:3e:62:75:40:3b:09:12:81:59:c7:e0:5c:0f:47:0d:7b:d0:
0a:74:b3:4d:d2:15:c5:cc:37:90:dc:b0:7a:41:10:b5:aa:c8:
5a:b3:a6:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4L25zg4WJrl7FG8ua+oH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMDU3NmY4NjNkZjdlMzIxYjFjYTUwNTBjZTJjMmRkMmZj
YWRiMDkwHhcNMjUwNjE2MTAwMTAzWhcNMjUwNjE3MTAwMTAzWjAzMTEwLwYDVQQD
Eyg5MTA4MzZkZGQ4NzM3YmExMDIxMjQyN2U3ODQ2OWI2YTQwYWYyNWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvccxiFO/Zf/xGaH4kDgoD5XkAdy
HHWn+i1aTIw0Ms4ID139q019MmGBziSkfB+ABMAlAM1y0jT1d3LMIsYIMg4MuPl2
zeHM5edsA0ccTtfeNrffW3/ZaHM/EzrTGudzN24XsNdxwyZaJ71SSq7czqn1UeC5
eRbIYinsRIdZGqpo/enqazvywM6j4LmHIs5ly2yUO+rbhlh3NCrCStcltPrTTDOp
eRCRIBGoG/KDGQ0XdnjUIq9iC5vR7tV2DErBnBBDi+nvnpZK+8nbOKIfyxgIiHea
+4Qy8fnzzklf03JY77a42920WLxG76AgYriRxJE2j+R/HN/5Qix2wp0X1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEINt3Yc3uhAhJCfnhGm2pAryXfMB8GA1UdIwQY
MBaAFP0Fdvhj334yGxylBQziwt0vytsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEt
NDAxNmY2YjQ0NWEwLzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jZjM2ZTItYmM3Zi00MjVkLWE4MjEtNDAxNmY2YjQ0NWEw
LzEvX1FWMi1HUGZmakliSEtVRkRPTEMzU19LMndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIIVjB+C
BzqVn4USD4VgZ+yuwjYr8/w5NkvQHaBSpw/qZIgHVrag9w7XC6YsFZBEQzpmvst8
hAaI+X7SmopSZV9Pe4kxya12FA3veOhA4HnYh/h1SSzcpaVcj4B1hkU1y0b9oDb+
qqi62fllPBmAtzYCry7A2l8H0FeNthrqQsa7atVDECMZrObvLCcLA9nvrebfzIvi
RaXSpOCPLXhtSzuKTeHB/ix8LqpLct9S7pp5qut9072GogMh5GQOaETM3FFJPyDq
wnddgeOpKndrpv7a9a9jVei7Az5idUA7CRKBWcfgXA9HDXvQCnSzTdIVxcw3kNyw
ekEQtarIWrOmSA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:21:01 2025 by rpki-client