Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: iQ7BGjs4tlU9atfOSmDJZr7oNraBpXo+bN3pwth68Aw=
Subject key identifier: 49:42:AE:76:35:D9:0E:A7:73:A2:36:7C:41:17:EC:F7:F8:49:2C:E6
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 01976E875F2E6C26442D0C8259DB494285E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 027C
Signing time: Sat 14 Jun 2025 13:00:54 +0000
Manifest this update: Sat 14 Jun 2025 13:00:54 +0000
Manifest next update: Sun 15 Jun 2025 13:00:54 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: JgUxvXhew0lCk6DsveO1a1o6caXkYIINLk3jR7mtCpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:5f:2e:6c:26:44:2d:0c:82:59:db:49:42:85:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Jun 14 13:00:54 2025 GMT
Not After : Jun 15 13:00:54 2025 GMT
Subject: CN=4942ae7635d90ea773a2367c4117ecf7f8492ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:51:80:6f:b9:62:39:3b:3c:a5:86:17:3e:
31:a6:d3:35:0d:95:5e:cf:a4:e6:de:e7:47:6c:37:
cc:d0:80:80:f2:2e:da:5f:d8:a3:fa:b3:6a:00:09:
8c:73:2a:88:4d:f6:d7:2a:ca:9b:01:c0:e7:ff:15:
46:7f:92:1c:6b:c2:a5:e6:83:64:74:1b:4b:93:0f:
d2:a6:ad:52:cb:ff:90:3d:b3:87:70:fe:97:1b:0b:
39:13:6a:d6:e7:b9:d8:42:c2:dc:4a:10:cd:fd:53:
e6:6d:4b:d7:0f:49:0a:cc:1b:a7:32:61:82:fa:ce:
83:dd:c8:95:73:42:e7:76:ae:19:8f:ad:5b:c2:78:
76:de:f7:b2:54:69:8f:f9:2c:7a:20:2e:c6:4a:8c:
c0:fa:ec:b3:ea:5d:ac:2a:5c:33:33:1a:93:0f:32:
77:9e:0f:f8:cf:1b:1f:ba:b8:e0:0c:4b:6d:00:33:
1e:7a:a6:34:fc:03:f8:b8:b1:bf:bc:9e:43:a8:77:
14:f1:c0:c4:9e:fe:53:9d:73:cd:4b:ee:af:51:aa:
51:d3:09:98:4c:01:bb:83:5f:b8:15:24:7a:12:1c:
68:9a:f7:63:b8:5c:f8:78:e2:07:3e:6e:64:5d:38:
f9:de:a6:74:43:fb:d5:e3:4c:c7:39:59:60:e2:a2:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:42:AE:76:35:D9:0E:A7:73:A2:36:7C:41:17:EC:F7:F8:49:2C:E6
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:55:c7:8d:6d:6c:d5:37:e8:a5:a7:d9:24:f3:89:20:53:37:
25:60:05:35:f5:f3:52:9b:9d:19:7e:68:c2:96:2d:d4:42:bc:
dd:37:fb:bb:d2:1a:f9:e4:15:d4:26:2d:86:15:f9:dd:93:d2:
7d:db:4a:80:9b:c2:89:59:41:c5:9f:06:b3:f8:2f:71:a9:1c:
d2:71:d0:79:61:45:04:bd:34:05:cf:3f:2e:0d:03:74:55:ef:
96:6f:2b:bb:c2:2c:dc:ef:ec:8e:9b:12:33:0a:99:ee:b9:e0:
b5:45:0a:b7:a6:6c:6b:9a:b8:a2:79:13:3f:b6:ee:90:ed:1c:
74:4f:f2:08:4b:1d:60:e2:d1:e3:2e:70:38:f8:b9:a5:d4:95:
35:42:3f:2d:05:9f:b1:db:29:cc:4a:e4:f2:ac:4f:8d:cd:8b:
9a:8c:fa:f0:5e:87:2a:24:7f:ec:bb:d7:b1:23:37:fe:88:c1:
be:25:d5:ad:8a:8c:a5:1e:e6:2c:c3:12:81:c1:c1:c2:82:da:
30:d1:4a:61:92:e7:03:76:fe:27:31:37:95:67:a1:c4:13:b0:
d9:25:08:6a:ec:b4:32:12:f2:4e:b3:2f:00:12:2e:ec:e2:4b:
72:c6:49:b2:51:22:d2:2e:43:0b:79:6a:55:83:ab:73:f8:d9:
d5:16:cf:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduh18ubCZELQyCWdtJQoXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmE2YzA1MDUwYjUwYzcwYjlhMzVkMzQyMzBiN2FjMzA5
ZDRkOWEwHhcNMjUwNjE0MTMwMDU0WhcNMjUwNjE1MTMwMDU0WjAzMTEwLwYDVQQD
Eyg0OTQyYWU3NjM1ZDkwZWE3NzNhMjM2N2M0MTE3ZWNmN2Y4NDkyY2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkBRgG+5Yjk7PKWGFz4xptM1DZVe
z6Tm3udHbDfM0ICA8i7aX9ij+rNqAAmMcyqITfbXKsqbAcDn/xVGf5Ica8Kl5oNk
dBtLkw/Spq1Sy/+QPbOHcP6XGws5E2rW57nYQsLcShDN/VPmbUvXD0kKzBunMmGC
+s6D3ciVc0Lndq4Zj61bwnh23veyVGmP+Sx6IC7GSozA+uyz6l2sKlwzMxqTDzJ3
ng/4zxsfurjgDEttADMeeqY0/AP4uLG/vJ5DqHcU8cDEnv5TnXPNS+6vUapR0wmY
TAG7g1+4FSR6EhxomvdjuFz4eOIHPm5kXTj53qZ0Q/vV40zHOVlg4qL6hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElCrnY12Q6nc6I2fEEX7Pf4SSzmMB8GA1UdIwQY
MBaAFEG6bAUFC1DHC5o100Iwt6wwnU2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgt
YjBiODU4YzBmYmE0LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgtYjBiODU4YzBmYmE0
LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlXHjW1s
1TfopafZJPOJIFM3JWAFNfXzUpudGX5owpYt1EK83Tf7u9Ia+eQV1CYthhX53ZPS
fdtKgJvCiVlBxZ8Gs/gvcakc0nHQeWFFBL00Bc8/Lg0DdFXvlm8ru8Is3O/sjpsS
MwqZ7rngtUUKt6Zsa5q4onkTP7bukO0cdE/yCEsdYOLR4y5wOPi5pdSVNUI/LQWf
sdspzErk8qxPjc2Lmoz68F6HKiR/7LvXsSM3/ojBviXVrYqMpR7mLMMSgcHBwoLa
MNFKYZLnA3b+JzE3lWehxBOw2SUIauy0MhLyTrMvABIu7OJLcsZJslEi0i5DC3lq
VYOrc/jZ1RbPqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:51:48 2025 by rpki-client