Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: RKwCHa21cvMa1ajV0dxdbVI+6hKSJQmu4HJIDb7sfVo=
Subject key identifier: AF:04:BD:B9:1E:59:64:E9:9D:C0:3B:DE:E8:80:67:11:29:D1:96:4F
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 01976C98918E354566ADC906015C3B0ACDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:27 +0000
Manifest this update: Sat 14 Jun 2025 04:00:27 +0000
Manifest next update: Sun 15 Jun 2025 04:00:27 +0000
Files and hashes: 1: QTfS1SFb7VGTiGiN2dDueV3na8U.roa (hash: PLx/8DSVxOYWpxQe9zNuM4NTWNV61RdgV2qLjo81Rz8=)
2: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: dhGeHsqh3kmAYSKr1BtaKVsphYFg1zXTAdSSWk1chf0=)
3: TeM9OzX8sQpqWpDItBlSbfU5TWA.roa (hash: GQ0DaMaVE4ZcrNCViKsSogvmznrtITdeEy+eY3JUQMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:91:8e:35:45:66:ad:c9:06:01:5c:3b:0a:cd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Jun 14 04:00:27 2025 GMT
Not After : Jun 15 04:00:27 2025 GMT
Subject: CN=af04bdb91e5964e99dc03bdee880671129d1964f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:06:2a:d3:42:8c:4f:3f:1d:2e:fe:be:00:
0a:6f:36:0c:1d:0a:e3:d3:f4:25:66:c6:51:a4:05:
de:66:18:62:5c:f6:32:d9:db:05:00:c1:b4:26:34:
a5:5b:5f:e3:2e:5f:6a:bd:7d:ed:1d:7e:9f:4d:63:
45:93:4b:cd:38:47:52:61:6e:22:d7:7e:d1:88:97:
87:1f:41:af:77:bb:97:79:8b:33:ef:52:d1:59:68:
57:88:2b:0c:56:5b:a7:34:b3:7e:f3:3c:66:be:81:
01:ed:de:b0:21:73:8e:ff:8d:e2:da:7c:f5:31:0f:
a5:58:5c:1b:78:c7:c0:37:4a:4b:e5:04:d3:d5:e0:
8f:eb:de:50:50:31:f1:29:0f:dc:5b:ad:eb:82:b9:
a9:3d:f4:0b:90:0f:19:8e:92:3e:3c:65:40:30:b8:
12:24:16:e6:16:45:89:09:9b:bb:f3:38:71:15:8a:
5d:81:7f:bb:0f:2e:3c:5c:8f:ac:f1:6d:be:5d:b5:
b4:01:ed:9d:8d:e8:8b:4c:b2:99:99:1e:5b:81:04:
bc:4b:35:21:cd:1f:96:14:eb:07:e1:a7:70:17:a3:
e2:c4:56:ee:98:42:7b:67:88:9f:8c:e2:10:e5:12:
4e:4e:8d:2b:b7:fa:e7:98:34:09:96:60:1f:f4:f2:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:04:BD:B9:1E:59:64:E9:9D:C0:3B:DE:E8:80:67:11:29:D1:96:4F
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d4:27:64:16:51:6d:80:8e:9e:7c:ab:98:05:fc:45:2c:f4:
ab:96:fd:f1:7c:f2:9f:4e:10:ec:49:71:39:ea:44:f1:ec:b9:
05:85:20:99:70:57:b3:e2:f8:96:2a:3e:5d:11:46:64:01:58:
84:0d:5a:ab:dd:39:b9:cf:38:5d:e4:c0:1f:39:62:56:37:ba:
42:7e:da:5c:04:73:e4:87:49:97:aa:48:65:11:70:1d:91:32:
c9:e6:8f:99:e5:1c:73:09:7e:53:a4:1a:41:d9:32:c0:4b:31:
c6:88:95:30:b0:c8:4e:c6:c7:85:52:bf:d8:d4:2a:23:4b:e5:
ab:63:ff:71:b6:4b:56:34:82:31:80:9d:24:03:64:ca:55:91:
d9:cd:99:fc:3f:a1:d0:35:67:e9:fb:c5:4c:d9:e3:a3:c0:ee:
32:f5:ac:31:1b:b7:12:d1:1e:78:c5:8d:23:95:10:21:14:7a:
19:1a:ca:b4:44:61:9d:fc:8f:70:c2:fd:17:49:cf:95:fc:cd:
d9:f5:fc:14:90:1c:6a:0d:46:89:11:7d:f2:a7:cd:a0:e6:90:
9a:7f:83:01:5d:ad:eb:63:56:28:06:64:87:87:52:32:b7:bb:
03:e5:4e:fb:7c:27:55:8e:1e:61:42:72:d5:e3:3c:1f:b6:f6:
be:01:d9:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmJGONUVmrckGAVw7Cs2iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWIxY2YyMWQyMGY4YzZmOTQ2NDFlMzMyN2U0NTU1ZTJl
NDExMDIwHhcNMjUwNjE0MDQwMDI3WhcNMjUwNjE1MDQwMDI3WjAzMTEwLwYDVQQD
EyhhZjA0YmRiOTFlNTk2NGU5OWRjMDNiZGVlODgwNjcxMTI5ZDE5NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLMGKtNCjE8/HS7+vgAKbzYMHQrj
0/QlZsZRpAXeZhhiXPYy2dsFAMG0JjSlW1/jLl9qvX3tHX6fTWNFk0vNOEdSYW4i
137RiJeHH0Gvd7uXeYsz71LRWWhXiCsMVlunNLN+8zxmvoEB7d6wIXOO/43i2nz1
MQ+lWFwbeMfAN0pL5QTT1eCP695QUDHxKQ/cW63rgrmpPfQLkA8ZjpI+PGVAMLgS
JBbmFkWJCZu78zhxFYpdgX+7Dy48XI+s8W2+XbW0Ae2djeiLTLKZmR5bgQS8SzUh
zR+WFOsH4adwF6PixFbumEJ7Z4ifjOIQ5RJOTo0rt/rnmDQJlmAf9PLmUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8EvbkeWWTpncA73uiAZxEp0ZZPMB8GA1UdIwQY
MBaAFEKbHPIdIPjG+UZB4zJ+RVXi5BECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3Yzgt
ZTU2ZTczODM4MGRlLzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3YzgtZTU2ZTczODM4MGRl
LzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtQnZBZR
bYCOnnyrmAX8RSz0q5b98Xzyn04Q7ElxOepE8ey5BYUgmXBXs+L4lio+XRFGZAFY
hA1aq905uc84XeTAHzliVje6Qn7aXARz5IdJl6pIZRFwHZEyyeaPmeUccwl+U6Qa
QdkywEsxxoiVMLDITsbHhVK/2NQqI0vlq2P/cbZLVjSCMYCdJANkylWR2c2Z/D+h
0DVn6fvFTNnjo8DuMvWsMRu3EtEeeMWNI5UQIRR6GRrKtERhnfyPcML9F0nPlfzN
2fX8FJAcag1GiRF98qfNoOaQmn+DAV2t62NWKAZkh4dSMre7A+VO+3wnVY4eYUJy
1eM8H7b2vgHZdA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:24:58 2025 by rpki-client