Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: A/CStF1r/z2LQrAUuTcH+MpYrATlNm6tpWcW3I6Y9wI=
Subject key identifier: DC:2B:04:C0:4B:E1:74:28:4B:54:D3:21:DC:6D:95:03:A7:D2:95:AF
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 01976CCF6ECE5C274CB741E9D4A91E55C5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 05:00:22 +0000
Manifest this update: Sat 14 Jun 2025 05:00:22 +0000
Manifest next update: Sun 15 Jun 2025 05:00:22 +0000
Files and hashes: 1: 2U9OMR0vNGIWLLTXLBnFAJc6zag.roa (hash: F6oBZloimXQ0suZfVl9SgIpXfkXnctvWcc1snNVrOMI=)
2: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: L60LrGfCJzV3EDfQwAsLGXGL4JfeL3zZ9ZuaogQJSfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6e:ce:5c:27:4c:b7:41:e9:d4:a9:1e:55:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jun 14 05:00:22 2025 GMT
Not After : Jun 15 05:00:22 2025 GMT
Subject: CN=dc2b04c04be174284b54d321dc6d9503a7d295af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:b1:3c:a4:f2:db:29:ef:2b:94:e4:85:e5:
70:f2:19:03:61:c8:ba:ec:0e:1c:ae:cf:ea:59:dd:
0d:5d:26:8a:b4:f2:09:ac:45:9b:dd:94:90:ed:a6:
e2:15:a7:b4:59:3b:b6:cf:dc:2e:10:02:b4:6f:5a:
ca:68:59:56:2f:35:58:ff:cf:3e:74:83:52:a0:c3:
4c:fe:4e:94:57:8d:5b:e8:61:6f:60:e6:79:8f:29:
3c:fe:69:bb:f2:06:ae:85:21:6b:17:22:0c:a5:b0:
ae:ed:05:ae:cc:4e:87:2d:9b:df:a8:07:5e:d5:74:
f7:34:d3:24:e9:4a:a4:1a:80:6e:12:6e:a1:35:f9:
ab:3c:a2:e9:16:0e:44:3d:f3:2f:ed:d3:33:fe:cc:
72:a3:47:cf:62:d9:20:cd:10:f3:66:0d:13:b7:2e:
a2:22:82:23:f4:6c:4a:1d:05:3a:10:e8:3e:a8:d4:
1a:01:bd:3f:44:ed:e3:57:29:6c:66:22:37:80:aa:
4b:64:0f:22:da:c3:d9:df:f2:c8:9c:a5:74:19:27:
1d:85:aa:43:7c:a8:c5:c9:33:b4:a0:52:45:ef:8b:
a3:3a:31:80:06:21:9d:e7:f5:2a:ad:91:8b:79:d9:
10:15:c1:9d:ee:8c:50:7b:ab:b2:18:a3:a5:8d:dc:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2B:04:C0:4B:E1:74:28:4B:54:D3:21:DC:6D:95:03:A7:D2:95:AF
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3c:f2:d1:52:f1:50:b1:da:79:96:2a:b3:7d:17:8e:dd:c6:
a3:5b:f8:c5:1c:a4:2b:18:98:2b:a7:92:a5:d0:12:e3:6f:0d:
b7:bc:95:0c:06:ba:89:a2:43:5a:1e:30:de:ef:3b:f6:bd:ff:
07:95:99:00:17:53:01:0a:b0:e2:ad:26:a7:78:8c:ac:10:15:
db:af:de:55:a7:98:40:2c:c5:a6:87:95:f4:1b:16:77:bf:74:
d7:44:a1:12:10:fc:0d:ca:c5:a1:05:ed:6b:0d:93:a8:5a:57:
c5:8b:6a:df:f7:5f:ad:77:2c:b6:c3:14:14:d1:be:07:33:3b:
9c:2b:2b:5c:ef:e2:25:14:dc:b5:43:19:9c:d2:51:c9:ef:54:
3e:25:d6:49:c7:ce:35:31:31:26:1a:0f:87:46:b8:9b:e0:bb:
ce:72:e8:1c:af:ac:cf:e9:50:c2:9c:16:60:75:cd:6d:80:f3:
43:b7:10:78:05:f6:68:a0:b8:51:e5:cd:87:9a:e4:48:3c:4c:
d0:08:c6:ee:67:06:30:6d:0a:1e:95:97:ec:ae:21:9f:40:e8:
5c:b1:eb:f8:5b:d1:57:bf:ff:98:2c:c8:8e:af:76:3c:d0:f5:
e3:80:25:43:9d:32:a3:d4:13:9b:25:4e:19:e0:4c:2f:da:ef:
74:9d:62:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz27OXCdMt0Hp1KkeVcWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk
NTMyYzIwHhcNMjUwNjE0MDUwMDIyWhcNMjUwNjE1MDUwMDIyWjAzMTEwLwYDVQQD
EyhkYzJiMDRjMDRiZTE3NDI4NGI1NGQzMjFkYzZkOTUwM2E3ZDI5NWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo96xPKTy2ynvK5TkheVw8hkDYci6
7A4crs/qWd0NXSaKtPIJrEWb3ZSQ7abiFae0WTu2z9wuEAK0b1rKaFlWLzVY/88+
dINSoMNM/k6UV41b6GFvYOZ5jyk8/mm78gauhSFrFyIMpbCu7QWuzE6HLZvfqAde
1XT3NNMk6UqkGoBuEm6hNfmrPKLpFg5EPfMv7dMz/sxyo0fPYtkgzRDzZg0Tty6i
IoIj9GxKHQU6EOg+qNQaAb0/RO3jVylsZiI3gKpLZA8i2sPZ3/LInKV0GScdhapD
fKjFyTO0oFJF74ujOjGABiGd5/UqrZGLedkQFcGd7oxQe6uyGKOljdzGmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwrBMBL4XQoS1TTIdxtlQOn0pWvMB8GA1UdIwQY
MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt
MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw
LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjzy0VLx
ULHaeZYqs30Xjt3Go1v4xRykKxiYK6eSpdAS428Nt7yVDAa6iaJDWh4w3u879r3/
B5WZABdTAQqw4q0mp3iMrBAV26/eVaeYQCzFpoeV9BsWd79010ShEhD8DcrFoQXt
aw2TqFpXxYtq3/dfrXcstsMUFNG+BzM7nCsrXO/iJRTctUMZnNJRye9UPiXWScfO
NTExJhoPh0a4m+C7znLoHK+sz+lQwpwWYHXNbYDzQ7cQeAX2aKC4UeXNh5rkSDxM
0AjG7mcGMG0KHpWX7K4hn0DoXLHr+FvRV7//mCzIjq92PND144AlQ50yo9QTmyVO
GeBML9rvdJ1iIA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:45 2025 by rpki-client