Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: R/TdQ22r4H0f+Oz9BhyDaFzW/TuP12Tus8CNrDuxVFo=
Subject key identifier: 71:1B:A6:C3:17:7F:27:79:87:31:E9:FB:00:16:0E:2C:32:F7:FD:95
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 01976997B19C0F8530AF20B2ED492CD040EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0AFB
Signing time: Fri 13 Jun 2025 14:00:38 +0000
Manifest this update: Fri 13 Jun 2025 14:00:38 +0000
Manifest next update: Sat 14 Jun 2025 14:00:38 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: DfU9T+sQyKDnLNKEO+tXU1YQ0Y7hWLx1TPcSVIzD6Q8=)
2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:b1:9c:0f:85:30:af:20:b2:ed:49:2c:d0:40:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Jun 13 14:00:38 2025 GMT
Not After : Jun 14 14:00:38 2025 GMT
Subject: CN=711ba6c3177f27798731e9fb00160e2c32f7fd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:82:a4:7c:74:e4:4a:a4:6e:58:93:91:92:ae:
2e:dc:b9:2a:7e:97:63:7f:cc:15:57:c1:39:5e:7f:
b5:61:25:a9:66:57:95:21:da:1d:27:86:e7:83:4f:
b1:37:d9:2d:81:85:6d:b2:5f:94:f5:11:0d:1b:a9:
c3:30:27:b1:29:e4:06:ac:7f:35:2d:65:82:4f:44:
91:fb:48:6b:ef:d3:bf:ab:49:c6:5a:1e:f7:41:58:
93:b5:83:fe:df:0b:8a:0c:f0:f3:c7:c7:87:7b:17:
bc:d3:99:7a:b6:e2:bc:a9:62:fb:fc:8b:ff:0d:dd:
a3:f0:da:ee:29:df:00:e4:ff:10:fb:87:21:a3:bc:
91:84:08:ac:ad:8e:25:a7:0a:41:af:39:fc:02:b4:
d0:ac:3a:6d:83:c3:e0:03:1a:66:a9:fa:7f:b3:9b:
f3:28:8a:90:3e:8e:09:73:22:94:3a:a9:0a:cb:ac:
a4:91:18:84:80:45:9e:5c:dc:5d:39:59:39:a5:49:
6e:23:f1:9c:56:c8:98:13:ee:ad:65:d6:b7:77:fd:
c3:1b:de:d0:26:af:12:f4:f2:af:03:65:78:f7:67:
90:fa:f2:26:f6:ee:bd:49:ce:2f:3c:5c:24:8a:26:
01:62:0b:7d:64:10:d5:a5:23:78:12:24:93:68:95:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1B:A6:C3:17:7F:27:79:87:31:E9:FB:00:16:0E:2C:32:F7:FD:95
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2f:f7:6d:91:09:5d:aa:b4:ab:ef:f0:22:ed:ef:ce:ed:14:
50:e6:70:b1:b2:21:ce:95:23:23:4f:0c:05:b2:bf:0f:38:18:
99:3e:37:d8:28:0c:56:0c:cd:08:e4:a3:70:dd:d4:b3:c1:bd:
88:23:a6:c6:d9:67:1d:7d:6e:ab:eb:1a:b2:5d:01:3a:64:31:
79:78:91:03:aa:8b:bd:8c:db:1f:62:0c:e7:43:27:f5:d3:71:
81:26:bc:dd:16:c8:55:67:f2:ca:41:ab:26:e3:a1:9d:6b:82:
a7:1b:b6:a4:2d:14:cb:f4:c0:25:3c:3c:f7:f1:22:28:09:af:
70:eb:76:03:1c:5f:21:51:6c:f9:1c:cd:2f:b8:fb:34:b0:e2:
17:ae:b3:83:24:a6:bd:86:20:6d:d8:f4:80:f8:00:3d:b4:86:
2c:09:56:b3:6c:66:06:39:c6:5f:4e:53:04:52:f4:d6:83:5c:
06:b4:a9:0c:69:1a:c8:15:7e:13:4d:97:99:0d:12:6a:0d:fa:
b5:9f:ef:6b:dc:e7:b0:e0:18:c5:11:d3:76:6f:7c:84:ac:a7:
c3:dd:8f:fd:74:0a:8f:72:0d:c3:ee:b7:71:65:c3:67:d9:a1:
59:e2:3d:5b:84:7d:68:1d:57:c7:70:27:e9:47:42:e4:e6:ed:
89:a3:27:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl7GcD4UwryCy7Uks0EDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNjQ0NmE0YTFjYjU2YjNmNzZmZTZiNGRlZmFiYWQzYmQ5
YjUyMDcwHhcNMjUwNjEzMTQwMDM4WhcNMjUwNjE0MTQwMDM4WjAzMTEwLwYDVQQD
Eyg3MTFiYTZjMzE3N2YyNzc5ODczMWU5ZmIwMDE2MGUyYzMyZjdmZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KkfHTkSqRuWJORkq4u3Lkqfpdj
f8wVV8E5Xn+1YSWpZleVIdodJ4bng0+xN9ktgYVtsl+U9RENG6nDMCexKeQGrH81
LWWCT0SR+0hr79O/q0nGWh73QViTtYP+3wuKDPDzx8eHexe805l6tuK8qWL7/Iv/
Dd2j8NruKd8A5P8Q+4cho7yRhAisrY4lpwpBrzn8ArTQrDptg8PgAxpmqfp/s5vz
KIqQPo4JcyKUOqkKy6ykkRiEgEWeXNxdOVk5pUluI/GcVsiYE+6tZda3d/3DG97Q
Jq8S9PKvA2V492eQ+vIm9u69Sc4vPFwkiiYBYgt9ZBDVpSN4EiSTaJXD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEbpsMXfyd5hzHp+wAWDiwy9/2VMB8GA1UdIwQY
MBaAFEJkRqShy1az92/mtN76utO9m1IHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEt
ZWRlMDI4MmY5YmI5LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEtZWRlMDI4MmY5YmI5
LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAji/3bZEJ
Xaq0q+/wIu3vzu0UUOZwsbIhzpUjI08MBbK/DzgYmT432CgMVgzNCOSjcN3Us8G9
iCOmxtlnHX1uq+sasl0BOmQxeXiRA6qLvYzbH2IM50Mn9dNxgSa83RbIVWfyykGr
JuOhnWuCpxu2pC0Uy/TAJTw89/EiKAmvcOt2AxxfIVFs+RzNL7j7NLDiF66zgySm
vYYgbdj0gPgAPbSGLAlWs2xmBjnGX05TBFL01oNcBrSpDGkayBV+E02XmQ0Sag36
tZ/va9znsOAYxRHTdm98hKynw92P/XQKj3INw+63cWXDZ9mhWeI9W4R9aB1Xx3An
6UdC5ObtiaMnjA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:38 2025 by rpki-client