Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier: 099P7I3sPOpg4bGq1wu+SpOq5xmxdno9ulCc/JYh77s=
Subject key identifier: 03:E7:1E:58:9A:6C:7E:5A:1E:FA:43:0D:75:EF:56:4D:E4:8D:86:64
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial: 019769CEE60C06FC0D4C2509BF0F8D6DF57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 15:00:56 +0000
Manifest this update: Fri 13 Jun 2025 15:00:56 +0000
Manifest next update: Sat 14 Jun 2025 15:00:56 +0000
Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: YfUB23T9yBeycAx3g1Y/JJMCfk/KfA0t4dti6Ym/k7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:e6:0c:06:fc:0d:4c:25:09:bf:0f:8d:6d:f5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Validity
Not Before: Jun 13 15:00:56 2025 GMT
Not After : Jun 14 15:00:56 2025 GMT
Subject: CN=03e71e589a6c7e5a1efa430d75ef564de48d8664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:da:9d:fa:f2:fc:f2:fa:c0:9b:84:cb:15:
60:05:84:0b:c0:1d:16:77:64:22:bc:0a:03:a4:0c:
ae:b3:85:9d:89:18:0a:82:cd:0e:8b:5b:6c:e0:cb:
68:2c:c5:62:74:e9:57:df:98:b0:5d:04:e1:9a:c5:
bb:3f:00:73:84:d7:4e:5c:99:db:75:20:5e:95:87:
4f:1f:66:5d:81:b3:82:6e:bd:2d:54:eb:91:ae:12:
5c:01:8b:7e:c5:88:be:d5:02:bd:97:22:a0:69:6d:
38:0c:90:63:38:cb:b0:39:49:d9:10:40:de:c3:c4:
3b:37:49:ab:7a:ed:f6:07:41:31:e3:56:23:b3:c6:
1e:b6:65:d3:33:d1:86:e2:7f:85:ca:60:e3:fd:c8:
76:e9:d7:67:bc:00:33:2c:77:bc:97:22:34:95:3d:
eb:68:f5:f9:28:13:ef:35:0b:8e:32:35:22:a2:89:
16:3e:62:4d:80:7a:68:c5:d3:21:96:b9:26:09:93:
63:fa:f4:aa:b3:b5:a2:ee:61:ff:0b:a6:68:31:14:
9e:f8:04:b3:0b:84:25:00:bd:4d:01:1b:50:fc:54:
64:56:55:79:94:9a:8d:f3:ad:26:6a:0f:25:f1:8a:
93:c1:6e:dc:8e:1d:d1:15:46:e2:a4:78:f2:49:6c:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E7:1E:58:9A:6C:7E:5A:1E:FA:43:0D:75:EF:56:4D:E4:8D:86:64
X509v3 Authority Key Identifier:
keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5a:2d:46:6f:2f:ee:9f:f2:e9:cc:dc:4d:84:aa:ed:6c:fd:
8f:73:ee:ed:b9:e7:9e:43:ee:c0:9e:17:e4:55:cd:d5:64:9c:
38:1a:2c:c9:16:08:ec:95:c1:0f:8b:08:f7:8d:79:50:ea:18:
af:bf:40:28:37:1f:85:5f:50:f4:f4:71:56:2e:3b:4e:47:f4:
5d:54:c7:50:46:3b:20:6d:11:3c:d1:6b:f0:bc:1a:0d:ee:38:
a6:19:9b:f9:d9:82:91:66:ca:f2:b6:20:cc:7d:c1:43:d5:1b:
21:eb:5f:1c:89:b4:79:0d:cb:54:4e:3e:16:9d:aa:30:bc:f6:
c4:f9:b9:01:0b:2e:da:43:39:90:68:4f:bb:cb:58:a4:b0:67:
a2:8d:40:8b:0e:f5:09:3e:4b:36:d0:82:b8:d9:93:19:a0:61:
cc:53:4f:ee:c5:13:02:78:6c:dd:c2:77:f4:37:5c:3b:fa:04:
4b:a1:60:73:1a:54:9a:63:f8:bb:64:8b:43:dd:83:12:54:9a:
50:80:c9:31:72:2b:a0:c0:7f:4a:1d:8b:1e:1d:97:c7:01:69:
9d:a0:2e:8c:f6:54:e3:35:44:22:d7:de:c3:29:62:82:6a:a1:
d1:37:55:5d:e9:ba:ef:a1:ac:36:9d:c1:00:29:7a:5c:95:62:
48:4a:4a:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzuYMBvwNTCUJvw+NbfV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MTI3ODdhYWE0NmZiMDRkYWNmYzVlYjYwNjBiMGFjYTAy
ODRiNzEwHhcNMjUwNjEzMTUwMDU2WhcNMjUwNjE0MTUwMDU2WjAzMTEwLwYDVQQD
EygwM2U3MWU1ODlhNmM3ZTVhMWVmYTQzMGQ3NWVmNTY0ZGU0OGQ4NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxDanfry/PL6wJuEyxVgBYQLwB0W
d2QivAoDpAyus4WdiRgKgs0Oi1ts4MtoLMVidOlX35iwXQThmsW7PwBzhNdOXJnb
dSBelYdPH2ZdgbOCbr0tVOuRrhJcAYt+xYi+1QK9lyKgaW04DJBjOMuwOUnZEEDe
w8Q7N0mreu32B0Ex41Yjs8YetmXTM9GG4n+FymDj/ch26ddnvAAzLHe8lyI0lT3r
aPX5KBPvNQuOMjUiookWPmJNgHpoxdMhlrkmCZNj+vSqs7Wi7mH/C6ZoMRSe+ASz
C4QlAL1NARtQ/FRkVlV5lJqN860mag8l8YqTwW7cjh3RFUbipHjySWyaDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPnHliabH5aHvpDDXXvVk3kjYZkMB8GA1UdIwQY
MBaAFKkSeHqqRvsE2s/F62BgsKygKEtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMt
ZTgxZjVmZTQ3MzhmLzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMtZTgxZjVmZTQ3Mzhm
LzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlotRm8v
7p/y6czcTYSq7Wz9j3Pu7bnnnkPuwJ4X5FXN1WScOBosyRYI7JXBD4sI9415UOoY
r79AKDcfhV9Q9PRxVi47Tkf0XVTHUEY7IG0RPNFr8LwaDe44phmb+dmCkWbK8rYg
zH3BQ9UbIetfHIm0eQ3LVE4+Fp2qMLz2xPm5AQsu2kM5kGhPu8tYpLBnoo1Aiw71
CT5LNtCCuNmTGaBhzFNP7sUTAnhs3cJ39DdcO/oES6FgcxpUmmP4u2SLQ92DElSa
UIDJMXIroMB/Sh2LHh2XxwFpnaAujPZU4zVEItfewyligmqh0TdVXem676GsNp3B
ACl6XJViSEpKQg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:30 2025 by rpki-client