Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier: xlVE+sL12WhuhdHKAs/eDd2zPC5Ckj7G/Ai6i3pHQUk=
Subject key identifier: 1A:7C:92:26:5F:24:65:52:6E:6C:AD:A5:8F:B5:06:47:6C:00:17:C1
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial: 01976CCF6C4C600C3A5E7AFF17F8D9AEE8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number: 02FB
Signing time: Sat 14 Jun 2025 05:00:22 +0000
Manifest this update: Sat 14 Jun 2025 05:00:22 +0000
Manifest next update: Sun 15 Jun 2025 05:00:22 +0000
Files and hashes: 1: 5lkgevE67JqLPCJiuIVDQvx8C9s.roa (hash: TbV0l1n+K1FvkmmG4RWk4U+vij9oLV2Tx8NUa3IQ8as=)
2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: JBYV6/AonUpGWxbAImG7+xw2oB6oVdCXKc4idkMfoso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6c:4c:60:0c:3a:5e:7a:ff:17:f8:d9:ae:e8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Validity
Not Before: Jun 14 05:00:22 2025 GMT
Not After : Jun 15 05:00:22 2025 GMT
Subject: CN=1a7c92265f2465526e6cada58fb506476c0017c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:00:c0:de:08:73:3f:3e:c3:ce:58:a4:9f:
7c:6c:e0:95:33:75:4b:c8:2a:54:7b:e5:c7:cd:39:
af:d7:7e:1f:25:8a:d7:54:00:2e:2d:a0:d8:2a:0d:
e7:09:d4:3f:41:51:3f:c6:ab:46:ac:c5:48:22:fe:
fc:48:d2:aa:62:c4:ec:b8:50:7d:8a:9e:ad:ec:00:
24:f6:5d:2f:cc:c5:25:eb:cc:77:01:66:31:18:58:
41:d2:a6:9b:62:9f:8c:82:9f:1e:56:51:98:de:c1:
c7:4d:31:c0:bd:18:af:36:b9:6b:67:34:2f:01:04:
9a:96:e8:39:6c:64:fd:56:f8:55:c2:c9:d7:c0:58:
83:b5:4e:ea:8f:f6:bb:42:57:21:eb:82:fb:c8:0c:
fe:f4:5e:6e:93:03:d7:8e:ae:9e:bc:7d:fc:de:1f:
19:90:4b:e1:fb:84:06:1e:df:4a:83:60:45:36:ae:
1b:c4:0b:77:9d:6e:67:ff:93:96:78:19:66:11:f4:
e9:c0:e1:8e:bd:4b:01:24:52:4b:e9:0c:99:d8:ef:
c7:29:79:2b:38:f3:de:b4:57:ac:bb:e6:6e:c5:2a:
69:b0:fd:59:79:49:ab:ac:73:9e:45:6b:52:b6:8d:
b1:f7:6f:23:e3:0f:75:7c:22:c3:cd:44:75:cc:8b:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:92:26:5F:24:65:52:6E:6C:AD:A5:8F:B5:06:47:6C:00:17:C1
X509v3 Authority Key Identifier:
keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a5:59:a4:4a:c0:86:52:8c:be:5a:a7:0f:24:5a:a3:e0:b4:
76:0d:ea:e8:30:e8:aa:12:d4:40:2d:f2:a7:65:af:cf:06:98:
9a:3e:3b:a5:34:58:cf:aa:81:89:18:d5:88:5b:6f:99:e3:a7:
59:e7:a3:6e:03:2b:72:81:05:2c:b2:31:33:df:50:fa:30:72:
bc:87:0c:77:53:d0:08:c3:2f:e2:a2:57:bd:2d:6d:31:2a:1f:
f2:48:a5:20:b2:70:ce:b6:2d:72:13:cd:9f:eb:0d:db:5c:e3:
f8:0b:7a:9d:56:b6:77:30:bd:a0:72:78:76:13:3f:ed:e2:41:
96:9a:78:a6:1d:cf:15:d2:c6:19:7a:a8:6a:45:f9:af:a1:95:
8e:b1:ac:c6:32:cf:c2:51:b3:1b:e5:10:ad:75:57:14:86:f1:
e2:a4:6d:f1:69:4e:80:a9:7f:e1:79:13:a6:fe:e7:88:84:4d:
bf:7b:67:58:f9:dc:ed:65:4d:ef:6a:cc:42:06:27:4f:24:af:
cd:ff:3e:70:68:3d:e7:a3:0b:b1:43:bb:d7:df:d4:cd:75:89:
39:ae:18:4f:2e:2d:10:e6:45:96:57:b9:c2:d7:b5:fc:dd:45:
12:52:39:c0:20:1f:76:fb:6c:d0:75:9d:e1:d4:fd:42:f8:f6:
b3:64:d5:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz2xMYAw6Xnr/F/jZrujYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTUxNDhiMzk5YjUzYmE1MmZkNjhlYWJkYmRmNmFkOTlj
YzcxZjQwHhcNMjUwNjE0MDUwMDIyWhcNMjUwNjE1MDUwMDIyWjAzMTEwLwYDVQQD
EygxYTdjOTIyNjVmMjQ2NTUyNmU2Y2FkYTU4ZmI1MDY0NzZjMDAxN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4C0AwN4Icz8+w85YpJ98bOCVM3VL
yCpUe+XHzTmv134fJYrXVAAuLaDYKg3nCdQ/QVE/xqtGrMVIIv78SNKqYsTsuFB9
ip6t7AAk9l0vzMUl68x3AWYxGFhB0qabYp+Mgp8eVlGY3sHHTTHAvRivNrlrZzQv
AQSalug5bGT9VvhVwsnXwFiDtU7qj/a7Qlch64L7yAz+9F5ukwPXjq6evH383h8Z
kEvh+4QGHt9Kg2BFNq4bxAt3nW5n/5OWeBlmEfTpwOGOvUsBJFJL6QyZ2O/HKXkr
OPPetFesu+ZuxSppsP1ZeUmrrHOeRWtSto2x928j4w91fCLDzUR1zIvtVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp8kiZfJGVSbmytpY+1BkdsABfBMB8GA1UdIwQY
MBaAFKjlFIs5m1O6Uv1o6r299q2ZzHH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQt
ZTczNDk5M2YxMWFjLzEvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hMzJiMWMtZjg0MS00ZjVhLTljZTQtZTczNDk5M2YxMWFj
LzEvcU9VVWl6bWJVN3BTX1dqcXZiMzJyWm5NY2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKVZpErA
hlKMvlqnDyRao+C0dg3q6DDoqhLUQC3yp2WvzwaYmj47pTRYz6qBiRjViFtvmeOn
WeejbgMrcoEFLLIxM99Q+jByvIcMd1PQCMMv4qJXvS1tMSof8kilILJwzrYtchPN
n+sN21zj+At6nVa2dzC9oHJ4dhM/7eJBlpp4ph3PFdLGGXqoakX5r6GVjrGsxjLP
wlGzG+UQrXVXFIbx4qRt8WlOgKl/4XkTpv7niIRNv3tnWPnc7WVN72rMQgYnTySv
zf8+cGg956MLsUO719/UzXWJOa4YTy4tEOZFlle5wte1/N1FElI5wCAfdvts0HWd
4dT9Qvj2s2TV3w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:14:37 2025 by rpki-client