Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: l2L9tUONNKpIlH5CpcDC+hG0Ay2VPCALNhsOLUIh/Iw=
Subject key identifier: D5:5C:26:36:5E:1E:3F:52:4C:09:3B:62:DC:02:FE:8A:F0:48:9C:A4
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019768BC60D76FDA440768A1904519137D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 14BD
Signing time: Fri 13 Jun 2025 10:01:05 +0000
Manifest this update: Fri 13 Jun 2025 10:01:05 +0000
Manifest next update: Sat 14 Jun 2025 10:01:05 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: TDB93ODLLFUMBeli+AF90v2fInb+1rfaxZE/8LupCWM=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:60:d7:6f:da:44:07:68:a1:90:45:19:13:7d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Jun 13 10:01:05 2025 GMT
Not After : Jun 14 10:01:05 2025 GMT
Subject: CN=d55c26365e1e3f524c093b62dc02fe8af0489ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:40:06:f2:89:a9:25:c3:fc:ba:55:7d:84:
9c:b9:11:5a:2f:23:21:0d:6e:d3:34:ea:b8:19:03:
d7:7f:9a:c2:34:80:1b:8a:2e:8b:83:b9:47:38:d7:
45:cf:3e:8e:ed:6f:82:bd:27:72:58:f4:6f:69:64:
9b:b7:44:97:f7:bc:0a:94:22:cc:29:f1:af:82:cb:
da:31:dc:7c:67:cc:77:bc:39:91:86:b1:26:91:14:
df:cf:61:31:81:58:24:48:a9:4a:7d:a0:38:0a:35:
58:ca:05:f9:73:fa:42:bc:92:56:27:ef:69:48:ea:
38:94:eb:ba:8d:74:5d:96:93:d3:77:06:b9:25:ef:
e7:86:36:d2:a8:5e:9e:e0:ae:83:e9:34:14:20:ae:
0c:4c:62:da:62:77:fd:94:11:6c:e1:f4:4e:a0:84:
a8:90:19:c4:19:57:56:30:67:54:22:b4:a2:33:92:
f6:84:14:0f:b4:3e:c7:fb:72:40:1d:76:e7:92:b0:
65:76:16:bd:8f:14:7e:5d:f1:8e:5c:85:10:8b:53:
62:75:31:fb:05:ab:cd:16:0c:59:ba:14:92:d6:d2:
a5:9b:68:b0:1a:a6:99:72:d8:cb:0a:d4:45:c9:84:
6d:a5:46:0f:23:e0:07:68:b6:ff:78:c8:14:89:e8:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:26:36:5E:1E:3F:52:4C:09:3B:62:DC:02:FE:8A:F0:48:9C:A4
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9f:55:f2:d5:6d:c4:7f:a1:46:01:ad:d3:a1:02:99:1e:a5:
03:a1:19:87:bd:f9:33:81:d7:93:c7:8b:39:8a:50:86:05:46:
27:fd:60:be:ca:4f:4f:78:bc:a5:3a:d6:77:e9:c3:6c:5f:f7:
52:b5:c7:0a:30:ea:dc:fe:f4:c1:dd:5f:d8:95:69:79:bc:1f:
ac:15:c2:1c:2b:be:ee:16:6b:da:5b:46:3d:1e:d2:1b:7a:08:
00:e7:8c:fa:c2:7d:6f:b3:41:ee:5c:b7:4f:c6:92:b7:c5:4e:
d5:d6:e4:37:aa:45:9c:59:25:d7:4c:d0:6a:62:2d:3e:8f:d3:
2e:78:eb:6f:b6:10:d7:13:8a:82:cd:2a:5b:8a:fa:4e:5a:ed:
78:f6:b9:8c:62:97:12:db:b6:c5:b0:0d:f4:a4:f1:28:93:5f:
05:b3:a5:87:11:b5:80:87:59:67:32:71:06:10:af:80:e5:57:
0c:ad:c0:da:2f:d2:35:22:36:c6:71:c3:7d:b9:19:a6:6b:f1:
c0:ae:8f:6f:93:e3:d2:49:63:e2:20:a7:fe:fe:84:d9:22:72:
eb:97:9f:f3:a8:6b:b7:bb:90:ba:9a:da:c8:5d:da:4b:ad:4a:
02:9c:8f:16:87:b1:6b:7a:38:2c:81:80:3d:1d:38:b1:72:73:
8e:6b:44:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovGDXb9pEB2ihkEUZE31GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2
YjgyNGUwHhcNMjUwNjEzMTAwMTA1WhcNMjUwNjE0MTAwMTA1WjAzMTEwLwYDVQQD
EyhkNTVjMjYzNjVlMWUzZjUyNGMwOTNiNjJkYzAyZmU4YWYwNDg5Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjitABvKJqSXD/LpVfYScuRFaLyMh
DW7TNOq4GQPXf5rCNIAbii6Lg7lHONdFzz6O7W+CvSdyWPRvaWSbt0SX97wKlCLM
KfGvgsvaMdx8Z8x3vDmRhrEmkRTfz2ExgVgkSKlKfaA4CjVYygX5c/pCvJJWJ+9p
SOo4lOu6jXRdlpPTdwa5Je/nhjbSqF6e4K6D6TQUIK4MTGLaYnf9lBFs4fROoISo
kBnEGVdWMGdUIrSiM5L2hBQPtD7H+3JAHXbnkrBldha9jxR+XfGOXIUQi1NidTH7
BavNFgxZuhSS1tKlm2iwGqaZctjLCtRFyYRtpUYPI+AHaLb/eMgUieiJQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVcJjZeHj9STAk7YtwC/orwSJykMB8GA1UdIwQY
MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt
YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh
LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZ9V8tVt
xH+hRgGt06ECmR6lA6EZh735M4HXk8eLOYpQhgVGJ/1gvspPT3i8pTrWd+nDbF/3
UrXHCjDq3P70wd1f2JVpebwfrBXCHCu+7hZr2ltGPR7SG3oIAOeM+sJ9b7NB7ly3
T8aSt8VO1dbkN6pFnFkl10zQamItPo/TLnjrb7YQ1xOKgs0qW4r6TlrtePa5jGKX
Etu2xbAN9KTxKJNfBbOlhxG1gIdZZzJxBhCvgOVXDK3A2i/SNSI2xnHDfbkZpmvx
wK6Pb5Pj0klj4iCn/v6E2SJy65ef86hrt7uQuprayF3aS61KApyPFoexa3o4LIGA
PR04sXJzjmtEHw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:48:47 2025 by rpki-client