Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: f+wMtC4DSDAQeF3P3BYI4ZFJ5m22BaSGBzxlI492sBk=
Subject key identifier: 68:8E:C8:98:56:DA:12:C2:29:81:55:DB:02:AF:A2:29:AF:F2:D9:E3
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 01977075B9B1498EB642BDE96B1606D6A5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 22:00:52 +0000
Manifest this update: Sat 14 Jun 2025 22:00:52 +0000
Manifest next update: Sun 15 Jun 2025 22:00:52 +0000
Files and hashes: 1: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
2: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (hash: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=)
3: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: wA0EMwgbpySX79+H1tLWSLgdreF19LH+Gl9CNqYDlNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:b9:b1:49:8e:b6:42:bd:e9:6b:16:06:d6:a5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jun 14 22:00:52 2025 GMT
Not After : Jun 15 22:00:52 2025 GMT
Subject: CN=688ec89856da12c2298155db02afa229aff2d9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:d0:f4:52:8b:4f:6e:6b:67:7e:dd:fa:09:
b3:af:72:51:98:b6:63:87:ee:52:0e:0c:ab:75:71:
6b:29:9e:89:e7:5d:79:dd:e9:a2:c7:36:b0:8f:51:
87:39:bd:2a:4f:2b:08:aa:94:51:d2:75:1a:40:bb:
9f:33:6d:61:6b:3a:9e:d4:69:a9:31:c9:d1:df:ad:
cf:31:65:58:a9:8b:ab:14:3d:f7:43:a3:8f:30:2f:
0e:15:c6:27:28:c9:be:11:05:19:f2:5c:e3:ae:23:
17:8f:70:1c:5d:90:5f:86:70:a0:7e:f9:39:ad:e7:
e9:c1:d2:13:a3:4c:ec:3f:38:48:80:97:0c:f2:f6:
c6:53:2d:47:79:22:cd:02:94:b9:29:29:71:42:c7:
b3:bb:0b:81:d1:9b:1c:4e:52:ce:10:09:98:98:96:
67:24:aa:bd:1d:76:ea:e4:77:ea:68:5f:11:2f:39:
0c:8b:e0:4d:17:60:62:3e:f0:91:34:94:ef:1c:a2:
1a:dc:5a:72:a6:ff:ce:e5:ed:6d:b4:5c:ce:45:c4:
94:7b:50:14:ba:0c:66:b3:25:78:6a:a3:2b:ae:db:
25:d4:8f:ff:27:6d:d5:c2:b3:89:6b:18:99:53:0d:
d4:ff:73:7e:5d:83:f8:81:85:21:28:a0:93:e2:b2:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:C8:98:56:DA:12:C2:29:81:55:DB:02:AF:A2:29:AF:F2:D9:E3
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:16:c1:91:08:4d:3d:d1:4a:cc:3b:3f:42:ef:35:00:29:ad:
e2:9e:15:ed:45:b1:42:62:f0:10:39:84:b6:30:26:a6:00:14:
a3:b1:f6:93:6a:f5:03:f9:72:d9:db:94:eb:d7:93:99:ee:10:
34:e7:7c:60:29:95:8b:dc:52:54:7e:bc:d5:e5:2c:40:4d:dd:
a9:8c:5e:c3:bf:12:06:06:cd:32:24:82:f7:5c:b6:38:77:ea:
0f:76:e5:b2:77:f3:59:f0:43:b7:d5:87:b7:13:7a:eb:76:11:
9c:73:02:02:b6:05:5b:12:4c:db:4d:a5:8d:fd:53:fd:f6:fa:
77:cb:97:72:ec:1e:31:5f:7c:fd:70:26:d7:e7:41:08:66:ff:
f5:59:b9:3c:34:c9:70:bf:2a:0e:6a:2c:19:c2:fb:c4:f6:5f:
c1:df:0a:03:ed:59:08:e2:96:f0:d6:82:5e:5a:f4:e5:42:59:
a1:ae:74:16:b1:c9:36:b1:0d:4d:52:36:f3:15:0b:66:3a:df:
c8:f9:a8:48:e4:06:18:3c:2b:e1:6b:63:f5:1c:9c:fa:71:40:
72:09:ea:f9:54:61:be:af:cc:99:db:cb:97:b4:4a:52:72:3f:
5b:94:57:75:33:db:93:9e:70:c2:22:8e:a5:04:b7:33:50:8a:
0e:47:b2:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdbmxSY62Qr3paxYG1qXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw
Y2QzZTcwHhcNMjUwNjE0MjIwMDUyWhcNMjUwNjE1MjIwMDUyWjAzMTEwLwYDVQQD
Eyg2ODhlYzg5ODU2ZGExMmMyMjk4MTU1ZGIwMmFmYTIyOWFmZjJkOWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0izQ9FKLT25rZ37d+gmzr3JRmLZj
h+5SDgyrdXFrKZ6J51153emixzawj1GHOb0qTysIqpRR0nUaQLufM21hazqe1Gmp
McnR363PMWVYqYurFD33Q6OPMC8OFcYnKMm+EQUZ8lzjriMXj3AcXZBfhnCgfvk5
refpwdITo0zsPzhIgJcM8vbGUy1HeSLNApS5KSlxQsezuwuB0ZscTlLOEAmYmJZn
JKq9HXbq5HfqaF8RLzkMi+BNF2BiPvCRNJTvHKIa3Fpypv/O5e1ttFzORcSUe1AU
ugxmsyV4aqMrrtsl1I//J23VwrOJaxiZUw3U/3N+XYP4gYUhKKCT4rLWIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiOyJhW2hLCKYFV2wKvoimv8tnjMB8GA1UdIwQY
MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt
YzQzYWIyYTEyZDU1LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1
LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRbBkQhN
PdFKzDs/Qu81ACmt4p4V7UWxQmLwEDmEtjAmpgAUo7H2k2r1A/ly2duU69eTme4Q
NOd8YCmVi9xSVH681eUsQE3dqYxew78SBgbNMiSC91y2OHfqD3blsnfzWfBDt9WH
txN663YRnHMCArYFWxJM202ljf1T/fb6d8uXcuweMV98/XAm1+dBCGb/9Vm5PDTJ
cL8qDmosGcL7xPZfwd8KA+1ZCOKW8NaCXlr05UJZoa50FrHJNrENTVI28xULZjrf
yPmoSOQGGDwr4Wtj9Ryc+nFAcgnq+VRhvq/MmdvLl7RKUnI/W5RXdTPbk55wwiKO
pQS3M1CKDkey0w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:19 2025 by rpki-client