Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File: QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier: Kv6LzgrpPlT0S623jYeGJvtRdzNSvLFC+9tFWGwhiP4=
Subject key identifier: B2:65:99:9A:6C:45:42:D1:72:E0:3E:09:F7:0C:A1:FC:08:E8:EF:7C
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial: 019773E4599CBFE2D11DD1242DC14EBB3C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number: 10BB
Signing time: Sun 15 Jun 2025 14:00:34 +0000
Manifest this update: Sun 15 Jun 2025 14:00:34 +0000
Manifest next update: Mon 16 Jun 2025 14:00:34 +0000
Files and hashes: 1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: pA1mSRnaBFKumMoBV7wV1BLIzge01nWu4pxoVAdd+54=)
4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:59:9c:bf:e2:d1:1d:d1:24:2d:c1:4e:bb:3c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
Validity
Not Before: Jun 15 14:00:34 2025 GMT
Not After : Jun 16 14:00:34 2025 GMT
Subject: CN=b265999a6c4542d172e03e09f70ca1fc08e8ef7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:e9:5b:d7:ab:37:89:f1:70:18:f7:a2:14:
fd:b1:48:10:cf:bd:8c:b6:b7:70:2f:3f:26:8d:9a:
25:fe:32:cb:c4:d7:0d:76:6f:87:10:d8:37:a9:46:
fb:7a:c0:a1:6b:ee:2a:1f:77:d5:80:b2:b4:35:7b:
52:ab:4d:fd:25:b7:2d:8b:87:18:e6:db:a5:a5:31:
b4:54:6f:29:67:3c:29:f0:6b:2d:df:6a:24:d1:80:
38:81:88:b4:5d:63:38:b8:0e:7a:59:06:fd:cd:0e:
44:43:d9:c8:3f:39:c0:02:af:cf:28:c6:dc:5e:4b:
b7:e2:e2:70:29:fd:35:10:e6:ae:b7:bc:f9:d4:1f:
0a:ea:b8:6e:1a:bf:23:f4:80:4a:1e:d1:23:08:2b:
fa:0b:a2:03:5f:c8:30:1e:76:22:1d:d4:6a:17:06:
2e:6b:02:51:35:69:77:f1:ae:83:4c:99:b0:dd:84:
91:81:ac:e6:12:f0:a7:5b:a8:07:d2:a2:0a:d4:23:
cb:79:f5:7d:e2:d6:08:a1:58:f9:51:e0:35:ad:86:
b8:1f:6f:cf:9e:0e:67:f3:cc:7b:2f:b3:ef:63:79:
9c:dc:ea:84:6f:91:9c:8b:aa:30:2e:72:e2:6d:87:
e2:de:ae:b0:e1:c8:10:8f:79:d1:0b:91:a8:49:d4:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:65:99:9A:6C:45:42:D1:72:E0:3E:09:F7:0C:A1:FC:08:E8:EF:7C
X509v3 Authority Key Identifier:
keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:df:f5:b2:4a:23:83:44:52:e7:d5:dc:3a:f7:c1:04:97:81:
eb:de:ac:a2:f1:d0:20:bd:6e:1b:4f:6d:d3:cb:13:d5:2e:42:
82:41:28:48:9d:ea:0f:4d:27:f6:bb:ed:28:2c:bf:79:77:47:
37:9e:04:98:71:04:b2:3b:82:b4:11:ed:9d:86:45:5b:b1:74:
30:14:09:b8:0f:22:d9:7e:ee:49:09:06:81:35:a9:ff:a5:72:
95:e3:66:13:97:e3:e8:31:a5:1c:fc:85:26:0c:26:90:a7:6d:
ad:f5:d4:29:13:67:6e:57:13:85:1a:41:5c:f3:42:59:14:ab:
c4:1f:90:5f:56:51:b6:37:6f:2c:5f:e8:67:7c:0e:32:59:c6:
86:4a:11:d6:99:22:8a:f4:2e:05:72:f6:00:fa:f2:f4:cb:76:
c0:e8:15:1b:49:06:84:36:b0:6a:77:65:87:30:f8:62:77:ef:
2a:97:6c:ca:f4:c7:e9:44:09:92:2b:a2:cb:cc:90:93:98:23:
02:89:5f:db:0b:c3:4d:3b:ae:40:89:1f:76:98:68:99:36:6a:
f1:8f:74:d4:57:57:61:97:af:85:b2:78:ce:a4:e8:41:1f:fc:
3b:4b:ec:3c:97:cf:05:6a:57:5b:a8:67:82:7b:c4:8d:98:42:
37:e7:ba:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdz5Fmcv+LRHdEkLcFOuzxJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjc1ZDMyNzc2MWI5MGMwODk5NjM4ZjQzMGViNjE0Yzg3
YzMxMDYwHhcNMjUwNjE1MTQwMDM0WhcNMjUwNjE2MTQwMDM0WjAzMTEwLwYDVQQD
EyhiMjY1OTk5YTZjNDU0MmQxNzJlMDNlMDlmNzBjYTFmYzA4ZThlZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw67pW9erN4nxcBj3ohT9sUgQz72M
trdwLz8mjZol/jLLxNcNdm+HENg3qUb7esCha+4qH3fVgLK0NXtSq039Jbcti4cY
5tulpTG0VG8pZzwp8Gst32ok0YA4gYi0XWM4uA56WQb9zQ5EQ9nIPznAAq/PKMbc
Xku34uJwKf01EOaut7z51B8K6rhuGr8j9IBKHtEjCCv6C6IDX8gwHnYiHdRqFwYu
awJRNWl38a6DTJmw3YSRgazmEvCnW6gH0qIK1CPLefV94tYIoVj5UeA1rYa4H2/P
ng5n88x7L7PvY3mc3OqEb5Gci6owLnLibYfi3q6w4cgQj3nRC5GoSdSjpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJlmZpsRULRcuA+CfcMofwI6O98MB8GA1UdIwQY
MBaAFED3XTJ3YbkMCJljj0MOthTIfDEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAt
MjlhYzQ1ZTJlY2ZmLzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZTVmNGMtMmVhZS00OGEwLTg1NTAtMjlhYzQ1ZTJlY2Zm
LzEvUVBkZE1uZGh1UXdJbVdPUFF3NjJGTWg4TVFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9/1skoj
g0RS59XcOvfBBJeB696sovHQIL1uG09t08sT1S5CgkEoSJ3qD00n9rvtKCy/eXdH
N54EmHEEsjuCtBHtnYZFW7F0MBQJuA8i2X7uSQkGgTWp/6VyleNmE5fj6DGlHPyF
JgwmkKdtrfXUKRNnblcThRpBXPNCWRSrxB+QX1ZRtjdvLF/oZ3wOMlnGhkoR1pki
ivQuBXL2APry9Mt2wOgVG0kGhDawandlhzD4YnfvKpdsyvTH6UQJkiuiy8yQk5gj
Aolf2wvDTTuuQIkfdphomTZq8Y901FdXYZevhbJ4zqToQR/8O0vsPJfPBWpXW6hn
gnvEjZhCN+e6Pg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:57:25 2025 by rpki-client