Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: rJZLQl7m5ji0HT+nFbw6DIQ5uNT+bYxx4FxHPrMjgN4=
Subject key identifier: 03:28:89:99:B0:92:5D:F0:23:AE:51:FF:C8:5D:08:DF:9A:EE:49:38
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 0197684DE1F0685433C79744787FF6C7FAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 125F
Signing time: Fri 13 Jun 2025 08:00:23 +0000
Manifest this update: Fri 13 Jun 2025 08:00:23 +0000
Manifest next update: Sat 14 Jun 2025 08:00:23 +0000
Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=)
2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: SCIHVK4BpmqniG9oc8YIcvJUxz7Zhn64YJ+5DapNisA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:e1:f0:68:54:33:c7:97:44:78:7f:f6:c7:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Jun 13 08:00:23 2025 GMT
Not After : Jun 14 08:00:23 2025 GMT
Subject: CN=03288999b0925df023ae51ffc85d08df9aee4938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:14:e6:be:76:e7:15:00:73:30:32:9c:a5:
b9:04:93:d1:79:05:3e:e1:f9:4d:f2:f2:e4:06:da:
43:95:04:07:3a:e2:ed:f7:41:42:27:3d:55:7c:a0:
7a:15:1f:c7:37:6d:61:96:06:ad:1c:ef:0a:6a:42:
48:5d:36:39:bb:c3:b2:a8:a2:bf:e1:a4:2a:fa:57:
65:50:d1:ee:75:94:c6:2e:53:95:f6:c0:1e:75:d9:
90:c5:42:8e:8d:49:5a:4e:52:41:e2:0b:60:90:ab:
bb:27:10:93:17:10:f9:1e:c9:6b:1a:86:b2:84:48:
1e:db:4a:dd:70:96:1b:47:a3:37:54:e5:3c:0f:07:
84:86:df:f4:8b:b9:96:b9:c4:da:52:2e:28:de:e6:
e4:21:36:fe:92:6c:71:b0:13:ac:fb:66:1c:91:41:
d7:41:6b:62:03:b9:67:d8:ea:6c:0c:d1:89:f0:a5:
df:0f:19:df:88:2c:4c:aa:4c:fb:e6:ac:b3:27:35:
55:cf:2f:5e:6b:a1:7c:2a:83:69:ac:5e:f0:13:cb:
78:b6:12:1f:9a:8b:ae:30:8e:c2:2c:cc:ac:a8:ed:
0b:52:7a:90:6c:16:01:38:8d:76:92:af:44:83:89:
6e:f1:9a:fa:80:16:57:84:8e:f9:fe:4e:89:9c:51:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:28:89:99:B0:92:5D:F0:23:AE:51:FF:C8:5D:08:DF:9A:EE:49:38
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:2f:f6:57:86:84:b4:37:97:4a:62:8c:75:a7:fa:be:23:
59:99:a2:1a:0b:8a:42:e7:0e:06:d8:0a:ac:e9:59:64:fa:c5:
74:07:c3:7b:e3:44:fd:fe:22:a0:59:96:71:2c:e2:57:1c:85:
49:14:02:7c:29:59:13:75:77:78:d9:ef:ab:68:2d:4b:bf:27:
f9:07:fa:78:94:16:29:46:26:a9:be:1e:7e:08:86:96:12:20:
86:92:38:0a:99:1c:73:ca:97:a5:89:35:85:eb:24:65:55:02:
2b:15:c3:23:d9:e7:09:97:7b:17:71:62:6e:1c:31:1b:30:34:
14:2e:75:0e:71:8b:ce:b9:35:58:82:44:ed:5f:5c:85:ac:db:
5f:4e:88:eb:63:49:87:1d:dd:47:0b:3e:6d:6e:01:d7:8d:b0:
bc:67:6a:4e:1b:61:c8:75:e9:dc:54:b4:84:74:fa:4a:58:8e:
ec:d0:c8:d4:8e:64:b7:04:c2:c3:e6:41:91:12:e6:a1:da:2d:
19:f8:39:20:78:07:d1:a4:ec:8b:b2:c7:8b:c9:57:5f:3f:9f:
54:9a:35:20:99:b7:9d:26:e3:68:f7:c3:3f:fb:bb:74:0f:b3:
c0:06:10:07:65:26:a8:b3:32:f1:8f:00:89:fd:fe:81:74:01:
cf:34:8a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTeHwaFQzx5dEeH/2x/r6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzcyYjk5OTkzYjA2MDhkMjc4MmFmNDVhMjJlYjkzYzdm
ZGE2M2IwHhcNMjUwNjEzMDgwMDIzWhcNMjUwNjE0MDgwMDIzWjAzMTEwLwYDVQQD
EygwMzI4ODk5OWIwOTI1ZGYwMjNhZTUxZmZjODVkMDhkZjlhZWU0OTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweIU5r525xUAczAynKW5BJPReQU+
4flN8vLkBtpDlQQHOuLt90FCJz1VfKB6FR/HN21hlgatHO8KakJIXTY5u8OyqKK/
4aQq+ldlUNHudZTGLlOV9sAeddmQxUKOjUlaTlJB4gtgkKu7JxCTFxD5HslrGoay
hEge20rdcJYbR6M3VOU8DweEht/0i7mWucTaUi4o3ubkITb+kmxxsBOs+2YckUHX
QWtiA7ln2OpsDNGJ8KXfDxnfiCxMqkz75qyzJzVVzy9ea6F8KoNprF7wE8t4thIf
mouuMI7CLMysqO0LUnqQbBYBOI12kq9Eg4lu8Zr6gBZXhI75/k6JnFHE4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMoiZmwkl3wI65R/8hdCN+a7kk4MB8GA1UdIwQY
MBaAFEN3K5mZOwYI0ngq9Foi65PH/aY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMt
YTE2ZDk3YWZhNjQzLzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMtYTE2ZDk3YWZhNjQz
LzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhEv9leG
hLQ3l0pijHWn+r4jWZmiGguKQucOBtgKrOlZZPrFdAfDe+NE/f4ioFmWcSziVxyF
SRQCfClZE3V3eNnvq2gtS78n+Qf6eJQWKUYmqb4efgiGlhIghpI4Cpkcc8qXpYk1
heskZVUCKxXDI9nnCZd7F3FibhwxGzA0FC51DnGLzrk1WIJE7V9chazbX06I62NJ
hx3dRws+bW4B142wvGdqThthyHXp3FS0hHT6SliO7NDI1I5ktwTCw+ZBkRLmodot
Gfg5IHgH0aTsi7LHi8lXXz+fVJo1IJm3nSbjaPfDP/u7dA+zwAYQB2UmqLMy8Y8A
if3+gXQBzzSKTw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:51 2025 by rpki-client