Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: UKENfhwEIppB+7oDgDHGhUW22fKRqqI+CGdQnPRO9Oc=
Subject key identifier: 9A:16:C4:D0:ED:CB:D1:28:EF:5F:FF:B7:0C:78:6C:84:7B:9B:A0:84
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 01977D8C3F67C6EE76134E15221803A5C270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 107A
Signing time: Tue 17 Jun 2025 11:00:32 +0000
Manifest this update: Tue 17 Jun 2025 11:00:32 +0000
Manifest next update: Wed 18 Jun 2025 11:00:32 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: tgm6KTTYv/CIYDCdbD8rJaFHhjOwiLWI79Urj7eFpSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:3f:67:c6:ee:76:13:4e:15:22:18:03:a5:c2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jun 17 11:00:32 2025 GMT
Not After : Jun 18 11:00:32 2025 GMT
Subject: CN=9a16c4d0edcbd128ef5fffb70c786c847b9ba084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:be:46:25:65:47:4e:fd:5e:8a:37:90:43:86:
13:d0:54:85:e1:78:67:19:09:ab:17:5c:a3:c6:87:
7d:0b:25:6a:f0:04:b6:0b:e9:1f:a0:50:19:d4:ea:
f1:e5:10:fc:a8:62:d6:fc:81:69:2a:be:5a:e4:ba:
a0:42:c4:14:76:25:41:5c:b6:74:72:6f:7a:00:6f:
a8:4e:3d:83:69:4b:b9:db:3b:5e:2f:b0:b8:a1:bf:
ea:57:81:13:2d:98:91:51:09:59:c4:d7:d0:48:11:
bb:26:07:09:f1:64:23:9b:31:a0:15:e7:78:f7:db:
45:19:f0:51:ac:dc:99:48:9c:4b:2e:e9:93:3c:7e:
72:13:c0:cc:e5:9a:45:b8:61:e9:82:12:49:36:80:
58:71:13:ad:6a:ce:fd:26:63:3d:19:36:5a:f4:7a:
ee:b2:82:85:1b:c4:e4:bc:d2:f2:88:5a:4d:9f:ce:
cb:b1:04:ba:e8:7c:3d:f7:fd:92:d3:78:e0:1a:48:
69:eb:0c:f1:d6:ca:53:03:4b:35:f2:93:af:3d:d6:
86:53:a3:b1:32:34:19:90:73:14:65:39:69:2c:cc:
4d:6a:13:78:65:32:f8:2a:e2:76:1b:35:48:aa:6f:
a3:ba:01:b3:68:e1:bb:22:57:2d:a5:26:ff:6b:a8:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:C4:D0:ED:CB:D1:28:EF:5F:FF:B7:0C:78:6C:84:7B:9B:A0:84
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:61:65:d4:a9:91:5e:66:ab:f9:d7:0d:56:a6:72:59:0f:a8:
a0:b4:25:2c:ed:c4:80:9b:96:bc:b9:1d:b0:9b:11:e2:4b:9c:
18:da:3c:4b:ef:fd:e3:81:34:6d:e6:75:a5:6e:cb:fa:96:08:
e5:cd:a5:80:61:3a:98:3c:ad:20:26:f6:05:5d:fd:ad:a8:9f:
7f:e7:15:8c:75:27:66:52:5c:ee:d4:a7:17:df:df:39:48:01:
41:77:14:c4:31:1f:6e:5c:44:53:6c:18:0d:9a:c3:3d:ec:2e:
f5:77:07:4b:8a:42:af:eb:7f:71:21:34:74:21:35:f9:66:5e:
5c:e6:48:72:44:c0:31:76:0a:df:90:0b:ea:1c:f8:80:4e:c7:
27:90:b4:04:b9:9c:4b:c2:00:0c:50:03:bd:d0:f2:34:9e:5a:
e7:85:84:28:6f:4a:7b:3e:af:c8:4e:5a:27:3d:3f:a5:5e:df:
76:76:50:55:7e:2a:eb:44:34:f8:49:a1:32:21:d4:1f:c5:c8:
29:dc:56:83:f2:c1:a9:f4:9d:87:9b:8d:b3:37:23:be:f8:14:
71:d8:b1:62:60:d4:5d:d8:59:66:d2:c8:6e:6a:f4:c7:aa:b1:
36:cd:dc:ef:48:cf:8b:6b:11:4d:e2:e4:b8:05:d1:f5:c7:7d:
43:ed:2c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9jD9nxu52E04VIhgDpcJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjNlYjQ0M2MwNmEzZGNjMDg4ZTJjYWEwNWNlMDljZjhk
NGU3YTYwHhcNMjUwNjE3MTEwMDMyWhcNMjUwNjE4MTEwMDMyWjAzMTEwLwYDVQQD
Eyg5YTE2YzRkMGVkY2JkMTI4ZWY1ZmZmYjcwYzc4NmM4NDdiOWJhMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk75GJWVHTv1eijeQQ4YT0FSF4Xhn
GQmrF1yjxod9CyVq8AS2C+kfoFAZ1Orx5RD8qGLW/IFpKr5a5LqgQsQUdiVBXLZ0
cm96AG+oTj2DaUu52zteL7C4ob/qV4ETLZiRUQlZxNfQSBG7JgcJ8WQjmzGgFed4
99tFGfBRrNyZSJxLLumTPH5yE8DM5ZpFuGHpghJJNoBYcROtas79JmM9GTZa9Hru
soKFG8TkvNLyiFpNn87LsQS66Hw99/2S03jgGkhp6wzx1spTA0s18pOvPdaGU6Ox
MjQZkHMUZTlpLMxNahN4ZTL4KuJ2GzVIqm+jugGzaOG7IlctpSb/a6jEKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoWxNDty9Eo71//twx4bIR7m6CEMB8GA1UdIwQY
MBaAFKiz60Q8BqPcwIjiyqBc4Jz41OemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEt
MzEzZGU0ODkyYjhkLzEvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEtMzEzZGU0ODkyYjhk
LzEvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2Fl1KmR
Xmar+dcNVqZyWQ+ooLQlLO3EgJuWvLkdsJsR4kucGNo8S+/944E0beZ1pW7L+pYI
5c2lgGE6mDytICb2BV39raiff+cVjHUnZlJc7tSnF9/fOUgBQXcUxDEfblxEU2wY
DZrDPewu9XcHS4pCr+t/cSE0dCE1+WZeXOZIckTAMXYK35AL6hz4gE7HJ5C0BLmc
S8IADFADvdDyNJ5a54WEKG9Kez6vyE5aJz0/pV7fdnZQVX4q60Q0+EmhMiHUH8XI
KdxWg/LBqfSdh5uNszcjvvgUcdixYmDUXdhZZtLIbmr0x6qxNs3c70jPi2sRTeLk
uAXR9cd9Q+0s6Q==
-----END CERTIFICATE-----
Generated at Tue Jun 17 20:49:07 2025 by rpki-client