Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: iZ1tHXouDnNYbG2EGJyh1+5l5T/yGR10r1Feh8c0DWc=
Subject key identifier: 27:6D:C2:70:DF:87:DA:BD:D0:DF:E7:DE:1C:CD:09:75:2E:9A:51:39
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 0197778A405DA8197A6C561F696E010BB7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 1489
Signing time: Mon 16 Jun 2025 07:00:38 +0000
Manifest this update: Mon 16 Jun 2025 07:00:38 +0000
Manifest next update: Tue 17 Jun 2025 07:00:38 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: RDZN0VM7DCXBpsaMBou1GGrD1QPEWokw100tCxvUuHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:40:5d:a8:19:7a:6c:56:1f:69:6e:01:0b:b7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Jun 16 07:00:38 2025 GMT
Not After : Jun 17 07:00:38 2025 GMT
Subject: CN=276dc270df87dabdd0dfe7de1ccd09752e9a5139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:aa:ac:6c:17:a7:07:f3:9d:8d:f5:cb:12:
36:20:59:32:d8:a7:52:2d:78:3d:5c:c9:75:8b:c5:
3e:4b:2b:a0:14:6c:23:5a:f7:2d:82:2b:f5:b5:6d:
e2:1c:06:d4:ea:95:e0:be:f9:51:63:e6:ed:15:64:
23:b6:25:a9:bb:18:d0:c4:6f:8b:3e:cb:7e:7a:d7:
71:de:f6:89:05:d1:6f:fa:af:24:ca:47:a1:45:0a:
33:ca:fa:1a:2f:8a:2f:09:c8:e4:c6:6f:07:cb:0b:
c5:60:03:13:a5:b4:cf:6e:68:d4:60:7a:74:0a:90:
96:b7:84:b0:2d:4e:d5:67:97:a7:b6:e7:1d:7c:f1:
68:fe:eb:4a:4b:6f:d2:c8:64:dc:75:57:4a:f6:1b:
8b:b4:4a:a3:e5:0c:18:21:33:b7:28:c0:e3:3f:3f:
cd:8f:1c:9f:ce:ae:fc:7f:ee:57:70:b9:4e:52:3b:
9c:e8:2e:b5:27:7c:9b:b2:9c:75:41:6a:eb:4b:56:
91:da:6e:81:cd:06:71:1e:32:55:23:39:11:32:55:
2e:13:d6:8a:f5:a6:e3:51:8f:f0:89:ae:3b:a5:28:
58:7c:1d:f1:45:4f:e1:c2:10:02:05:21:6a:d6:8b:
49:ed:7a:76:2f:f8:5d:5a:c4:d2:89:6a:03:ba:43:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6D:C2:70:DF:87:DA:BD:D0:DF:E7:DE:1C:CD:09:75:2E:9A:51:39
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ee:91:13:09:0d:52:d5:78:cc:00:a3:5e:a8:b7:69:ce:9e:
b2:1e:97:6d:fc:88:8d:91:c8:bc:bf:b0:47:a9:8f:d1:27:67:
e9:fb:e4:56:e4:fc:dc:5f:b9:49:3a:c8:27:a0:45:ea:26:bd:
f7:ca:66:72:df:57:e3:b8:8d:70:20:7a:60:1d:65:b5:f5:7d:
11:6c:99:a7:7c:a8:8b:f8:7f:f2:ba:59:0b:67:e2:3e:ad:1b:
6d:85:83:a4:4d:f5:7f:cb:16:41:1d:ac:d1:26:35:04:31:c8:
49:1e:76:de:2a:01:4c:29:dd:d0:01:74:a3:5f:41:81:63:a1:
7d:1a:72:06:f4:ee:91:fd:7f:f8:ed:c8:ee:3d:93:d4:8e:f3:
3b:b1:1c:2c:f0:1f:19:71:4c:c4:23:ba:fc:51:d9:b2:94:50:
83:c8:ac:cc:e0:bf:35:7e:61:d1:5c:0c:9a:97:25:16:de:41:
8f:37:50:e7:21:0d:11:1d:69:a4:ec:7b:ee:38:ca:f4:21:ec:
ed:dc:40:d9:69:5e:4a:6c:00:e0:b7:52:6c:e8:a8:1a:5e:b4:
5a:90:9c:d2:b8:c0:d3:87:09:7c:15:a3:80:f0:04:da:5e:40:
b2:53:6e:f0:48:66:ca:16:ec:4c:49:fa:19:93:4a:3e:8a:b4:
f7:2a:00:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3ikBdqBl6bFYfaW4BC7fdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjAyMzE4ZjJjZTk3MmU3MjQwOGNjY2M3ZDMyMGFmMzBj
ZDJiMGQwHhcNMjUwNjE2MDcwMDM4WhcNMjUwNjE3MDcwMDM4WjAzMTEwLwYDVQQD
EygyNzZkYzI3MGRmODdkYWJkZDBkZmU3ZGUxY2NkMDk3NTJlOWE1MTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslmqrGwXpwfznY31yxI2IFky2KdS
LXg9XMl1i8U+SyugFGwjWvctgiv1tW3iHAbU6pXgvvlRY+btFWQjtiWpuxjQxG+L
Pst+etdx3vaJBdFv+q8kykehRQozyvoaL4ovCcjkxm8HywvFYAMTpbTPbmjUYHp0
CpCWt4SwLU7VZ5entucdfPFo/utKS2/SyGTcdVdK9huLtEqj5QwYITO3KMDjPz/N
jxyfzq78f+5XcLlOUjuc6C61J3ybspx1QWrrS1aR2m6BzQZxHjJVIzkRMlUuE9aK
9abjUY/wia47pShYfB3xRU/hwhACBSFq1otJ7Xp2L/hdWsTSiWoDukPCzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdtwnDfh9q90N/n3hzNCXUumlE5MB8GA1UdIwQY
MBaAFKjwIxjyzpcuckCMzMfTIK8wzSsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgt
NzU0NGRmMzAwNGIyLzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNDRhMDMtNDQ3Mi00MzE1LTg3NTgtNzU0NGRmMzAwNGIy
LzEvcVBBakdQTE9seTV5UUl6TXg5TWdyekROS3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde6REwkN
UtV4zACjXqi3ac6esh6XbfyIjZHIvL+wR6mP0Sdn6fvkVuT83F+5STrIJ6BF6ia9
98pmct9X47iNcCB6YB1ltfV9EWyZp3yoi/h/8rpZC2fiPq0bbYWDpE31f8sWQR2s
0SY1BDHISR523ioBTCnd0AF0o19BgWOhfRpyBvTukf1/+O3I7j2T1I7zO7EcLPAf
GXFMxCO6/FHZspRQg8iszOC/NX5h0VwMmpclFt5BjzdQ5yENER1ppOx77jjK9CHs
7dxA2WleSmwA4LdSbOioGl60WpCc0rjA04cJfBWjgPAE2l5AslNu8EhmyhbsTEn6
GZNKPoq09yoAGA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:46:46 2025 by rpki-client