Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: YYBCMZbgVPzEWLzu5/yUCL4isSyQZw5G/frr8NFRDc4=
Subject key identifier: 7A:22:5A:E2:C7:D1:73:28:67:EA:AE:97:2E:D4:0B:2D:5E:EF:F3:BA
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 01976EF4EF165161A775C02E14CA2976C9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 15:00:35 +0000
Manifest this update: Sat 14 Jun 2025 15:00:35 +0000
Manifest next update: Sun 15 Jun 2025 15:00:35 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: 38qdvqs0u2VP/tOo4EtIkvuTGJvuK+XyZgqfQHaIO14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:ef:16:51:61:a7:75:c0:2e:14:ca:29:76:c9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Jun 14 15:00:35 2025 GMT
Not After : Jun 15 15:00:35 2025 GMT
Subject: CN=7a225ae2c7d1732867eaae972ed40b2d5eeff3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:21:b8:7d:ba:f8:5e:9d:db:ae:d5:98:98:
9b:c9:df:42:7c:f8:e0:98:89:22:fa:63:e9:09:75:
5f:7c:62:96:9a:5d:65:64:17:66:ca:06:47:f4:bd:
d0:be:07:3a:43:91:cc:1a:fc:a1:96:9a:5f:7d:43:
d4:5d:bc:db:97:f9:d1:a5:99:89:23:a6:5e:45:09:
61:94:a4:5f:b2:e2:17:31:4f:f1:8f:61:20:f3:4c:
6d:c1:73:a3:0f:a1:6b:f3:08:96:6d:3e:67:6b:8b:
8a:9d:33:01:2d:3b:b6:5b:01:d8:84:c0:36:50:8a:
5a:26:f7:1f:4d:0e:95:05:3a:41:8a:ec:9e:7c:c0:
3d:04:e4:1d:ce:49:e5:f5:0b:2a:27:f4:76:f8:06:
00:9d:df:2d:f7:ea:5d:58:64:f7:3d:40:e1:45:4f:
65:58:c2:c6:f8:7c:67:54:c2:09:1c:c0:fb:c9:8f:
68:18:93:bc:3c:fb:1d:2d:cc:a1:f6:53:09:8f:92:
d4:ea:b7:fe:f7:40:a7:40:74:74:e4:d6:51:ee:a3:
ba:da:08:1c:2c:83:6e:f4:73:62:f1:53:37:2d:f1:
85:e0:11:b4:eb:a2:b0:3d:a7:98:d3:29:45:3e:39:
6c:ea:3c:7c:bc:d6:6a:e4:e8:56:f8:8d:79:9d:18:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:22:5A:E2:C7:D1:73:28:67:EA:AE:97:2E:D4:0B:2D:5E:EF:F3:BA
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8a:21:d4:45:15:82:4e:af:a5:57:4e:f5:25:04:32:f8:c7:
6e:1e:ce:7a:09:25:3e:1c:76:98:84:b9:22:87:a0:24:8b:35:
f6:a0:95:ba:0d:bb:4d:fe:4a:2d:15:cf:d6:78:9c:e3:5d:d9:
db:0a:6b:58:a5:7d:a9:cf:e9:34:7d:2a:3a:6b:fc:e6:91:11:
17:19:b5:95:ea:31:a9:7d:aa:0a:6c:03:4a:e4:44:e5:4b:19:
5f:73:3b:65:ef:4f:b9:8a:bc:b5:b1:f8:84:8c:73:56:76:7f:
62:2e:74:07:98:83:5d:66:40:1e:fe:59:83:5f:82:23:34:de:
eb:29:0e:4d:8e:bc:13:1e:7f:ba:ad:50:53:18:b8:50:de:98:
53:73:85:0d:f6:86:d3:fe:05:04:fe:f2:b6:2f:c7:01:12:c7:
68:9c:34:d0:5c:91:64:fd:6f:66:e2:ee:0e:5e:d7:86:8e:0b:
0c:26:f3:00:4a:44:51:dc:f8:f0:87:b0:2a:ef:61:44:03:7b:
2f:d1:99:94:39:84:26:7d:f4:d6:18:bc:41:fd:c2:fb:c6:68:
f5:eb:41:da:15:0a:fb:57:08:a6:52:c9:b1:8f:bc:7f:98:e5:
14:84:a8:ab:aa:73:59:ba:0e:3a:7f:32:ff:b9:a3:f3:12:44:
6e:a5:ae:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9O8WUWGndcAuFMopdsnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy
Y2IzOGEwHhcNMjUwNjE0MTUwMDM1WhcNMjUwNjE1MTUwMDM1WjAzMTEwLwYDVQQD
Eyg3YTIyNWFlMmM3ZDE3MzI4NjdlYWFlOTcyZWQ0MGIyZDVlZWZmM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypchuH26+F6d267VmJibyd9CfPjg
mIki+mPpCXVffGKWml1lZBdmygZH9L3Qvgc6Q5HMGvyhlppffUPUXbzbl/nRpZmJ
I6ZeRQlhlKRfsuIXMU/xj2Eg80xtwXOjD6Fr8wiWbT5na4uKnTMBLTu2WwHYhMA2
UIpaJvcfTQ6VBTpBiuyefMA9BOQdzknl9QsqJ/R2+AYAnd8t9+pdWGT3PUDhRU9l
WMLG+HxnVMIJHMD7yY9oGJO8PPsdLcyh9lMJj5LU6rf+90CnQHR05NZR7qO62ggc
LINu9HNi8VM3LfGF4BG066KwPaeY0ylFPjls6jx8vNZq5OhW+I15nRgLrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoiWuLH0XMoZ+quly7UCy1e7/O6MB8GA1UdIwQY
MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt
OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz
LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4oh1EUV
gk6vpVdO9SUEMvjHbh7OegklPhx2mIS5IoegJIs19qCVug27Tf5KLRXP1nic413Z
2wprWKV9qc/pNH0qOmv85pERFxm1leoxqX2qCmwDSuRE5UsZX3M7Ze9PuYq8tbH4
hIxzVnZ/Yi50B5iDXWZAHv5Zg1+CIzTe6ykOTY68Ex5/uq1QUxi4UN6YU3OFDfaG
0/4FBP7yti/HARLHaJw00FyRZP1vZuLuDl7Xho4LDCbzAEpEUdz48IewKu9hRAN7
L9GZlDmEJn301hi8Qf3C+8Zo9etB2hUK+1cIplLJsY+8f5jlFISoq6pzWboOOn8y
/7mj8xJEbqWukQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:23 2025 by rpki-client