Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: yquoomsIdWuVMXuk0YeVjQHsPVnR18atxVvbZa8zTPU=
Subject key identifier: 81:78:DD:44:B7:B7:8E:6E:7F:77:D5:4E:4A:D8:32:99:0E:08:26:93
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 01976D06BF7238E5959AAABEA87281ADCFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 06D2
Signing time: Sat 14 Jun 2025 06:00:48 +0000
Manifest this update: Sat 14 Jun 2025 06:00:48 +0000
Manifest next update: Sun 15 Jun 2025 06:00:48 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: 1qx9YX759VA1xWV9It/IA/bVcjkHfQiX5ZtO/+gGWLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:bf:72:38:e5:95:9a:aa:be:a8:72:81:ad:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Jun 14 06:00:48 2025 GMT
Not After : Jun 15 06:00:48 2025 GMT
Subject: CN=8178dd44b7b78e6e7f77d54e4ad832990e082693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:fd:4f:21:90:3a:fc:71:10:19:d1:6b:9f:
b1:4e:ee:03:1e:17:2c:fd:a1:06:72:8b:e7:a4:23:
70:91:44:d3:d4:27:dd:51:2d:59:6b:2a:c0:b4:9b:
87:89:ba:7a:6e:24:69:07:e0:1a:88:15:46:e4:ce:
33:ae:24:fb:f5:39:cd:4a:9c:14:3e:95:77:4b:1d:
15:d1:7b:33:a9:ea:c8:a4:5a:ab:6c:ff:71:3e:b4:
e9:f9:29:7a:65:c4:36:e4:e0:2f:8c:86:99:c7:b0:
72:60:71:dc:89:5f:4e:73:51:80:00:77:8f:64:e4:
15:7f:8d:09:36:f0:e1:ba:d5:1b:44:6b:e9:ae:43:
bd:59:f5:6e:61:a5:68:4b:ab:a8:fc:12:98:3f:81:
87:02:1f:9c:f0:65:2b:6a:79:3f:15:b0:25:16:95:
ec:ba:af:a5:38:29:5d:0b:22:9b:12:3d:10:41:89:
82:f5:f9:14:74:9e:a3:27:7e:ff:5f:e1:fc:e4:9b:
33:04:ef:9b:1e:17:04:2e:cc:a2:18:bc:6d:df:cc:
eb:57:59:38:47:32:1d:3c:df:92:32:37:f2:7d:64:
aa:69:24:0a:26:03:06:5a:dd:3e:68:6b:0c:5c:af:
9e:e7:8e:25:63:c3:06:a7:49:d9:7f:1b:2f:23:0a:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:78:DD:44:B7:B7:8E:6E:7F:77:D5:4E:4A:D8:32:99:0E:08:26:93
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:c6:f4:49:a2:b4:b8:2c:0f:52:b3:3a:5a:cb:2f:ae:f1:
ae:d9:6d:49:58:20:94:8b:1b:2b:a4:b6:ca:a0:7f:2a:35:27:
78:0f:70:ec:70:d1:eb:c6:4b:ad:ab:e4:bc:9d:e7:3e:3e:32:
72:04:c9:d8:59:6f:de:e3:6c:bf:64:ec:8d:25:36:08:b3:d0:
d2:91:ce:5b:dc:6e:48:05:57:74:80:d4:79:2a:01:8e:c1:3b:
bd:e3:fa:19:cb:29:c0:7c:8a:73:70:34:38:1b:43:b6:ee:f3:
17:2f:23:5c:cb:3c:13:4a:31:0e:63:f5:5e:b5:23:69:48:ae:
2d:9b:26:e4:2e:cc:e0:4b:8f:7b:50:69:37:08:54:f9:f8:40:
71:ff:e7:0d:d1:c6:5e:9e:d1:c8:f4:43:f7:76:a9:ab:3a:d8:
80:5e:af:0e:90:f9:60:7f:f6:01:eb:9b:16:22:03:f1:32:87:
f1:96:b1:2e:b2:f9:6e:ce:c4:41:54:05:e5:0e:1c:cd:cc:15:
3b:63:cd:75:0e:22:56:34:da:dc:31:5e:2e:e6:32:4c:ad:c2:
2d:b5:70:a5:ad:32:cd:5f:8d:20:8e:25:e9:8f:7e:b2:df:86:
c1:09:2d:ac:66:33:0b:4a:2b:3e:f0:4b:9c:07:84:40:8b:f8:
e6:5f:72:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBr9yOOWVmqq+qHKBrc/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUzNGJhM2NiNDI0Y2Y1YzVlM2JhMjU0YmEyMzI1MDgw
NjU4YjAwHhcNMjUwNjE0MDYwMDQ4WhcNMjUwNjE1MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg4MTc4ZGQ0NGI3Yjc4ZTZlN2Y3N2Q1NGU0YWQ4MzI5OTBlMDgyNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCP9TyGQOvxxEBnRa5+xTu4DHhcs
/aEGcovnpCNwkUTT1CfdUS1ZayrAtJuHibp6biRpB+AaiBVG5M4zriT79TnNSpwU
PpV3Sx0V0XszqerIpFqrbP9xPrTp+Sl6ZcQ25OAvjIaZx7ByYHHciV9Oc1GAAHeP
ZOQVf40JNvDhutUbRGvprkO9WfVuYaVoS6uo/BKYP4GHAh+c8GUrank/FbAlFpXs
uq+lOCldCyKbEj0QQYmC9fkUdJ6jJ37/X+H85JszBO+bHhcELsyiGLxt38zrV1k4
RzIdPN+SMjfyfWSqaSQKJgMGWt0+aGsMXK+e544lY8MGp0nZfxsvIwrOiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIF43US3t45uf3fVTkrYMpkOCCaTMB8GA1UdIwQY
MBaAFKjVNLo8tCTPXF47olS6IyUIBliwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83MzcyNGEtMWQwYS00OWMzLWFjNjct
ZTc3YWVkNmY2ZTNhLzEvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83MzcyNGEtMWQwYS00OWMzLWFjNjctZTc3YWVkNmY2ZTNh
LzEvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANfG9Emi
tLgsD1KzOlrLL67xrtltSVgglIsbK6S2yqB/KjUneA9w7HDR68ZLravkvJ3nPj4y
cgTJ2Flv3uNsv2TsjSU2CLPQ0pHOW9xuSAVXdIDUeSoBjsE7veP6GcspwHyKc3A0
OBtDtu7zFy8jXMs8E0oxDmP1XrUjaUiuLZsm5C7M4EuPe1BpNwhU+fhAcf/nDdHG
Xp7RyPRD93apqzrYgF6vDpD5YH/2AeubFiID8TKH8ZaxLrL5bs7EQVQF5Q4czcwV
O2PNdQ4iVjTa3DFeLuYyTK3CLbVwpa0yzV+NII4l6Y9+st+GwQktrGYzC0orPvBL
nAeEQIv45l9yeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:41 2025 by rpki-client