Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: 0NjOXk5QaATVwBIcuRmeb0fBE7dWdcNcexr8jfhL8zc=
Subject key identifier: A1:31:8A:72:85:83:A4:C4:70:28:5F:D5:E6:E7:AB:F0:18:4E:37:71
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0197819FE7219E69C3D61B1832B49CF15FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: F0
Signing time: Wed 18 Jun 2025 06:00:29 +0000
Manifest this update: Wed 18 Jun 2025 06:00:29 +0000
Manifest next update: Thu 19 Jun 2025 06:00:29 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: 0jWe4BlNDqp/GvmKCq2TW1K0J8yGtscny8DTL1VLFUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:9f:e7:21:9e:69:c3:d6:1b:18:32:b4:9c:f1:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Jun 18 06:00:29 2025 GMT
Not After : Jun 19 06:00:29 2025 GMT
Subject: CN=a1318a728583a4c470285fd5e6e7abf0184e3771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:a8:f9:de:e3:19:f2:2e:91:ba:8f:36:1e:
85:34:38:07:cd:9f:6d:81:c5:0f:13:fb:f5:fd:79:
2c:29:17:a4:37:3e:3e:cf:73:39:82:62:21:1e:bc:
27:f6:ed:a8:b7:c7:21:ce:56:ff:d8:de:5d:96:e4:
76:1d:1b:a0:ee:e8:ea:85:bb:df:aa:67:87:7f:5b:
53:32:54:e6:f1:17:80:94:2b:49:33:96:64:dd:4c:
71:3f:91:46:74:50:f3:b7:c1:cf:38:9a:57:27:92:
d2:f4:7e:8e:3e:c0:e5:9c:22:c7:7f:f0:33:1a:a3:
5e:19:84:99:ee:c9:37:49:ef:1c:08:1a:90:12:0d:
75:98:44:82:ff:9f:38:a6:9d:7d:88:98:a2:ef:df:
29:2b:49:e8:b6:2f:bc:7c:64:7a:fc:8c:47:c3:f5:
82:ad:fe:e2:b9:bf:69:c7:4a:bc:11:cf:d3:54:8e:
21:72:37:6f:c6:08:c1:cd:e2:66:59:88:00:7a:e0:
60:f4:8f:4e:d4:a7:2a:94:09:51:23:a5:a3:af:fc:
c7:73:6e:38:79:2e:63:b2:e9:45:36:0f:d0:50:20:
38:97:2f:92:e4:38:0f:01:2d:1c:41:01:46:e2:ac:
5c:51:fd:09:85:33:53:22:32:9c:d8:b6:d9:d4:ea:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:8A:72:85:83:A4:C4:70:28:5F:D5:E6:E7:AB:F0:18:4E:37:71
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:db:af:24:15:66:95:0e:c8:8b:f6:34:43:9a:54:64:5f:93:
6a:9b:ea:d4:a6:24:9a:c7:bd:b5:7d:30:e0:c9:4c:3f:7f:df:
95:62:a1:0c:8f:bb:e1:36:0b:7f:22:68:61:67:b6:c7:eb:55:
d2:d0:60:ce:78:a2:d1:ab:d3:a8:59:1d:1f:59:21:72:94:b3:
59:5c:d9:3e:1d:79:f0:0a:80:fb:ba:f1:dc:1e:3c:c0:73:ac:
e9:c3:82:fe:39:34:4b:d1:27:a5:da:2f:fa:ca:1d:75:ab:b3:
59:a4:ce:50:d1:6b:2c:14:d5:9a:0e:6a:38:28:90:2b:f9:e9:
bc:a2:f5:73:bc:45:46:d3:a8:c7:ad:30:32:f0:83:1e:9b:84:
85:50:78:45:14:d5:8f:b9:9c:87:2c:3f:f4:67:15:32:e1:60:
0d:a2:ca:d6:d3:1d:ea:2a:25:7b:36:be:e0:27:d3:c1:bc:77:
8b:7e:c3:cd:bd:8a:b9:67:1a:cd:1d:21:52:9a:d3:71:2b:fc:
dc:6e:97:a4:ee:f8:f3:e1:c1:d9:48:e4:b2:68:84:50:3c:0b:
a5:0c:b2:cd:c3:04:b4:0e:e0:a2:7c:9a:21:c0:9c:74:3b:17:
24:bf:64:4e:0d:7e:99:1a:1a:17:37:4c:be:ca:36:21:0c:55:
91:2b:c8:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeBn+chnmnD1hsYMrSc8V/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTAzMjAxY2RhNmE4YWRiZGU0ZmU4MDQ2ZWM2NWY5NmFj
NmE5NmMwHhcNMjUwNjE4MDYwMDI5WhcNMjUwNjE5MDYwMDI5WjAzMTEwLwYDVQQD
EyhhMTMxOGE3Mjg1ODNhNGM0NzAyODVmZDVlNmU3YWJmMDE4NGUzNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW+o+d7jGfIukbqPNh6FNDgHzZ9t
gcUPE/v1/XksKRekNz4+z3M5gmIhHrwn9u2ot8chzlb/2N5dluR2HRug7ujqhbvf
qmeHf1tTMlTm8ReAlCtJM5Zk3UxxP5FGdFDzt8HPOJpXJ5LS9H6OPsDlnCLHf/Az
GqNeGYSZ7sk3Se8cCBqQEg11mESC/584pp19iJii798pK0noti+8fGR6/IxHw/WC
rf7iub9px0q8Ec/TVI4hcjdvxgjBzeJmWYgAeuBg9I9O1KcqlAlRI6Wjr/zHc244
eS5jsulFNg/QUCA4ly+S5DgPAS0cQQFG4qxcUf0JhTNTIjKc2LbZ1Ore7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKExinKFg6TEcChf1ebnq/AYTjdxMB8GA1UdIwQY
MBaAFK6gMgHNpqitveT+gEbsZflqxqlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQt
ZWE0MTJmMjFlMjMwLzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQtZWE0MTJmMjFlMjMw
LzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9uvJBVm
lQ7Ii/Y0Q5pUZF+Tapvq1KYkmse9tX0w4MlMP3/flWKhDI+74TYLfyJoYWe2x+tV
0tBgznii0avTqFkdH1khcpSzWVzZPh158AqA+7rx3B48wHOs6cOC/jk0S9Enpdov
+soddauzWaTOUNFrLBTVmg5qOCiQK/npvKL1c7xFRtOox60wMvCDHpuEhVB4RRTV
j7mchyw/9GcVMuFgDaLK1tMd6ioleza+4CfTwbx3i37Dzb2KuWcazR0hUprTcSv8
3G6XpO748+HB2UjksmiEUDwLpQyyzcMEtA7gonyaIcCcdDsXJL9kTg1+mRoaFzdM
vso2IQxVkSvIZw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 10:47:54 2025 by rpki-client