Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: TrnMxEpqrxSQTjvugNajxtyTmTyyzhDqfWxHvqFqXQk=
Subject key identifier: E3:78:C7:0C:20:E3:B3:D8:0B:63:0B:A1:33:7D:35:3D:B9:75:CE:26
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 019779421B86412D066B0A0EAE4A9A9CECE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0DB4
Signing time: Mon 16 Jun 2025 15:01:04 +0000
Manifest this update: Mon 16 Jun 2025 15:01:04 +0000
Manifest next update: Tue 17 Jun 2025 15:01:04 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: LbSYd8P2mzMQ5ykvjZOx1NPWxOYn/UpGxVmZDiaYFt0=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:1b:86:41:2d:06:6b:0a:0e:ae:4a:9a:9c:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Jun 16 15:01:04 2025 GMT
Not After : Jun 17 15:01:04 2025 GMT
Subject: CN=e378c70c20e3b3d80b630ba1337d353db975ce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:3c:4a:49:73:39:37:4c:08:c7:55:cd:65:
b3:f1:c5:12:68:08:70:af:27:e1:9d:43:49:9b:af:
10:51:34:e9:88:50:a7:88:ae:8e:f7:16:c6:3d:c3:
3c:80:d9:86:a8:f7:73:2f:bb:56:7f:33:3b:ba:45:
e7:86:bf:84:f0:73:18:63:cb:64:3b:92:51:bd:62:
7d:27:2d:cd:82:cc:5f:a8:a6:8d:c3:3c:99:98:6d:
79:91:79:26:94:ff:58:35:a4:ed:e0:ad:4b:6a:78:
1e:cc:42:ed:eb:12:94:6a:54:e4:d8:51:c8:21:fa:
79:e9:83:b9:89:97:95:36:c1:e2:00:27:4f:d5:4a:
d5:a1:ca:5f:fa:2d:5e:9f:2d:38:e3:d0:f3:d6:72:
82:be:58:dd:c8:77:2a:c9:c1:2f:05:d5:33:b3:aa:
cd:f9:f0:15:a2:3f:a3:88:b7:b6:5d:61:5b:8a:f9:
30:ea:45:e7:ef:60:2b:64:ae:f2:ea:5c:5a:08:7f:
b0:59:87:d7:25:2e:c8:d4:ac:94:79:e6:1e:e9:de:
9e:39:95:19:a2:c9:9e:c6:c8:5a:4c:2a:c6:2d:d1:
6c:a7:25:40:1a:ff:e1:8b:6f:24:c6:59:2b:56:5f:
75:3c:dd:69:9c:42:6e:59:f6:f7:1b:00:ff:98:4e:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:78:C7:0C:20:E3:B3:D8:0B:63:0B:A1:33:7D:35:3D:B9:75:CE:26
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0f:80:7b:1b:ee:f1:c6:b7:8b:7e:44:af:8a:de:76:0f:3f:
7b:e9:a9:ac:dc:99:d6:6b:70:d8:b2:f1:ca:3a:22:50:a1:41:
f6:57:58:e9:cb:bc:38:f2:b4:01:f0:69:2a:4f:d2:c9:42:57:
27:e0:4d:af:ad:78:f2:fc:83:4a:53:d9:54:13:c9:f9:e3:65:
e0:a0:43:42:24:d5:91:41:ad:a3:01:7e:00:02:9a:59:36:bd:
12:91:ae:bd:f4:7e:9b:2e:c1:4b:9d:7c:b9:4b:bc:61:ae:db:
2e:7f:a6:e8:41:af:20:a6:a7:a6:af:be:c8:50:33:b9:37:22:
e4:7a:64:52:9a:1b:5a:6e:b5:88:03:fc:f3:ff:b8:fd:18:8f:
18:a3:e0:26:84:61:00:7f:b3:22:eb:e5:00:d8:ba:ad:25:84:
89:bc:48:37:6a:30:cd:86:0e:ac:94:88:ed:db:f4:75:04:e0:
a5:e5:1e:2f:d2:53:3c:a8:76:e8:b0:87:b7:5c:ae:0d:bd:04:
d3:da:a1:24:7a:f0:b0:ae:c8:a6:a8:f0:f0:4c:ce:aa:54:ed:
99:2c:e4:28:b7:ff:29:7c:d0:a3:7e:72:26:66:b2:36:c9:9a:
d4:98:d9:03:dc:c3:b2:4f:92:ef:f5:83:53:22:dd:5c:bb:58:
0a:d7:6a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5QhuGQS0GawoOrkqanOzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGJjNjdmNTQ5ZWIwNDkyNTc3MjBhMDAwZWIwNWI1NGY1
ZDJiYzAwHhcNMjUwNjE2MTUwMTA0WhcNMjUwNjE3MTUwMTA0WjAzMTEwLwYDVQQD
EyhlMzc4YzcwYzIwZTNiM2Q4MGI2MzBiYTEzMzdkMzUzZGI5NzVjZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Y8SklzOTdMCMdVzWWz8cUSaAhw
ryfhnUNJm68QUTTpiFCniK6O9xbGPcM8gNmGqPdzL7tWfzM7ukXnhr+E8HMYY8tk
O5JRvWJ9Jy3NgsxfqKaNwzyZmG15kXkmlP9YNaTt4K1LangezELt6xKUalTk2FHI
Ifp56YO5iZeVNsHiACdP1UrVocpf+i1eny0449Dz1nKCvljdyHcqycEvBdUzs6rN
+fAVoj+jiLe2XWFbivkw6kXn72ArZK7y6lxaCH+wWYfXJS7I1KyUeeYe6d6eOZUZ
osmexshaTCrGLdFspyVAGv/hi28kxlkrVl91PN1pnEJuWfb3GwD/mE5JPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON4xwwg47PYC2MLoTN9NT25dc4mMB8GA1UdIwQY
MBaAFEULxn9UnrBJJXcgoADrBbVPXSvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYt
MjRhOGQ5YmYzN2JjLzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYtMjRhOGQ5YmYzN2Jj
LzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQ+Aexvu
8ca3i35Er4redg8/e+mprNyZ1mtw2LLxyjoiUKFB9ldY6cu8OPK0AfBpKk/SyUJX
J+BNr6148vyDSlPZVBPJ+eNl4KBDQiTVkUGtowF+AAKaWTa9EpGuvfR+my7BS518
uUu8Ya7bLn+m6EGvIKanpq++yFAzuTci5HpkUpobWm61iAP88/+4/RiPGKPgJoRh
AH+zIuvlANi6rSWEibxIN2owzYYOrJSI7dv0dQTgpeUeL9JTPKh26LCHt1yuDb0E
09qhJHrwsK7Ipqjw8EzOqlTtmSzkKLf/KXzQo35yJmayNsma1JjZA9zDsk+S7/WD
UyLdXLtYCtdq/Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:45:31 2025 by rpki-client