Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: mdv+uvupA/2Bh2QVT42UFj4mBauUq+g6M++mXl9ORak=
Subject key identifier: 13:14:20:32:7E:5D:CB:A5:13:AF:D6:92:C2:50:62:6C:33:B4:21:6B
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 0197B70ECEBAA6F3492180E16BD988DD077B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 15:01:30 +0000
Manifest this update: Sat 28 Jun 2025 15:01:30 +0000
Manifest next update: Sun 29 Jun 2025 15:01:30 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: eQokXy2xtIQqfEHn69hg5RemJyPWZm9vLcAMvO9j5t8=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ce:ba:a6:f3:49:21:80:e1:6b:d9:88:dd:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Jun 28 15:01:30 2025 GMT
Not After : Jun 29 15:01:30 2025 GMT
Subject: CN=131420327e5dcba513afd692c250626c33b4216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:3c:80:5d:9f:d8:24:2d:2d:a2:24:49:d0:
4b:4b:f7:06:0e:2e:cf:8a:ed:47:43:b8:13:0b:80:
20:bb:31:4e:09:e8:3a:2d:49:d0:da:af:e7:e4:63:
c7:58:e8:44:aa:4d:94:e1:d6:05:51:c7:ef:e5:c2:
5b:1c:d8:1e:98:0a:66:7f:55:d2:91:49:53:95:61:
14:6c:d0:30:04:7a:42:81:be:7f:6e:b1:4d:f9:4e:
da:ba:13:46:cb:ee:ce:44:c1:30:b5:06:a2:0f:33:
c8:7c:26:b6:06:f2:46:19:20:67:c1:86:6d:42:aa:
8d:47:b1:55:fb:ff:ae:8b:10:60:16:f0:9e:cb:13:
19:7e:97:b8:10:6f:4d:b8:19:41:b0:6b:81:ea:e4:
8d:b6:e1:bd:23:0d:05:37:92:d3:f3:93:2c:f6:d1:
ec:01:33:8c:9a:67:bf:62:a4:03:1c:78:dc:05:dd:
cd:f4:99:e3:4e:78:b4:70:78:42:79:85:78:f4:b3:
dc:89:11:38:74:55:df:c7:93:f1:2f:16:8e:25:bb:
3f:e0:e0:5a:28:92:47:36:68:c4:94:9b:71:9a:92:
44:50:02:a7:1d:fc:72:c9:7f:a9:07:51:62:90:d9:
fd:7f:39:b6:58:cb:18:b2:9d:d9:df:54:fa:b5:7a:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:14:20:32:7E:5D:CB:A5:13:AF:D6:92:C2:50:62:6C:33:B4:21:6B
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0b:b7:0f:72:bb:b8:b9:87:92:ae:a5:b4:9a:2f:74:86:f5:
5b:d4:e1:90:16:9d:fc:3c:4b:1d:1d:68:df:48:81:dd:d6:70:
26:fc:5d:e8:46:90:60:c0:1f:79:49:63:f9:0e:e6:91:0d:38:
2c:40:c6:d8:04:47:27:aa:e6:41:80:30:f9:b4:9f:da:33:c1:
ed:d4:27:2b:86:d5:18:f6:20:b4:c1:45:67:4f:68:08:42:80:
99:5c:d9:cd:07:8a:98:4e:d8:6a:68:89:7d:10:35:58:ce:c5:
a9:9a:da:65:44:b6:5a:ca:19:64:25:b4:65:93:53:6a:77:02:
07:fd:21:c3:1f:2b:c6:4a:0e:9a:7e:93:76:eb:1d:65:a8:a8:
a7:66:ed:c8:2c:48:c8:af:77:53:1c:8f:7a:04:e8:02:9b:5b:
11:6e:86:3d:8a:32:b6:b2:a1:9b:15:4c:fc:5b:1b:41:5f:61:
dc:ac:89:88:0a:0c:82:2c:8f:f9:b5:75:9b:61:f2:47:8b:57:
20:99:bd:83:50:f8:c3:7a:4b:94:f2:85:4b:9d:dd:57:f1:be:
ab:30:2c:92:1d:34:2f:b8:92:ca:25:96:9d:f2:97:47:4b:9f:
c7:f1:c5:62:17:54:c5:ea:c1:9d:c9:d0:1d:89:0c:71:f8:f8:
65:c3:8a:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Ds66pvNJIYDha9mI3Qd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl
M2I0NjIwHhcNMjUwNjI4MTUwMTMwWhcNMjUwNjI5MTUwMTMwWjAzMTEwLwYDVQQD
EygxMzE0MjAzMjdlNWRjYmE1MTNhZmQ2OTJjMjUwNjI2YzMzYjQyMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/s8gF2f2CQtLaIkSdBLS/cGDi7P
iu1HQ7gTC4AguzFOCeg6LUnQ2q/n5GPHWOhEqk2U4dYFUcfv5cJbHNgemApmf1XS
kUlTlWEUbNAwBHpCgb5/brFN+U7auhNGy+7ORMEwtQaiDzPIfCa2BvJGGSBnwYZt
QqqNR7FV+/+uixBgFvCeyxMZfpe4EG9NuBlBsGuB6uSNtuG9Iw0FN5LT85Ms9tHs
ATOMmme/YqQDHHjcBd3N9JnjTni0cHhCeYV49LPciRE4dFXfx5PxLxaOJbs/4OBa
KJJHNmjElJtxmpJEUAKnHfxyyX+pB1FikNn9fzm2WMsYsp3Z31T6tXr+cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMUIDJ+XculE6/WksJQYmwztCFrMB8GA1UdIwQY
MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt
MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1
LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgu3D3K7
uLmHkq6ltJovdIb1W9ThkBad/DxLHR1o30iB3dZwJvxd6EaQYMAfeUlj+Q7mkQ04
LEDG2ARHJ6rmQYAw+bSf2jPB7dQnK4bVGPYgtMFFZ09oCEKAmVzZzQeKmE7YamiJ
fRA1WM7FqZraZUS2WsoZZCW0ZZNTancCB/0hwx8rxkoOmn6TdusdZaiop2btyCxI
yK93UxyPegToAptbEW6GPYoytrKhmxVM/FsbQV9h3KyJiAoMgiyP+bV1m2HyR4tX
IJm9g1D4w3pLlPKFS53dV/G+qzAskh00L7iSyiWWnfKXR0ufx/HFYhdUxerBncnQ
HYkMcfj4ZcOKOA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:14 2025 by rpki-client