Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: YLHEnexd5eJt56SRmN4ojiN4DbXL82Al0ZyPsZUbBpE=
Subject key identifier: 3F:DA:BC:98:86:FB:3F:93:26:1F:78:73:54:63:4C:16:C2:CE:EE:8A
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 0197B6A0563EFACE9A8E3EA6ADCC62D17596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: 023C
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: FQG0ejLSzUt4iA-ikpx0cAR2OKU.roa (hash: kXmpv8tYACCxfjQibnimCHCR1m+/Ufm2bbWZrvhXv8Y=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: 9LdJqObpx4JdhHfWSgeVffrresFXMkwnzMLW85X1jg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:56:3e:fa:ce:9a:8e:3e:a6:ad:cc:62:d1:75:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=3fdabc9886fb3f93261f787354634c16c2ceee8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:14:00:1e:1f:ac:f4:f0:08:c4:eb:0c:ea:
ce:01:7d:35:6f:31:99:55:df:7e:40:34:92:3c:8e:
ee:9d:e4:ac:0d:43:02:81:a0:ef:78:88:9f:40:3f:
dd:49:2a:42:5b:6d:8e:e3:9d:25:56:64:36:4e:10:
9e:47:12:54:d4:6b:68:da:34:a6:46:a2:ea:c6:b9:
00:02:b0:e8:f3:4c:e2:7c:23:27:36:c0:5c:2e:77:
bf:35:2f:59:0d:39:80:cd:78:c8:10:05:7f:63:eb:
64:62:88:ab:de:14:e5:fd:18:f9:e5:12:66:04:a0:
44:5a:50:4f:d4:19:bf:bb:36:d7:2d:4b:ef:86:f7:
81:f5:c3:60:0c:ff:ee:bd:f9:9f:45:97:0e:d0:83:
ae:16:af:56:60:b8:12:7f:dc:b9:de:7d:f7:b5:71:
ce:44:ff:6a:56:2a:b5:f8:76:14:5f:f3:d6:da:a5:
67:a0:e4:c2:62:da:bf:fa:d5:c3:d9:3c:a2:5a:fe:
85:95:9f:87:ce:1f:11:72:95:50:a8:c4:83:f8:7b:
99:b0:77:d5:80:0e:92:63:a3:cb:1b:ba:10:b5:d7:
86:86:d6:89:76:62:0e:4f:3f:f7:72:5f:68:4f:0a:
07:c9:3c:67:b1:02:c1:5b:70:5f:b3:e4:8a:1b:3b:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DA:BC:98:86:FB:3F:93:26:1F:78:73:54:63:4C:16:C2:CE:EE:8A
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:67:02:ed:22:dc:a8:b3:47:98:89:58:ec:9f:2e:48:cf:78:
4a:c6:c6:1d:e5:1b:86:2f:01:1e:a5:48:7a:10:c7:43:31:a2:
60:c3:86:fc:9c:12:39:1e:53:a9:0d:58:26:90:4d:02:3b:80:
5e:31:e5:32:51:1a:03:df:38:51:06:5a:b8:33:a2:fd:7b:52:
0f:e5:fa:4b:f0:41:45:35:a1:2c:60:b7:46:61:b9:54:b8:56:
68:16:f5:78:ac:e7:95:91:a1:b7:05:4a:fa:28:40:a5:1c:ed:
d2:2f:16:44:16:b3:7e:55:ea:ac:9a:45:43:97:6e:d5:19:3e:
85:8f:cb:31:77:16:67:46:6e:12:1e:9d:1c:68:f8:21:ed:d3:
82:3b:74:0d:5d:a3:1a:e3:4d:fb:40:a6:27:14:25:9a:2f:1c:
aa:50:7b:aa:73:56:34:32:2f:c6:e3:f2:c4:7c:dc:9d:a3:86:
cf:6d:a4:23:2d:6f:a3:a7:6c:ba:a8:69:ef:f3:35:be:40:a8:
e6:cb:7c:d8:28:12:54:1d:27:96:f3:97:a8:d7:66:52:e9:fa:
e0:66:a2:b3:8d:d3:c7:d1:5e:2e:1f:93:5f:58:45:89:1a:40:
2f:83:f0:b3:3b:fb:56:ed:03:f7:18:7c:c1:a0:5c:6d:0a:99:
be:59:7d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oFY++s6ajj6mrcxi0XWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjc1NDdkODUxZTNjZDc3NmNkMzMyOTBiMjQ1NGFjYzBl
ODUxYmIwHhcNMjUwNjI4MTMwMDUwWhcNMjUwNjI5MTMwMDUwWjAzMTEwLwYDVQQD
EygzZmRhYmM5ODg2ZmIzZjkzMjYxZjc4NzM1NDYzNGMxNmMyY2VlZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0gUAB4frPTwCMTrDOrOAX01bzGZ
Vd9+QDSSPI7uneSsDUMCgaDveIifQD/dSSpCW22O450lVmQ2ThCeRxJU1Gto2jSm
RqLqxrkAArDo80zifCMnNsBcLne/NS9ZDTmAzXjIEAV/Y+tkYoir3hTl/Rj55RJm
BKBEWlBP1Bm/uzbXLUvvhveB9cNgDP/uvfmfRZcO0IOuFq9WYLgSf9y53n33tXHO
RP9qViq1+HYUX/PW2qVnoOTCYtq/+tXD2TyiWv6FlZ+Hzh8RcpVQqMSD+HuZsHfV
gA6SY6PLG7oQtdeGhtaJdmIOTz/3cl9oTwoHyTxnsQLBW3Bfs+SKGzvMWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/avJiG+z+TJh94c1RjTBbCzu6KMB8GA1UdIwQY
MBaAFENnVH2FHjzXds0zKQskVKzA6FG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYt
ZGFiN2YwYzhkMjQwLzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84NzRjODUtOWU3ZC00YWNlLTk1OGYtZGFiN2YwYzhkMjQw
LzEvUTJkVWZZVWVQTmQyelRNcEN5UlVyTURvVWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWcC7SLc
qLNHmIlY7J8uSM94SsbGHeUbhi8BHqVIehDHQzGiYMOG/JwSOR5TqQ1YJpBNAjuA
XjHlMlEaA984UQZauDOi/XtSD+X6S/BBRTWhLGC3RmG5VLhWaBb1eKznlZGhtwVK
+ihApRzt0i8WRBazflXqrJpFQ5du1Rk+hY/LMXcWZ0ZuEh6dHGj4Ie3Tgjt0DV2j
GuNN+0CmJxQlmi8cqlB7qnNWNDIvxuPyxHzcnaOGz22kIy1vo6dsuqhp7/M1vkCo
5st82CgSVB0nlvOXqNdmUun64Gais43Tx9FeLh+TX1hFiRpAL4Pwszv7Vu0D9xh8
waBcbQqZvll93A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:15 2025 by rpki-client