Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: xxuh0YupPb6fWL3RF2hkeH70L66iqRF4L254vubNsDM=
Subject key identifier: F4:15:F3:4D:3B:A7:AF:71:3E:3C:17:D8:84:C9:C2:DE:30:BF:7D:DE
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 0197BAB46F2667F8A9EDD152330ED140AFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 2F
Signing time: Sun 29 Jun 2025 08:01:16 +0000
Manifest this update: Sun 29 Jun 2025 08:01:16 +0000
Manifest next update: Mon 30 Jun 2025 08:01:16 +0000
Files and hashes: 1: CDUsDykTOJjzj2PfEalP5NWfeaM.roa (hash: MDsxP0rZPQ79FjaH/eHSpSKbqQZrO2HQf+/0HhGuzhE=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: gmYFABzW7mcegDGSscaVb5T5Je9MX9A26JicaOth8x0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:6f:26:67:f8:a9:ed:d1:52:33:0e:d1:40:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Jun 29 08:01:16 2025 GMT
Not After : Jun 30 08:01:16 2025 GMT
Subject: CN=f415f34d3ba7af713e3c17d884c9c2de30bf7dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:e6:59:89:b4:6d:46:7c:8d:70:c8:3c:77:
69:2b:ce:f0:50:f3:f5:3e:24:c9:e9:92:51:c9:50:
ed:25:a8:b3:74:65:9e:d5:62:91:2d:9f:89:d3:6d:
2a:ec:78:ba:8b:67:a1:26:84:46:26:f0:52:56:12:
0d:7b:94:0c:00:56:06:af:2d:06:41:6c:43:cb:a7:
64:25:e8:78:6f:0d:44:78:15:45:a9:5f:0c:97:45:
14:4f:48:fd:6e:45:82:c8:63:d6:a7:e1:8d:94:52:
78:3a:ec:09:d7:7c:23:61:37:a0:f8:f0:c0:35:38:
c2:d1:97:87:4c:2f:d6:76:82:00:aa:4b:94:23:d2:
92:d4:5f:c9:dd:51:0b:93:0b:3c:fc:41:81:a2:af:
53:29:88:a6:8c:2b:79:79:3b:84:62:c6:00:08:9e:
2d:19:2b:76:5c:7e:84:e6:74:5b:9d:10:28:f1:17:
e1:4a:ce:e6:df:94:00:d5:fa:49:70:60:34:46:80:
24:d3:82:7b:d0:1a:20:06:9a:b1:12:a0:7c:ec:91:
20:4e:52:f6:7d:ba:e7:33:a1:dd:04:9c:46:3c:b0:
2d:32:f3:36:f8:26:ea:8b:5e:c0:17:3b:c8:3f:1e:
e5:44:8d:c8:5c:6c:04:68:89:d8:41:91:32:03:b3:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:15:F3:4D:3B:A7:AF:71:3E:3C:17:D8:84:C9:C2:DE:30:BF:7D:DE
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:af:f5:1e:dd:94:8f:e3:aa:9b:ea:a3:57:c1:aa:e9:df:4e:
e7:41:b1:bc:72:2e:3e:89:74:22:a0:93:c6:67:d1:c3:f4:d0:
52:26:21:9d:99:b7:59:58:34:f0:e4:4d:46:bb:53:fd:07:59:
87:32:3b:18:6f:e5:97:17:95:ba:65:3c:fd:d8:15:79:f1:82:
49:4e:d5:bb:d8:1e:f4:53:ad:97:b9:bb:c0:9e:a0:34:c1:57:
7d:d5:01:fb:69:fd:a5:98:8d:6a:32:ba:13:af:2d:ea:e4:0f:
3e:65:28:de:a8:d9:e3:84:b9:bf:85:e8:16:c3:cb:99:d6:4c:
e2:fc:3d:8f:a8:67:56:a1:b3:2a:82:ad:bc:7f:e5:f1:09:e3:
a7:59:4f:d3:38:ab:2b:f2:54:49:8b:98:75:2d:37:1f:08:51:
93:a3:fa:c8:8d:09:42:2a:62:a1:81:6d:7a:7b:e5:a9:2c:5c:
3c:2a:5d:11:39:92:de:05:e1:ba:bc:31:ce:9e:20:89:be:17:
cc:0d:9b:80:68:b5:2b:1d:82:05:0e:7d:e1:d9:be:cc:b3:93:
c0:7b:d0:49:9e:25:81:ad:9e:ea:8d:eb:4a:3c:e5:88:05:1f:
98:2d:9b:55:45:fd:59:95:86:94:e0:4d:68:ed:6a:f0:bc:11:
9e:3b:9d:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tG8mZ/ip7dFSMw7RQK/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1
NWY2NGIwHhcNMjUwNjI5MDgwMTE2WhcNMjUwNjMwMDgwMTE2WjAzMTEwLwYDVQQD
EyhmNDE1ZjM0ZDNiYTdhZjcxM2UzYzE3ZDg4NGM5YzJkZTMwYmY3ZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP/mWYm0bUZ8jXDIPHdpK87wUPP1
PiTJ6ZJRyVDtJaizdGWe1WKRLZ+J020q7Hi6i2ehJoRGJvBSVhINe5QMAFYGry0G
QWxDy6dkJeh4bw1EeBVFqV8Ml0UUT0j9bkWCyGPWp+GNlFJ4OuwJ13wjYTeg+PDA
NTjC0ZeHTC/WdoIAqkuUI9KS1F/J3VELkws8/EGBoq9TKYimjCt5eTuEYsYACJ4t
GSt2XH6E5nRbnRAo8RfhSs7m35QA1fpJcGA0RoAk04J70BogBpqxEqB87JEgTlL2
fbrnM6HdBJxGPLAtMvM2+Cbqi17AFzvIPx7lRI3IXGwEaInYQZEyA7NlOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQV8007p69xPjwX2ITJwt4wv33eMB8GA1UdIwQY
MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt
M2E2YTA2ZTE4OGMzLzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz
LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa/1Ht2U
j+Oqm+qjV8Gq6d9O50GxvHIuPol0IqCTxmfRw/TQUiYhnZm3WVg08ORNRrtT/QdZ
hzI7GG/llxeVumU8/dgVefGCSU7Vu9ge9FOtl7m7wJ6gNMFXfdUB+2n9pZiNajK6
E68t6uQPPmUo3qjZ44S5v4XoFsPLmdZM4vw9j6hnVqGzKoKtvH/l8Qnjp1lP0zir
K/JUSYuYdS03HwhRk6P6yI0JQipioYFtenvlqSxcPCpdETmS3gXhurwxzp4gib4X
zA2bgGi1Kx2CBQ594dm+zLOTwHvQSZ4lga2e6o3rSjzliAUfmC2bVUX9WZWGlOBN
aO1q8LwRnjudEA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:21:16 2025 by rpki-client