Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: Nje+BiU5qSI/p7WUi+e2/cJvqLpQ0ksGfIYoqom4s88=
Subject key identifier: D3:6F:CA:66:70:35:29:1E:A8:D4:98:06:8E:2D:06:D9:27:8E:1E:29
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 0197B7B350FB86309117277E18D36C1FBDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1205
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: F6Wet7Jrzwr/TsCWTfe4lfQoGm/7GbcnEPXyTRkM/kM=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:50:fb:86:30:91:17:27:7e:18:d3:6c:1f:bd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=d36fca667035291ea8d498068e2d06d9278e1e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:eb:6c:6b:a2:f4:38:1e:1a:35:44:df:67:
e1:3e:00:f4:ac:19:ed:77:f0:23:4f:8b:c3:e6:b8:
00:5d:b4:d6:b8:e6:40:05:72:0b:72:15:9b:53:6f:
11:eb:86:2f:7c:68:53:25:f9:0a:7b:8e:50:d5:21:
93:ca:92:e2:4c:6e:d8:a9:33:be:c9:72:46:fe:29:
9f:c1:fc:fa:3e:4d:04:0e:d1:d8:d9:12:10:7d:26:
28:6e:08:ad:33:61:db:35:f2:83:bb:52:9b:0d:2c:
89:e0:64:ba:d1:80:f3:1f:5c:3c:0c:3f:97:e1:a9:
a9:48:74:56:44:f2:2a:33:eb:40:06:5b:64:50:87:
d2:d1:d1:c5:40:cf:ec:ff:1c:7b:65:8a:4e:a9:04:
c7:f9:95:44:8e:44:c5:ef:27:9d:1d:1d:c1:89:b0:
8b:76:4a:78:3a:f8:10:11:71:85:16:5d:d1:b5:b2:
74:ed:08:5a:31:06:a3:de:82:36:17:44:22:38:17:
77:31:24:78:0c:e8:8b:e7:1c:18:3a:1d:69:e4:9e:
ca:82:47:8e:43:e4:d4:7e:54:15:81:46:3a:cd:18:
63:d8:27:cc:43:6d:f1:a9:1d:e7:df:22:f1:59:9b:
46:ac:3c:0a:52:46:f5:32:af:52:c7:84:88:97:31:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6F:CA:66:70:35:29:1E:A8:D4:98:06:8E:2D:06:D9:27:8E:1E:29
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a1:d5:09:6b:dd:f2:b0:31:df:0b:3c:4c:a6:3c:fd:ed:6d:
27:d8:e3:2f:ef:da:cf:57:ec:83:0a:ef:9b:f7:e7:98:5a:c5:
f4:f1:c0:58:75:c1:e2:f5:eb:72:2e:4f:35:bc:9e:59:6c:56:
54:e4:b3:33:2a:d0:27:12:12:76:ed:f4:27:be:36:98:49:c9:
7f:a3:f8:bc:45:f1:23:60:2a:16:5f:b7:8d:bc:fc:5d:da:fd:
80:d5:49:f6:92:83:c1:be:75:80:63:bc:2d:30:b1:fb:67:a6:
98:9a:50:f3:c0:86:01:b0:f1:56:ba:58:2e:7d:3d:22:93:c2:
2d:11:08:b6:52:5b:eb:ca:d5:9d:6a:9e:be:8c:75:3d:90:2b:
d4:51:35:bf:bf:eb:4e:48:02:ce:5c:9b:c4:70:5d:df:5b:dc:
e2:b5:98:67:17:b1:95:cb:f4:24:69:06:09:50:1e:05:af:f8:
f2:b0:91:42:84:43:23:76:6e:d9:c2:19:0a:d4:d3:eb:8e:99:
88:6d:29:1a:8d:87:eb:f3:cf:ee:08:2b:c0:7f:fa:a2:43:97:
52:9c:10:db:89:b9:78:15:9d:61:b2:e0:f7:75:42:7c:c6:ff:
84:c5:77:80:21:b0:64:f4:92:ec:bb:28:5c:a1:17:fc:bb:17:
59:71:3e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1D7hjCRFyd+GNNsH738MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1
OGIzZTcwHhcNMjUwNjI4MTgwMTExWhcNMjUwNjI5MTgwMTExWjAzMTEwLwYDVQQD
EyhkMzZmY2E2NjcwMzUyOTFlYThkNDk4MDY4ZTJkMDZkOTI3OGUxZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvDrbGui9DgeGjVE32fhPgD0rBnt
d/AjT4vD5rgAXbTWuOZABXILchWbU28R64YvfGhTJfkKe45Q1SGTypLiTG7YqTO+
yXJG/imfwfz6Pk0EDtHY2RIQfSYobgitM2HbNfKDu1KbDSyJ4GS60YDzH1w8DD+X
4ampSHRWRPIqM+tABltkUIfS0dHFQM/s/xx7ZYpOqQTH+ZVEjkTF7yedHR3BibCL
dkp4OvgQEXGFFl3RtbJ07QhaMQaj3oI2F0QiOBd3MSR4DOiL5xwYOh1p5J7KgkeO
Q+TUflQVgUY6zRhj2CfMQ23xqR3n3yLxWZtGrDwKUkb1Mq9Sx4SIlzGoiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNvymZwNSkeqNSYBo4tBtknjh4pMB8GA1UdIwQY
MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt
ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz
LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6HVCWvd
8rAx3ws8TKY8/e1tJ9jjL+/az1fsgwrvm/fnmFrF9PHAWHXB4vXrci5PNbyeWWxW
VOSzMyrQJxISdu30J742mEnJf6P4vEXxI2AqFl+3jbz8Xdr9gNVJ9pKDwb51gGO8
LTCx+2emmJpQ88CGAbDxVrpYLn09IpPCLREItlJb68rVnWqevox1PZAr1FE1v7/r
TkgCzlybxHBd31vc4rWYZxexlcv0JGkGCVAeBa/48rCRQoRDI3Zu2cIZCtTT646Z
iG0pGo2H6/PP7ggrwH/6okOXUpwQ24m5eBWdYbLg93VCfMb/hMV3gCGwZPSS7Lso
XKEX/LsXWXE+mA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:09:21 2025 by rpki-client