Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: 21GkeEdPM65DUpiDA5Mq5v21jRNoT5oxHL1qnSXLTHE=
Subject key identifier: 17:CB:ED:2B:79:07:65:8E:66:B7:29:FF:34:77:D0:7F:5F:C5:C1:D3
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 0197B9A1943AA439E13175C9CC11917D08E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 03:01:03 +0000
Manifest this update: Sun 29 Jun 2025 03:01:03 +0000
Manifest next update: Mon 30 Jun 2025 03:01:03 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: 7KrjcR4LHDY5VLnpMFT/e+zvKgWmqG1KV1tSkF1JjQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:94:3a:a4:39:e1:31:75:c9:cc:11:91:7d:08:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Jun 29 03:01:03 2025 GMT
Not After : Jun 30 03:01:03 2025 GMT
Subject: CN=17cbed2b7907658e66b729ff3477d07f5fc5c1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:78:ae:11:01:68:76:0c:bf:0c:1a:a2:cc:
12:1c:ca:92:5b:0e:f9:df:e7:9c:a7:de:c7:03:71:
3f:fd:e6:52:bd:b5:8a:c5:fa:28:1f:5f:c7:00:b5:
fe:4a:0a:6a:2d:ad:f8:cd:7f:02:41:31:e9:77:92:
35:73:f2:3c:7c:a1:9a:a3:54:62:30:2f:34:51:4a:
42:68:75:9a:21:0f:01:bb:2b:da:dc:c9:3a:1a:94:
71:2f:5e:7c:88:6c:7b:c9:98:8f:b0:08:78:87:24:
87:19:58:64:e4:bf:4f:ef:16:28:49:56:82:07:48:
67:84:78:05:70:64:2f:ab:07:b0:43:80:00:27:42:
97:bd:f6:c0:da:52:c9:da:5c:3c:a2:b1:70:0a:e4:
0b:bf:a6:e9:6d:c0:a8:27:21:23:c7:80:67:8d:0a:
15:89:70:e4:9e:f6:80:56:14:08:d2:78:ff:e2:b4:
32:9c:a0:ad:69:3b:41:d7:04:f9:e0:1d:f0:d7:81:
16:f2:a8:89:c1:63:c6:95:2c:bb:a9:d3:48:4d:35:
d8:40:6c:aa:9d:cd:ec:12:5b:ac:8b:e5:63:2b:61:
34:a5:f9:f1:81:6e:82:82:d9:74:4e:14:7f:07:18:
40:b2:78:41:82:92:0c:7c:bb:76:60:01:b6:24:d6:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CB:ED:2B:79:07:65:8E:66:B7:29:FF:34:77:D0:7F:5F:C5:C1:D3
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:da:7e:3d:68:c9:e6:fd:f0:01:ce:c1:ba:0d:e1:c5:8f:66:
9c:46:b4:f6:23:2c:d3:37:74:ae:01:f3:dc:41:ba:46:0c:61:
fc:eb:d2:7e:18:90:5b:8e:8b:07:18:d9:5f:4c:d1:44:9f:bd:
75:fc:24:93:9a:93:18:4d:40:91:1d:7c:f1:c3:ad:18:02:cf:
7f:58:cc:53:bd:b8:00:ee:93:31:5a:4c:26:40:d9:cf:bf:22:
44:4d:a4:79:3c:c6:12:ff:51:d4:14:d4:aa:4c:63:b6:93:dd:
24:d8:ca:f2:d3:a9:cd:9c:70:49:3e:d7:ca:86:c4:bf:84:5e:
72:d5:fb:84:17:26:ae:b6:44:5a:87:67:8c:2a:9f:5b:75:ba:
91:7e:f3:01:25:d0:4e:aa:29:23:1c:93:1b:24:68:08:9a:ae:
9c:ec:5e:ea:55:a5:b1:ef:50:e7:11:dd:a1:c1:83:39:0a:23:
74:f0:60:75:d8:ae:bb:f8:85:3d:2f:24:8d:5f:3d:a9:44:47:
b8:cc:62:5a:75:03:9e:08:9a:bb:e2:b7:b0:fa:87:6c:00:a4:
06:d2:a9:17:02:96:db:7c:fa:ec:bc:9b:49:91:55:95:03:bd:
fa:5a:a7:6b:09:5d:ad:d5:01:81:a6:c0:14:89:e5:21:2a:d2:
c3:dd:bd:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oZQ6pDnhMXXJzBGRfQjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmI2YjE3MDgzMzUwMDZiMGE2YWFjNjUwYmZhZmYzZmM4
ZDI5MmMwHhcNMjUwNjI5MDMwMTAzWhcNMjUwNjMwMDMwMTAzWjAzMTEwLwYDVQQD
EygxN2NiZWQyYjc5MDc2NThlNjZiNzI5ZmYzNDc3ZDA3ZjVmYzVjMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArat4rhEBaHYMvwwaoswSHMqSWw75
3+ecp97HA3E//eZSvbWKxfooH1/HALX+SgpqLa34zX8CQTHpd5I1c/I8fKGao1Ri
MC80UUpCaHWaIQ8Buyva3Mk6GpRxL158iGx7yZiPsAh4hySHGVhk5L9P7xYoSVaC
B0hnhHgFcGQvqwewQ4AAJ0KXvfbA2lLJ2lw8orFwCuQLv6bpbcCoJyEjx4BnjQoV
iXDknvaAVhQI0nj/4rQynKCtaTtB1wT54B3w14EW8qiJwWPGlSy7qdNITTXYQGyq
nc3sElusi+VjK2E0pfnxgW6Cgtl0ThR/BxhAsnhBgpIMfLt2YAG2JNYTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfL7St5B2WOZrcp/zR30H9fxcHTMB8GA1UdIwQY
MBaAFEH7axcIM1AGsKaqxlC/r/P8jSksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMt
MDRjODJlZDZlZDRjLzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMtMDRjODJlZDZlZDRj
LzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9p+PWjJ
5v3wAc7Bug3hxY9mnEa09iMs0zd0rgHz3EG6Rgxh/OvSfhiQW46LBxjZX0zRRJ+9
dfwkk5qTGE1AkR188cOtGALPf1jMU724AO6TMVpMJkDZz78iRE2keTzGEv9R1BTU
qkxjtpPdJNjK8tOpzZxwST7XyobEv4RectX7hBcmrrZEWodnjCqfW3W6kX7zASXQ
TqopIxyTGyRoCJqunOxe6lWlse9Q5xHdocGDOQojdPBgddiuu/iFPS8kjV89qURH
uMxiWnUDngiau+K3sPqHbACkBtKpFwKW23z67LybSZFVlQO9+lqnawldrdUBgabA
FInlISrSw929WQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:08:32 2025 by rpki-client