Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: BNFM2ms6K6T/vkrFEgUvICp+6HdYbAmY0cEeu7T/Cvw=
Subject key identifier: 9D:64:35:99:0C:D0:EA:3A:27:57:33:5F:B1:2A:24:5E:5E:6B:5A:22
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 0197BA7D75BC5BF40FC40DFBC2824DD14E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 07:01:13 +0000
Manifest this update: Sun 29 Jun 2025 07:01:13 +0000
Manifest next update: Mon 30 Jun 2025 07:01:13 +0000
Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: X7fc8ft/oLnK1MW2VkTxtz4Nq8HV+uv1ZnjK23SEQ0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:75:bc:5b:f4:0f:c4:0d:fb:c2:82:4d:d1:4e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Jun 29 07:01:13 2025 GMT
Not After : Jun 30 07:01:13 2025 GMT
Subject: CN=9d6435990cd0ea3a2757335fb12a245e5e6b5a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:83:dc:b3:de:2d:79:29:87:93:a5:fe:4b:
f8:3c:76:d6:67:88:89:c0:fc:60:de:01:63:f4:be:
2e:a2:28:af:af:1e:97:da:c5:1e:18:cb:63:08:b6:
8c:cf:3e:3b:43:28:95:dd:09:66:dd:65:92:ff:e7:
b6:a5:73:5d:fa:e9:fe:db:79:cd:01:92:f3:c3:94:
12:52:b1:33:c9:7c:5c:77:2c:3a:cf:7e:d9:6c:12:
9d:d0:4c:59:7b:a9:6f:88:2a:01:36:2b:8c:1e:14:
59:4f:04:32:45:e7:48:c2:80:8e:85:47:68:c4:0b:
58:5b:ef:e7:5a:7b:1f:08:d6:c0:f6:e4:27:39:08:
fe:7e:77:fa:20:39:a2:76:d8:c2:6b:72:38:e0:23:
9a:0b:ac:50:0b:39:fd:9c:2b:08:c6:ea:84:58:d5:
67:2c:1b:71:42:77:3c:2f:40:f0:af:2d:44:f9:36:
ae:98:d4:f7:4a:57:05:20:33:5f:c9:72:c5:9c:9f:
97:10:6a:d1:39:98:45:e2:a4:54:7b:18:5d:b0:b8:
21:53:00:ee:29:e9:01:ed:5d:0e:9e:ea:f3:5a:02:
39:05:da:89:80:82:8c:68:aa:72:7a:fe:be:9a:aa:
e2:79:6b:09:73:bf:4a:8a:3a:95:b0:8d:67:06:04:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:35:99:0C:D0:EA:3A:27:57:33:5F:B1:2A:24:5E:5E:6B:5A:22
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2d:91:07:16:1c:f8:d7:d7:79:31:d4:92:23:a0:a0:ee:e3:
9c:be:74:62:32:0f:93:55:ec:67:c6:cb:40:22:7e:a9:20:92:
c5:12:df:d2:b0:16:32:fa:c3:8d:8e:50:6b:59:d4:56:20:59:
ab:d2:b3:b5:c6:eb:f3:31:76:3a:88:98:c0:9a:aa:58:a6:90:
9a:47:cb:0e:58:56:c7:93:4f:88:70:9a:37:ae:a2:46:f7:6e:
69:d6:c3:4f:39:14:92:b1:43:2e:da:2b:78:9e:b3:6a:94:2f:
e5:65:4d:de:a5:b7:f9:60:78:2d:20:04:c9:18:c6:bb:b2:2b:
ce:b3:91:93:3d:b9:36:c8:66:e4:c3:53:a2:8a:da:f4:c3:db:
83:5d:82:70:5c:c8:16:ce:a8:2c:36:32:90:c0:8d:5f:fc:e1:
ad:ee:9d:59:d1:bc:0a:32:b4:82:66:e3:30:2d:bc:81:42:f4:
b7:a5:90:2d:0b:b6:12:a0:0b:f1:c1:35:0f:32:b5:60:88:dd:
c5:4a:c2:94:aa:45:ec:49:0c:7c:ec:78:41:28:a5:3f:97:d7:
47:4e:9a:f1:d9:a2:d4:a6:ac:d7:ee:2d:74:b2:6f:90:2a:3c:
f7:9b:01:5e:8b:d4:ed:05:79:18:d0:de:8b:6a:23:b5:9d:cb:
40:99:31:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fXW8W/QPxA37woJN0U4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYjA2MDE2NmQ2NGNlYWQwZTI5NTc5N2U4ZDI3YzU1ZDg4
OThiYzIwHhcNMjUwNjI5MDcwMTEzWhcNMjUwNjMwMDcwMTEzWjAzMTEwLwYDVQQD
Eyg5ZDY0MzU5OTBjZDBlYTNhMjc1NzMzNWZiMTJhMjQ1ZTVlNmI1YTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ6D3LPeLXkph5Ol/kv4PHbWZ4iJ
wPxg3gFj9L4uoiivrx6X2sUeGMtjCLaMzz47QyiV3Qlm3WWS/+e2pXNd+un+23nN
AZLzw5QSUrEzyXxcdyw6z37ZbBKd0ExZe6lviCoBNiuMHhRZTwQyRedIwoCOhUdo
xAtYW+/nWnsfCNbA9uQnOQj+fnf6IDmidtjCa3I44COaC6xQCzn9nCsIxuqEWNVn
LBtxQnc8L0Dwry1E+TaumNT3SlcFIDNfyXLFnJ+XEGrROZhF4qRUexhdsLghUwDu
KekB7V0OnurzWgI5BdqJgIKMaKpyev6+mqrieWsJc79KijqVsI1nBgTvJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1kNZkM0Oo6J1czX7EqJF5ea1oiMB8GA1UdIwQY
MBaAFKuwYBZtZM6tDilXl+jSfFXYiYvCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQt
NmIxMzY0OTRlM2RjLzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mMjg4YmQtMTBmNS00N2IzLWIxMjQtNmIxMzY0OTRlM2Rj
LzEvcTdCZ0ZtMWt6cTBPS1ZlWDZOSjhWZGlKaThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaS2RBxYc
+NfXeTHUkiOgoO7jnL50YjIPk1XsZ8bLQCJ+qSCSxRLf0rAWMvrDjY5Qa1nUViBZ
q9Kztcbr8zF2OoiYwJqqWKaQmkfLDlhWx5NPiHCaN66iRvduadbDTzkUkrFDLtor
eJ6zapQv5WVN3qW3+WB4LSAEyRjGu7IrzrORkz25Nshm5MNToora9MPbg12CcFzI
Fs6oLDYykMCNX/zhre6dWdG8CjK0gmbjMC28gUL0t6WQLQu2EqAL8cE1DzK1YIjd
xUrClKpF7EkMfOx4QSilP5fXR06a8dmi1Kas1+4tdLJvkCo895sBXovU7QV5GNDe
i2ojtZ3LQJkxtA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:20:30 2025 by rpki-client