Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: jfy+B/HG6+qMUzV8uCgX83QTGidPn79OzMBmeYB9UFw=
Subject key identifier: 43:7D:F8:7C:09:22:7A:00:47:7F:20:77:E0:88:5F:0A:65:37:08:8F
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 0197CE03DE0DF2E8E78C5EDDF0E9EAA20479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 15C3
Signing time: Thu 03 Jul 2025 02:00:49 +0000
Manifest this update: Thu 03 Jul 2025 02:00:49 +0000
Manifest next update: Fri 04 Jul 2025 02:00:49 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: cN3PhBbOn75QS0KIidyHze0uyHDfYjM0m5d7/keF+Qg=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:03:de:0d:f2:e8:e7:8c:5e:dd:f0:e9:ea:a2:04:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Jul 3 02:00:49 2025 GMT
Not After : Jul 4 02:00:49 2025 GMT
Subject: CN=437df87c09227a00477f2077e0885f0a6537088f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:67:80:73:af:57:ed:dc:94:0c:a6:20:e3:
94:c7:fa:6b:50:50:8a:14:05:a2:5b:5f:8b:e7:a3:
40:dc:94:80:a8:9c:ee:e8:24:17:66:df:71:e8:e5:
3e:8d:78:26:08:32:09:7b:f8:e3:d9:44:f5:51:80:
ff:38:d7:cf:0e:08:94:74:b8:16:09:36:da:0d:5b:
00:da:c5:9e:ba:e6:b9:4f:29:63:7f:2d:3b:b6:96:
cf:3b:2b:63:37:d8:e3:3c:50:db:8a:02:2b:7b:af:
c4:29:4f:a1:28:7f:b9:39:f9:f9:75:54:78:23:d7:
1d:63:cd:1d:9a:fd:aa:df:ab:c5:12:57:d4:5a:fe:
d5:e7:1f:d6:1a:a4:1f:3c:d1:fa:66:b9:9d:4e:c4:
b1:d2:25:8c:b2:a2:ca:10:74:6d:d0:30:11:29:e5:
c1:be:d8:63:54:52:20:48:19:a8:54:a6:93:fc:7c:
38:56:1c:e7:c6:a3:67:dc:91:96:f7:66:7b:ee:1c:
06:d4:f5:69:99:b6:ea:25:d3:b8:da:35:86:a6:d6:
e7:8c:4e:cc:35:32:af:f4:5b:29:75:0b:e4:3e:1a:
a7:47:6e:72:04:15:c0:d7:f1:14:45:38:42:a0:60:
8b:c4:1d:63:62:e5:d9:9c:21:3d:e5:a9:88:32:7b:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:F8:7C:09:22:7A:00:47:7F:20:77:E0:88:5F:0A:65:37:08:8F
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:60:ee:c9:b0:4c:8c:76:2c:f5:82:57:9f:b1:7c:fb:b8:5c:
70:7e:e1:a2:b1:ec:f3:c5:b3:9e:3f:3f:9f:a9:1b:88:dd:09:
ad:9a:26:d3:c4:d4:88:c3:55:b2:d3:94:e6:1e:29:b1:32:3a:
b1:a4:08:8c:65:46:f9:2c:13:13:eb:dd:3e:b9:63:3b:03:31:
24:12:57:c2:9d:dc:c0:3f:ad:11:c7:ac:ed:8b:e6:d0:b2:8b:
fd:81:b2:b0:66:55:69:48:b5:89:de:3f:cf:85:96:99:52:10:
f6:22:79:20:bf:8c:4e:09:58:38:53:e8:ce:88:d3:1c:3d:51:
a4:cf:bf:f2:e6:69:93:bb:fb:60:9a:f0:bf:52:1f:23:b7:a2:
c1:f6:cf:d0:48:d2:dd:58:d4:d7:b3:7b:1d:bc:5f:6c:f0:c5:
5d:2b:6d:c2:3a:82:01:43:86:9b:b2:a8:6b:96:24:55:a2:94:
cc:02:81:ac:f4:be:15:3c:16:52:9c:19:8a:cd:85:8c:55:6e:
0c:e7:84:59:75:a6:33:c9:41:28:7d:28:08:f5:79:49:1e:1d:
22:a4:a0:b5:6a:57:31:09:50:97:05:3a:72:1d:eb:0b:c8:ed:
c1:8c:56:ae:f0:a7:f7:1b:2a:98:36:12:eb:af:ae:10:d2:bf:
cc:de:6f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOA94N8ujnjF7d8OnqogR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl
NWJlMWYwHhcNMjUwNzAzMDIwMDQ5WhcNMjUwNzA0MDIwMDQ5WjAzMTEwLwYDVQQD
Eyg0MzdkZjg3YzA5MjI3YTAwNDc3ZjIwNzdlMDg4NWYwYTY1MzcwODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvABngHOvV+3clAymIOOUx/prUFCK
FAWiW1+L56NA3JSAqJzu6CQXZt9x6OU+jXgmCDIJe/jj2UT1UYD/ONfPDgiUdLgW
CTbaDVsA2sWeuua5Tyljfy07tpbPOytjN9jjPFDbigIre6/EKU+hKH+5Ofn5dVR4
I9cdY80dmv2q36vFElfUWv7V5x/WGqQfPNH6ZrmdTsSx0iWMsqLKEHRt0DARKeXB
vthjVFIgSBmoVKaT/Hw4VhznxqNn3JGW92Z77hwG1PVpmbbqJdO42jWGptbnjE7M
NTKv9FspdQvkPhqnR25yBBXA1/EURThCoGCLxB1jYuXZnCE95amIMnsIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN9+HwJInoAR38gd+CIXwplNwiPMB8GA1UdIwQY
MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt
YTBkNmYwZWViNWMyLzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy
LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2DuybBM
jHYs9YJXn7F8+7hccH7horHs88Wznj8/n6kbiN0JrZom08TUiMNVstOU5h4psTI6
saQIjGVG+SwTE+vdPrljOwMxJBJXwp3cwD+tEces7Yvm0LKL/YGysGZVaUi1id4/
z4WWmVIQ9iJ5IL+MTglYOFPozojTHD1RpM+/8uZpk7v7YJrwv1IfI7eiwfbP0EjS
3VjU17N7HbxfbPDFXSttwjqCAUOGm7Koa5YkVaKUzAKBrPS+FTwWUpwZis2FjFVu
DOeEWXWmM8lBKH0oCPV5SR4dIqSgtWpXMQlQlwU6ch3rC8jtwYxWrvCn9xsqmDYS
66+uENK/zN5vJw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:32:39 2025 by rpki-client