Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
File: QqbmQBmAE94SolHwhgMM14xzJRY.mft (raw, json)
Hash identifier: cONmlFM6kNDzpuZVLT+FD0xXVNdZHNsJ3VTbmZweV/I=
Subject key identifier: 61:66:DD:C3:6B:E5:27:33:31:38:4D:BA:5F:6D:9A:77:CE:EE:A8:6B
Authority key identifier: 42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
Certificate issuer: /CN=42a6e640198013de12a251f086030cd78c732516
Certificate serial: 0197B77C9CDA501E4ABB89193F8801F5F78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: QqbmQBmAE94SolHwhgMM14xzJRY.crl (hash: rAp0zbNcecloAJu2IPokR5QIBh/hjJDy+jOLMdTGxbg=)
2: j37XoMC3UG0E_oUwTDht88JJrh8.roa (hash: cqy63HfmTCUoUdF/JZjPLrFzuSfjpRSNk0rinu9lqNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9c:da:50:1e:4a:bb:89:19:3f:88:01:f5:f7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a6e640198013de12a251f086030cd78c732516
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=6166ddc36be5273331384dba5f6d9a77ceeea86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:09:1f:b3:79:8d:75:b9:b9:05:37:71:20:
cc:38:2d:63:0a:e9:be:d8:32:a2:41:a2:c9:d8:de:
db:01:94:c0:c6:61:f2:b3:be:8e:9f:ae:cd:31:77:
2d:5e:0e:8d:8c:8b:19:72:8c:d9:fb:93:3e:36:a1:
12:ed:c7:cf:a0:9b:df:f5:bd:2a:fa:1c:0f:c5:47:
d5:bb:46:72:7d:5f:35:20:ad:bb:b5:b5:24:5d:64:
4c:64:8f:96:57:fd:24:ac:d8:75:57:7d:b1:31:24:
d3:e4:1b:cf:9b:71:75:67:bf:2d:69:61:52:12:ed:
9b:fc:e8:f6:b5:c4:55:87:63:52:9b:8e:c8:20:6e:
91:30:d0:e3:bd:02:28:5f:2f:23:08:c7:8f:42:5f:
f3:c1:cd:03:8a:a1:12:6a:ab:2e:78:db:6b:1b:4d:
a3:4d:d8:0a:3b:66:73:ca:20:f0:29:ad:ed:49:f4:
5c:25:46:7c:7c:06:ed:7d:ff:5d:52:c9:47:5a:8e:
55:01:04:a1:d7:e1:62:7a:e0:e7:1b:73:78:e3:e3:
ce:02:99:01:2a:ec:53:b8:a5:1c:2a:d3:05:9d:67:
db:72:c8:04:d2:a3:4e:63:4c:55:8f:71:09:c3:a1:
b8:40:c5:dc:92:d5:18:87:e3:b1:81:35:60:a7:78:
95:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:66:DD:C3:6B:E5:27:33:31:38:4D:BA:5F:6D:9A:77:CE:EE:A8:6B
X509v3 Authority Key Identifier:
keyid:42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:67:65:22:a5:85:5c:cd:95:b5:4a:ac:0c:0f:24:ae:0d:71:
88:94:38:2f:4b:5e:ca:46:3e:52:c1:55:8e:f7:6f:ee:3c:66:
3d:1f:9b:f6:a8:d6:f1:16:b5:6f:79:7c:44:fc:2c:63:3e:59:
d4:07:82:c4:37:0a:1f:18:e8:30:28:16:18:0d:33:c7:38:8e:
3e:f5:b1:0e:b2:86:3b:a3:0e:27:40:ba:76:ac:eb:26:54:fe:
da:c8:8c:d1:ed:18:86:94:e7:51:86:74:c7:fd:e4:1a:f0:19:
28:3d:ef:00:cd:e2:9a:c3:2e:d8:be:d9:ef:e4:6f:fa:17:e6:
69:61:d8:b9:3b:f7:c8:16:7e:dc:3a:7c:9c:82:cd:fc:f2:9a:
b2:b4:6b:af:d4:80:63:6e:45:fd:f7:8b:f4:75:77:2d:e7:33:
0a:72:ee:de:1e:ec:e7:60:97:c9:51:cc:7a:2c:84:b4:ba:ea:
50:96:a7:46:7d:90:81:9a:0c:16:50:fe:bf:0e:d3:2c:e7:df:
75:c4:4a:36:54:9a:9c:8a:00:45:8f:45:cc:8a:60:b4:44:07:
42:51:f4:e4:c3:4d:dc:11:4d:c7:3a:f4:50:e8:73:d8:c6:6c:
41:27:c9:e8:6c:e4:4d:e4:4b:94:60:3d:49:12:9c:47:b4:7e:
21:ce:ee:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fJzaUB5Ku4kZP4gB9feOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTZlNjQwMTk4MDEzZGUxMmEyNTFmMDg2MDMwY2Q3OGM3
MzI1MTYwHhcNMjUwNjI4MTcwMTI2WhcNMjUwNjI5MTcwMTI2WjAzMTEwLwYDVQQD
Eyg2MTY2ZGRjMzZiZTUyNzMzMzEzODRkYmE1ZjZkOWE3N2NlZWVhODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgQJH7N5jXW5uQU3cSDMOC1jCum+
2DKiQaLJ2N7bAZTAxmHys76On67NMXctXg6NjIsZcozZ+5M+NqES7cfPoJvf9b0q
+hwPxUfVu0ZyfV81IK27tbUkXWRMZI+WV/0krNh1V32xMSTT5BvPm3F1Z78taWFS
Eu2b/Oj2tcRVh2NSm47IIG6RMNDjvQIoXy8jCMePQl/zwc0DiqESaqsueNtrG02j
TdgKO2ZzyiDwKa3tSfRcJUZ8fAbtff9dUslHWo5VAQSh1+FieuDnG3N44+POApkB
KuxTuKUcKtMFnWfbcsgE0qNOY0xVj3EJw6G4QMXcktUYh+OxgTVgp3iV7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFm3cNr5SczMThNul9tmnfO7qhrMB8GA1UdIwQY
MBaAFEKm5kAZgBPeEqJR8IYDDNeMcyUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFibVFCbUFFOTRTb2xId2hnTU0xNHh6SlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iYTJmM2QtNmJkMi00ZjMyLTgxYWYt
YzI4NzY3MGNjZTUxLzEvUXFibVFCbUFFOTRTb2xId2hnTU0xNHh6SlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9iYTJmM2QtNmJkMi00ZjMyLTgxYWYtYzI4NzY3MGNjZTUx
LzEvUXFibVFCbUFFOTRTb2xId2hnTU0xNHh6SlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmdlIqWF
XM2VtUqsDA8krg1xiJQ4L0teykY+UsFVjvdv7jxmPR+b9qjW8Ra1b3l8RPwsYz5Z
1AeCxDcKHxjoMCgWGA0zxziOPvWxDrKGO6MOJ0C6dqzrJlT+2siM0e0YhpTnUYZ0
x/3kGvAZKD3vAM3imsMu2L7Z7+Rv+hfmaWHYuTv3yBZ+3Dp8nILN/PKasrRrr9SA
Y25F/feL9HV3LeczCnLu3h7s52CXyVHMeiyEtLrqUJanRn2QgZoMFlD+vw7TLOff
dcRKNlSanIoARY9FzIpgtEQHQlH05MNN3BFNxzr0UOhz2MZsQSfJ6GzkTeRLlGA9
SRKcR7R+Ic7uyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:05 2025 by rpki-client