Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier: rUChOP3/2kgo6P2obEElnkrTrRDH12pPAhNzqiogXWw=
Subject key identifier: 2D:0B:54:B1:6E:D9:35:2D:12:38:B4:CB:21:9C:AD:C1:B2:6B:5F:22
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer: /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial: 0197B6A1512B9FBEFBB2DA6E6F1C28E3135A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number: 087E
Signing time: Sat 28 Jun 2025 13:01:54 +0000
Manifest this update: Sat 28 Jun 2025 13:01:54 +0000
Manifest next update: Sun 29 Jun 2025 13:01:54 +0000
Files and hashes: 1: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: J6yqq5T2GNjAEDlKRPhGy5dt5nMC5OnGY6zXHrq18rw=)
2: dwbiIWEratA3KWkL5imPi021V8I.roa (hash: uBYUZ2jEhyVMlLuwkanT9PAiy5t/N1UtpXaLMB0jCDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:51:2b:9f:be:fb:b2:da:6e:6f:1c:28:e3:13:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Validity
Not Before: Jun 28 13:01:54 2025 GMT
Not After : Jun 29 13:01:54 2025 GMT
Subject: CN=2d0b54b16ed9352d1238b4cb219cadc1b26b5f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:87:9b:d0:94:9b:c6:aa:79:6d:66:2e:30:34:
a6:97:de:99:d7:c4:0c:30:8a:b1:f2:a1:cc:22:35:
2e:7a:65:1e:9c:60:56:9c:a6:7b:6e:c8:42:ec:31:
54:65:f9:1e:2d:72:71:b8:ea:0b:93:38:c4:06:2a:
72:a6:87:b8:cc:0e:1d:80:67:fc:39:5d:cd:fd:33:
f8:bd:7e:df:d3:ac:c2:ab:a8:4b:72:04:bf:c4:31:
a5:1c:9c:80:3f:a1:d5:5e:93:de:cb:bc:a1:5a:5e:
84:59:e9:2e:ed:40:52:b4:01:35:44:26:7f:85:4c:
5e:69:fa:94:d3:5b:9e:fd:26:f9:63:f4:66:75:6f:
9f:6c:a4:aa:9a:f8:c7:0e:25:0d:ea:9a:9e:5a:16:
88:54:81:f4:96:40:c9:b9:99:b3:02:12:20:02:b7:
b4:08:6f:9a:d8:f7:3f:49:97:d4:29:8a:0e:13:43:
ed:5a:15:4c:cb:25:5c:96:4e:87:bb:99:dd:68:ef:
65:91:3f:e9:a3:94:68:9f:da:f7:aa:59:ac:16:51:
0b:12:69:70:42:1d:19:c0:a1:2d:1f:e9:ac:eb:23:
0b:99:1f:6c:fd:72:13:77:9d:ff:6e:f2:c9:1e:b9:
90:b4:e1:62:84:ae:b7:fc:a6:34:d7:34:f3:59:cd:
d4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0B:54:B1:6E:D9:35:2D:12:38:B4:CB:21:9C:AD:C1:B2:6B:5F:22
X509v3 Authority Key Identifier:
keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:84:83:5e:df:60:78:d3:4d:f1:d6:ff:a1:99:0e:36:b7:1b:
c5:a4:9d:29:e8:eb:09:b7:9a:19:7c:06:94:c9:2c:ba:1c:60:
54:73:b0:4c:11:2f:86:d2:0f:01:f8:32:93:2a:bc:7d:f4:4e:
3a:c3:ee:34:b4:fb:fb:41:5c:d6:fb:6e:10:e7:32:59:38:10:
de:1a:aa:7b:d0:79:91:12:75:ff:3d:c3:98:8c:eb:4f:08:f8:
18:f7:24:0f:11:36:1a:b4:a2:ac:9f:b6:31:07:04:de:8d:8f:
55:09:3d:2b:db:d8:89:ad:e9:4b:43:6f:ba:a6:2c:b2:65:51:
dc:43:a9:75:47:a8:03:41:ed:d7:b7:3f:4e:69:29:05:1f:8f:
fc:84:25:58:40:f8:2f:03:e4:04:33:af:1c:50:d5:20:75:1e:
55:82:a7:7d:dd:1a:8b:6c:26:18:c5:da:17:0e:ec:b5:84:24:
95:f8:5a:d5:bc:2d:4d:6b:06:70:2b:7d:3d:fb:ae:81:5d:45:
79:6d:a9:9c:0a:dd:4a:45:58:a2:5a:9a:3b:bc:56:74:88:3a:
43:0a:18:3e:95:fd:81:a1:ef:16:2e:e5:4c:fe:ef:14:f2:64:
27:7b:3b:ab:00:6c:b3:30:56:3d:02:ac:91:9d:35:96:fe:01:
88:fa:8e:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oVErn777stpubxwo4xNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDY0NTFiOTIzYTA3ZTM2NWIyZjE5MGZhYTU1YTU3MmRk
MGZhZmMwHhcNMjUwNjI4MTMwMTU0WhcNMjUwNjI5MTMwMTU0WjAzMTEwLwYDVQQD
EygyZDBiNTRiMTZlZDkzNTJkMTIzOGI0Y2IyMTljYWRjMWIyNmI1ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIeb0JSbxqp5bWYuMDSml96Z18QM
MIqx8qHMIjUuemUenGBWnKZ7bshC7DFUZfkeLXJxuOoLkzjEBipypoe4zA4dgGf8
OV3N/TP4vX7f06zCq6hLcgS/xDGlHJyAP6HVXpPey7yhWl6EWeku7UBStAE1RCZ/
hUxeafqU01ue/Sb5Y/RmdW+fbKSqmvjHDiUN6pqeWhaIVIH0lkDJuZmzAhIgAre0
CG+a2Pc/SZfUKYoOE0PtWhVMyyVclk6Hu5ndaO9lkT/po5Ron9r3qlmsFlELEmlw
Qh0ZwKEtH+ms6yMLmR9s/XITd53/bvLJHrmQtOFihK63/KY01zTzWc3UqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0LVLFu2TUtEji0yyGcrcGya18iMB8GA1UdIwQY
MBaAFEHWRRuSOgfjZbLxkPqlWlct0Pr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEt
ZjU2Yzg0OTQzYTdkLzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEtZjU2Yzg0OTQzYTdk
LzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYSDXt9g
eNNN8db/oZkONrcbxaSdKejrCbeaGXwGlMksuhxgVHOwTBEvhtIPAfgykyq8ffRO
OsPuNLT7+0Fc1vtuEOcyWTgQ3hqqe9B5kRJ1/z3DmIzrTwj4GPckDxE2GrSirJ+2
MQcE3o2PVQk9K9vYia3pS0NvuqYssmVR3EOpdUeoA0Ht17c/TmkpBR+P/IQlWED4
LwPkBDOvHFDVIHUeVYKnfd0ai2wmGMXaFw7stYQklfha1bwtTWsGcCt9PfuugV1F
eW2pnArdSkVYolqaO7xWdIg6QwoYPpX9gaHvFi7lTP7vFPJkJ3s7qwBsszBWPQKs
kZ01lv4BiPqOBw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:51 2025 by rpki-client