Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: PK0izQIo1HwAkbwyPm0HqrZk0I6kJU/Q0PYNQG9ymKc=
Subject key identifier: 8F:A0:E6:CF:5B:8F:74:4C:44:E6:3F:42:47:3B:C5:13:C7:D2:25:E0
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 0197B5C4E02FFA1AA6759493BAD6F803A9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 09:01:07 +0000
Manifest this update: Sat 28 Jun 2025 09:01:07 +0000
Manifest next update: Sun 29 Jun 2025 09:01:07 +0000
Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: ozDn7O+DTQyBe2FNr+QmQN8ZgFJyaDKgsKRNfhpcTpU=)
2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:e0:2f:fa:1a:a6:75:94:93:ba:d6:f8:03:a9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jun 28 09:01:07 2025 GMT
Not After : Jun 29 09:01:07 2025 GMT
Subject: CN=8fa0e6cf5b8f744c44e63f42473bc513c7d225e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:b5:25:93:f8:80:6b:b3:cb:3d:89:55:b9:
f8:b8:3e:e1:2d:2b:6c:7b:5a:9b:d0:50:eb:cc:95:
fc:4e:94:f3:d9:62:e0:41:fa:f6:33:1c:8c:f6:4d:
45:6d:00:db:08:76:19:33:ac:12:8f:6b:d8:7e:eb:
95:0a:56:11:11:ef:c1:6e:ef:1b:7e:51:17:95:f4:
f9:10:da:72:f4:62:9a:b5:1d:62:e0:8b:b6:8d:ae:
f8:13:03:fc:cd:df:2a:9a:3f:51:30:00:2c:3e:04:
24:95:b7:aa:f5:9f:f8:e5:d4:66:56:9d:f8:ac:8c:
f6:0d:c9:34:0f:97:bc:e3:85:ca:b0:4a:13:39:93:
72:00:ec:73:3f:e7:c8:de:c9:e7:f6:e2:a7:a1:b1:
2c:41:5a:bc:3b:25:7f:1f:59:08:af:9b:5a:4b:ad:
73:61:b1:30:dc:f6:2d:f8:48:25:85:a7:0e:ae:8d:
75:0f:99:76:c0:af:74:6e:bd:25:e8:36:76:e2:d9:
f0:6c:67:05:f2:97:b7:03:e6:0c:02:3f:26:8f:af:
1f:f1:d5:f5:39:cd:ea:2c:6c:7c:e9:dd:b5:f8:0f:
8e:0d:27:a4:0d:39:8e:3b:7f:e1:4a:dc:72:bd:9a:
ce:08:a9:30:74:4f:4f:33:f9:d6:ce:17:74:8f:0c:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:E6:CF:5B:8F:74:4C:44:E6:3F:42:47:3B:C5:13:C7:D2:25:E0
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:35:bf:84:bb:69:c9:e0:84:d9:a0:7d:ec:a9:1c:53:5a:dc:
ae:00:23:3e:a5:f3:c8:65:9d:9c:92:62:90:ec:63:a4:04:7a:
9d:d6:8d:71:71:70:9d:3d:6c:b7:66:1f:d1:55:05:70:da:cd:
a0:5e:a5:da:73:46:76:9c:c6:12:62:27:16:39:08:86:f3:ab:
39:7d:6a:77:48:2c:be:2c:fe:18:ba:15:40:65:b5:41:ec:e3:
df:5f:ea:fb:fc:e0:ba:6e:e7:d7:90:e9:c7:50:07:c1:11:2c:
8d:99:28:3a:6e:59:e5:1d:39:c3:2c:38:fc:05:98:cb:dc:8d:
e8:34:e9:37:4a:0d:5b:21:4a:7e:0d:ef:59:f4:e6:2d:50:ad:
6e:f2:ef:8f:30:a6:40:68:16:ba:f8:9e:53:6e:b2:1d:40:41:
67:75:31:54:a9:30:06:55:29:a2:4d:00:e9:5b:81:8e:ce:29:
af:ed:31:64:f6:b2:f7:8e:2b:95:f8:62:e3:50:40:b4:2c:16:
19:7d:15:c6:0d:0b:ba:f5:f9:27:81:fd:42:e6:52:c9:e4:46:
99:e5:8f:76:8d:a1:96:02:03:52:a4:eb:a7:8c:1d:23:aa:ec:
00:7a:43:0c:17:e7:75:4b:2a:db:5c:1c:f3:a9:cb:93:ea:1b:
2c:63:da:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xOAv+hqmdZSTutb4A6ngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm
NGNlM2MwHhcNMjUwNjI4MDkwMTA3WhcNMjUwNjI5MDkwMTA3WjAzMTEwLwYDVQQD
Eyg4ZmEwZTZjZjViOGY3NDRjNDRlNjNmNDI0NzNiYzUxM2M3ZDIyNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9+1JZP4gGuzyz2JVbn4uD7hLSts
e1qb0FDrzJX8TpTz2WLgQfr2MxyM9k1FbQDbCHYZM6wSj2vYfuuVClYREe/Bbu8b
flEXlfT5ENpy9GKatR1i4Iu2ja74EwP8zd8qmj9RMAAsPgQklbeq9Z/45dRmVp34
rIz2Dck0D5e844XKsEoTOZNyAOxzP+fI3snn9uKnobEsQVq8OyV/H1kIr5taS61z
YbEw3PYt+EglhacOro11D5l2wK90br0l6DZ24tnwbGcF8pe3A+YMAj8mj68f8dX1
Oc3qLGx86d21+A+ODSekDTmOO3/hStxyvZrOCKkwdE9PM/nWzhd0jwxVhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+g5s9bj3RMROY/Qkc7xRPH0iXgMB8GA1UdIwQY
MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt
Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw
LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDW/hLtp
yeCE2aB97KkcU1rcrgAjPqXzyGWdnJJikOxjpAR6ndaNcXFwnT1st2Yf0VUFcNrN
oF6l2nNGdpzGEmInFjkIhvOrOX1qd0gsviz+GLoVQGW1Qezj31/q+/zgum7n15Dp
x1AHwREsjZkoOm5Z5R05wyw4/AWYy9yN6DTpN0oNWyFKfg3vWfTmLVCtbvLvjzCm
QGgWuvieU26yHUBBZ3UxVKkwBlUpok0A6VuBjs4pr+0xZPay944rlfhi41BAtCwW
GX0Vxg0LuvX5J4H9QuZSyeRGmeWPdo2hlgIDUqTrp4wdI6rsAHpDDBfndUsq21wc
86nLk+obLGPaNA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:49 2025 by rpki-client