Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: v3uoR9dGmcb5rlLNoKvZw8tvc3FOnCc28tWijchjKZI=
Subject key identifier: B4:C5:9F:3E:60:CC:76:AD:4B:3D:0B:67:E5:32:38:AD:7E:79:EF:95
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 0197B7B3591E90BA90BC273FAE53625FD4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:13 +0000
Manifest this update: Sat 28 Jun 2025 18:01:13 +0000
Manifest next update: Sun 29 Jun 2025 18:01:13 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: Kd28lf3fh48pJppfGQw+y8UavFBj+1PQmerUiqWt09U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:59:1e:90:ba:90:bc:27:3f:ae:53:62:5f:d4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Jun 28 18:01:13 2025 GMT
Not After : Jun 29 18:01:13 2025 GMT
Subject: CN=b4c59f3e60cc76ad4b3d0b67e53238ad7e79ef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:73:8b:a0:b6:d0:dd:8d:b6:e0:9f:8d:83:
09:6a:43:a5:3e:9b:a3:14:94:07:76:f2:05:f4:97:
26:9f:ed:fe:9f:fd:b5:60:5c:3d:a7:c8:39:01:21:
2c:ca:ee:8d:22:ef:dc:7c:c6:23:d8:8d:21:59:a0:
81:45:2d:4e:d0:43:27:6f:d9:34:0a:2b:37:64:4e:
6c:50:34:65:68:de:52:b6:31:c9:06:89:f0:2d:c5:
73:ca:b8:a6:3d:dd:b2:16:f2:3b:93:b8:1b:73:5e:
c7:da:3d:9c:b2:0f:1b:61:c3:fd:a5:19:b2:44:53:
84:2d:39:52:fc:8e:a4:20:d6:f3:f7:2e:cd:99:cb:
59:a8:73:90:bd:e4:b2:e7:d6:0d:a9:9b:b5:05:c6:
2e:f9:e6:3e:e7:b6:e6:f0:06:b8:93:35:75:db:3d:
c1:72:17:e6:97:4c:88:24:61:a9:f3:36:bb:20:bb:
8d:34:cc:d6:85:9a:ac:d6:ff:04:f4:c4:2e:d2:f3:
ec:9d:be:13:d1:11:f6:0e:a5:ba:bc:03:07:a3:e9:
75:81:14:04:04:09:90:3e:11:6d:ee:f8:22:c9:13:
3d:10:4e:6a:ff:78:b1:b5:bc:ee:33:66:ff:31:14:
1c:0c:f6:0a:84:bf:5f:a2:35:e4:50:99:f5:17:5e:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C5:9F:3E:60:CC:76:AD:4B:3D:0B:67:E5:32:38:AD:7E:79:EF:95
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c6:9d:f6:6a:6f:91:56:f4:bc:35:8d:71:5c:4a:d8:26:e9:
39:c6:e6:11:8a:17:15:d0:ed:12:2a:27:c0:bd:c8:64:cf:36:
9b:37:7d:a3:27:d7:f5:ca:8a:8e:1f:a8:17:bc:7e:f6:11:fa:
d4:d2:b0:7a:09:bc:35:ff:97:e9:46:82:63:12:a1:ce:1e:2c:
1f:c2:e9:68:b5:87:91:53:4d:39:cc:6e:0d:e3:4c:6d:7f:c9:
33:18:f1:89:65:a3:a0:39:04:f2:4e:fd:3d:b4:e7:53:16:e9:
47:66:d8:fa:6e:8a:dd:11:88:57:b3:44:86:e3:80:06:38:af:
b2:bb:af:a0:5c:32:98:cb:8b:9d:1c:41:dd:e9:01:5c:c3:49:
01:b9:e5:6b:e7:cd:ca:ff:77:a7:e2:6b:ef:58:1f:24:7f:e7:
a3:cc:d3:d6:10:5e:dc:12:55:3c:74:74:2e:b0:3a:3e:5c:76:
53:fd:2d:80:4f:b3:81:ba:c3:59:ed:61:76:ac:1d:ae:dd:e5:
70:8f:80:43:ca:24:cd:2c:3c:90:61:75:d4:1b:b6:a4:eb:92:
8e:9e:67:ee:8b:92:a7:fd:54:f7:be:ad:46:e2:7e:fb:3e:47:
ca:ac:66:d2:66:e8:5b:20:55:02:a7:de:58:e3:4a:85:dd:ee:
36:64:e5:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1kekLqQvCc/rlNiX9TKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWM0MzIyMDgyMTkxYzc5ZTJkODZkYjRlMWJmOWQwNzE4
ZTI3ZTkwHhcNMjUwNjI4MTgwMTEzWhcNMjUwNjI5MTgwMTEzWjAzMTEwLwYDVQQD
EyhiNGM1OWYzZTYwY2M3NmFkNGIzZDBiNjdlNTMyMzhhZDdlNzllZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aZzi6C20N2NtuCfjYMJakOlPpuj
FJQHdvIF9Jcmn+3+n/21YFw9p8g5ASEsyu6NIu/cfMYj2I0hWaCBRS1O0EMnb9k0
Cis3ZE5sUDRlaN5StjHJBonwLcVzyrimPd2yFvI7k7gbc17H2j2csg8bYcP9pRmy
RFOELTlS/I6kINbz9y7NmctZqHOQveSy59YNqZu1BcYu+eY+57bm8Aa4kzV12z3B
chfml0yIJGGp8za7ILuNNMzWhZqs1v8E9MQu0vPsnb4T0RH2DqW6vAMHo+l1gRQE
BAmQPhFt7vgiyRM9EE5q/3ixtbzuM2b/MRQcDPYKhL9fojXkUJn1F176yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTFnz5gzHatSz0LZ+UyOK1+ee+VMB8GA1UdIwQY
MBaAFEEcQyIIIZHHni2G204b+dBxjifpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMt
ZjM4MTBiZDcwMzc2LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMtZjM4MTBiZDcwMzc2
LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcad9mpv
kVb0vDWNcVxK2CbpOcbmEYoXFdDtEionwL3IZM82mzd9oyfX9cqKjh+oF7x+9hH6
1NKwegm8Nf+X6UaCYxKhzh4sH8LpaLWHkVNNOcxuDeNMbX/JMxjxiWWjoDkE8k79
PbTnUxbpR2bY+m6K3RGIV7NEhuOABjivsruvoFwymMuLnRxB3ekBXMNJAbnla+fN
yv93p+Jr71gfJH/no8zT1hBe3BJVPHR0LrA6Plx2U/0tgE+zgbrDWe1hdqwdrt3l
cI+AQ8okzSw8kGF11Bu2pOuSjp5n7ouSp/1U976tRuJ++z5Hyqxm0mboWyBVAqfe
WONKhd3uNmTlfA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:55 2025 by rpki-client