Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: IBaA8eLptwZchRY24C93cvVkJF0D7CWH6sucO2nMV6g=
Subject key identifier: 64:87:4A:8F:A5:75:8B:D9:CD:A0:07:40:A4:DD:5A:AF:3E:16:30:65
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 0197B70E83948511CA311D78F12713CC9A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: DcPAz7BHvv4a6vnyqBx9MygwZyQqgONJs/jhNZTRmFg=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:83:94:85:11:ca:31:1d:78:f1:27:13:cc:9a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=64874a8fa5758bd9cda00740a4dd5aaf3e163065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:07:bf:4a:b8:00:f2:1d:5d:36:1a:01:d9:
70:2d:bf:dd:44:df:69:40:f4:19:a6:f1:72:2e:7e:
95:b2:6a:4b:81:16:42:1b:e9:f6:13:ef:55:71:9b:
a8:66:aa:3a:92:d6:2b:54:db:f9:b4:de:a5:db:e8:
85:12:09:c1:91:09:cb:43:d8:c3:d1:e5:7b:44:f3:
ae:bc:be:c6:24:b6:1e:6f:77:93:18:1f:83:59:e6:
e3:b5:05:c6:04:b5:47:53:45:5c:34:93:6f:78:53:
dc:94:83:cf:ad:b4:6a:52:dd:14:67:99:01:c0:ee:
46:1e:b2:d3:21:6b:7f:58:2f:77:77:04:12:8b:22:
af:3a:f1:c4:1f:0f:a4:1f:5a:b9:16:e7:9b:67:5f:
0e:c3:52:92:26:61:62:fe:53:e7:ea:a3:6e:ea:88:
2b:aa:12:62:81:53:80:bc:64:97:db:4f:a5:c5:83:
94:1e:cf:89:a5:29:32:95:26:11:21:c8:47:bb:5c:
01:3e:64:99:54:d1:e0:05:b7:59:5b:be:c2:91:1a:
bc:4e:0e:52:4e:71:95:3d:16:85:7c:cb:07:71:79:
d2:2b:ec:f5:2c:b7:53:0e:9b:f3:40:d8:b0:3c:66:
a5:19:e4:ec:23:48:ce:13:82:31:d4:78:96:40:eb:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:4A:8F:A5:75:8B:D9:CD:A0:07:40:A4:DD:5A:AF:3E:16:30:65
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fc:ea:68:23:64:64:48:4b:cc:9a:d9:7d:32:fe:f2:3f:cc:
ff:e5:5a:9f:5c:cf:ef:84:4c:53:f4:e2:a6:04:c7:35:96:a2:
87:a9:95:d9:68:46:fe:b5:e6:57:d6:d1:fa:f3:bd:c3:72:ce:
4f:87:3e:03:5f:a1:bb:30:70:e3:a0:cf:6f:ae:ee:55:f2:d1:
79:2a:42:e8:1b:2b:4f:ff:c7:5e:b2:3f:5a:c4:20:78:31:0f:
7c:d0:2b:c8:a4:5c:bb:24:8b:88:cf:75:3b:63:1a:6a:0c:59:
2d:f0:66:9a:44:0c:25:9b:8b:15:c9:64:a8:da:36:f2:01:f5:
f8:45:f4:26:dd:da:b3:d6:41:82:98:6c:69:73:67:80:1f:20:
5a:8d:e2:16:5c:f8:01:e4:c4:2b:ff:ae:4c:af:74:71:7f:cc:
c1:0e:ed:17:ba:37:2b:c6:c7:c1:e3:e6:af:5b:30:e4:45:dc:
17:c2:3c:b9:94:92:4b:bc:c4:0a:cf:e7:6c:25:ca:50:83:a1:
54:d3:dd:d3:6d:42:01:4c:f0:16:4e:32:7d:55:b7:d1:15:f5:
27:03:74:d5:02:77:f1:a3:52:aa:46:dd:b8:d0:22:c8:a5:69:
d2:88:2d:03:b1:f5:14:22:15:ba:ad:5e:c3:e8:58:da:ef:0e:
b2:dc:26:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoOUhRHKMR148ScTzJp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx
YTI4YjkwHhcNMjUwNjI4MTUwMTEwWhcNMjUwNjI5MTUwMTEwWjAzMTEwLwYDVQQD
Eyg2NDg3NGE4ZmE1NzU4YmQ5Y2RhMDA3NDBhNGRkNWFhZjNlMTYzMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSAHv0q4APIdXTYaAdlwLb/dRN9p
QPQZpvFyLn6VsmpLgRZCG+n2E+9VcZuoZqo6ktYrVNv5tN6l2+iFEgnBkQnLQ9jD
0eV7RPOuvL7GJLYeb3eTGB+DWebjtQXGBLVHU0VcNJNveFPclIPPrbRqUt0UZ5kB
wO5GHrLTIWt/WC93dwQSiyKvOvHEHw+kH1q5FuebZ18Ow1KSJmFi/lPn6qNu6ogr
qhJigVOAvGSX20+lxYOUHs+JpSkylSYRIchHu1wBPmSZVNHgBbdZW77CkRq8Tg5S
TnGVPRaFfMsHcXnSK+z1LLdTDpvzQNiwPGalGeTsI0jOE4Ix1HiWQOtagwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSHSo+ldYvZzaAHQKTdWq8+FjBlMB8GA1UdIwQY
MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt
ODMzMGU3ZTMyZTE5LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5
LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/zqaCNk
ZEhLzJrZfTL+8j/M/+Van1zP74RMU/TipgTHNZaih6mV2WhG/rXmV9bR+vO9w3LO
T4c+A1+huzBw46DPb67uVfLReSpC6BsrT//HXrI/WsQgeDEPfNAryKRcuySLiM91
O2MaagxZLfBmmkQMJZuLFclkqNo28gH1+EX0Jt3as9ZBgphsaXNngB8gWo3iFlz4
AeTEK/+uTK90cX/MwQ7tF7o3K8bHwePmr1sw5EXcF8I8uZSSS7zECs/nbCXKUIOh
VNPd021CAUzwFk4yfVW30RX1JwN01QJ38aNSqkbduNAiyKVp0ogtA7H1FCIVuq1e
w+hY2u8OstwmCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:21 2025 by rpki-client