Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier: HtYMnN5ONcteF+Z32455OqFn9bIulnn2GM5SlM1Fg14=
Subject key identifier: 33:11:7A:6E:E1:2E:CF:7A:7D:1A:E5:0B:4A:EA:F7:5C:1C:4C:18:65
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer: /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial: 0197B77CE4E6444AABFCF164B4A240300F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number: 0455
Signing time: Sat 28 Jun 2025 17:01:44 +0000
Manifest this update: Sat 28 Jun 2025 17:01:44 +0000
Manifest next update: Sun 29 Jun 2025 17:01:44 +0000
Files and hashes: 1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: 38OH8zJcltLTf4+LttTbIPKnoNfiNLS9y/aJ/GreJxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e4:e6:44:4a:ab:fc:f1:64:b4:a2:40:30:0f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Validity
Not Before: Jun 28 17:01:44 2025 GMT
Not After : Jun 29 17:01:44 2025 GMT
Subject: CN=33117a6ee12ecf7a7d1ae50b4aeaf75c1c4c1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:3a:1c:af:e5:da:a1:0f:78:5d:f1:ae:36:
97:f5:68:70:fb:d9:c6:c2:b9:8c:b3:1c:a4:dd:a0:
37:70:43:a1:3f:eb:34:dc:ac:a3:10:f7:12:33:38:
b8:e5:52:31:80:41:dc:62:f9:af:eb:29:19:38:ed:
e5:20:21:b0:8d:83:93:60:c3:7d:cb:7d:a3:5d:07:
8b:2a:3a:af:75:f9:a4:d0:7c:67:be:f5:26:a8:de:
39:07:2a:6a:74:64:ec:67:ce:b7:a2:0b:12:a3:9c:
79:c2:b9:f9:af:1f:ec:66:03:3f:3e:93:0e:9f:ae:
e3:74:02:04:c5:7d:b8:60:28:ca:fa:2f:6a:b6:87:
3f:be:ba:d3:f7:0e:ed:65:35:b9:e2:6d:01:1a:73:
b7:25:51:5c:1d:20:15:bd:10:6a:4c:02:e6:3c:51:
61:cf:32:f6:6b:9b:de:f0:28:a1:e0:73:fa:69:3a:
0d:b4:60:41:0c:60:98:8c:eb:8f:3c:90:86:b8:f2:
cc:59:32:55:87:02:1d:ec:00:06:14:2f:c4:c7:42:
f5:2d:a0:c4:93:b9:dd:a6:43:55:ec:c2:a9:b7:21:
7d:9c:61:85:6b:23:ed:97:bd:dc:14:cd:4b:35:df:
22:4f:57:58:46:d4:42:cf:51:2c:f5:18:c6:b5:70:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:11:7A:6E:E1:2E:CF:7A:7D:1A:E5:0B:4A:EA:F7:5C:1C:4C:18:65
X509v3 Authority Key Identifier:
keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:57:fb:62:45:9d:fc:b3:a6:5b:ff:57:77:02:f0:57:43:ea:
e4:3f:a9:31:99:04:e3:c6:db:3d:4d:9d:bb:cc:52:6b:85:f6:
02:95:86:71:8f:fd:58:26:b5:4b:fc:ed:18:49:37:44:c0:61:
25:0c:a5:5e:8e:84:4d:9b:4d:cb:3e:2f:f4:5a:df:f9:6a:77:
ed:98:73:88:97:2a:d5:b0:2d:63:f3:78:a5:c0:ab:78:1e:30:
7f:1a:d2:cb:0f:4a:12:79:47:fa:f2:98:a6:f7:24:0b:a0:95:
60:38:99:47:fb:3b:18:3c:77:7d:ca:60:9a:17:12:38:e7:f6:
9e:2b:b4:c1:86:ce:3d:4d:e2:da:3e:df:b2:33:b9:88:f5:7f:
74:50:d3:94:25:00:2d:0f:84:a0:0a:f8:31:2c:1f:ac:f6:5e:
b8:39:e2:b3:43:3a:99:f3:ae:f6:6d:5b:76:a0:6d:86:d0:da:
41:90:0b:96:db:2c:74:5e:f6:96:3e:1d:92:c2:6f:88:c1:3b:
76:cb:6c:00:82:19:18:79:71:cf:f0:e1:23:25:9c:14:6f:a8:
66:bd:c3:18:b6:97:23:a0:b5:aa:d2:10:2a:45:1a:10:16:a1:
b4:1f:41:c5:10:d6:aa:f9:40:80:da:2c:56:36:09:46:14:e5:
62:78:a8:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fOTmREqr/PFktKJAMA+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWJmY2IwNTU4Yzg2ZjgxM2QwMTEwNDVmZDE3ZDE2YWUy
ZWJlOGUwHhcNMjUwNjI4MTcwMTQ0WhcNMjUwNjI5MTcwMTQ0WjAzMTEwLwYDVQQD
EygzMzExN2E2ZWUxMmVjZjdhN2QxYWU1MGI0YWVhZjc1YzFjNGMxODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtms6HK/l2qEPeF3xrjaX9Whw+9nG
wrmMsxyk3aA3cEOhP+s03KyjEPcSMzi45VIxgEHcYvmv6ykZOO3lICGwjYOTYMN9
y32jXQeLKjqvdfmk0HxnvvUmqN45BypqdGTsZ863ogsSo5x5wrn5rx/sZgM/PpMO
n67jdAIExX24YCjK+i9qtoc/vrrT9w7tZTW54m0BGnO3JVFcHSAVvRBqTALmPFFh
zzL2a5ve8Cih4HP6aToNtGBBDGCYjOuPPJCGuPLMWTJVhwId7AAGFC/Ex0L1LaDE
k7ndpkNV7MKptyF9nGGFayPtl73cFM1LNd8iT1dYRtRCz1Es9RjGtXA92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMRem7hLs96fRrlC0rq91wcTBhlMB8GA1UdIwQY
MBaAFEFb/LBVjIb4E9ARBF/RfRauLr6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEt
ODcxZWRlOTAxNGU0LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEtODcxZWRlOTAxNGU0
LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1f7YkWd
/LOmW/9XdwLwV0Pq5D+pMZkE48bbPU2du8xSa4X2ApWGcY/9WCa1S/ztGEk3RMBh
JQylXo6ETZtNyz4v9Frf+Wp37ZhziJcq1bAtY/N4pcCreB4wfxrSyw9KEnlH+vKY
pvckC6CVYDiZR/s7GDx3fcpgmhcSOOf2niu0wYbOPU3i2j7fsjO5iPV/dFDTlCUA
LQ+EoAr4MSwfrPZeuDnis0M6mfOu9m1bdqBthtDaQZALltssdF72lj4dksJviME7
dstsAIIZGHlxz/DhIyWcFG+oZr3DGLaXI6C1qtIQKkUaEBahtB9BxRDWqvlAgNos
VjYJRhTlYniokA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:21 2025 by rpki-client