Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: XKutBhud9vE/QhPk+FAVE37rSNS0JJYr+SReD5bgAC0=
Subject key identifier: 5E:C5:DD:EE:9D:CE:1A:58:2C:F9:6B:4B:36:7B:B2:97:DF:DF:AB:76
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 0197B7EA2FBDC1C85559B210ECD31D415610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0A97
Signing time: Sat 28 Jun 2025 19:01:07 +0000
Manifest this update: Sat 28 Jun 2025 19:01:07 +0000
Manifest next update: Sun 29 Jun 2025 19:01:07 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: B/iSMT4w1gepss7hpDieBKtfd4jABSMy8ATPMzIyytA=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2f:bd:c1:c8:55:59:b2:10:ec:d3:1d:41:56:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Jun 28 19:01:07 2025 GMT
Not After : Jun 29 19:01:07 2025 GMT
Subject: CN=5ec5ddee9dce1a582cf96b4b367bb297dfdfab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:b5:07:0b:49:a5:5b:e7:e4:5a:46:a7:03:
1b:8f:1d:39:fe:bf:a3:ba:f7:88:5f:4f:69:01:b2:
97:5a:58:d5:e7:18:ee:ab:5b:87:09:fe:5c:fe:a8:
dc:41:b6:e5:8d:5c:a9:26:4b:76:fd:9e:71:18:1e:
ba:bc:77:48:54:2f:50:14:d3:68:d6:e1:a7:3b:cc:
f0:4c:59:81:25:30:b9:00:c3:21:31:2d:d0:89:2d:
b3:c3:f5:91:82:d3:fa:4c:b3:e9:86:01:6f:96:2a:
f1:c2:17:cf:cb:1c:64:70:b2:84:75:4e:3c:33:1a:
48:1e:0c:2f:b7:d7:a5:25:8f:32:9d:0e:9a:26:83:
5b:c9:f4:48:8d:57:33:a6:ad:4d:6d:6b:30:de:5a:
7a:50:55:36:02:53:c7:78:ac:f0:ee:35:ed:fd:38:
6b:8f:a1:48:ac:97:8b:4e:2a:45:19:a2:a2:e3:e1:
eb:46:a9:4e:80:cc:54:48:d1:90:5e:5f:1d:d6:c2:
42:9c:c7:5f:a4:ad:90:99:0a:43:53:a8:9f:e4:e5:
61:5a:c7:d5:38:fa:b5:fb:52:37:0c:b3:d3:45:a1:
d6:80:56:3f:cf:40:56:ee:f6:74:05:6a:b9:e7:ed:
83:f3:83:4a:0b:df:24:89:c3:b2:d5:26:a2:a9:ca:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:DD:EE:9D:CE:1A:58:2C:F9:6B:4B:36:7B:B2:97:DF:DF:AB:76
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cb:cc:5f:70:0d:c9:d7:96:c4:5c:4d:e1:e8:43:5d:bb:5c:
39:8d:59:a8:46:94:72:4b:77:5b:4c:1d:b8:54:fc:6a:26:bc:
83:ce:12:10:2d:cb:ef:19:6e:72:c8:f9:e2:77:51:69:24:88:
3a:9f:17:9c:b3:0a:fb:92:6f:2b:30:d2:63:b6:bf:b3:d8:f2:
fd:42:09:46:75:9f:77:cf:6c:8a:97:93:76:46:33:46:92:22:
a7:eb:0d:09:2b:1d:f8:8a:5b:e6:62:4d:6b:58:ab:b3:91:7c:
1a:5b:00:ea:81:c2:d2:a3:0c:56:5b:de:bc:99:fe:aa:87:3b:
cf:9d:23:07:41:0c:a5:44:06:82:6c:e3:d3:8d:d4:0e:46:e7:
bb:ed:27:3f:67:bd:30:9c:bd:35:83:d2:21:5e:fd:01:d7:bc:
bd:8e:06:57:81:f7:84:2e:3c:15:d4:52:fe:05:c5:63:52:4d:
39:ff:19:6f:0d:ab:f6:ad:1b:f5:a4:41:5e:fd:f3:2a:9b:67:
19:84:ff:4a:52:da:08:d7:d3:31:75:85:4d:59:aa:3f:c6:bc:
0f:e7:58:e9:d1:2c:81:48:0e:13:49:59:18:34:6d:da:a8:bc:
3c:91:36:ea:9c:44:db:91:2f:62:cc:67:71:83:b9:a2:d9:19:
ff:49:02:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36i+9wchVWbIQ7NMdQVYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw
MTkwODQwHhcNMjUwNjI4MTkwMTA3WhcNMjUwNjI5MTkwMTA3WjAzMTEwLwYDVQQD
Eyg1ZWM1ZGRlZTlkY2UxYTU4MmNmOTZiNGIzNjdiYjI5N2RmZGZhYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBu1BwtJpVvn5FpGpwMbjx05/r+j
uveIX09pAbKXWljV5xjuq1uHCf5c/qjcQbbljVypJkt2/Z5xGB66vHdIVC9QFNNo
1uGnO8zwTFmBJTC5AMMhMS3QiS2zw/WRgtP6TLPphgFvlirxwhfPyxxkcLKEdU48
MxpIHgwvt9elJY8ynQ6aJoNbyfRIjVczpq1NbWsw3lp6UFU2AlPHeKzw7jXt/Thr
j6FIrJeLTipFGaKi4+HrRqlOgMxUSNGQXl8d1sJCnMdfpK2QmQpDU6if5OVhWsfV
OPq1+1I3DLPTRaHWgFY/z0BW7vZ0BWq55+2D84NKC98kicOy1Saiqco1qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7F3e6dzhpYLPlrSzZ7spff36t2MB8GA1UdIwQY
MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt
ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw
LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsvMX3AN
ydeWxFxN4ehDXbtcOY1ZqEaUckt3W0wduFT8aia8g84SEC3L7xlucsj54ndRaSSI
Op8XnLMK+5JvKzDSY7a/s9jy/UIJRnWfd89sipeTdkYzRpIip+sNCSsd+Ipb5mJN
a1irs5F8GlsA6oHC0qMMVlvevJn+qoc7z50jB0EMpUQGgmzj043UDkbnu+0nP2e9
MJy9NYPSIV79Ade8vY4GV4H3hC48FdRS/gXFY1JNOf8Zbw2r9q0b9aRBXv3zKptn
GYT/SlLaCNfTMXWFTVmqP8a8D+dY6dEsgUgOE0lZGDRt2qi8PJE26pxE25EvYsxn
cYO5otkZ/0kCaA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:44 2025 by rpki-client