Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: g2+pzcyQaf7+s7J+phPtw/bdf4ZcHGUaMYYcESYBS0s=
Subject key identifier: A6:AF:33:56:3B:FD:D1:9D:03:00:4F:F2:F1:14:9C:37:AE:30:8B:A3
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 0197B7EA7B3A2C1AD74360BBC9DE35797BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: hzpQU+sm1joyeDD9PBvvuguiMmZtwSnxOZleUy78E7o=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7b:3a:2c:1a:d7:43:60:bb:c9:de:35:79:7b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=a6af33563bfdd19d03004ff2f1149c37ae308ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:63:16:f7:a1:79:94:41:91:44:e2:8d:29:
1e:07:54:3a:61:b1:02:65:c6:c7:57:79:d5:e4:90:
32:c8:d8:a0:87:35:62:5d:34:df:3c:ec:f3:91:1f:
48:97:02:83:84:60:ed:3e:4e:46:85:2a:5e:c8:a2:
bd:62:0b:7c:27:b4:e8:85:84:77:1d:5f:2a:7e:55:
52:be:28:79:71:52:49:e3:e9:bc:0b:19:7d:c0:6d:
d8:0a:25:da:72:84:19:62:38:a9:85:3c:74:88:f3:
11:9c:59:e8:5e:ea:3c:77:62:89:96:6e:a6:76:41:
31:c1:4b:a2:e5:ba:ae:05:b4:a0:0d:01:c0:f4:52:
a8:94:b8:37:79:e0:e2:03:e9:b2:44:05:f5:07:ae:
4e:c6:32:e3:04:94:0a:e6:9f:c3:87:b1:7e:25:50:
9a:95:57:72:81:3b:c2:ee:d4:1d:2a:17:db:36:45:
e8:a2:03:4c:74:e8:b2:5f:ad:50:f6:ba:0c:7e:a4:
5c:7e:bb:9f:32:f1:93:13:f6:7b:05:9c:03:ba:c5:
cf:c6:bc:f1:14:97:d2:56:cc:ae:76:f3:13:ee:cf:
fa:c0:2e:b5:a4:43:de:e7:60:9f:fc:05:a9:f1:bf:
63:9f:a4:53:0d:59:5f:5f:6b:28:c5:b1:88:9b:52:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AF:33:56:3B:FD:D1:9D:03:00:4F:F2:F1:14:9C:37:AE:30:8B:A3
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1f:ca:86:20:ce:14:0d:4b:b5:59:cc:db:54:d8:6f:1c:89:
ef:a8:3f:95:0a:23:fd:00:fa:4e:81:2c:97:e0:46:01:b0:86:
4b:11:fb:1b:a8:6a:6a:c2:01:4f:93:bc:38:d9:33:3e:3f:43:
dc:21:d9:7a:74:52:e3:9c:79:a3:34:39:22:90:23:0f:cf:91:
48:3a:58:2f:d2:f0:3f:6d:9e:b4:44:70:f3:d8:e9:8f:94:36:
2e:31:87:f2:fe:56:82:54:ad:1f:f3:6c:03:80:e7:38:76:d0:
7f:04:dc:9c:ee:81:8f:f6:68:6a:16:dd:d6:2a:33:20:d5:0c:
d6:75:ce:02:77:5e:ef:33:47:15:bf:e3:a3:16:02:71:af:92:
9e:a2:21:c4:32:b5:e1:57:8a:6c:e9:5b:19:62:e7:87:8b:1c:
63:a7:7a:61:39:cd:69:42:b6:dd:b4:a8:ea:b7:c3:b9:72:d0:
16:20:47:54:f4:30:c1:4c:e9:67:ad:e1:ca:1c:55:02:75:46:
86:84:70:68:f8:74:8e:5e:30:02:30:d2:d3:4a:70:9c:dc:83:
9e:4c:24:32:4f:a1:0e:64:5d:29:eb:30:1b:85:59:4b:ad:3f:
2c:78:8e:24:63:c7:d9:3c:2d:b3:5d:e1:c9:76:83:76:07:b7:
bd:fc:d4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ns6LBrXQ2C7yd41eXv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDRmYTU0NDAwYmM2Y2ZjMzBjYjgzMTFhODE5ZDViZGE0
MjFhNzIwHhcNMjUwNjI4MTkwMTI2WhcNMjUwNjI5MTkwMTI2WjAzMTEwLwYDVQQD
EyhhNmFmMzM1NjNiZmRkMTlkMDMwMDRmZjJmMTE0OWMzN2FlMzA4YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/ZjFveheZRBkUTijSkeB1Q6YbEC
ZcbHV3nV5JAyyNighzViXTTfPOzzkR9IlwKDhGDtPk5GhSpeyKK9Ygt8J7TohYR3
HV8qflVSvih5cVJJ4+m8Cxl9wG3YCiXacoQZYjiphTx0iPMRnFnoXuo8d2KJlm6m
dkExwUui5bquBbSgDQHA9FKolLg3eeDiA+myRAX1B65OxjLjBJQK5p/Dh7F+JVCa
lVdygTvC7tQdKhfbNkXoogNMdOiyX61Q9roMfqRcfrufMvGTE/Z7BZwDusXPxrzx
FJfSVsyudvMT7s/6wC61pEPe52Cf/AWp8b9jn6RTDVlfX2soxbGIm1LjmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKavM1Y7/dGdAwBP8vEUnDeuMIujMB8GA1UdIwQY
MBaAFEBE+lRAC8bPwwy4MRqBnVvaQhpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEt
YmI0MzNiYTQ3NmYyLzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZDU1NTEtMDMzMC00M2VhLTgwZjEtYmI0MzNiYTQ3NmYy
LzEvUUVUNlZFQUx4c19ERExneEdvR2RXOXBDR25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh/KhiDO
FA1LtVnM21TYbxyJ76g/lQoj/QD6ToEsl+BGAbCGSxH7G6hqasIBT5O8ONkzPj9D
3CHZenRS45x5ozQ5IpAjD8+RSDpYL9LwP22etERw89jpj5Q2LjGH8v5WglStH/Ns
A4DnOHbQfwTcnO6Bj/Zoahbd1iozINUM1nXOAnde7zNHFb/joxYCca+SnqIhxDK1
4VeKbOlbGWLnh4scY6d6YTnNaUK23bSo6rfDuXLQFiBHVPQwwUzpZ63hyhxVAnVG
hoRwaPh0jl4wAjDS00pwnNyDnkwkMk+hDmRdKeswG4VZS60/LHiOJGPH2Twts13h
yXaDdge3vfzU9g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:21 2025 by rpki-client