Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json)
Hash identifier: 4LVxDWVAGwDDvZ5smJQliHIz5zDMsPNhrd5FLke0mYY=
Subject key identifier: E7:24:81:A1:CB:28:7B:95:CC:82:04:C4:E1:8D:65:24:55:70:EE:AE
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 0197B745B4A3A8F9C6AD86ACDCCC0A09B995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
Manifest number: 10F9
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: C3yypRlZtvO4qRUDoeqrvhpXXFU.roa (hash: U5x8oZ9ETTHkITHFM+Dz7ZwF5Z54RJdp83tFjx6Le08=)
2: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: +knfaHyikap1iAcWWa5I6t0oIBoBCVQS60ihDzdgwiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b4:a3:a8:f9:c6:ad:86:ac:dc:cc:0a:09:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=e72481a1cb287b95cc8204c4e18d65245570eeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:50:a7:2f:a4:63:86:60:6a:61:d2:49:d9:7c:
9d:b9:f1:86:1e:1c:fd:59:a3:ac:c6:c0:98:be:09:
fd:52:84:e2:2f:ab:fb:81:5e:7d:62:34:b1:2f:83:
40:ac:c8:11:58:d0:67:c9:a0:51:21:6f:d7:c0:27:
8d:69:8e:28:16:91:68:d3:71:36:5b:a8:e7:a4:ba:
d8:f1:dc:1a:13:70:e0:5a:d8:12:09:e8:e7:58:21:
6a:f2:e7:ef:56:de:93:28:fa:03:da:75:8a:5e:1a:
16:87:39:fe:bd:7b:66:19:40:5e:4d:49:07:50:4c:
4c:1e:a5:8a:4c:18:1d:41:24:67:3b:34:5d:da:8a:
f0:3b:03:42:f0:64:90:66:45:18:b4:dd:b8:ff:6e:
3b:d4:e9:84:74:2a:bb:50:56:3a:6a:67:10:b8:9d:
9b:53:62:41:cb:f4:c7:14:a6:52:12:ec:0d:5e:c2:
d2:50:08:97:4a:0e:fa:36:d5:2f:f8:ae:25:1a:21:
7f:72:55:34:17:13:fd:8a:06:9f:eb:30:30:00:32:
1a:dc:f5:ca:76:7b:0d:06:9b:d9:3b:9c:b2:7a:f7:
35:01:a4:76:7a:aa:85:c0:c5:c8:a5:00:d5:ed:93:
87:df:62:ce:0c:18:2c:a0:21:af:e7:a7:e6:3d:0f:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:24:81:A1:CB:28:7B:95:CC:82:04:C4:E1:8D:65:24:55:70:EE:AE
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d4:e3:72:f0:44:e5:4b:b9:70:25:78:39:95:88:88:38:80:
3f:d2:38:3a:ed:4a:35:66:b5:21:e3:6c:86:72:32:0f:a5:7a:
55:4d:a3:a7:97:ba:f1:87:0e:15:34:7c:79:e7:ad:b1:2f:35:
29:a9:b5:28:e6:b1:31:22:ac:37:96:50:58:79:d5:1b:4e:cc:
db:2b:f0:b7:0f:ea:0b:a7:59:81:33:15:f7:af:75:8d:2c:9c:
ca:da:4d:79:b5:34:66:4b:bb:a9:4e:2d:05:da:00:3e:82:50:
c0:e2:74:fc:4e:2b:32:d0:98:c0:e9:81:26:1f:4b:40:48:c2:
23:67:4b:70:72:a6:32:df:96:0e:f0:d7:1e:a3:19:65:d2:b9:
6d:8a:25:2f:db:f6:88:f2:92:57:78:3a:2f:3c:1e:40:78:7f:
d1:61:77:32:0e:21:1e:17:c2:3c:28:08:16:5a:a3:66:40:70:
2a:d4:c4:cc:f8:6c:89:0a:50:3b:62:9d:fa:83:9d:78:52:9a:
4a:ba:ce:78:a3:31:b3:61:6a:ab:41:41:48:25:39:9e:1d:52:
92:3d:36:4c:f3:f1:6a:80:5a:8b:fb:11:dc:fb:01:38:25:36:
14:f2:fa:c5:1c:70:6f:dc:e2:85:48:b3:78:4f:3d:2a:fd:92:
4f:c9:57:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RbSjqPnGrYas3MwKCbmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDBkMDZlMmE2OWEzNjY0YjZhYmNmZTIyYmQyZDA2YjUz
MzY1NjQwHhcNMjUwNjI4MTYwMTI4WhcNMjUwNjI5MTYwMTI4WjAzMTEwLwYDVQQD
EyhlNzI0ODFhMWNiMjg3Yjk1Y2M4MjA0YzRlMThkNjUyNDU1NzBlZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VCnL6RjhmBqYdJJ2XydufGGHhz9
WaOsxsCYvgn9UoTiL6v7gV59YjSxL4NArMgRWNBnyaBRIW/XwCeNaY4oFpFo03E2
W6jnpLrY8dwaE3DgWtgSCejnWCFq8ufvVt6TKPoD2nWKXhoWhzn+vXtmGUBeTUkH
UExMHqWKTBgdQSRnOzRd2orwOwNC8GSQZkUYtN24/2471OmEdCq7UFY6amcQuJ2b
U2JBy/THFKZSEuwNXsLSUAiXSg76NtUv+K4lGiF/clU0FxP9igaf6zAwADIa3PXK
dnsNBpvZO5yyevc1AaR2eqqFwMXIpQDV7ZOH32LODBgsoCGv56fmPQ/FawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOckgaHLKHuVzIIExOGNZSRVcO6uMB8GA1UdIwQY
MBaAFEMA0G4qaaNmS2q8/iK9LQa1M2VkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYt
MjkwYTNmYzRiYjYwLzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9hZThkYTMtOWNiZC00NDRhLWFhZWYtMjkwYTNmYzRiYjYw
LzEvUXdEUWJpcHBvMlpMYXJ6LUlyMHRCclV6WldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNTjcvBE
5Uu5cCV4OZWIiDiAP9I4Ou1KNWa1IeNshnIyD6V6VU2jp5e68YcOFTR8eeetsS81
Kam1KOaxMSKsN5ZQWHnVG07M2yvwtw/qC6dZgTMV9691jSycytpNebU0Zku7qU4t
BdoAPoJQwOJ0/E4rMtCYwOmBJh9LQEjCI2dLcHKmMt+WDvDXHqMZZdK5bYolL9v2
iPKSV3g6LzweQHh/0WF3Mg4hHhfCPCgIFlqjZkBwKtTEzPhsiQpQO2Kd+oOdeFKa
SrrOeKMxs2Fqq0FBSCU5nh1Skj02TPPxaoBai/sR3PsBOCU2FPL6xRxwb9zihUiz
eE89Kv2ST8lXlQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:44 2025 by rpki-client