Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier: btjR3fknYyHsoEMM5dxEciG9ZxrMuukmW6WI210hCL0=
Subject key identifier: 2A:B1:12:B0:B4:A3:41:38:47:C6:BA:22:49:AB:05:8A:09:49:60:9C
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial: 0197B70EA359B6E80A8349FD46AA3AE7FA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number: 0C71
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: WSDznA83pC8Q2DOnU4J91iONjIkqfkfFBQdBPsIi9Us=)
2: Q8-T8rHgFoT7CVxsMFqUQCc8JdY.roa (hash: RshmXbtDnZ3rOqJWlQSI0/TW/t+laA0v6rWUW/sLLhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a3:59:b6:e8:0a:83:49:fd:46:aa:3a:e7:fa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=2ab112b0b4a3413847c6ba2249ab058a0949609c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:3d:47:a6:f4:17:9d:6c:89:df:ee:f6:7b:
e5:81:db:24:e3:0a:75:87:f8:e0:42:f9:e6:f5:73:
86:0d:8b:8f:93:e6:25:21:1a:81:7e:2c:4b:7c:8e:
91:f3:90:d2:9e:fe:13:b5:c5:e8:22:c9:59:6f:db:
f2:db:a7:9c:96:02:d5:84:2c:2d:d2:13:8f:68:81:
9d:03:0c:22:48:70:cc:9c:20:c9:e4:cf:f4:04:4c:
95:76:a4:eb:6a:05:5b:04:bb:25:9f:d2:72:36:e8:
a4:98:4b:1c:c6:9f:52:57:f0:3b:39:fd:a9:10:2c:
11:b0:0a:a3:9a:fa:0e:31:e4:81:c0:02:2d:dc:1f:
f3:ba:a7:61:0a:64:51:18:af:e2:04:2a:b7:e7:bb:
a9:68:86:56:f5:2d:1e:71:f8:c3:5b:fc:8c:4a:9c:
d9:48:ef:ce:ab:63:88:22:40:32:72:6d:85:de:f7:
b8:b3:3a:0b:cf:2b:da:03:3a:33:3d:be:24:2a:40:
4c:d6:ff:40:a3:29:77:91:fd:be:41:8a:53:34:21:
9f:3b:10:ed:f6:30:02:34:cc:50:3c:93:2b:6d:91:
9a:c3:4c:66:fa:e5:4a:23:53:51:30:d5:b0:5a:e2:
07:e1:56:8a:b4:ef:a3:91:6c:36:88:07:4e:04:66:
21:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:12:B0:B4:A3:41:38:47:C6:BA:22:49:AB:05:8A:09:49:60:9C
X509v3 Authority Key Identifier:
keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:49:b4:23:62:91:b4:04:75:f8:b0:db:35:31:b7:c4:e3:5e:
98:ac:6f:34:5b:53:67:89:00:b4:4d:56:99:7f:c1:b3:b0:1f:
f2:2d:db:ce:62:11:b1:c1:fc:3f:7a:88:62:d5:03:08:f5:39:
9b:d5:53:e3:60:6c:6d:9f:1a:ea:f9:e8:7d:06:93:8b:25:a0:
69:9c:73:b9:0e:17:3a:84:3d:aa:39:1b:38:7a:fd:f4:f2:1e:
f7:c9:5d:c6:ae:6c:ad:88:8d:ef:8b:ac:a2:a3:50:1e:9c:de:
1e:91:83:75:09:c5:ba:22:ac:14:4a:49:1f:4b:51:8a:40:60:
d9:56:6a:da:50:0a:47:86:8d:d7:96:15:47:5a:82:43:85:36:
6c:67:0a:0e:cb:39:d0:04:7e:25:94:7f:a3:ee:75:82:42:fb:
1b:ae:26:78:6d:55:8c:44:7d:04:d2:cd:20:ac:eb:86:b4:17:
6d:7d:1b:f1:d2:f8:4e:7e:04:e8:6d:f7:6f:65:10:76:82:7d:
bc:6a:42:63:0c:83:c7:ba:f0:26:d7:37:f4:09:eb:96:27:d1:
77:26:74:79:34:ca:b9:68:52:f6:6d:9d:2e:5e:2c:d1:a1:cf:
98:90:4e:78:7d:33:bf:df:b5:04:86:f3:0a:9a:32:f5:7c:65:
61:ee:af:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DqNZtugKg0n9Rqo65/oHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMGZiYjliM2NkMWMyMTZhZGM2OTllNWVkYWQ1ZjUzMWQ5
YWZjYjYwHhcNMjUwNjI4MTUwMTE4WhcNMjUwNjI5MTUwMTE4WjAzMTEwLwYDVQQD
EygyYWIxMTJiMGI0YTM0MTM4NDdjNmJhMjI0OWFiMDU4YTA5NDk2MDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv609R6b0F51sid/u9nvlgdsk4wp1
h/jgQvnm9XOGDYuPk+YlIRqBfixLfI6R85DSnv4TtcXoIslZb9vy26eclgLVhCwt
0hOPaIGdAwwiSHDMnCDJ5M/0BEyVdqTragVbBLsln9JyNuikmEscxp9SV/A7Of2p
ECwRsAqjmvoOMeSBwAIt3B/zuqdhCmRRGK/iBCq357upaIZW9S0ecfjDW/yMSpzZ
SO/Oq2OIIkAycm2F3ve4szoLzyvaAzozPb4kKkBM1v9Aoyl3kf2+QYpTNCGfOxDt
9jACNMxQPJMrbZGaw0xm+uVKI1NRMNWwWuIH4VaKtO+jkWw2iAdOBGYhFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqxErC0o0E4R8a6IkmrBYoJSWCcMB8GA1UdIwQY
MBaAFOEPu5s80cIWrcaZ5e2tX1Mdmvy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQt
NjJhMjhmM2UwMDFjLzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84M2ZmOGYtMTZjYS00MjQ5LWI3NzQtNjJhMjhmM2UwMDFj
LzEvNFEtN216elJ3aGF0eHBubDdhMWZVeDJhX0xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA20m0I2KR
tAR1+LDbNTG3xONemKxvNFtTZ4kAtE1WmX/Bs7Af8i3bzmIRscH8P3qIYtUDCPU5
m9VT42BsbZ8a6vnofQaTiyWgaZxzuQ4XOoQ9qjkbOHr99PIe98ldxq5srYiN74us
oqNQHpzeHpGDdQnFuiKsFEpJH0tRikBg2VZq2lAKR4aN15YVR1qCQ4U2bGcKDss5
0AR+JZR/o+51gkL7G64meG1VjER9BNLNIKzrhrQXbX0b8dL4Tn4E6G33b2UQdoJ9
vGpCYwyDx7rwJtc39AnrlifRdyZ0eTTKuWhS9m2dLl4s0aHPmJBOeH0zv9+1BIbz
Cpoy9XxlYe6vSQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:11 2025 by rpki-client