Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier: dWN7O3IQIyYqBI9OdS5MQkXtkUdEU95QvmZzLACP7rA=
Subject key identifier: 8B:42:C7:C3:9D:3D:14:BB:9D:CC:DE:8B:01:6E:B3:C1:CE:81:B4:DF
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 0197B96AACDF74DFB89EDE2D702B49D3CE12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number: 0BA6
Signing time: Sun 29 Jun 2025 02:01:05 +0000
Manifest this update: Sun 29 Jun 2025 02:01:05 +0000
Manifest next update: Mon 30 Jun 2025 02:01:05 +0000
Files and hashes: 1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: QjqoeRRH9O59y295NPXRgsZMkNnZD/Hm+nu7LNmsic8=)
3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:ac:df:74:df:b8:9e:de:2d:70:2b:49:d3:ce:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Jun 29 02:01:05 2025 GMT
Not After : Jun 30 02:01:05 2025 GMT
Subject: CN=8b42c7c39d3d14bb9dccde8b016eb3c1ce81b4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:fa:80:87:ea:c7:30:50:37:93:07:9b:a9:
21:8a:e5:b4:06:c6:a6:23:4e:fd:16:a5:df:3e:f6:
f3:f2:11:36:a2:03:2a:32:1c:05:91:39:0b:81:c9:
bc:6e:85:33:4e:2f:fc:78:2d:0a:62:37:e9:02:70:
bd:c1:0e:43:87:8b:6e:d5:d8:30:b9:19:50:9c:1c:
c9:8f:9f:66:9d:d4:f3:73:1c:7e:9a:88:8f:5d:1b:
fe:22:a1:3a:04:72:c0:fa:77:cf:5a:b7:f5:9c:27:
48:9a:bb:3d:83:35:8f:ef:6d:46:c9:50:c9:cf:42:
d1:10:a8:24:51:74:7c:dc:2e:ef:70:24:64:6e:0d:
64:04:43:1f:4c:02:fc:f0:53:0f:9b:57:d5:fe:3c:
fb:2a:dc:4e:71:58:6d:81:9e:94:f5:3c:73:ae:00:
cd:f7:17:59:8d:e7:04:88:d8:58:81:10:ac:65:d6:
12:5b:a0:64:8e:8e:b1:1f:6b:6d:f8:e0:2b:82:c9:
fa:f9:ab:e4:1c:1c:6d:3b:7b:e5:69:bb:48:2f:99:
5c:be:6f:65:ac:9e:2e:f2:b4:9e:aa:2d:f2:42:64:
8e:ce:a5:89:6d:b0:9b:08:5b:9c:9b:e1:8b:35:fd:
92:8d:6d:4a:ec:00:e6:9a:ce:61:28:41:1d:0a:4c:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:42:C7:C3:9D:3D:14:BB:9D:CC:DE:8B:01:6E:B3:C1:CE:81:B4:DF
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2e:07:98:22:31:09:1e:47:e8:a1:b6:83:6f:f8:fb:26:bb:
38:fb:0a:d7:8a:61:cf:61:6e:e2:cc:1d:0f:40:12:84:a8:f6:
c2:18:d8:8e:73:26:bc:dc:eb:f8:d3:af:b7:25:30:3f:09:c1:
1f:f8:14:2e:5f:9c:aa:e2:58:a2:4d:3d:eb:69:82:7d:f2:5d:
b0:a3:40:fc:9d:8a:dc:58:20:23:85:9c:d2:d5:92:62:ce:8e:
8f:25:bc:ef:04:ee:f7:48:0e:c8:d0:63:de:09:fe:55:35:e1:
1f:ef:72:77:59:15:12:19:4e:59:79:b8:ad:dd:04:9d:02:05:
9b:9c:98:85:92:df:c0:03:d8:3d:f4:9f:a9:57:c9:30:2f:95:
e3:79:b8:d3:8e:40:c1:d9:18:3b:3e:d3:80:20:4a:dc:57:20:
71:0d:ac:dd:64:fc:7f:c1:51:36:8c:da:e1:5f:e7:64:70:a0:
8b:1e:4d:d0:21:40:2d:12:77:cd:e2:47:82:57:6a:8a:bf:f7:
1b:11:81:9b:0c:be:95:65:83:5e:49:7b:c2:d7:5a:9e:4a:e7:
b2:67:f4:eb:ec:ca:e8:c8:67:c8:6c:64:18:31:26:7e:e7:60:
3f:ea:1a:cd:78:b2:82:41:c9:3b:dd:ec:f9:7a:46:52:1e:9b:
c9:eb:78:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5aqzfdN+4nt4tcCtJ084SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2QyODBjYjRlYWU4MTU2YTc3ZGZlN2EzZmZjNWZkNGI0
ZGJmYWEwHhcNMjUwNjI5MDIwMTA1WhcNMjUwNjMwMDIwMTA1WjAzMTEwLwYDVQQD
Eyg4YjQyYzdjMzlkM2QxNGJiOWRjY2RlOGIwMTZlYjNjMWNlODFiNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozb6gIfqxzBQN5MHm6khiuW0Bsam
I079FqXfPvbz8hE2ogMqMhwFkTkLgcm8boUzTi/8eC0KYjfpAnC9wQ5Dh4tu1dgw
uRlQnBzJj59mndTzcxx+moiPXRv+IqE6BHLA+nfPWrf1nCdImrs9gzWP721GyVDJ
z0LREKgkUXR83C7vcCRkbg1kBEMfTAL88FMPm1fV/jz7KtxOcVhtgZ6U9TxzrgDN
9xdZjecEiNhYgRCsZdYSW6Bkjo6xH2tt+OArgsn6+avkHBxtO3vlabtIL5lcvm9l
rJ4u8rSeqi3yQmSOzqWJbbCbCFucm+GLNf2SjW1K7ADmms5hKEEdCky3KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItCx8OdPRS7nczeiwFus8HOgbTfMB8GA1UdIwQY
MBaAFEN9KAy06ugVanff56P/xf1LTb+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4Yjct
ZWM1MGRhYWQ4MmY3LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4YjctZWM1MGRhYWQ4MmY3
LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAby4HmCIx
CR5H6KG2g2/4+ya7OPsK14phz2Fu4swdD0AShKj2whjYjnMmvNzr+NOvtyUwPwnB
H/gULl+cquJYok0962mCffJdsKNA/J2K3FggI4Wc0tWSYs6OjyW87wTu90gOyNBj
3gn+VTXhH+9yd1kVEhlOWXm4rd0EnQIFm5yYhZLfwAPYPfSfqVfJMC+V43m4045A
wdkYOz7TgCBK3FcgcQ2s3WT8f8FRNoza4V/nZHCgix5N0CFALRJ3zeJHgldqir/3
GxGBmwy+lWWDXkl7wtdankrnsmf06+zK6MhnyGxkGDEmfudgP+oazXiygkHJO93s
+XpGUh6byet4zQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:07:30 2025 by rpki-client