Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: 7VRx0DyvfM1yFBSUUHuC0BBsKFFNReE3ftWWnuffkKo=
Subject key identifier: 81:41:6E:30:EA:7D:63:C5:49:A1:DE:2A:90:E7:33:28:6A:F1:1C:E8
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 0197B6A07651B2EC6762E423058F938C3BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:00:58 +0000
Manifest this update: Sat 28 Jun 2025 13:00:58 +0000
Manifest next update: Sun 29 Jun 2025 13:00:58 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: P65qM6cYmpBEXE/uDdpENoo5Xi3pfArVHDHF1Y1NUwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:76:51:b2:ec:67:62:e4:23:05:8f:93:8c:3b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Jun 28 13:00:58 2025 GMT
Not After : Jun 29 13:00:58 2025 GMT
Subject: CN=81416e30ea7d63c549a1de2a90e733286af11ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:cc:8e:21:65:37:ef:2b:83:a9:e2:e0:1d:
e3:6f:c2:30:21:06:73:fc:da:5e:bb:d6:8d:6a:78:
05:4d:cc:6b:98:ce:af:98:97:cf:8a:1d:97:25:50:
d9:d7:0a:2b:cf:5e:24:cb:d1:5c:b6:3d:98:32:69:
0b:90:5e:da:24:5e:af:80:9e:5b:36:43:f8:3b:9a:
8d:17:89:99:c2:d2:96:3b:94:23:9c:67:e6:99:be:
2d:42:b4:ce:15:62:2f:67:55:8e:a3:0c:57:b6:06:
ae:9b:9b:e2:8b:50:5a:3e:82:10:29:41:63:ec:86:
68:c1:04:0d:43:b1:b9:95:a7:52:07:44:cb:a7:ce:
03:5d:f3:48:63:ea:d7:3e:7b:60:3a:5c:eb:c5:20:
70:9c:fb:b8:37:16:cb:3a:e9:c8:5c:e3:7e:8e:e5:
22:d1:7b:bc:3e:ea:cb:2a:33:b9:25:bb:47:22:bd:
7b:1a:33:18:d6:b5:a0:e2:f3:9a:7e:af:1b:68:fd:
66:b8:09:94:fd:ba:5b:16:9d:3e:89:2b:9c:52:99:
50:2a:9f:a6:14:20:dc:24:df:4e:d2:b1:36:39:d1:
ce:c4:6b:81:d9:cc:2a:b9:67:1f:16:0c:23:ed:bc:
7f:a2:a8:d3:fd:bb:5e:61:95:3d:2c:e3:5a:c2:89:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:6E:30:EA:7D:63:C5:49:A1:DE:2A:90:E7:33:28:6A:F1:1C:E8
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:75:9a:fd:36:07:4e:08:56:40:8d:4f:20:00:ba:bf:1a:6c:
4c:b4:ca:e1:07:6a:d6:3f:3d:75:30:62:74:bc:8b:e7:70:69:
d3:0c:04:81:a7:9e:f9:bc:3f:d5:bc:18:c0:e7:f8:5d:06:86:
e9:56:b3:6e:81:0b:f3:ed:cd:1a:7e:0d:f1:a5:9f:dd:ad:c8:
9c:7b:33:be:b0:7c:f1:23:a9:01:f1:53:7b:1b:06:8a:9e:8c:
81:78:34:b2:59:bf:a0:2a:ca:1a:cb:ef:19:c8:cc:48:fd:a1:
52:9a:86:b0:26:a2:71:d1:aa:26:3e:0c:f9:5b:30:62:8f:73:
0b:fd:71:99:f7:8f:de:fa:99:ba:a2:f9:e5:88:14:9a:d6:92:
ea:45:11:5a:d8:c8:2a:04:c5:da:04:45:e7:38:ef:74:89:f6:
e0:f2:1a:2d:79:bc:9d:2d:0e:a4:51:2d:09:9f:64:86:a0:93:
46:f6:47:eb:db:ad:ef:ad:27:58:1d:f1:ae:f0:55:7e:91:03:
82:92:da:90:a0:3c:64:c8:21:d7:15:8f:29:41:62:27:f6:be:
a1:0f:1d:ef:0d:98:01:0a:ce:a5:a3:6d:f2:9d:91:48:1b:5b:
b2:37:c7:05:d6:6a:ca:39:9e:2b:00:87:73:d8:2b:55:06:51:
96:5d:3e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oHZRsuxnYuQjBY+TjDvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThmNjI0ZDU3ZjQ2MTNjMGJmNjUxMTYxYzc1NmMzMTY2
NTlhYjkwHhcNMjUwNjI4MTMwMDU4WhcNMjUwNjI5MTMwMDU4WjAzMTEwLwYDVQQD
Eyg4MTQxNmUzMGVhN2Q2M2M1NDlhMWRlMmE5MGU3MzMyODZhZjExY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkXMjiFlN+8rg6ni4B3jb8IwIQZz
/Npeu9aNangFTcxrmM6vmJfPih2XJVDZ1worz14ky9Fctj2YMmkLkF7aJF6vgJ5b
NkP4O5qNF4mZwtKWO5QjnGfmmb4tQrTOFWIvZ1WOowxXtgaum5vii1BaPoIQKUFj
7IZowQQNQ7G5ladSB0TLp84DXfNIY+rXPntgOlzrxSBwnPu4NxbLOunIXON+juUi
0Xu8PurLKjO5JbtHIr17GjMY1rWg4vOafq8baP1muAmU/bpbFp0+iSucUplQKp+m
FCDcJN9O0rE2OdHOxGuB2cwquWcfFgwj7bx/oqjT/bteYZU9LONawomz1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFBbjDqfWPFSaHeKpDnMyhq8RzoMB8GA1UdIwQY
MBaAFEOY9iTVf0YTwL9lEWHHVsMWZZq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2It
NmE3OWZlZTkxOWViLzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kN2M0YTAtMjcyZS00NDA5LThkM2ItNmE3OWZlZTkxOWVi
LzEvUTVqMkpOVl9SaFBBdjJVUlljZFd3eFpsbXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInWa/TYH
TghWQI1PIAC6vxpsTLTK4Qdq1j89dTBidLyL53Bp0wwEgaee+bw/1bwYwOf4XQaG
6VazboEL8+3NGn4N8aWf3a3InHszvrB88SOpAfFTexsGip6MgXg0slm/oCrKGsvv
GcjMSP2hUpqGsCaicdGqJj4M+VswYo9zC/1xmfeP3vqZuqL55YgUmtaS6kURWtjI
KgTF2gRF5zjvdIn24PIaLXm8nS0OpFEtCZ9khqCTRvZH69ut760nWB3xrvBVfpED
gpLakKA8ZMgh1xWPKUFiJ/a+oQ8d7w2YAQrOpaNt8p2RSBtbsjfHBdZqyjmeKwCH
c9grVQZRll0+ag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:48 2025 by rpki-client