Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File: Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier: VeOmeOty/++kErLZ6TT3JyW5u6X5d1pvu3r8JIqjG+A=
Subject key identifier: FB:99:60:9A:B5:C9:8A:FE:CD:7E:52:6D:F8:75:EB:43:AA:92:6A:3A
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer: /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial: 0197B6A0D4DBB94D5107FA1A89C9C4E5895C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number: 0FD2
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: Io6C1J21a0PFXm58bYFbBJoPNG7wuk0fsOeJxtKxH60=)
2: pGi5mprHxSOkx1tGIc-vLUmzaew.roa (hash: dSlWsgh48wgZDLLaxYVN9gYqMrT57evwFejA3CWUycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d4:db:b9:4d:51:07:fa:1a:89:c9:c4:e5:89:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=fb99609ab5c98afecd7e526df875eb43aa926a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:41:4c:53:53:0e:ec:9a:93:54:fb:03:fc:9b:
a9:4b:55:76:fa:43:eb:36:7e:9c:eb:c2:f0:5f:18:
52:a0:85:32:f2:8e:8b:b5:98:44:bf:5a:36:39:d3:
03:13:50:0b:75:41:4a:04:77:54:a6:c9:c0:c5:1a:
55:15:57:e2:eb:fe:73:7e:f6:04:71:94:00:64:c5:
77:0b:7f:d9:ab:f3:18:93:dd:72:a7:a3:f7:98:36:
46:9a:07:95:a0:7c:fb:18:ae:e5:2a:81:79:1e:48:
fc:6d:84:5b:03:e2:ef:b9:7f:7f:d9:4c:f2:cf:11:
ea:4d:0a:aa:64:2d:36:53:d5:be:03:a4:8e:53:14:
36:5c:4a:2b:57:a7:55:3f:3d:97:9c:a1:60:50:dc:
cb:c6:ed:91:25:38:0d:8b:c8:1e:73:a3:6d:3f:2e:
11:60:bb:19:c1:a0:6c:b0:b1:be:8f:2e:06:14:41:
24:3c:fa:85:d0:25:aa:b0:c1:55:e3:3f:6e:ce:6d:
1a:b2:0d:30:fc:24:1b:97:2c:fc:0e:ff:07:34:62:
d3:8b:ba:42:b1:6f:cd:b4:ce:5b:38:23:38:b1:8f:
6f:02:63:16:df:ae:81:cc:9b:d8:c5:35:10:58:28:
c5:42:ae:bc:b8:5a:50:c1:a2:54:91:68:e0:0e:c9:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:99:60:9A:B5:C9:8A:FE:CD:7E:52:6D:F8:75:EB:43:AA:92:6A:3A
X509v3 Authority Key Identifier:
keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fd:f2:a8:40:14:30:72:61:f1:39:59:74:93:9c:d7:91:bd:
94:e4:2c:bf:d3:50:9b:29:17:3e:e1:1d:c5:b9:b9:48:1c:c7:
dc:e7:4e:95:14:b6:61:7d:f5:69:5e:c0:02:21:7a:7c:9d:50:
9a:91:90:36:1d:0e:a4:c2:cf:d6:98:13:0d:99:7e:55:79:cc:
cc:fa:9a:0c:f1:c3:7c:86:66:b3:a7:68:54:e1:ad:2f:69:8f:
c6:65:b7:91:15:b4:3d:02:5b:29:c9:b6:78:f4:20:de:a1:a8:
d5:e5:89:3a:76:eb:95:6a:51:29:8d:fa:d7:5a:bb:39:2a:29:
9f:7c:66:c7:e7:6a:18:13:f8:7a:2c:3e:ed:87:38:6a:0c:d9:
5d:01:f5:c5:f1:9e:af:54:29:da:28:25:b6:2f:7f:4b:bd:97:
13:6b:4e:49:8d:db:0a:4d:78:b8:62:cc:f7:b5:72:9a:3c:42:
63:93:5a:5f:c5:69:69:c0:a5:09:a1:c5:ae:00:b8:2a:14:63:
6b:29:9f:c5:51:9f:d1:c2:3c:30:6a:3b:00:a9:df:e2:be:3e:
65:d8:c3:0b:d2:13:31:37:b3:a5:11:e6:1b:fa:da:be:df:8a:
c3:bd:c3:88:f6:40:b9:9d:e7:bf:37:36:84:0d:fb:90:80:18:
d4:0e:43:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNTbuU1RB/oaicnE5YlcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjdmYjg0NzgxNzdmNDhjZjQ1YmVkMDdjYmVjZjliNmU5
NWRlODgwHhcNMjUwNjI4MTMwMTIyWhcNMjUwNjI5MTMwMTIyWjAzMTEwLwYDVQQD
EyhmYjk5NjA5YWI1Yzk4YWZlY2Q3ZTUyNmRmODc1ZWI0M2FhOTI2YTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0FMU1MO7JqTVPsD/JupS1V2+kPr
Nn6c68LwXxhSoIUy8o6LtZhEv1o2OdMDE1ALdUFKBHdUpsnAxRpVFVfi6/5zfvYE
cZQAZMV3C3/Zq/MYk91yp6P3mDZGmgeVoHz7GK7lKoF5Hkj8bYRbA+LvuX9/2Uzy
zxHqTQqqZC02U9W+A6SOUxQ2XEorV6dVPz2XnKFgUNzLxu2RJTgNi8gec6NtPy4R
YLsZwaBssLG+jy4GFEEkPPqF0CWqsMFV4z9uzm0asg0w/CQblyz8Dv8HNGLTi7pC
sW/NtM5bOCM4sY9vAmMW366BzJvYxTUQWCjFQq68uFpQwaJUkWjgDsmB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuZYJq1yYr+zX5Sbfh160Oqkmo6MB8GA1UdIwQY
MBaAFEL3+4R4F39Iz0W+0Hy+z5tuld6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zM2UwZGMtMTliYS00OGE0LTgwODYt
MWFjNGM1ZDQyOTJmLzEvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zM2UwZGMtMTliYS00OGE0LTgwODYtMWFjNGM1ZDQyOTJm
LzEvUXZmN2hIZ1hmMGpQUmI3UWZMN1BtMjZWM29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAov3yqEAU
MHJh8TlZdJOc15G9lOQsv9NQmykXPuEdxbm5SBzH3OdOlRS2YX31aV7AAiF6fJ1Q
mpGQNh0OpMLP1pgTDZl+VXnMzPqaDPHDfIZms6doVOGtL2mPxmW3kRW0PQJbKcm2
ePQg3qGo1eWJOnbrlWpRKY3611q7OSopn3xmx+dqGBP4eiw+7Yc4agzZXQH1xfGe
r1Qp2iglti9/S72XE2tOSY3bCk14uGLM97VymjxCY5NaX8VpacClCaHFrgC4KhRj
aymfxVGf0cI8MGo7AKnf4r4+ZdjDC9ITMTezpRHmG/ravt+Kw73DiPZAuZ3nvzc2
hA37kIAY1A5DeA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:49 2025 by rpki-client