Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: mLXMH/l5y2TCA3KaF+YanDKZUtVYn/G6FKBiNbRa/fE=
Subject key identifier: D2:52:98:9C:77:FE:27:D0:13:DD:D9:D5:35:C0:F0:51:DF:E5:78:6A
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 0197B745490A7CB117342F7499A39365A255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 12AA
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: bdgmMrX6gR4Ps5OAOrFGpqGAaIM1OShvPnfvyXzlsG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:49:0a:7c:b1:17:34:2f:74:99:a3:93:65:a2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=d252989c77fe27d013ddd9d535c0f051dfe5786a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:f1:68:b7:b7:d2:83:92:0d:68:40:3c:c2:
32:c4:4e:78:57:e9:b3:f6:42:9a:76:4a:4c:17:a6:
bb:59:f0:66:b8:41:0e:b6:d7:5a:d3:0e:6f:5d:b0:
f9:de:46:3e:23:80:d2:6c:3d:68:61:e4:18:7f:b3:
d2:a5:cc:9f:17:72:a6:e7:25:98:51:47:34:c4:c7:
eb:e8:1c:6a:18:cc:62:b4:88:63:94:e8:b6:eb:cc:
f7:90:cf:e9:98:1b:aa:c9:cf:e7:64:b1:41:8d:ef:
62:fc:db:ed:b5:fe:11:ca:58:c6:30:4f:cf:46:31:
f6:db:58:2c:47:11:03:5e:75:75:68:9f:7f:94:bd:
bb:a7:a3:69:f3:37:db:a7:a7:66:46:b6:47:e5:e2:
d6:53:c9:16:0c:40:03:80:64:ea:23:6d:ca:72:69:
3f:51:3e:b3:cb:5b:ce:ce:87:69:55:0e:ec:db:84:
c3:27:c3:ec:f7:54:aa:65:74:b6:a3:a7:92:78:3f:
8b:a1:f8:d8:9d:71:d6:35:9b:d4:d5:cb:58:80:d7:
3e:91:51:80:7a:69:5b:8f:5f:6a:6c:79:76:76:23:
ad:59:ab:8d:63:09:07:5c:4f:b3:9e:fc:4f:c9:2a:
84:e5:1e:d8:54:56:ae:e7:59:01:07:93:d8:36:e7:
a3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:52:98:9C:77:FE:27:D0:13:DD:D9:D5:35:C0:F0:51:DF:E5:78:6A
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:83:23:fe:dc:98:96:1b:c3:63:a6:bc:b3:67:3c:e9:a5:52:
4e:0b:65:c6:65:0b:49:89:10:32:73:aa:c1:57:95:36:c5:bc:
29:20:16:52:72:24:31:f7:4f:69:2a:6c:ad:16:de:e9:23:01:
9a:da:74:5b:db:cf:83:34:f6:d8:38:2f:b9:83:d3:ce:c2:c1:
06:ed:34:a8:20:6a:2f:54:d1:f0:3c:3c:d9:e9:a7:f1:21:cf:
7c:3a:d2:2d:9e:88:9f:2f:0a:20:76:44:9e:03:7b:1a:5f:90:
16:14:1f:7a:99:bd:b5:2c:0d:19:96:a8:0f:34:31:bc:36:0b:
aa:e1:98:99:51:7f:b3:8a:05:b0:db:bb:89:0a:9c:bf:b4:dd:
e8:ae:fd:75:aa:04:fa:52:f6:2b:77:ac:16:67:17:c9:03:43:
5c:51:a3:48:22:61:ef:f1:06:8e:71:0e:d5:b1:3e:2d:85:ad:
fe:fd:5d:cd:c2:b2:91:18:95:9c:54:af:61:9f:bf:99:a5:c0:
28:5f:1f:32:e1:fe:d3:32:ce:f5:0f:9f:02:f9:1f:a9:4f:dd:
86:71:62:5b:bf:44:25:3b:a5:58:0c:87:49:eb:14:19:e8:47:
c1:89:92:36:05:d1:50:69:aa:5a:73:00:4a:d6:8d:40:71:fc:
44:ac:a9:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RUkKfLEXNC90maOTZaJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh
MmE1ZWQwHhcNMjUwNjI4MTYwMTAwWhcNMjUwNjI5MTYwMTAwWjAzMTEwLwYDVQQD
EyhkMjUyOTg5Yzc3ZmUyN2QwMTNkZGQ5ZDUzNWMwZjA1MWRmZTU3ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aLxaLe30oOSDWhAPMIyxE54V+mz
9kKadkpMF6a7WfBmuEEOttda0w5vXbD53kY+I4DSbD1oYeQYf7PSpcyfF3Km5yWY
UUc0xMfr6BxqGMxitIhjlOi268z3kM/pmBuqyc/nZLFBje9i/Nvttf4RyljGME/P
RjH221gsRxEDXnV1aJ9/lL27p6Np8zfbp6dmRrZH5eLWU8kWDEADgGTqI23Kcmk/
UT6zy1vOzodpVQ7s24TDJ8Ps91SqZXS2o6eSeD+LofjYnXHWNZvU1ctYgNc+kVGA
emlbj19qbHl2diOtWauNYwkHXE+znvxPySqE5R7YVFau51kBB5PYNuejhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJSmJx3/ifQE93Z1TXA8FHf5XhqMB8GA1UdIwQY
MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt
ZWU3YmEwZTlmN2NhLzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh
LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIMj/tyY
lhvDY6a8s2c86aVSTgtlxmULSYkQMnOqwVeVNsW8KSAWUnIkMfdPaSpsrRbe6SMB
mtp0W9vPgzT22DgvuYPTzsLBBu00qCBqL1TR8Dw82emn8SHPfDrSLZ6Iny8KIHZE
ngN7Gl+QFhQfepm9tSwNGZaoDzQxvDYLquGYmVF/s4oFsNu7iQqcv7Td6K79daoE
+lL2K3esFmcXyQNDXFGjSCJh7/EGjnEO1bE+LYWt/v1dzcKykRiVnFSvYZ+/maXA
KF8fMuH+0zLO9Q+fAvkfqU/dhnFiW79EJTulWAyHSesUGehHwYmSNgXRUGmqWnMA
StaNQHH8RKypWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:23 2025 by rpki-client