Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
File: qwJca7PczxsWUUnChzwEsabH2no.mft (raw, json)
Hash identifier: cpptypZnzod1LeYO6d3rXU49SlKzLxBTDR7VGj/Z3pI=
Subject key identifier: AA:D7:EB:2F:1F:D5:EF:50:28:75:B7:0D:45:2D:EB:7B:63:16:C9:62
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Certificate issuer: /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial: 0197B6A248299CF1DCE73CEC6B8530D1348A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
Manifest number: 0A71
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: qwJca7PczxsWUUnChzwEsabH2no.crl (hash: ZJihQawSCCeaQMtkiE2/ErfusuVzHr9JqJpFl7UY4z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:48:29:9c:f1:dc:e7:3c:ec:6b:85:30:d1:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=aad7eb2f1fd5ef502875b70d452deb7b6316c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:96:99:a1:36:70:7b:00:4a:22:60:10:4d:
ee:4c:d7:ae:e2:c0:3f:77:81:fb:1e:0f:ab:f4:21:
60:04:52:67:d9:be:ed:c3:a9:0a:06:43:3e:23:b6:
30:af:48:d5:5e:31:d0:07:70:3d:d2:2e:cf:a2:35:
bd:da:69:90:1c:93:5b:89:2f:70:34:42:f8:a5:1a:
c5:85:04:9c:b8:07:7a:3a:bc:61:48:b5:de:ce:b5:
b6:cf:bb:a9:d9:7f:43:6b:48:82:75:13:6b:60:a9:
7b:5b:b2:4b:d4:cc:ba:ec:31:69:dd:17:7b:48:1c:
5d:d4:7a:d8:a2:dd:c0:ca:6d:2e:86:e8:19:c5:5f:
8c:81:51:90:2e:99:f6:80:9c:82:35:01:e1:f1:ed:
cf:c2:64:31:1a:32:30:31:a4:94:e8:c6:71:d4:71:
63:99:42:73:dc:8a:e7:08:58:3d:33:fe:fc:6f:5f:
4b:4e:da:98:d1:ca:74:33:7d:53:2a:23:9c:68:06:
b7:5b:38:42:81:9f:99:4b:bd:32:24:36:b1:ee:56:
fa:fe:32:04:56:b2:ec:0b:80:40:30:91:03:13:6c:
d4:17:d4:54:06:62:25:9d:3f:db:50:1f:5d:bc:49:
0c:02:4e:99:76:0e:79:25:f6:bb:88:7b:d6:b2:5e:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:EB:2F:1F:D5:EF:50:28:75:B7:0D:45:2D:EB:7B:63:16:C9:62
X509v3 Authority Key Identifier:
keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:ca:32:9e:1a:17:03:e9:b6:f3:d9:2c:48:26:80:ef:89:24:
67:90:62:07:49:93:62:c1:86:d1:ba:6f:5e:2f:07:50:23:d4:
bb:35:8e:1a:22:c8:23:65:69:17:e5:71:89:c4:d5:24:61:c8:
74:d8:21:b6:20:68:ac:61:0f:71:56:10:bf:b6:fb:ac:c5:0e:
d9:e8:5b:cf:3c:92:56:23:1a:b7:03:84:b4:f3:3e:e6:74:cc:
f9:c6:69:5c:97:5a:da:6b:7a:94:cb:04:0e:52:1c:d5:7e:8f:
ef:13:5a:1b:bd:06:94:6e:2f:90:c8:c8:b5:6f:d5:60:3f:a9:
0b:e8:78:d4:fa:c2:9c:88:0e:1d:59:87:40:f0:92:2f:85:72:
6a:24:02:71:fa:9e:1a:10:ba:5c:b4:88:16:92:57:80:de:f4:
ff:09:72:b8:2b:79:b9:8e:4e:82:75:35:54:cc:ee:cb:c0:70:
07:5f:96:f8:4a:f2:63:3e:c5:9e:4d:81:4c:9c:1c:1e:a2:83:
f3:4f:52:be:cb:96:1c:fe:37:ce:64:47:a8:d4:e2:f7:b3:fa:
6b:b6:a7:63:66:41:18:73:2d:6b:f9:fc:6e:26:9d:fa:b1:80:
7d:fe:c2:a3:d7:70:a0:3c:cd:4f:cd:ef:7d:54:55:5d:8c:a5:
49:0d:f5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2okgpnPHc5zzsa4Uw0TSKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDI1YzZiYjNkY2NmMWIxNjUxNDljMjg3M2MwNGIxYTZj
N2RhN2EwHhcNMjUwNjI4MTMwMjU3WhcNMjUwNjI5MTMwMjU3WjAzMTEwLwYDVQQD
EyhhYWQ3ZWIyZjFmZDVlZjUwMjg3NWI3MGQ0NTJkZWI3YjYzMTZjOTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl6WmaE2cHsASiJgEE3uTNeu4sA/
d4H7Hg+r9CFgBFJn2b7tw6kKBkM+I7Ywr0jVXjHQB3A90i7PojW92mmQHJNbiS9w
NEL4pRrFhQScuAd6OrxhSLXezrW2z7up2X9Da0iCdRNrYKl7W7JL1My67DFp3Rd7
SBxd1HrYot3Aym0uhugZxV+MgVGQLpn2gJyCNQHh8e3PwmQxGjIwMaSU6MZx1HFj
mUJz3IrnCFg9M/78b19LTtqY0cp0M31TKiOcaAa3WzhCgZ+ZS70yJDax7lb6/jIE
VrLsC4BAMJEDE2zUF9RUBmIlnT/bUB9dvEkMAk6Zdg55Jfa7iHvWsl531QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrX6y8f1e9QKHW3DUUt63tjFsliMB8GA1UdIwQY
MBaAFKsCXGuz3M8bFlFJwoc8BLGmx9p6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdKY2E3UGN6eHNXVVVuQ2h6d0VzYWJIMm5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNWIxZTMtMjRjMC00NjY4LTlmNDAt
ZmU3NzQ3M2UzZGNmLzEvcXdKY2E3UGN6eHNXVVVuQ2h6d0VzYWJIMm5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNWIxZTMtMjRjMC00NjY4LTlmNDAtZmU3NzQ3M2UzZGNm
LzEvcXdKY2E3UGN6eHNXVVVuQ2h6d0VzYWJIMm5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8oynhoX
A+m289ksSCaA74kkZ5BiB0mTYsGG0bpvXi8HUCPUuzWOGiLII2VpF+VxicTVJGHI
dNghtiBorGEPcVYQv7b7rMUO2ehbzzySViMatwOEtPM+5nTM+cZpXJda2mt6lMsE
DlIc1X6P7xNaG70GlG4vkMjItW/VYD+pC+h41PrCnIgOHVmHQPCSL4VyaiQCcfqe
GhC6XLSIFpJXgN70/wlyuCt5uY5OgnU1VMzuy8BwB1+W+EryYz7Fnk2BTJwcHqKD
809SvsuWHP43zmRHqNTi97P6a7anY2ZBGHMta/n8biad+rGAff7Co9dwoDzNT83v
fVRVXYylSQ31dQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:47 2025 by rpki-client