Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: JbhpKPnGlJKl8ZO0GwYG//u72/jaUaCGRLSvF4TnBvw=
Subject key identifier: 16:45:B1:FE:4D:4C:05:7D:3A:D5:20:2F:79:05:C8:E7:41:82:69:4E
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 0197B6A04549C973B66D13A2BE2FFD5E92EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 0320
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: /n/eXMFhjvlSGeBdEVf6qFum0KEoxVHM5KuzhYeyMVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:45:49:c9:73:b6:6d:13:a2:be:2f:fd:5e:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=1645b1fe4d4c057d3ad5202f7905c8e74182694e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:26:08:4b:43:b7:15:99:ed:83:28:97:c6:a0:
fc:38:8b:51:ee:d0:4d:44:cb:02:d9:27:8c:5c:7d:
20:65:5f:53:c4:90:f2:36:3d:04:2b:e1:05:0e:a2:
bb:eb:ed:1e:0d:ed:31:1b:52:87:bd:91:29:e2:0d:
b6:c7:21:31:43:2a:a1:0f:5c:22:6e:d2:dc:8a:dc:
1b:d4:03:4c:59:63:77:e2:9a:4e:34:16:a6:2f:3e:
bb:d6:d2:c9:9b:23:dc:1f:be:3a:06:9d:57:39:41:
72:73:0d:6e:80:2a:1f:df:34:04:c1:31:ac:f4:c3:
a4:d4:01:bc:76:f3:d7:78:5b:7d:e7:34:b3:51:a5:
62:cd:bc:5f:07:54:dc:76:3d:11:be:55:ac:53:57:
c0:12:35:59:1e:47:04:92:3b:a0:1b:69:11:a9:0b:
30:18:b8:78:07:a7:9a:4e:35:a6:7f:d7:6c:a3:ad:
70:7e:46:40:54:d4:3e:19:ac:53:97:1e:78:0f:9e:
ce:7e:0d:8b:d7:03:bf:ee:b5:60:a8:0c:4b:89:ef:
be:59:b5:2b:28:db:c4:59:e6:f2:19:7d:b8:55:48:
89:4e:cf:08:cf:4a:ea:00:43:11:54:74:cc:9d:7a:
ed:1a:cf:6e:2a:c2:2a:59:f1:fd:09:68:a2:07:ce:
bd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:45:B1:FE:4D:4C:05:7D:3A:D5:20:2F:79:05:C8:E7:41:82:69:4E
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1b:56:20:e4:a8:ba:14:b6:90:91:e8:aa:b6:64:bc:92:a6:
8e:0f:76:95:d4:70:3e:bf:73:f0:56:21:6e:1a:fe:66:38:a2:
b6:99:39:ae:19:86:ff:53:c6:de:40:be:5f:fe:67:c6:64:39:
bf:c9:7e:10:b9:63:9d:f0:7a:80:3c:d9:e4:a0:0b:5b:67:82:
9c:38:71:cd:31:14:c2:be:8a:bc:29:76:94:ea:4d:18:9a:5c:
df:05:07:36:6f:81:60:d3:72:f9:e3:00:d9:3c:6f:39:ec:8f:
be:4d:3e:e3:19:44:de:55:01:02:90:2a:4b:ea:23:93:66:07:
f0:33:d8:ed:07:38:27:ed:b0:29:6d:ef:00:81:33:11:af:c5:
42:91:a8:e7:2f:3d:14:e7:31:b1:f0:ec:31:c0:9a:de:3b:32:
49:4f:cd:82:22:1a:6f:ac:56:f3:db:e1:cb:e1:47:55:fe:4a:
15:46:81:3e:c2:b2:48:ea:1a:96:c9:9a:a0:fa:ee:38:de:f1:
c1:5a:43:47:47:f9:9d:cb:99:f4:d3:4e:26:0d:e2:c7:02:45:
84:73:7d:e6:d5:b6:01:05:cc:79:0a:9d:38:43:25:c4:b3:1c:
68:2c:1a:47:a5:ff:20:8f:a2:d2:f0:45:73:03:df:67:3b:a6:
97:e7:1c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oEVJyXO2bROivi/9XpLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWRiOGM5YjU2MzA4Y2YwODkwMjFiNTE2Y2FlNGM1NWZk
NjRmZTQwHhcNMjUwNjI4MTMwMDQ2WhcNMjUwNjI5MTMwMDQ2WjAzMTEwLwYDVQQD
EygxNjQ1YjFmZTRkNGMwNTdkM2FkNTIwMmY3OTA1YzhlNzQxODI2OTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiYIS0O3FZntgyiXxqD8OItR7tBN
RMsC2SeMXH0gZV9TxJDyNj0EK+EFDqK76+0eDe0xG1KHvZEp4g22xyExQyqhD1wi
btLcitwb1ANMWWN34ppONBamLz671tLJmyPcH746Bp1XOUFycw1ugCof3zQEwTGs
9MOk1AG8dvPXeFt95zSzUaVizbxfB1Tcdj0RvlWsU1fAEjVZHkcEkjugG2kRqQsw
GLh4B6eaTjWmf9dso61wfkZAVNQ+GaxTlx54D57Ofg2L1wO/7rVgqAxLie++WbUr
KNvEWebyGX24VUiJTs8Iz0rqAEMRVHTMnXrtGs9uKsIqWfH9CWiiB869NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZFsf5NTAV9OtUgL3kFyOdBgmlOMB8GA1UdIwQY
MBaAFKhduMm1YwjPCJAhtRbK5MVf1k/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUt
NjBmNDlkMTIzMTczLzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82MzgxMDktYjMyMC00NWExLTkwNmUtNjBmNDlkMTIzMTcz
LzEvcUYyNHliVmpDTThJa0NHMUZzcmt4Vl9XVC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORtWIOSo
uhS2kJHoqrZkvJKmjg92ldRwPr9z8FYhbhr+Zjiitpk5rhmG/1PG3kC+X/5nxmQ5
v8l+ELljnfB6gDzZ5KALW2eCnDhxzTEUwr6KvCl2lOpNGJpc3wUHNm+BYNNy+eMA
2TxvOeyPvk0+4xlE3lUBApAqS+ojk2YH8DPY7Qc4J+2wKW3vAIEzEa/FQpGo5y89
FOcxsfDsMcCa3jsySU/NgiIab6xW89vhy+FHVf5KFUaBPsKySOoalsmaoPruON7x
wVpDR0f5ncuZ9NNOJg3ixwJFhHN95tW2AQXMeQqdOEMlxLMcaCwaR6X/II+i0vBF
cwPfZzuml+cc8A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:38 2025 by rpki-client