Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: chwpdfmegvwkb56VEpe76kZTESX+rJT/wS1wCDDJOqw=
Subject key identifier: B8:6B:EA:B9:E8:75:0E:77:A4:5F:02:12:75:49:2F:E0:A2:55:98:1B
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 0197B8FCD74624E2A8867668565DE162D14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 00:01:07 +0000
Manifest this update: Sun 29 Jun 2025 00:01:07 +0000
Manifest next update: Mon 30 Jun 2025 00:01:07 +0000
Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: SXVPe3onHMPlzjAzcy/j3untnkdbPsG08bBjYZlQNGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:d7:46:24:e2:a8:86:76:68:56:5d:e1:62:d1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Jun 29 00:01:07 2025 GMT
Not After : Jun 30 00:01:07 2025 GMT
Subject: CN=b86beab9e8750e77a45f021275492fe0a255981b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:c9:15:a6:9e:ff:aa:be:c2:de:a1:67:85:
b3:77:ac:80:ed:b8:5b:64:34:29:c4:87:05:74:6c:
4a:0a:1e:d8:36:fc:59:73:46:f0:34:cd:04:cc:01:
ba:63:6e:d0:02:59:3a:66:6b:4e:fb:21:a5:25:72:
21:53:b3:7f:ae:36:bf:82:70:71:4c:d7:ee:ce:54:
e8:ea:36:39:4b:51:30:97:7c:44:ce:fb:e5:25:0a:
32:15:50:39:48:7e:c4:8f:54:36:b0:71:39:fc:41:
a4:4c:c7:50:e6:c0:a2:0e:8b:a6:d6:4e:60:b0:f7:
dd:61:22:e9:9f:19:b0:48:79:7a:eb:c6:43:b2:b8:
86:bf:eb:9b:86:30:5f:07:2a:52:bb:c4:92:19:92:
96:a5:80:05:6b:18:92:2c:77:86:46:28:18:86:5d:
b1:c6:e5:76:87:4b:b9:6f:39:c5:2a:b3:fd:3c:c9:
ea:f1:a1:5d:62:58:6b:88:f2:ac:0a:18:d1:ae:e7:
53:1a:2d:46:fc:4b:a6:7d:9f:49:fb:d6:21:3b:89:
56:82:4a:5e:23:17:f0:8b:11:ba:ef:05:06:39:f5:
ee:7d:71:81:ee:a1:b4:20:bd:b0:3b:16:04:b0:18:
4f:0e:11:cc:45:bd:59:4a:1d:af:fe:cf:83:25:62:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6B:EA:B9:E8:75:0E:77:A4:5F:02:12:75:49:2F:E0:A2:55:98:1B
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ae:08:a0:07:45:24:a7:78:2c:db:26:82:74:73:af:b2:0a:
f7:7f:9f:14:f4:79:f4:f7:0b:18:62:86:92:5c:bc:dd:a8:21:
39:62:fa:be:02:b6:83:04:66:c0:2f:e0:37:99:84:79:00:98:
73:83:9a:fd:50:82:c3:9b:c1:37:c0:7d:77:12:fa:07:83:6c:
6a:21:09:85:76:32:fe:22:cb:33:6c:fb:b6:93:a2:72:3b:79:
68:fa:3f:a1:0e:d3:a8:3b:a7:e6:3d:0f:cd:27:e9:b5:e5:c9:
a1:71:1f:06:32:e8:82:0f:52:2c:4e:9f:6a:4d:22:fd:d4:a4:
5d:a7:ef:68:69:24:25:7d:16:4f:f8:76:94:ea:cf:25:f6:da:
b0:bc:75:bd:92:26:1b:15:ba:ea:67:d3:45:0f:28:15:df:8c:
5e:45:8f:b5:ef:dc:6d:95:8d:da:cb:68:00:88:2c:4c:7c:e5:
55:e1:78:f5:d4:4f:ac:51:d4:39:6b:b9:5d:7e:bf:b8:f7:b5:
1d:d5:a3:27:02:2c:a0:3d:19:44:a8:6f:e2:1f:0a:3f:f4:5f:
41:ae:19:2c:d6:82:0b:8b:b7:31:77:f4:0b:b9:03:6b:8d:93:
31:eb:73:15:1c:67:8d:91:d1:73:6e:54:95:6e:8f:f4:d2:55:
9a:9a:08:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/NdGJOKohnZoVl3hYtFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4
OThlY2IwHhcNMjUwNjI5MDAwMTA3WhcNMjUwNjMwMDAwMTA3WjAzMTEwLwYDVQQD
EyhiODZiZWFiOWU4NzUwZTc3YTQ1ZjAyMTI3NTQ5MmZlMGEyNTU5ODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucPJFaae/6q+wt6hZ4Wzd6yA7bhb
ZDQpxIcFdGxKCh7YNvxZc0bwNM0EzAG6Y27QAlk6ZmtO+yGlJXIhU7N/rja/gnBx
TNfuzlTo6jY5S1Ewl3xEzvvlJQoyFVA5SH7Ej1Q2sHE5/EGkTMdQ5sCiDoum1k5g
sPfdYSLpnxmwSHl668ZDsriGv+ubhjBfBypSu8SSGZKWpYAFaxiSLHeGRigYhl2x
xuV2h0u5bznFKrP9PMnq8aFdYlhriPKsChjRrudTGi1G/EumfZ9J+9YhO4lWgkpe
IxfwixG67wUGOfXufXGB7qG0IL2wOxYEsBhPDhHMRb1ZSh2v/s+DJWJP+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhr6rnodQ53pF8CEnVJL+CiVZgbMB8GA1UdIwQY
MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt
MzFkMjQ1ZjNiM2I4LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4
LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK4IoAdF
JKd4LNsmgnRzr7IK93+fFPR59PcLGGKGkly83aghOWL6vgK2gwRmwC/gN5mEeQCY
c4Oa/VCCw5vBN8B9dxL6B4NsaiEJhXYy/iLLM2z7tpOicjt5aPo/oQ7TqDun5j0P
zSfpteXJoXEfBjLogg9SLE6fak0i/dSkXafvaGkkJX0WT/h2lOrPJfbasLx1vZIm
GxW66mfTRQ8oFd+MXkWPte/cbZWN2stoAIgsTHzlVeF49dRPrFHUOWu5XX6/uPe1
HdWjJwIsoD0ZRKhv4h8KP/RfQa4ZLNaCC4u3MXf0C7kDa42TMetzFRxnjZHRc25U
lW6P9NJVmpoIhA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:08 2025 by rpki-client