Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: HpgzpFUBmIS3FTKPbRCAq7JmkYol03VxNUGXbGCznCY=
Subject key identifier: D8:69:3E:42:CB:39:E5:97:3F:97:89:A6:D5:3B:26:6C:D7:35:15:D0
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 0197B77C331B257B0F82F17994B91E59B590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 12C5
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: LcY0ctMKtYCZilK2nphxPQeVeFrl2D15eXOd2regbl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:33:1b:25:7b:0f:82:f1:79:94:b9:1e:59:b5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=d8693e42cb39e5973f9789a6d53b266cd73515d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:52:55:c3:a2:b6:7a:0a:12:55:3e:d5:cc:
47:ec:55:ca:83:4a:01:fc:54:b9:11:c9:be:65:09:
d5:70:4e:db:d0:b1:21:48:98:33:3f:b8:d9:0c:4c:
e8:5b:b0:9a:21:ef:3c:45:b6:56:00:41:a0:1e:24:
a6:e6:d2:87:ed:5f:0d:2e:1c:c2:b9:80:7a:80:e7:
dc:db:26:e0:b7:4f:4f:ac:51:e9:d2:c4:e2:c4:95:
86:68:4a:ad:2e:64:28:5f:ce:80:39:0a:2c:c6:f7:
1a:b8:07:62:66:c1:8b:ea:92:f3:72:64:f8:ef:48:
19:77:5d:c7:3a:83:bd:2b:fb:3a:e1:27:9d:d0:bc:
31:89:2e:78:00:bc:d9:8b:fa:db:65:61:2a:be:0c:
e8:22:1a:ea:1e:5e:6b:71:85:ba:e9:00:f8:b4:31:
e0:b6:00:8d:51:de:b8:c5:8f:77:5f:78:b3:e5:c9:
09:69:ab:c1:ec:5a:3b:f1:8d:74:2a:8d:61:d5:30:
db:ce:8b:17:17:43:c4:2a:23:c6:88:77:8e:14:c0:
be:97:ae:63:9b:6b:9d:64:cd:a1:db:fb:4e:b5:25:
e7:1b:8c:55:04:ff:ea:a1:54:69:28:a4:d6:a3:b1:
8c:73:6b:75:11:2a:2e:46:0e:72:3c:26:f7:bc:d0:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:69:3E:42:CB:39:E5:97:3F:97:89:A6:D5:3B:26:6C:D7:35:15:D0
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:59:52:fe:9d:fb:88:36:77:a7:96:7a:18:e9:41:54:75:9b:
f5:14:04:d2:f4:97:41:dc:ae:cc:06:44:ac:bb:a3:cc:4a:27:
81:a6:12:7b:1f:7d:4e:34:d8:4a:7e:4e:c2:fe:ad:b1:92:a8:
5f:9f:1e:25:d3:3c:ff:8f:2b:f7:4e:cc:90:f4:49:4a:60:02:
ec:68:cd:36:db:a2:29:e2:7c:29:3f:08:6c:76:25:44:a9:38:
09:eb:66:c5:60:81:57:6e:c7:d8:56:97:bf:c3:05:de:e2:f2:
ba:a1:9d:7c:e1:83:39:dd:1f:0c:2f:24:a6:19:9b:80:d9:d5:
3b:52:03:bd:4f:5a:9a:09:26:9d:f0:8c:ed:63:2a:47:ea:65:
6b:7a:59:a9:2c:79:3b:11:a8:1d:32:73:3a:de:c8:65:28:59:
0c:1f:db:45:8e:ab:12:15:ba:df:b9:25:0d:f4:1d:0c:9d:e3:
9b:96:20:90:4d:64:7b:bf:4f:f6:f2:ba:dd:02:10:b1:4f:95:
d3:90:6b:6a:fe:f7:f0:a0:f0:52:08:dd:ad:a7:62:63:43:48:
d5:fc:5c:b3:70:8e:47:d9:60:90:54:eb:f7:74:34:89:ea:22:
ff:46:15:24:99:33:4e:8b:d9:cb:25:0b:97:4f:72:ed:82:1d:
9d:3e:2f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fDMbJXsPgvF5lLkeWbWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTg0OTZiOGQxZGQ4MjViNDg3MDM4ZmI4N2NhMTk5YjEz
YjkzZGYwHhcNMjUwNjI4MTcwMDU5WhcNMjUwNjI5MTcwMDU5WjAzMTEwLwYDVQQD
EyhkODY5M2U0MmNiMzllNTk3M2Y5Nzg5YTZkNTNiMjY2Y2Q3MzUxNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrFSVcOitnoKElU+1cxH7FXKg0oB
/FS5Ecm+ZQnVcE7b0LEhSJgzP7jZDEzoW7CaIe88RbZWAEGgHiSm5tKH7V8NLhzC
uYB6gOfc2ybgt09PrFHp0sTixJWGaEqtLmQoX86AOQosxvcauAdiZsGL6pLzcmT4
70gZd13HOoO9K/s64Sed0LwxiS54ALzZi/rbZWEqvgzoIhrqHl5rcYW66QD4tDHg
tgCNUd64xY93X3iz5ckJaavB7Fo78Y10Ko1h1TDbzosXF0PEKiPGiHeOFMC+l65j
m2udZM2h2/tOtSXnG4xVBP/qoVRpKKTWo7GMc2t1ESouRg5yPCb3vNCTIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhpPkLLOeWXP5eJptU7JmzXNRXQMB8GA1UdIwQY
MBaAFKiYSWuNHdgltIcDj7h8oZmxO5PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUt
MzY4NzhmNjU3ZTEyLzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84NjAzZTEtOWI2Yi00M2E2LWI5NWUtMzY4NzhmNjU3ZTEy
LzEvcUpoSmE0MGQyQ1cwaHdPUHVIeWhtYkU3azk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFlS/p37
iDZ3p5Z6GOlBVHWb9RQE0vSXQdyuzAZErLujzEongaYSex99TjTYSn5Owv6tsZKo
X58eJdM8/48r907MkPRJSmAC7GjNNtuiKeJ8KT8IbHYlRKk4CetmxWCBV27H2FaX
v8MF3uLyuqGdfOGDOd0fDC8kphmbgNnVO1IDvU9amgkmnfCM7WMqR+pla3pZqSx5
OxGoHTJzOt7IZShZDB/bRY6rEhW637klDfQdDJ3jm5YgkE1ke79P9vK63QIQsU+V
05Brav738KDwUgjdradiY0NI1fxcs3COR9lgkFTr93Q0ieoi/0YVJJkzTovZyyUL
l09y7YIdnT4vVA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:42:51 2025 by rpki-client