Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: 1VmJzCFFaaMAXZoR9naj+5uJvENX2zLBtu4xW+HVVn8=
Subject key identifier: 27:D1:44:BA:AB:81:4C:7A:A2:81:EA:37:EE:28:F5:F2:A3:B0:23:19
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 0197C6139479C4B61E2EC8F08B31C0AF750D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 15BB
Signing time: Tue 01 Jul 2025 13:01:01 +0000
Manifest this update: Tue 01 Jul 2025 13:01:01 +0000
Manifest next update: Wed 02 Jul 2025 13:01:01 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: 9Fjh1x9hbEAUs8mEZlhL21DE/nJWvdMQ7jL4v7+SNnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:94:79:c4:b6:1e:2e:c8:f0:8b:31:c0:af:75:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Jul 1 13:01:01 2025 GMT
Not After : Jul 2 13:01:01 2025 GMT
Subject: CN=27d144baab814c7aa281ea37ee28f5f2a3b02319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:41:e2:22:a2:73:c5:36:46:a9:0b:75:5a:
97:81:42:e4:c4:a0:50:22:2d:6a:a6:c5:50:4a:e4:
c5:39:9f:ee:c2:a9:31:2c:f4:71:1c:65:6d:d7:dc:
8c:bc:b1:34:03:e7:6f:58:dc:e1:7b:da:6d:d4:f3:
5d:33:15:13:46:8c:1d:bc:db:53:f2:0f:4c:e6:29:
6a:54:b2:6e:7b:5f:95:84:38:53:66:11:4f:c7:3f:
a0:2d:53:2e:6d:c5:05:c4:7b:be:35:aa:3d:76:02:
57:20:a9:92:4d:73:be:2d:88:40:c6:ca:8e:9b:a0:
18:96:21:01:b5:a7:59:9e:d9:6e:6a:9b:b1:75:00:
a1:fb:8e:ed:e9:7f:1a:1f:dc:ec:7e:dd:55:df:56:
c1:32:99:66:a4:97:e1:cc:71:41:1e:cf:2d:c0:8b:
c0:2c:1e:47:5a:ac:6d:d6:7b:a4:3a:d8:d9:db:d8:
4a:45:04:35:b1:5e:0c:ba:b2:a1:1b:fd:44:b4:8c:
38:90:1c:9f:dd:a1:d1:ff:71:01:a5:6a:bb:58:a9:
35:84:f2:e9:25:ec:79:b3:42:0c:30:46:19:b5:9c:
d5:0d:91:4e:2f:a5:ad:f3:08:61:e4:09:ce:12:16:
35:20:6e:d1:c7:67:b4:a6:7c:7d:b8:3f:dd:cb:9d:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D1:44:BA:AB:81:4C:7A:A2:81:EA:37:EE:28:F5:F2:A3:B0:23:19
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:00:bc:a4:0b:4f:dc:3d:57:74:8f:2d:9b:d9:3d:97:05:c0:
38:1d:81:b5:ce:dd:79:e9:a7:c0:bf:a5:52:1e:96:48:6d:40:
7f:86:b4:7f:d7:b3:af:18:eb:c3:66:23:7e:af:aa:59:40:95:
f1:e4:83:59:d6:33:55:d6:1b:91:41:ec:32:22:2f:bc:17:f4:
f8:75:10:dc:b3:1d:30:28:39:3b:a8:40:d7:0c:b1:cc:a8:c5:
1d:c0:d7:4d:a0:b7:75:4c:20:06:7d:75:e6:c8:7d:92:91:8d:
75:cb:4a:ec:9b:a0:de:ff:8b:3f:92:0e:5a:f4:7f:b3:ba:e2:
fb:bb:7c:d8:76:56:99:4d:45:f3:f8:ff:f0:30:08:88:f3:ae:
bb:5d:5f:89:1a:0f:52:2f:c5:a8:2f:75:3a:9b:d5:c2:2b:e6:
f3:92:d3:ad:31:f9:8e:36:41:18:ea:b3:fe:75:1c:ce:8b:ea:
ff:d6:b9:b7:d4:c6:2b:ca:d8:d5:76:a1:85:19:4e:4a:ad:ca:
7f:ed:7e:41:92:53:e0:dd:24:0a:69:91:bc:1d:b9:af:b5:38:
ea:85:9d:3e:74:53:21:bf:ac:06:2a:cb:ee:f1:1f:b8:94:8c:
29:6a:2c:e2:ea:35:67:06:ae:ff:19:ea:54:93:52:24:6b:6c:
f0:c7:6c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGE5R5xLYeLsjwizHAr3UNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlMmU4MTJmMDlhYzRmZTJiNDdlNDI2OWNlMWEwMjAy
MWNhMGUwHhcNMjUwNzAxMTMwMTAxWhcNMjUwNzAyMTMwMTAxWjAzMTEwLwYDVQQD
EygyN2QxNDRiYWFiODE0YzdhYTI4MWVhMzdlZTI4ZjVmMmEzYjAyMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYtB4iKic8U2RqkLdVqXgULkxKBQ
Ii1qpsVQSuTFOZ/uwqkxLPRxHGVt19yMvLE0A+dvWNzhe9pt1PNdMxUTRowdvNtT
8g9M5ilqVLJue1+VhDhTZhFPxz+gLVMubcUFxHu+Nao9dgJXIKmSTXO+LYhAxsqO
m6AYliEBtadZntluapuxdQCh+47t6X8aH9zsft1V31bBMplmpJfhzHFBHs8twIvA
LB5HWqxt1nukOtjZ29hKRQQ1sV4MurKhG/1EtIw4kByf3aHR/3EBpWq7WKk1hPLp
Jex5s0IMMEYZtZzVDZFOL6Wt8whh5AnOEhY1IG7Rx2e0pnx9uD/dy51exQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfRRLqrgUx6ooHqN+4o9fKjsCMZMB8GA1UdIwQY
MBaAFKpE4ugS8JrE/itH5Cac4aAgIcoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYt
ODY2NDBmY2EzM2JmLzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYtODY2NDBmY2EzM2Jm
LzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAC8pAtP
3D1XdI8tm9k9lwXAOB2Btc7deemnwL+lUh6WSG1Af4a0f9ezrxjrw2Yjfq+qWUCV
8eSDWdYzVdYbkUHsMiIvvBf0+HUQ3LMdMCg5O6hA1wyxzKjFHcDXTaC3dUwgBn11
5sh9kpGNdctK7Jug3v+LP5IOWvR/s7ri+7t82HZWmU1F8/j/8DAIiPOuu11fiRoP
Ui/FqC91OpvVwivm85LTrTH5jjZBGOqz/nUczovq/9a5t9TGK8rY1XahhRlOSq3K
f+1+QZJT4N0kCmmRvB25r7U46oWdPnRTIb+sBirL7vEfuJSMKWos4uo1Zwau/xnq
VJNSJGts8MdsfQ==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:09:00 2025 by rpki-client