Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: P/D4XNmxmR5DLuHPPEzXv5/Gcai+PSWXS/wwFgIRULI=
Subject key identifier: 1C:0E:8F:2C:44:17:8F:AD:B5:0D:E3:AB:83:AF:38:18:A7:4F:7E:EC
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 0197B6D7A9AD30BEF48864325B88093029C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0BA3
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: eohUHoXVvugZTGIOmZGrEt7D3HwZyUYryhaZQ6tZuu8=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a9:ad:30:be:f4:88:64:32:5b:88:09:30:29:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=1c0e8f2c44178fadb50de3ab83af3818a74f7eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:65:d9:85:5c:f0:63:33:cf:39:e9:20:75:
43:8c:d0:f6:f0:2c:0c:36:83:fb:8f:5d:9c:f5:8b:
f8:a8:60:f1:5c:a8:64:a3:dc:92:46:8a:cc:1e:ab:
b1:37:2b:6b:11:06:27:20:3a:a3:6d:a8:11:b9:eb:
25:9c:56:76:58:8a:a8:03:46:ad:e7:d7:55:18:ff:
49:23:ad:2c:5e:32:20:b8:80:ee:54:65:03:5e:a5:
24:c8:5d:81:a1:c4:f4:37:75:57:1c:fb:ed:d5:62:
04:21:c8:4d:f0:42:8f:fd:e0:9d:ca:8e:e8:ef:a9:
cd:ea:d6:df:0c:9b:80:b4:e7:68:e9:03:c3:b0:75:
b0:b2:55:25:5e:f0:f5:5e:c0:32:4a:e2:c4:6d:31:
0d:3e:41:46:0d:75:52:43:47:8f:8d:2a:9a:9d:dc:
a2:85:3f:bc:44:78:1b:45:9c:6e:b2:7f:0c:43:1a:
a9:01:47:d4:69:51:30:c3:2a:fe:8d:a1:28:4b:27:
c9:6b:7d:56:e1:38:dc:15:5e:05:2a:5e:77:f9:73:
7e:92:97:57:a1:43:6b:2a:f3:ce:bc:d9:02:ce:fb:
c9:65:6c:e4:69:5e:e4:f6:47:a5:30:43:4f:60:95:
b3:01:62:34:bd:4e:ff:fe:fc:62:fc:ef:73:33:d5:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0E:8F:2C:44:17:8F:AD:B5:0D:E3:AB:83:AF:38:18:A7:4F:7E:EC
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:bb:79:de:0a:79:ed:52:a8:05:6d:4c:f6:09:79:99:10:
24:05:c0:a6:61:19:b3:46:f9:c5:fb:a9:19:d2:93:ab:1b:fd:
01:ba:c7:bc:b6:7f:79:ed:20:f6:f5:df:bb:b5:18:e9:60:7d:
28:9c:7c:4e:1d:43:96:7a:17:8d:45:3d:f5:9f:33:3e:ec:6a:
73:55:1a:da:75:5b:95:4c:ba:0e:c3:6d:e6:25:44:d6:93:83:
59:4c:63:a2:59:8d:f2:e9:ba:f0:c4:51:c5:09:0f:fa:33:18:
d0:f9:fa:4e:80:c1:de:2b:14:8c:60:c4:4a:c7:48:07:c3:e4:
11:71:eb:95:e7:8f:40:22:21:f8:81:6c:c3:89:21:92:d4:d5:
26:47:53:80:47:a3:b5:5a:32:fb:07:47:f4:60:21:03:33:18:
a6:97:54:f5:7e:ed:8b:d2:c5:30:b8:6e:b6:3f:31:b0:54:c7:
61:1d:e5:a3:95:d0:b0:67:66:b9:a0:ce:83:3e:22:29:85:05:
8a:14:c6:5d:be:d9:f4:42:b7:d1:a9:b9:76:53:15:33:27:27:
d8:fb:ac:43:b2:17:42:e2:58:16:b7:4a:f5:d9:18:69:50:cb:
58:1d:74:6e:8e:94:d1:a1:70:45:30:95:3b:f5:83:2d:cd:d9:
c1:84:80:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216mtML70iGQyW4gJMCnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTA0NWQwMjFkNDhhZTg2MWEwY2U2N2QzOGQxNWEwNjc2
NTNhMzEwHhcNMjUwNjI4MTQwMTE2WhcNMjUwNjI5MTQwMTE2WjAzMTEwLwYDVQQD
EygxYzBlOGYyYzQ0MTc4ZmFkYjUwZGUzYWI4M2FmMzgxOGE3NGY3ZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdZl2YVc8GMzzznpIHVDjND28CwM
NoP7j12c9Yv4qGDxXKhko9ySRorMHquxNytrEQYnIDqjbagRueslnFZ2WIqoA0at
59dVGP9JI60sXjIguIDuVGUDXqUkyF2BocT0N3VXHPvt1WIEIchN8EKP/eCdyo7o
76nN6tbfDJuAtOdo6QPDsHWwslUlXvD1XsAySuLEbTENPkFGDXVSQ0ePjSqandyi
hT+8RHgbRZxusn8MQxqpAUfUaVEwwyr+jaEoSyfJa31W4TjcFV4FKl53+XN+kpdX
oUNrKvPOvNkCzvvJZWzkaV7k9kelMENPYJWzAWI0vU7//vxi/O9zM9X0lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwOjyxEF4+ttQ3jq4OvOBinT37sMB8GA1UdIwQY
MBaAFEPgRdAh1IroYaDOZ9ONFaBnZToxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTIt
M2IwMmM5OWM3MzNiLzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84ZjU3M2ItZGM4ZC00ODc2LWJjYTItM2IwMmM5OWM3MzNi
LzEvUS1CRjBDSFVpdWhob001bjA0MFZvR2RsT2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHS7ed4K
ee1SqAVtTPYJeZkQJAXApmEZs0b5xfupGdKTqxv9AbrHvLZ/ee0g9vXfu7UY6WB9
KJx8Th1DlnoXjUU99Z8zPuxqc1Ua2nVblUy6DsNt5iVE1pODWUxjolmN8um68MRR
xQkP+jMY0Pn6ToDB3isUjGDESsdIB8PkEXHrleePQCIh+IFsw4khktTVJkdTgEej
tVoy+wdH9GAhAzMYppdU9X7ti9LFMLhutj8xsFTHYR3lo5XQsGdmuaDOgz4iKYUF
ihTGXb7Z9EK30am5dlMVMycn2PusQ7IXQuJYFrdK9dkYaVDLWB10bo6U0aFwRTCV
O/WDLc3ZwYSAHA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:16 2025 by rpki-client