Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: 1NbnGU9BRfmSkxYmY+O/OVTK5REj3iH7ASw5o0ctBdw=
Subject key identifier: AD:33:34:BF:F3:A3:D6:A7:86:E9:CB:D9:AE:4B:95:D4:8A:86:D2:A0
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 0197B6D7848380F07DB0BEFFFFEDD0F13E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: lxBXnG-4rYAQUCGbktacJsJcscU.roa (hash: d11nQxBRc+xMvxpKWxAVqfhsk9tCL6Ja3DwWQ6WsmPo=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: CZ/38iclmGuokAfE5wRli9jJ+z5cnSq5B8Aax6Bpxy8=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:84:83:80:f0:7d:b0:be:ff:ff:ed:d0:f1:3e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=ad3334bff3a3d6a786e9cbd9ae4b95d48a86d2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e5:46:e3:2e:c0:6b:ac:48:eb:17:e3:e9:9a:
45:5e:c4:05:3a:ce:24:4f:52:44:3d:68:05:9e:e4:
61:7c:90:14:33:0a:51:6c:b5:72:c6:a8:28:f7:2b:
06:74:a4:40:d8:73:73:c0:f2:8e:a2:4d:47:f3:c3:
5c:77:49:28:7b:24:47:51:14:9d:cc:b4:6f:73:c3:
60:ec:b3:59:85:f3:86:31:df:1c:f7:b5:68:a4:a5:
40:87:69:89:a2:1b:2a:af:9d:0d:56:dc:fa:c6:33:
7d:3b:7b:e4:66:dc:db:78:f4:d4:a6:ae:60:8c:6e:
ab:9d:8d:f6:2d:22:b4:07:96:bc:fb:65:29:26:1c:
f7:b8:be:e1:54:d5:8e:0c:04:94:c7:13:2e:18:9b:
38:a8:4b:69:4d:6a:77:ba:d3:d4:ed:4f:a1:90:34:
fe:43:13:50:1b:1f:8f:e8:fb:89:5b:6f:cd:96:ae:
fb:c0:20:a3:3d:c4:4e:7e:96:ab:01:bd:e0:a6:ab:
e1:4a:b5:07:fc:a9:70:a0:63:08:7d:e5:f6:06:20:
47:26:5f:c4:ad:1f:cd:eb:73:72:27:ba:4a:95:3c:
91:97:38:10:85:28:d7:f0:06:78:e1:0b:18:9b:11:
6e:4d:b2:a1:e6:23:93:31:db:a6:a5:be:fe:d7:f4:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:34:BF:F3:A3:D6:A7:86:E9:CB:D9:AE:4B:95:D4:8A:86:D2:A0
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ea:f8:89:01:02:03:e5:ae:cf:5a:fe:42:d4:2d:18:3f:35:
ca:62:ab:55:b6:e4:98:74:b5:8f:6b:8c:b3:01:10:6d:51:fd:
f7:87:b1:22:e6:ba:b5:22:59:96:8e:ea:f3:28:57:ca:b3:d3:
d2:94:16:02:46:ef:e2:52:ca:7d:01:c3:6d:e3:a9:9d:d5:6d:
3e:fc:c3:a4:d8:10:f6:5b:62:e4:c7:31:e5:b8:9a:2c:48:7e:
d1:a6:42:32:3b:b1:14:84:d0:96:cd:0f:ed:ad:ec:4c:a5:44:
a3:20:da:5f:3b:03:81:5f:6c:a1:f0:86:87:15:5b:4d:78:8a:
90:71:cc:d6:bc:90:e7:2e:59:05:f9:b0:8e:e7:20:20:55:44:
5f:1d:7f:69:19:04:ce:df:73:70:20:27:3d:d8:2a:4a:99:7e:
0b:b0:8e:2f:12:ab:33:bf:92:b9:8d:1d:1b:84:15:a0:c4:9e:
eb:ab:f9:a9:de:5d:bf:f6:a8:9e:0a:94:97:07:0c:ac:18:ff:
05:55:fd:5c:e8:e8:aa:95:cd:0b:36:0f:dd:f0:58:7b:5e:bd:
b6:2c:86:a8:e6:27:59:23:15:e2:4a:06:ab:ba:d7:32:c5:03:
3b:37:e6:c6:54:81:1b:38:e0:cd:b5:bb:9b:3a:61:90:8f:4b:
56:fe:72:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214SDgPB9sL7//+3Q8T4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTUzYjNkNTYxMjIzNGZlMjYwZmU2MGJjN2NlMDI4MDYy
MjI3YTMwHhcNMjUwNjI4MTQwMTA2WhcNMjUwNjI5MTQwMTA2WjAzMTEwLwYDVQQD
EyhhZDMzMzRiZmYzYTNkNmE3ODZlOWNiZDlhZTRiOTVkNDhhODZkMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOVG4y7Aa6xI6xfj6ZpFXsQFOs4k
T1JEPWgFnuRhfJAUMwpRbLVyxqgo9ysGdKRA2HNzwPKOok1H88Ncd0koeyRHURSd
zLRvc8Ng7LNZhfOGMd8c97VopKVAh2mJohsqr50NVtz6xjN9O3vkZtzbePTUpq5g
jG6rnY32LSK0B5a8+2UpJhz3uL7hVNWODASUxxMuGJs4qEtpTWp3utPU7U+hkDT+
QxNQGx+P6PuJW2/Nlq77wCCjPcROfparAb3gpqvhSrUH/KlwoGMIfeX2BiBHJl/E
rR/N63NyJ7pKlTyRlzgQhSjX8AZ44QsYmxFuTbKh5iOTMdumpb7+1/TZRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0zNL/zo9anhunL2a5LldSKhtKgMB8GA1UdIwQY
MBaAFKgVOz1WEiNP4mD+YLx84CgGIiejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUt
OWFhN2NkNjUwNWU1LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUtOWFhN2NkNjUwNWU1
LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJer4iQEC
A+Wuz1r+QtQtGD81ymKrVbbkmHS1j2uMswEQbVH994exIua6tSJZlo7q8yhXyrPT
0pQWAkbv4lLKfQHDbeOpndVtPvzDpNgQ9lti5Mcx5biaLEh+0aZCMjuxFITQls0P
7a3sTKVEoyDaXzsDgV9sofCGhxVbTXiKkHHM1ryQ5y5ZBfmwjucgIFVEXx1/aRkE
zt9zcCAnPdgqSpl+C7COLxKrM7+SuY0dG4QVoMSe66v5qd5dv/aongqUlwcMrBj/
BVX9XOjoqpXNCzYP3fBYe169tiyGqOYnWSMV4koGq7rXMsUDOzfmxlSBGzjgzbW7
mzphkI9LVv5ysA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:56 2025 by rpki-client