Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: rjQE8uv0vxV7fSZCj+ZzhUJzrmglqscwYlqtWcGL/Pk=
Subject key identifier: 96:90:47:BF:0C:B2:2B:E3:0E:43:E6:06:28:1F:75:06:D2:3D:65:73
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 0197B89039BEAF989357443EDD080184F37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:02:28 +0000
Manifest this update: Sat 28 Jun 2025 22:02:28 +0000
Manifest next update: Sun 29 Jun 2025 22:02:28 +0000
Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: En9fDxITZGiyQhZzKP8W7ikOQ47colyyPPVdI8cKpAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:39:be:af:98:93:57:44:3e:dd:08:01:84:f3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Jun 28 22:02:28 2025 GMT
Not After : Jun 29 22:02:28 2025 GMT
Subject: CN=969047bf0cb22be30e43e606281f7506d23d6573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:a7:c0:4c:a2:2f:d3:d4:4f:3a:e3:7d:e4:
04:97:54:f7:aa:2e:1c:de:5c:3b:dc:2a:e3:aa:0e:
68:f6:02:ac:8a:3a:fd:8e:51:0c:cb:29:60:b8:63:
d6:a7:63:cf:33:ef:f9:b3:80:c8:b2:b2:14:56:9b:
1a:da:4c:d1:35:eb:cd:c0:ce:9f:dd:c3:3d:b3:bc:
3a:30:0d:16:94:b0:3a:16:11:e7:0a:05:dc:d1:1b:
ff:69:f2:fb:c9:e4:8a:50:48:c2:dc:40:b6:44:4e:
6e:ba:e9:50:77:78:e4:bd:d9:e9:0a:60:18:4f:1c:
1b:ae:56:c3:ee:10:6e:91:00:3a:1f:29:b1:1d:b4:
bb:75:d3:3c:54:56:1d:e7:eb:1f:f3:b5:e3:0f:75:
e8:79:d4:14:bc:83:7e:ac:2c:c8:5a:14:b1:fc:99:
15:64:41:52:0f:13:c3:ce:3f:51:c1:02:5c:18:03:
83:fb:32:df:b3:f1:30:38:12:81:f7:b0:c4:9f:23:
9e:8d:e7:94:85:07:b7:2b:b7:d7:24:82:ba:31:9b:
77:64:f4:34:5e:91:e1:7d:ad:13:a6:e4:76:1f:54:
d7:cd:18:6f:17:5e:68:e9:45:09:e3:61:28:a9:eb:
0d:1e:d0:8a:33:0d:2c:64:e9:54:62:e3:e8:24:00:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:47:BF:0C:B2:2B:E3:0E:43:E6:06:28:1F:75:06:D2:3D:65:73
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1a:36:43:5b:e2:f1:73:6a:29:ed:eb:af:ab:e8:d3:ae:62:
c3:f1:0a:01:3a:d1:24:a2:a8:ad:b5:f1:5e:54:e2:84:86:50:
c0:b8:cc:c2:48:33:fe:0b:0d:22:4c:fb:9e:ab:b2:c4:72:5c:
78:6e:4c:d1:e9:4b:76:ad:a3:85:c5:81:4b:da:0a:6b:c3:81:
5c:00:64:70:8c:09:ef:b4:11:7c:1e:cb:7d:cf:15:b5:52:ce:
42:8e:d6:46:2d:e9:a9:44:d3:7b:98:d7:db:d8:aa:5c:50:68:
c4:c6:37:5a:b4:51:c1:5d:47:c3:a2:b2:76:69:11:61:0b:59:
26:24:f3:d5:d0:d8:b3:8e:a2:78:da:2c:60:23:9d:9b:97:46:
38:7e:8f:d6:69:28:07:97:8c:75:57:f0:45:96:19:71:2f:5d:
5a:da:3f:1b:dc:b0:2f:8b:78:4b:7c:26:ae:ec:d7:87:1e:f1:
78:70:c9:df:44:7c:68:3d:e2:25:56:b4:96:04:17:43:92:1d:
56:0c:6d:63:73:a5:05:b9:99:fc:12:56:8c:8a:0d:25:4d:a5:
d1:92:e0:80:f6:4c:40:10:56:3a:0e:1e:2d:f3:d7:4d:23:9c:
74:83:61:05:a6:c6:28:9c:ab:fb:ea:40:56:59:be:78:1b:53:
fa:8b:42:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kDm+r5iTV0Q+3QgBhPN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NmUyNTdjMzJkOWRiYjgxOWQ1MTdkNTUwNTRmNzY3ZDcx
NjFkMmMwHhcNMjUwNjI4MjIwMjI4WhcNMjUwNjI5MjIwMjI4WjAzMTEwLwYDVQQD
Eyg5NjkwNDdiZjBjYjIyYmUzMGU0M2U2MDYyODFmNzUwNmQyM2Q2NTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW2nwEyiL9PUTzrjfeQEl1T3qi4c
3lw73Crjqg5o9gKsijr9jlEMyylguGPWp2PPM+/5s4DIsrIUVpsa2kzRNevNwM6f
3cM9s7w6MA0WlLA6FhHnCgXc0Rv/afL7yeSKUEjC3EC2RE5uuulQd3jkvdnpCmAY
TxwbrlbD7hBukQA6HymxHbS7ddM8VFYd5+sf87XjD3XoedQUvIN+rCzIWhSx/JkV
ZEFSDxPDzj9RwQJcGAOD+zLfs/EwOBKB97DEnyOejeeUhQe3K7fXJIK6MZt3ZPQ0
XpHhfa0TpuR2H1TXzRhvF15o6UUJ42EoqesNHtCKMw0sZOlUYuPoJAA0XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaQR78MsivjDkPmBigfdQbSPWVzMB8GA1UdIwQY
MBaAFKhuJXwy2du4GdUX1VBU92fXFh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzIt
NDg3ZjAzNGM0NzI3LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzItNDg3ZjAzNGM0NzI3
LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxo2Q1vi
8XNqKe3rr6vo065iw/EKATrRJKKorbXxXlTihIZQwLjMwkgz/gsNIkz7nquyxHJc
eG5M0elLdq2jhcWBS9oKa8OBXABkcIwJ77QRfB7Lfc8VtVLOQo7WRi3pqUTTe5jX
29iqXFBoxMY3WrRRwV1Hw6KydmkRYQtZJiTz1dDYs46ieNosYCOdm5dGOH6P1mko
B5eMdVfwRZYZcS9dWto/G9ywL4t4S3wmruzXhx7xeHDJ30R8aD3iJVa0lgQXQ5Id
VgxtY3OlBbmZ/BJWjIoNJU2l0ZLggPZMQBBWOg4eLfPXTSOcdINhBabGKJyr++pA
Vlm+eBtT+otCDA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:11:51 2025 by rpki-client