Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: nrezaQPzQu6it/GywrAM+hALz7492/u6ElWTX/yTEBU=
Subject key identifier: B0:82:DA:13:AF:07:A2:43:0F:D0:4F:12:D9:04:8A:86:D8:F7:5C:62
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 0197B5FC0CDDF0BA258C9D6545925A00027C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 04BA
Signing time: Sat 28 Jun 2025 10:01:23 +0000
Manifest this update: Sat 28 Jun 2025 10:01:23 +0000
Manifest next update: Sun 29 Jun 2025 10:01:23 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: +XbgBDqR1lbszX2gTpL1hZZ+aSXmMftV6Ygjeu4zzN0=)
3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:0c:dd:f0:ba:25:8c:9d:65:45:92:5a:00:02:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Jun 28 10:01:23 2025 GMT
Not After : Jun 29 10:01:23 2025 GMT
Subject: CN=b082da13af07a2430fd04f12d9048a86d8f75c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:39:e0:21:a2:27:b4:59:9c:28:45:d9:5b:
bc:be:ed:ac:27:ec:17:03:92:13:e4:9d:98:09:b8:
14:07:60:3b:a2:7d:eb:18:e0:75:6d:00:4b:e3:04:
12:ad:4d:21:af:38:de:cf:22:c2:4e:f0:f9:92:1a:
e6:c6:bb:f1:12:fa:48:c6:50:aa:5d:f9:9a:38:35:
d5:e3:f5:9c:fc:a0:cf:f4:c7:d8:17:5f:7a:37:5d:
64:b1:2b:6f:ac:cc:cb:1f:f1:af:fe:5e:54:54:c9:
13:06:46:aa:33:f6:5d:ec:b7:df:7b:cc:3a:62:53:
fe:b5:f5:fa:f1:ab:91:06:32:8a:bc:a5:99:48:5c:
81:13:21:46:69:3a:74:43:cd:18:ba:b8:0a:33:06:
2b:9e:5e:0e:29:1b:b7:ea:a9:87:f2:f2:01:d4:dd:
30:5e:eb:20:27:a8:33:1e:55:39:5c:8c:81:af:4f:
06:90:0b:67:e0:3e:40:4c:4c:1d:b2:5e:dc:d1:3a:
c4:a0:47:18:d9:b7:03:99:5d:b7:0b:8e:08:a6:ef:
b9:fe:a2:26:6d:f4:b6:c9:ec:46:33:88:e4:be:bf:
8c:7d:58:c1:e9:0a:6c:13:4e:2b:70:9f:74:97:0a:
6f:63:33:b2:f4:b1:2a:39:d1:3f:7f:d5:fd:ec:d6:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:DA:13:AF:07:A2:43:0F:D0:4F:12:D9:04:8A:86:D8:F7:5C:62
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:57:d1:a6:23:9f:59:dc:d6:74:15:04:6c:ef:da:5a:1b:92:
21:1f:80:1f:65:29:8b:4b:73:f0:22:1a:5a:66:a6:42:9f:46:
06:ac:73:c8:56:a0:73:f4:c3:38:63:9f:ef:0b:e0:9d:c4:52:
d0:63:cf:7d:a2:1a:05:0c:c6:b6:b2:56:53:d5:32:d7:72:c6:
ce:64:c9:ad:a0:18:0e:06:fc:98:30:45:38:9b:0b:2e:b2:ca:
f9:4b:75:d9:39:0f:e2:a1:55:15:28:a8:a8:b0:49:76:56:05:
2b:bb:44:84:c2:81:00:2b:e8:33:97:27:b5:8b:6d:03:36:e4:
54:b0:44:03:92:a1:10:21:02:a5:63:fd:06:20:1e:ad:7d:46:
ef:16:48:0d:1e:c1:4a:33:6c:78:11:43:9a:28:b7:ab:55:c9:
85:21:db:4d:73:f3:c7:25:fe:9d:dc:df:77:23:3a:96:59:22:
61:46:e2:f6:d5:ae:5d:40:49:16:56:96:f9:b5:10:6a:5c:08:
6d:c7:a7:e8:d1:ca:d4:bc:91:c4:d4:22:68:fa:fe:1a:05:4f:
af:8c:16:a0:c9:41:51:82:ce:4c:1a:77:b0:b9:ff:e5:15:ce:
02:72:d9:e2:27:97:cb:22:c2:ce:9d:7a:95:36:05:7a:13:9b:
bb:9f:4f:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/Azd8LoljJ1lRZJaAAJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZGQxY2U0ZWViOTJmZjUzYjYzMzg5MmZkNDU3YjAxMWUx
MTcxZjEwHhcNMjUwNjI4MTAwMTIzWhcNMjUwNjI5MTAwMTIzWjAzMTEwLwYDVQQD
EyhiMDgyZGExM2FmMDdhMjQzMGZkMDRmMTJkOTA0OGE4NmQ4Zjc1YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqng54CGiJ7RZnChF2Vu8vu2sJ+wX
A5IT5J2YCbgUB2A7on3rGOB1bQBL4wQSrU0hrzjezyLCTvD5khrmxrvxEvpIxlCq
XfmaODXV4/Wc/KDP9MfYF196N11ksStvrMzLH/Gv/l5UVMkTBkaqM/Zd7Lffe8w6
YlP+tfX68auRBjKKvKWZSFyBEyFGaTp0Q80YurgKMwYrnl4OKRu36qmH8vIB1N0w
XusgJ6gzHlU5XIyBr08GkAtn4D5ATEwdsl7c0TrEoEcY2bcDmV23C44Ipu+5/qIm
bfS2yexGM4jkvr+MfVjB6QpsE04rcJ90lwpvYzOy9LEqOdE/f9X97NYhYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCC2hOvB6JDD9BPEtkEiobY91xiMB8GA1UdIwQY
MBaAFEHdHOTuuS/1O2M4kv1FewEeEXHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMt
ODg1MjFhZDk5YzdlLzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMtODg1MjFhZDk5Yzdl
LzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelfRpiOf
WdzWdBUEbO/aWhuSIR+AH2Upi0tz8CIaWmamQp9GBqxzyFagc/TDOGOf7wvgncRS
0GPPfaIaBQzGtrJWU9Uy13LGzmTJraAYDgb8mDBFOJsLLrLK+Ut12TkP4qFVFSio
qLBJdlYFK7tEhMKBACvoM5cntYttAzbkVLBEA5KhECECpWP9BiAerX1G7xZIDR7B
SjNseBFDmii3q1XJhSHbTXPzxyX+ndzfdyM6llkiYUbi9tWuXUBJFlaW+bUQalwI
bcen6NHK1LyRxNQiaPr+GgVPr4wWoMlBUYLOTBp3sLn/5RXOAnLZ4ieXyyLCzp16
lTYFehObu59PXw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:21 2025 by rpki-client