Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: fMjcXsnfgSnCyiXpw5HKEJR/a0RaNVyOJTXrOAakBEo=
Subject key identifier: CD:B0:D7:1D:45:68:35:F8:62:A9:5F:47:62:1F:5E:3C:35:A6:E6:9E
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 0197B77CD0CBD0FFAD0397718C4CB797DD35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 17:01:39 +0000
Manifest this update: Sat 28 Jun 2025 17:01:39 +0000
Manifest next update: Sun 29 Jun 2025 17:01:39 +0000
Files and hashes: 1: OYOpNeEVsu0T0BbvhmHIdNFIT_o.roa (hash: 5OjFPxxmaTIrwXXRizdKgOIFQoKouBwpJLlgwAhC1mU=)
2: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: AL4kSdsCKBgrgpkdiMqoXyeijmsQqfDcqbrYG2BPmFY=)
3: YdfGaXHdTb-LYhTs_wz6s9gnwBM.roa (hash: gNJt9eBEIblRu0IFOMH1K6y+ICB3kC1BNK9Q6bATMgc=)
4: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=)
5: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d0:cb:d0:ff:ad:03:97:71:8c:4c:b7:97:dd:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jun 28 17:01:39 2025 GMT
Not After : Jun 29 17:01:39 2025 GMT
Subject: CN=cdb0d71d456835f862a95f47621f5e3c35a6e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:94:61:e3:51:bc:c5:85:3b:ec:30:66:b5:
25:5f:3c:49:ce:fc:f7:72:4f:78:48:b2:af:f2:d9:
71:d4:32:bb:18:b1:c7:b8:3c:bb:91:59:01:d9:2b:
ca:9a:34:c0:66:9c:56:40:4a:ea:7e:b7:2b:71:73:
e1:b7:e3:f4:ca:34:99:90:ca:c2:1d:e5:30:dd:ec:
1b:78:80:af:e8:76:b3:3c:b3:05:03:08:78:51:55:
38:b6:9e:ee:fc:a3:dd:54:d4:8c:46:ac:e8:51:60:
08:ee:a9:ed:62:43:04:04:71:dc:a9:a8:2f:9b:90:
75:40:e5:e9:4a:96:aa:c6:dd:ab:5f:52:d0:dc:cb:
6f:e0:c3:be:0a:1a:37:cc:88:49:fd:67:56:38:73:
22:da:e9:71:f6:fe:4a:87:7d:c9:c4:05:29:09:98:
89:f3:70:75:2f:f7:6b:48:26:df:c2:09:1f:4f:dc:
85:b7:32:3a:b8:52:39:cb:72:5c:0a:c9:fd:81:9f:
30:32:12:1b:e4:99:9a:25:a1:77:59:99:64:fa:ba:
8e:e7:b0:28:ea:fe:92:1a:39:67:a8:39:ce:69:6b:
a5:24:ea:7d:e4:2f:d7:ce:9b:96:ac:db:9e:59:27:
88:78:bb:81:61:65:b3:04:79:e7:5f:c2:a0:c5:8e:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B0:D7:1D:45:68:35:F8:62:A9:5F:47:62:1F:5E:3C:35:A6:E6:9E
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:65:23:eb:af:5d:fa:b3:ec:d3:c3:30:4b:38:58:90:33:25:
c5:c6:1f:7f:f4:83:d2:f3:e6:8e:29:d3:f5:5b:ca:01:c2:5f:
bb:3b:2e:97:a6:1f:8b:08:d5:53:9b:a9:b9:bd:ac:b6:06:db:
55:c7:18:de:ef:8e:ac:02:e1:a5:55:0b:fd:27:c1:cb:51:d5:
f8:e8:56:d4:c7:b6:30:bb:29:8b:3a:02:33:83:c8:4d:7e:8e:
c4:8d:77:77:7d:b8:15:d5:57:10:a2:04:96:23:05:4e:e6:e0:
a5:43:94:90:37:b1:fc:27:ba:3f:b2:af:36:3c:1a:95:ab:54:
cc:dc:3b:51:62:59:75:20:06:f9:91:13:d9:73:48:7a:88:45:
77:38:4c:02:30:94:b0:1e:1d:cb:ca:29:ed:53:78:74:bf:d9:
61:a6:cf:b7:5b:e1:be:b4:24:2d:a5:a4:db:de:29:62:a4:b1:
33:c9:b7:a3:b8:a7:fc:51:19:2a:45:d6:00:4b:b2:4a:ac:80:
8d:53:3f:66:44:79:5c:14:11:9e:80:a5:48:6b:77:8d:5c:fe:
df:1c:21:a7:1a:b6:2c:41:77:0a:80:f6:65:f2:dd:d7:cb:83:
6d:ec:f7:dc:c6:02:9f:43:95:df:1b:d6:1d:a1:e2:90:ce:72:
ad:0b:19:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fNDL0P+tA5dxjEy3l901MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2
NTFjNDMwHhcNMjUwNjI4MTcwMTM5WhcNMjUwNjI5MTcwMTM5WjAzMTEwLwYDVQQD
EyhjZGIwZDcxZDQ1NjgzNWY4NjJhOTVmNDc2MjFmNWUzYzM1YTZlNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwGUYeNRvMWFO+wwZrUlXzxJzvz3
ck94SLKv8tlx1DK7GLHHuDy7kVkB2SvKmjTAZpxWQErqfrcrcXPht+P0yjSZkMrC
HeUw3ewbeICv6HazPLMFAwh4UVU4tp7u/KPdVNSMRqzoUWAI7qntYkMEBHHcqagv
m5B1QOXpSpaqxt2rX1LQ3Mtv4MO+Cho3zIhJ/WdWOHMi2ulx9v5Kh33JxAUpCZiJ
83B1L/drSCbfwgkfT9yFtzI6uFI5y3JcCsn9gZ8wMhIb5JmaJaF3WZlk+rqO57Ao
6v6SGjlnqDnOaWulJOp95C/XzpuWrNueWSeIeLuBYWWzBHnnX8KgxY6mMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2w1x1FaDX4YqlfR2IfXjw1puaeMB8GA1UdIwQY
MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt
MjgxOGY2NTc4ZDFiLzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi
LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWUj669d
+rPs08MwSzhYkDMlxcYff/SD0vPmjinT9VvKAcJfuzsul6YfiwjVU5upub2stgbb
VccY3u+OrALhpVUL/SfBy1HV+OhW1Me2MLspizoCM4PITX6OxI13d324FdVXEKIE
liMFTubgpUOUkDex/Ce6P7KvNjwalatUzNw7UWJZdSAG+ZET2XNIeohFdzhMAjCU
sB4dy8op7VN4dL/ZYabPt1vhvrQkLaWk294pYqSxM8m3o7in/FEZKkXWAEuySqyA
jVM/ZkR5XBQRnoClSGt3jVz+3xwhpxq2LEF3CoD2ZfLd18uDbez33MYCn0OV3xvW
HaHikM5yrQsZIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:35 2025 by rpki-client