Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: wNG1DUbeevdHwGUxvvaOMf5Ay2R8M9SWTqg4Wa0mT1c=
Subject key identifier: 85:AF:0F:CF:67:F4:02:6E:E2:55:1E:57:0C:87:9A:9A:4B:BA:06:0E
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 0197B7B33B590664237D7338AD8E800EF083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 04B1
Signing time: Sat 28 Jun 2025 18:01:06 +0000
Manifest this update: Sat 28 Jun 2025 18:01:06 +0000
Manifest next update: Sun 29 Jun 2025 18:01:06 +0000
Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: Ur/kli1/Xz14uudEaQFkb4Gw71suUl89qRGaqKWF/Og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:3b:59:06:64:23:7d:73:38:ad:8e:80:0e:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Jun 28 18:01:06 2025 GMT
Not After : Jun 29 18:01:06 2025 GMT
Subject: CN=85af0fcf67f4026ee2551e570c879a9a4bba060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:07:49:48:4d:65:a7:d6:d6:37:d0:c0:60:
9f:39:e8:b0:74:44:ff:b6:7b:86:16:f5:e5:47:44:
50:50:2d:61:0a:d9:c2:27:f7:f9:c1:54:ec:fd:c0:
83:d0:6e:4d:0c:74:88:26:c5:57:3f:05:aa:d7:00:
c5:7b:46:60:7b:07:c4:0e:46:01:df:ad:fd:8a:39:
34:4f:4c:da:9c:60:71:4f:3e:f4:cb:86:b2:8d:aa:
bd:be:47:d6:6e:0d:1b:48:a1:3d:72:8d:0d:b3:db:
4e:ad:03:80:e4:9d:f7:0d:29:58:ac:18:69:97:3c:
72:61:fe:5b:95:d5:a8:9c:4e:de:bc:8b:42:62:c1:
58:84:89:a5:2f:5f:5f:de:93:8d:31:dd:71:6d:38:
18:fd:de:2d:49:74:26:6a:f3:79:04:cf:1a:06:bc:
50:bd:20:f7:a4:f1:76:78:91:65:9b:99:d0:35:79:
49:c1:84:c8:68:3a:03:3c:c6:59:45:e4:dd:59:3b:
c1:c5:c6:7d:50:be:c3:99:1b:9d:91:29:61:16:c3:
7d:2d:53:6d:51:eb:99:36:02:eb:fa:84:1e:1f:51:
4f:55:1b:a9:bd:37:a5:a0:f0:e5:d2:49:96:4d:42:
50:b4:76:34:05:fc:c1:6d:cc:c1:6c:38:a9:c4:7a:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AF:0F:CF:67:F4:02:6E:E2:55:1E:57:0C:87:9A:9A:4B:BA:06:0E
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f3:10:bb:2e:5a:d7:b1:9c:c0:87:65:b0:3c:21:ed:3b:64:
8f:b8:6e:60:17:a2:61:4b:60:f4:13:25:03:24:d3:b9:53:21:
8f:ef:13:a9:a7:e7:fd:43:e4:6c:14:c1:08:83:aa:3b:b1:c7:
57:c5:7a:64:98:4a:ab:83:4a:a3:7c:bb:50:5e:69:04:43:05:
1d:91:eb:3b:42:e9:4d:47:4d:36:33:9d:aa:54:3d:c9:f4:fa:
93:78:25:c4:32:f3:9d:eb:b7:d6:97:3a:e3:24:f2:7f:13:24:
73:77:73:34:e6:3d:48:6e:73:39:3f:6b:c1:0c:46:92:7b:be:
f8:fa:6e:8c:8c:6e:a1:e4:7f:6c:38:39:41:f7:ab:47:76:9f:
dc:cb:e0:b5:46:db:91:63:e1:b9:64:6f:0d:6d:27:59:7e:b2:
c4:10:44:14:a0:d2:16:62:5f:d7:6b:ac:7d:0f:5d:e4:f7:74:
52:09:38:4c:d4:38:1b:48:b2:da:21:87:b9:21:28:7a:cc:eb:
1c:35:77:11:6e:3d:87:0f:2a:d9:a0:47:09:a0:8a:b8:71:9c:
b8:81:9d:f3:27:d0:3c:e9:fc:37:47:80:bc:15:06:9f:5b:a9:
f2:b8:48:d5:90:06:b7:22:bd:b4:63:3d:f6:fc:cf:c2:a9:2e:
b7:9f:0b:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sztZBmQjfXM4rY6ADvCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZTQ0ODI3MWQ4NWFlODc5YTlhYmYxNWIzYmNhOTgzNDcw
YTEzNDgwHhcNMjUwNjI4MTgwMTA2WhcNMjUwNjI5MTgwMTA2WjAzMTEwLwYDVQQD
Eyg4NWFmMGZjZjY3ZjQwMjZlZTI1NTFlNTcwYzg3OWE5YTRiYmEwNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+IHSUhNZafW1jfQwGCfOeiwdET/
tnuGFvXlR0RQUC1hCtnCJ/f5wVTs/cCD0G5NDHSIJsVXPwWq1wDFe0ZgewfEDkYB
3639ijk0T0zanGBxTz70y4ayjaq9vkfWbg0bSKE9co0Ns9tOrQOA5J33DSlYrBhp
lzxyYf5bldWonE7evItCYsFYhImlL19f3pONMd1xbTgY/d4tSXQmavN5BM8aBrxQ
vSD3pPF2eJFlm5nQNXlJwYTIaDoDPMZZReTdWTvBxcZ9UL7DmRudkSlhFsN9LVNt
UeuZNgLr+oQeH1FPVRupvTeloPDl0kmWTUJQtHY0BfzBbczBbDipxHrqnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWvD89n9AJu4lUeVwyHmppLugYOMB8GA1UdIwQY
MBaAFKrkSCcdha6Hmpq/FbO8qYNHChNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUt
Nzk5YTE4YzlhYzVhLzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi85ZjI4NWItYTAwYi00MjIyLTllNTUtNzk5YTE4YzlhYzVh
LzEvcXVSSUp4MkZyb2VhbXI4VnM3eXBnMGNLRTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPMQuy5a
17GcwIdlsDwh7Ttkj7huYBeiYUtg9BMlAyTTuVMhj+8Tqafn/UPkbBTBCIOqO7HH
V8V6ZJhKq4NKo3y7UF5pBEMFHZHrO0LpTUdNNjOdqlQ9yfT6k3glxDLzneu31pc6
4yTyfxMkc3dzNOY9SG5zOT9rwQxGknu++PpujIxuoeR/bDg5QferR3af3MvgtUbb
kWPhuWRvDW0nWX6yxBBEFKDSFmJf12usfQ9d5Pd0Ugk4TNQ4G0iy2iGHuSEoeszr
HDV3EW49hw8q2aBHCaCKuHGcuIGd8yfQPOn8N0eAvBUGn1up8rhI1ZAGtyK9tGM9
9vzPwqkut58Lfg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:15 2025 by rpki-client