Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: 3X53vqx9ueqsnLASKKO1CGbK1YgVjc5BejVxOgtpeSY=
Subject key identifier: 40:9A:5E:48:50:C0:E0:9F:AD:0D:BA:3F:44:52:F2:3B:DF:4D:B0:96
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 0197B7456633436FFAE4DAA0A23FB3EFE42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: DUHNt4y7ssDA2Kdp/uHyRdtA0YW6Obkg9p9F/w7PcWg=)
2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=)
3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=)
4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:66:33:43:6f:fa:e4:da:a0:a2:3f:b3:ef:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=409a5e4850c0e09fad0dba3f4452f23bdf4db096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:eb:17:86:9c:de:8e:9a:87:de:7c:13:fa:
5e:74:75:27:33:fe:03:45:07:ee:f3:99:6b:77:27:
4d:2e:8a:a7:7c:b6:cd:83:ee:0d:4c:e3:8e:ad:99:
42:95:31:38:64:f9:1e:85:2e:c5:af:32:dc:20:78:
a7:c9:5c:0a:79:98:64:c1:72:b6:fd:1b:9b:04:ed:
de:1b:89:e9:48:56:22:b8:2e:c1:a2:4e:df:00:d4:
2d:78:fc:05:e5:b5:36:8c:0e:57:a8:fd:00:5b:5e:
57:51:ea:24:cd:1a:60:71:de:7c:a1:2f:d2:3d:ab:
61:b7:45:4e:6c:8e:b8:1c:0f:2e:b5:36:06:db:4b:
c9:fb:5f:8b:82:26:30:7b:64:53:bc:74:78:b6:db:
7d:2b:22:9a:c3:c9:09:ba:13:46:76:6a:8e:d5:a5:
36:ab:27:29:a9:83:4d:11:8a:77:0b:73:5e:ee:0d:
c9:9f:c7:cb:04:92:ab:aa:e6:cb:7c:95:e2:45:13:
6b:76:a7:4b:45:d1:63:36:78:3b:63:16:9a:80:92:
fa:82:d8:50:09:3c:53:36:cc:11:6f:c8:21:d9:7d:
30:b5:09:fe:18:6c:19:a9:3e:68:04:5a:51:da:78:
d6:0b:07:76:99:13:69:78:21:30:b6:14:85:5e:f0:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:5E:48:50:C0:E0:9F:AD:0D:BA:3F:44:52:F2:3B:DF:4D:B0:96
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fa:da:fc:b8:48:12:4b:b0:78:85:63:dd:aa:bc:45:c8:de:
c6:0a:ba:a8:58:15:4c:87:97:bf:49:77:33:ae:49:a4:5f:2b:
7d:81:f8:91:82:96:db:6c:cb:95:4b:10:e2:89:79:22:e6:85:
71:0a:8a:54:1e:91:26:2c:77:77:c6:bd:be:5c:83:8e:70:1d:
40:95:39:53:df:eb:46:a9:51:0d:e0:40:c2:c0:8a:77:eb:54:
bb:40:f3:ca:f4:1d:42:3a:ec:e4:1e:2a:25:2f:18:0a:f3:9d:
98:1b:ae:26:8b:8e:b4:99:81:c3:76:e9:c5:1e:3d:18:dc:b6:
01:68:7a:ec:dc:f8:dd:e9:75:07:1f:fc:48:e6:d5:cc:79:fe:
44:db:fa:df:f1:65:1e:cd:20:4a:63:c4:f9:0b:38:31:41:54:
3e:8a:f0:79:ea:b4:93:c6:42:78:e0:c4:79:c5:ba:28:70:a4:
bf:81:6e:26:2b:06:02:1a:23:c2:38:6b:49:e3:86:cb:01:ef:
29:7c:50:5c:71:39:6f:56:fc:f3:41:03:36:ed:8f:14:c5:33:
ab:17:f6:e7:d2:9a:20:89:ec:12:74:af:e1:31:86:f7:15:c8:
e6:d0:22:25:78:ca:f4:bf:09:c0:ff:ff:40:4c:48:de:fe:c7:
0d:25:bb:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RWYzQ2/65Nqgoj+z7+QvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm
NDAxMzYwHhcNMjUwNjI4MTYwMTA3WhcNMjUwNjI5MTYwMTA3WjAzMTEwLwYDVQQD
Eyg0MDlhNWU0ODUwYzBlMDlmYWQwZGJhM2Y0NDUyZjIzYmRmNGRiMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhPrF4ac3o6ah958E/pedHUnM/4D
RQfu85lrdydNLoqnfLbNg+4NTOOOrZlClTE4ZPkehS7FrzLcIHinyVwKeZhkwXK2
/RubBO3eG4npSFYiuC7Bok7fANQtePwF5bU2jA5XqP0AW15XUeokzRpgcd58oS/S
Patht0VObI64HA8utTYG20vJ+1+LgiYwe2RTvHR4ttt9KyKaw8kJuhNGdmqO1aU2
qycpqYNNEYp3C3Ne7g3Jn8fLBJKrqubLfJXiRRNrdqdLRdFjNng7YxaagJL6gthQ
CTxTNswRb8gh2X0wtQn+GGwZqT5oBFpR2njWCwd2mRNpeCEwthSFXvAyMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECaXkhQwOCfrQ26P0RS8jvfTbCWMB8GA1UdIwQY
MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt
ZmU3NGVmN2FhYzk1LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1
LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/ra/LhI
EkuweIVj3aq8Rcjexgq6qFgVTIeXv0l3M65JpF8rfYH4kYKW22zLlUsQ4ol5IuaF
cQqKVB6RJix3d8a9vlyDjnAdQJU5U9/rRqlRDeBAwsCKd+tUu0DzyvQdQjrs5B4q
JS8YCvOdmBuuJouOtJmBw3bpxR49GNy2AWh67Nz43el1Bx/8SObVzHn+RNv63/Fl
Hs0gSmPE+Qs4MUFUPorweeq0k8ZCeODEecW6KHCkv4FuJisGAhojwjhrSeOGywHv
KXxQXHE5b1b880EDNu2PFMUzqxf259KaIInsEnSv4TGG9xXI5tAiJXjK9L8JwP//
QExI3v7HDSW7Pw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:16 2025 by rpki-client