Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: bsgyp38z2qnvhcMZF7YavvTaccTTypSYcewrCS0jAhM=
Subject key identifier: BD:40:6B:1B:1A:4F:CF:88:54:66:EE:83:28:F7:9D:DA:85:C9:B1:54
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 019847093446466D6D39BD34192FBC52F73F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1545
Signing time: Sat 26 Jul 2025 14:00:42 +0000
Manifest this update: Sat 26 Jul 2025 14:00:42 +0000
Manifest next update: Sun 27 Jul 2025 14:00:42 +0000
Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: GFC++4kOVx/Y+jTQlFBbnTGXPLzBL17IbJmu7mngBe4=)
2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:34:46:46:6d:6d:39:bd:34:19:2f:bc:52:f7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Jul 26 14:00:42 2025 GMT
Not After : Jul 27 14:00:42 2025 GMT
Subject: CN=bd406b1b1a4fcf885466ee8328f79dda85c9b154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:c9:18:07:b6:2a:cf:84:46:c8:3d:71:ca:
b1:ac:0b:01:16:0c:2f:f5:bf:75:be:4b:10:30:c5:
d4:9b:a1:47:42:56:c5:4c:88:0b:1b:11:c4:d5:45:
c4:52:45:ff:82:fd:12:57:5b:16:3b:fc:be:2b:99:
27:26:c4:0d:fe:52:4d:a9:be:de:f5:5b:dd:cb:d1:
ae:28:29:71:f9:fe:9c:cb:e6:f4:55:eb:33:96:92:
6f:1b:43:31:5a:ae:aa:03:2a:cb:c2:bb:33:cf:29:
28:d5:93:4d:c5:ff:51:0d:c0:a4:f1:01:21:ab:18:
30:cc:e6:ef:d4:34:e5:83:b4:f9:9a:5f:20:87:5a:
29:de:47:20:33:9e:ed:f5:a5:f9:92:a5:33:93:58:
ad:e4:7f:aa:c1:2d:0e:50:17:65:ba:5b:06:0d:01:
6f:b0:e5:65:0f:bb:49:09:ec:92:60:86:01:ad:f9:
bf:f4:f4:7b:bd:58:5f:87:60:ba:96:a8:07:67:0c:
2a:8b:da:54:46:a5:df:c7:6f:d5:0e:37:3e:11:6c:
ae:d1:dc:d7:7b:3c:1f:a1:49:9d:8c:55:8f:78:fc:
5c:f7:10:c8:2c:2d:f2:09:74:1c:57:5a:43:09:63:
ae:7c:75:55:af:ad:8a:5e:06:18:d1:31:c5:0a:97:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:40:6B:1B:1A:4F:CF:88:54:66:EE:83:28:F7:9D:DA:85:C9:B1:54
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1c:22:3a:e6:2b:d9:88:68:0e:9f:aa:b1:35:5a:a1:ec:8e:
0a:cb:02:ac:76:6f:e0:b2:74:84:b6:0c:35:9c:0e:70:34:c7:
19:1c:fe:8b:70:90:0e:f5:e0:17:a0:21:c6:59:8a:2f:bd:2d:
6f:af:11:a7:27:b8:83:b2:1c:90:47:35:ae:d6:9e:fd:db:d3:
42:14:a0:6e:79:e6:85:97:df:66:c1:9c:ea:10:cf:18:ee:0f:
f9:5a:82:bb:dc:62:84:45:35:5c:40:a9:da:1c:8b:dc:2f:7e:
0e:8b:7b:c3:81:65:df:61:1d:9a:43:35:76:77:49:09:7c:a1:
55:0e:53:08:4e:65:cb:41:49:28:d4:2e:9c:d9:fd:19:87:a2:
d0:40:fd:54:07:f3:d5:ce:87:dc:f3:0a:43:e7:b0:af:1a:6f:
98:b9:f2:17:39:a1:aa:75:6f:cd:81:01:93:5d:b9:54:51:28:
a3:a5:56:63:59:a7:82:3b:49:9d:54:70:a1:c2:a8:12:52:2e:
6f:c5:f1:0c:1b:19:af:36:fd:7a:83:63:8e:44:62:89:eb:48:
64:e4:89:25:06:dc:15:c0:f6:70:31:3e:d7:fa:61:ad:96:83:
31:44:0d:23:2e:79:7e:96:69:46:ee:10:cf:8f:5e:b3:d6:b3:
e1:f1:c1:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCTRGRm1tOb00GS+8Uvc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2UwMzBkNDQ2NjFhNGMyMDFlYmEwM2RlNDUyYjA0Yjhl
N2Q5ZTUwHhcNMjUwNzI2MTQwMDQyWhcNMjUwNzI3MTQwMDQyWjAzMTEwLwYDVQQD
EyhiZDQwNmIxYjFhNGZjZjg4NTQ2NmVlODMyOGY3OWRkYTg1YzliMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxLJGAe2Ks+ERsg9ccqxrAsBFgwv
9b91vksQMMXUm6FHQlbFTIgLGxHE1UXEUkX/gv0SV1sWO/y+K5knJsQN/lJNqb7e
9Vvdy9GuKClx+f6cy+b0VeszlpJvG0MxWq6qAyrLwrszzyko1ZNNxf9RDcCk8QEh
qxgwzObv1DTlg7T5ml8gh1op3kcgM57t9aX5kqUzk1it5H+qwS0OUBdlulsGDQFv
sOVlD7tJCeySYIYBrfm/9PR7vVhfh2C6lqgHZwwqi9pURqXfx2/VDjc+EWyu0dzX
ezwfoUmdjFWPePxc9xDILC3yCXQcV1pDCWOufHVVr62KXgYY0THFCpe6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1AaxsaT8+IVGbugyj3ndqFybFUMB8GA1UdIwQY
MBaAFEN+Aw1EZhpMIB66A95FKwS459nlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUt
YmJkMjEwNmYzMzcwLzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS80YmUyNTktYmU5Ni00MGZhLTg4MGUtYmJkMjEwNmYzMzcw
LzEvUTM0RERVUm1Ha3dnSHJvRDNrVXJCTGpuMmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBwiOuYr
2YhoDp+qsTVaoeyOCssCrHZv4LJ0hLYMNZwOcDTHGRz+i3CQDvXgF6AhxlmKL70t
b68Rpye4g7IckEc1rtae/dvTQhSgbnnmhZffZsGc6hDPGO4P+VqCu9xihEU1XECp
2hyL3C9+Dot7w4Fl32EdmkM1dndJCXyhVQ5TCE5ly0FJKNQunNn9GYei0ED9VAfz
1c6H3PMKQ+ewrxpvmLnyFzmhqnVvzYEBk125VFEoo6VWY1mngjtJnVRwocKoElIu
b8XxDBsZrzb9eoNjjkRiietIZOSJJQbcFcD2cDE+1/phrZaDMUQNIy55fpZpRu4Q
z49es9az4fHB1A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 22:51:16 2025 by rpki-client