Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: z4pAdZk3yHJlYVxrB1mPcXt5rZg+2H+9KklqIjt1Btk=
Subject key identifier: 24:EA:66:05:8C:7B:45:5B:40:2F:83:3C:17:7D:6B:12:37:43:6D:89
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 0197499F545C76C51FE903951574EBBD03A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 09:01:07 +0000
Manifest this update: Sat 07 Jun 2025 09:01:07 +0000
Manifest next update: Sun 08 Jun 2025 09:01:07 +0000
Files and hashes: 1: HrD9axNwojGc9gn0e5_hxSYDCwc.roa (hash: l2Og23VbseBHlL6WgftV+a+c2UrUgOjU/jXZUXL4hQ0=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: ugAS5kcp0ggTyo+g/aJcBZZVuhttuT5fijDaFR0hj3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:54:5c:76:c5:1f:e9:03:95:15:74:eb:bd:03:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Jun 7 09:01:07 2025 GMT
Not After : Jun 8 09:01:07 2025 GMT
Subject: CN=24ea66058c7b455b402f833c177d6b1237436d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:90:2b:5b:5f:4a:ca:f1:0b:c0:df:87:33:e1:
f5:b8:3a:01:10:fc:b3:43:8d:50:60:1e:fe:95:6c:
b5:51:0d:86:05:47:50:b0:6e:67:00:c4:9a:26:ff:
a4:63:57:c2:00:5b:9d:52:3f:22:85:fc:18:9d:6e:
72:23:2f:2d:fe:04:79:13:4d:20:e1:19:34:2c:7b:
b3:82:99:dd:da:b0:f1:18:d5:84:d1:c8:c0:cd:54:
ca:b6:78:d6:c4:1f:2d:a7:c7:ac:1c:8b:64:ee:61:
c3:e4:93:ea:14:43:e0:14:2d:d1:9d:c7:16:83:fa:
28:ab:5b:4b:cc:4b:fd:01:ee:fc:eb:62:0d:a2:7f:
d5:d6:96:71:26:70:52:fd:d5:1f:04:f3:48:5d:b9:
4d:8b:98:ff:e6:d1:27:05:9e:28:28:88:64:4e:90:
05:ae:af:69:28:23:90:5d:6a:4a:3f:e6:12:d3:44:
18:ed:09:32:15:48:8f:f0:39:03:24:c2:1e:92:d3:
c2:18:64:29:40:27:a5:64:ba:9a:94:8a:4c:c1:e9:
fe:f1:0e:64:37:5b:27:cf:73:e8:26:44:31:5e:6f:
47:63:54:f0:bb:30:e1:c4:86:35:21:80:77:be:40:
ad:23:78:33:a1:ce:9b:cc:56:f2:d0:c4:ce:88:e1:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EA:66:05:8C:7B:45:5B:40:2F:83:3C:17:7D:6B:12:37:43:6D:89
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:e7:46:43:ad:46:f2:2f:85:57:e2:12:a8:6c:88:f8:03:54:
c9:44:6c:04:4e:c1:6d:bb:4e:89:16:9c:7c:6a:9f:22:29:b3:
6a:cf:b6:90:1f:15:03:74:c0:f4:b8:9d:fb:68:3c:cb:52:bd:
2f:c4:0f:73:31:4c:53:a2:f2:52:81:ae:c1:7f:46:20:dc:15:
4d:80:9e:f3:dd:86:29:0d:79:d1:d1:60:7e:3b:45:1a:ff:97:
8e:55:29:34:05:f3:98:13:49:aa:f4:5b:92:03:32:e3:14:a3:
f7:8e:e3:99:7d:50:5f:8b:03:40:98:13:60:0f:67:a4:35:1d:
54:69:66:78:d5:28:2d:43:11:ad:93:34:cb:87:30:46:e5:65:
2d:aa:ee:0e:82:ea:61:a3:a1:04:ec:9f:55:ba:3f:0b:45:92:
29:e3:1a:1a:99:25:fe:16:38:90:02:63:39:fc:02:a9:15:21:
35:f3:8d:64:dc:91:c6:7e:de:3c:31:d8:8b:b6:51:e3:93:4c:
4c:91:92:74:96:52:c8:df:e6:17:b3:a0:ed:90:c5:66:b5:dc:
c2:bd:8c:86:e6:e7:8d:1d:8e:86:79:1a:1f:06:ab:8b:92:a4:
47:2c:6d:bf:43:51:6f:c5:78:ae:5b:3d:20:45:53:50:b7:82:
89:d3:4c:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1RcdsUf6QOVFXTrvQOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODNlNjRmNzJkZDU4ODlmYjEzZGMyMThjNjgzZjZlMmZh
Y2Y1YjIwHhcNMjUwNjA3MDkwMTA3WhcNMjUwNjA4MDkwMTA3WjAzMTEwLwYDVQQD
EygyNGVhNjYwNThjN2I0NTViNDAyZjgzM2MxNzdkNmIxMjM3NDM2ZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJArW19KyvELwN+HM+H1uDoBEPyz
Q41QYB7+lWy1UQ2GBUdQsG5nAMSaJv+kY1fCAFudUj8ihfwYnW5yIy8t/gR5E00g
4Rk0LHuzgpnd2rDxGNWE0cjAzVTKtnjWxB8tp8esHItk7mHD5JPqFEPgFC3RnccW
g/ooq1tLzEv9Ae7862INon/V1pZxJnBS/dUfBPNIXblNi5j/5tEnBZ4oKIhkTpAF
rq9pKCOQXWpKP+YS00QY7QkyFUiP8DkDJMIektPCGGQpQCelZLqalIpMwen+8Q5k
N1snz3PoJkQxXm9HY1TwuzDhxIY1IYB3vkCtI3gzoc6bzFby0MTOiOEbVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTqZgWMe0VbQC+DPBd9axI3Q22JMB8GA1UdIwQY
MBaAFKuD5k9y3ViJ+xPcIYxoP24vrPWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85ZDY2ZmMtMzFkNC00YWIxLThlYWUt
NTQxZjQ4OTI0OTUyLzEvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85ZDY2ZmMtMzFkNC00YWIxLThlYWUtNTQxZjQ4OTI0OTUy
LzEvcTRQbVQzTGRXSW43RTl3aGpHZ19iaS1zOWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4udGQ61G
8i+FV+ISqGyI+ANUyURsBE7BbbtOiRacfGqfIimzas+2kB8VA3TA9Lid+2g8y1K9
L8QPczFMU6LyUoGuwX9GINwVTYCe892GKQ150dFgfjtFGv+XjlUpNAXzmBNJqvRb
kgMy4xSj947jmX1QX4sDQJgTYA9npDUdVGlmeNUoLUMRrZM0y4cwRuVlLaruDoLq
YaOhBOyfVbo/C0WSKeMaGpkl/hY4kAJjOfwCqRUhNfONZNyRxn7ePDHYi7ZR45NM
TJGSdJZSyN/mF7Og7ZDFZrXcwr2MhubnjR2OhnkaHwari5KkRyxtv0NRb8V4rls9
IEVTULeCidNMgQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:57 2025 by rpki-client