Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: l2OLMNXqL7GN7k7/E46mwhQCzLC1UZ9DOJ+f8cVdZ4E=
Subject key identifier: 6C:9B:26:C2:63:D2:75:10:41:53:03:0D:61:4D:B1:C1:E1:BF:28:0A
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 01974A7B57F808B84EF2FB4F6E8C2B7419FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 11CF
Signing time: Sat 07 Jun 2025 13:01:26 +0000
Manifest this update: Sat 07 Jun 2025 13:01:26 +0000
Manifest next update: Sun 08 Jun 2025 13:01:26 +0000
Files and hashes: 1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: 375uVLfAiBQPQ01d10qHVJrz/7zX+CPF+ukjV/HbDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:57:f8:08:b8:4e:f2:fb:4f:6e:8c:2b:74:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Jun 7 13:01:26 2025 GMT
Not After : Jun 8 13:01:26 2025 GMT
Subject: CN=6c9b26c263d275104153030d614db1c1e1bf280a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:ad:28:69:33:a9:b3:eb:c7:3d:ce:91:e1:
e1:db:a5:fa:ea:35:f3:c5:b8:73:cc:19:00:ee:28:
4a:75:9f:46:01:41:cc:19:77:9b:70:72:87:43:1f:
88:ea:f3:af:5d:cc:f7:6d:d0:29:15:3f:4a:55:aa:
71:8c:e2:f2:09:ca:3b:43:a8:39:c2:c8:30:ff:6e:
6a:b1:c5:5f:21:5b:41:de:3e:01:f2:2a:f4:05:e5:
f0:d4:e0:9a:a8:16:87:c0:d0:c5:44:af:15:49:9d:
49:33:6f:59:78:bb:18:69:f2:14:7f:f1:38:95:d3:
67:a5:f6:6c:27:04:47:d9:a9:b2:f3:ad:43:b8:68:
b3:f1:79:45:bb:5f:6d:79:ab:e6:2a:b2:90:50:77:
aa:b8:54:a3:dc:1c:d8:89:82:ef:83:36:0d:b1:23:
d3:ed:aa:fc:18:ed:0b:40:d6:4b:fb:fb:99:09:82:
e9:3a:a5:96:7f:f9:00:46:b3:a2:f9:a0:8a:6f:97:
22:98:d7:91:20:e3:27:da:89:21:19:45:34:b5:a2:
5c:97:18:1f:f7:31:51:f7:02:43:8b:fb:91:83:f0:
a8:34:3f:93:a8:15:32:9a:d5:a5:cf:1c:b2:c4:f9:
f1:0c:71:f8:cb:1a:33:ef:e5:8f:5c:60:69:00:47:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9B:26:C2:63:D2:75:10:41:53:03:0D:61:4D:B1:C1:E1:BF:28:0A
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0f:ec:b1:bd:43:f5:dc:ce:91:d3:25:23:31:4d:62:9f:e8:
e1:01:3c:95:f9:c4:1e:94:58:0e:53:c2:60:24:a3:99:b9:05:
6c:66:3c:36:6b:a3:8e:f5:28:de:d5:e7:0d:7c:d8:fb:9c:4e:
85:54:ea:86:83:8b:20:2c:7a:e1:ca:ae:3c:ef:ee:08:52:42:
25:c9:32:da:f8:b8:10:44:ce:c6:14:a1:69:bb:1b:09:8b:b2:
53:c0:21:5c:4a:61:e6:03:88:bc:d5:0d:10:02:6f:ab:f3:75:
2a:1d:67:b0:b3:22:ae:3d:9c:7b:b1:c9:14:a7:73:16:8e:31:
69:e1:5b:2b:cd:a0:5f:ff:b8:29:44:64:77:a1:d7:11:e8:8b:
5e:20:52:98:f3:b2:20:cc:65:c4:34:aa:e9:4e:b4:53:85:b5:
05:45:9c:b9:82:3a:d0:86:96:96:3d:4e:76:18:2b:3f:17:0d:
85:38:09:8f:8b:43:50:ad:6e:9a:3c:f2:ad:fc:d0:e2:11:cf:
5e:00:7a:b4:6b:12:9d:6f:eb:e5:d5:9c:1b:5a:08:65:fe:fd:
a0:88:14:9c:2c:29:e8:da:2f:b7:2b:c4:a9:72:bd:02:e1:1a:
6a:96:27:5a:0e:31:7f:79:a0:bb:d9:97:dd:aa:b8:17:d0:f9:
78:42:21:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe1f4CLhO8vtPbowrdBn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTBhOGE0NjJkMGRlMWY0ZDMwMTJjM2UzOWU1Y2RhNjAz
ZThmOTEwHhcNMjUwNjA3MTMwMTI2WhcNMjUwNjA4MTMwMTI2WjAzMTEwLwYDVQQD
Eyg2YzliMjZjMjYzZDI3NTEwNDE1MzAzMGQ2MTRkYjFjMWUxYmYyODBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1OtKGkzqbPrxz3OkeHh26X66jXz
xbhzzBkA7ihKdZ9GAUHMGXebcHKHQx+I6vOvXcz3bdApFT9KVapxjOLyCco7Q6g5
wsgw/25qscVfIVtB3j4B8ir0BeXw1OCaqBaHwNDFRK8VSZ1JM29ZeLsYafIUf/E4
ldNnpfZsJwRH2amy861DuGiz8XlFu19teavmKrKQUHequFSj3BzYiYLvgzYNsSPT
7ar8GO0LQNZL+/uZCYLpOqWWf/kARrOi+aCKb5cimNeRIOMn2okhGUU0taJclxgf
9zFR9wJDi/uRg/CoND+TqBUymtWlzxyyxPnxDHH4yxoz7+WPXGBpAEeBVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGybJsJj0nUQQVMDDWFNscHhvygKMB8GA1UdIwQY
MBaAFKvgqKRi0N4fTTASw+OeXNpgPo+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1Db3BHTFEzaDlOTUJMRDQ1NWMybUEtajVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMzMWMtZGNkNC00ZGE3LTlkZGEt
YzRhMDdkNjE2ODlkLzEvcS1Db3BHTFEzaDlOTUJMRDQ1NWMybUEtajVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWMzMWMtZGNkNC00ZGE3LTlkZGEtYzRhMDdkNjE2ODlk
LzEvcS1Db3BHTFEzaDlOTUJMRDQ1NWMybUEtajVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIA/ssb1D
9dzOkdMlIzFNYp/o4QE8lfnEHpRYDlPCYCSjmbkFbGY8NmujjvUo3tXnDXzY+5xO
hVTqhoOLICx64cquPO/uCFJCJcky2vi4EETOxhShabsbCYuyU8AhXEph5gOIvNUN
EAJvq/N1Kh1nsLMirj2ce7HJFKdzFo4xaeFbK82gX/+4KURkd6HXEeiLXiBSmPOy
IMxlxDSq6U60U4W1BUWcuYI60IaWlj1OdhgrPxcNhTgJj4tDUK1umjzyrfzQ4hHP
XgB6tGsSnW/r5dWcG1oIZf79oIgUnCwp6NovtyvEqXK9AuEaapYnWg4xf3mgu9mX
3aq4F9D5eEIhfA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:55:49 2025 by rpki-client