Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: 6oy5fZtwBHcOIrAalb9/3FVevoaajApgqpxrl8lPzDc=
Subject key identifier: F9:74:24:19:47:BB:1A:F4:C1:BF:CC:1D:5E:04:3A:E3:DB:19:D9:BA
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 0197553544F9594B5F1302040F3B347A1406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 13D1
Signing time: Mon 09 Jun 2025 15:00:43 +0000
Manifest this update: Mon 09 Jun 2025 15:00:43 +0000
Manifest next update: Tue 10 Jun 2025 15:00:43 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: mk/wYeuT4qT6TCjIwBcuVr3VQMrNMwIHmsqQQ0dnYw8=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:44:f9:59:4b:5f:13:02:04:0f:3b:34:7a:14:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Jun 9 15:00:43 2025 GMT
Not After : Jun 10 15:00:43 2025 GMT
Subject: CN=f974241947bb1af4c1bfcc1d5e043ae3db19d9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:77:a3:2e:97:7b:1f:76:c8:22:be:54:69:c8:
6d:a2:e9:ff:4d:ca:05:0e:70:d2:2a:4d:c9:85:d7:
09:cd:06:5d:8e:a0:db:7d:60:3a:af:c2:42:67:99:
36:f4:e0:54:16:42:9f:2b:94:b3:0a:22:ae:8d:52:
ba:86:ac:33:3f:f4:78:60:17:ea:f3:e7:7c:38:84:
fd:2f:23:83:74:48:f4:da:34:23:05:88:e7:a6:de:
2e:76:83:b3:fd:c6:68:15:24:d1:a5:82:1f:52:96:
f0:93:01:0f:35:96:be:df:19:3c:ac:e3:e9:0d:b6:
fa:e2:2c:05:5b:35:4b:2c:38:f5:5f:5a:66:d1:cf:
f8:23:7c:f0:ad:37:54:cf:64:df:b8:04:30:81:86:
aa:38:bb:33:20:59:d6:39:41:6c:f9:62:12:d6:3d:
30:c4:af:a0:8a:8a:bf:cf:b7:0f:d0:9b:b2:5d:6b:
65:0b:b6:35:2c:cf:81:e7:3d:84:06:80:5c:d5:47:
fb:40:a3:94:94:c7:49:79:50:90:f3:08:e3:18:14:
8a:f5:45:78:1a:07:90:99:ad:f5:5e:74:a8:7f:15:
84:d7:63:04:c6:82:74:a7:86:bb:12:7f:b2:1c:0a:
64:7a:41:5c:36:95:b7:dc:57:b4:c0:62:d6:16:c4:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:24:19:47:BB:1A:F4:C1:BF:CC:1D:5E:04:3A:E3:DB:19:D9:BA
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:6b:8b:b3:62:9e:7c:81:bb:44:f5:56:b1:c9:4a:e9:ac:e0:
6c:cf:3d:c7:90:f3:dc:c4:95:81:7a:85:db:22:95:26:a0:5f:
5c:20:9d:d2:aa:4a:14:6e:83:e8:51:91:9c:66:fa:92:0d:b1:
fd:bd:7a:a7:d0:8e:5a:1d:91:4e:fa:59:18:47:f5:3b:16:b6:
d2:0f:d9:31:fb:4e:4b:48:61:08:de:e3:dc:70:5e:a0:a8:e6:
ae:92:f9:3b:f3:52:37:ae:96:48:86:0f:da:39:dd:75:e9:6b:
f7:0d:aa:46:29:a6:3d:fc:20:b1:7b:53:e2:f7:39:74:c8:a7:
5a:76:97:11:5a:63:11:f3:44:08:e9:88:62:37:93:d9:5f:72:
c8:5d:2d:41:bc:db:80:88:40:a1:4b:2a:8b:a6:ce:c8:b0:de:
e4:62:b4:08:9d:65:9b:b3:09:cd:d2:70:ea:19:75:7a:c3:21:
fa:e0:13:d4:9e:ee:09:be:f4:d2:3d:ad:53:81:f8:c9:89:6d:
84:c1:c3:a1:e1:fb:d1:e8:66:44:e6:c9:9c:7a:38:db:a0:01:
3f:6c:88:de:50:41:d2:c2:07:39:43:f4:be:a7:3f:5f:91:a5:
0b:2d:29:d5:4a:3e:e3:a2:10:3f:74:0e:a3:9a:45:51:54:a2:
c8:52:b0:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdVNUT5WUtfEwIEDzs0ehQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4
NjkxMDgwHhcNMjUwNjA5MTUwMDQzWhcNMjUwNjEwMTUwMDQzWjAzMTEwLwYDVQQD
EyhmOTc0MjQxOTQ3YmIxYWY0YzFiZmNjMWQ1ZTA0M2FlM2RiMTlkOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXejLpd7H3bIIr5Uachtoun/TcoF
DnDSKk3JhdcJzQZdjqDbfWA6r8JCZ5k29OBUFkKfK5SzCiKujVK6hqwzP/R4YBfq
8+d8OIT9LyODdEj02jQjBYjnpt4udoOz/cZoFSTRpYIfUpbwkwEPNZa+3xk8rOPp
Dbb64iwFWzVLLDj1X1pm0c/4I3zwrTdUz2TfuAQwgYaqOLszIFnWOUFs+WIS1j0w
xK+gioq/z7cP0JuyXWtlC7Y1LM+B5z2EBoBc1Uf7QKOUlMdJeVCQ8wjjGBSK9UV4
GgeQma31XnSofxWE12MExoJ0p4a7En+yHApkekFcNpW33Fe0wGLWFsSySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPl0JBlHuxr0wb/MHV4EOuPbGdm6MB8GA1UdIwQY
MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt
NDk1NDI3MGUyNTA3LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3
LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwWuLs2Ke
fIG7RPVWsclK6azgbM89x5Dz3MSVgXqF2yKVJqBfXCCd0qpKFG6D6FGRnGb6kg2x
/b16p9COWh2RTvpZGEf1Oxa20g/ZMftOS0hhCN7j3HBeoKjmrpL5O/NSN66WSIYP
2jnddelr9w2qRimmPfwgsXtT4vc5dMinWnaXEVpjEfNECOmIYjeT2V9yyF0tQbzb
gIhAoUsqi6bOyLDe5GK0CJ1lm7MJzdJw6hl1esMh+uAT1J7uCb700j2tU4H4yYlt
hMHDoeH70ehmRObJnHo426ABP2yI3lBB0sIHOUP0vqc/X5GlCy0p1Uo+46IQP3QO
o5pFUVSiyFKwLA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:34:31 2025 by rpki-client