Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: 0wroYU3sKsia6GKNmPL676PcxUrg1MOqeiaUXL7t344=
Subject key identifier: C9:DF:E5:54:72:3D:3B:EB:8B:AC:EC:CD:6F:00:7E:A3:FF:B3:2C:08
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 01974E5757D34FC8E69748CCC95ED53A57C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 07:00:36 +0000
Manifest this update: Sun 08 Jun 2025 07:00:36 +0000
Manifest next update: Mon 09 Jun 2025 07:00:36 +0000
Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=)
2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: 2NKM6YaOizhseOA7GuhKJtLCWSRmFx33DbObGl+pMPQ=)
3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:57:d3:4f:c8:e6:97:48:cc:c9:5e:d5:3a:57:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Jun 8 07:00:36 2025 GMT
Not After : Jun 9 07:00:36 2025 GMT
Subject: CN=c9dfe554723d3beb8baceccd6f007ea3ffb32c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:c7:83:50:cd:81:b5:b3:f0:0b:d3:0e:d6:
40:5a:6e:ac:52:57:60:3f:00:c8:2d:51:62:42:41:
07:00:ed:f2:9a:9e:2f:11:ba:25:63:a7:94:65:4c:
c9:64:14:7f:98:b6:7b:03:49:95:42:a3:02:6d:60:
d4:48:46:84:ef:87:86:77:62:b0:9b:d3:93:14:33:
97:09:86:06:a0:2e:84:42:5f:94:72:da:30:a7:22:
9b:9e:32:57:61:d2:6e:5a:bb:83:26:3b:e1:50:71:
73:b3:d7:29:e8:a6:8a:1d:d3:19:81:ab:82:bb:71:
90:45:4c:72:95:8c:c4:64:ae:a4:9c:8b:b8:50:ce:
b3:0a:5a:9e:27:b6:92:3c:16:2a:b3:a1:7b:90:89:
b6:95:5f:80:13:75:b6:3c:13:2e:55:f1:5d:d9:dd:
5b:86:54:17:7e:aa:b0:57:33:97:61:d9:4e:e8:42:
14:4f:c2:04:9b:93:d6:d3:9d:8c:6b:26:1b:de:c2:
93:35:bd:f9:1e:d5:6a:a2:f5:33:25:ec:ea:d3:88:
c2:17:d6:ed:ff:fa:73:65:8f:5d:0d:10:84:38:0a:
12:11:98:f5:7c:3e:5e:ce:bf:e3:85:2f:93:9c:4c:
94:3f:6f:bd:66:e9:3e:ce:0b:a9:83:e8:c1:75:4a:
7f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:E5:54:72:3D:3B:EB:8B:AC:EC:CD:6F:00:7E:A3:FF:B3:2C:08
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:03:cc:bc:9e:fc:30:b5:e8:e4:22:86:c3:03:16:c6:fb:bd:
34:2a:49:5a:ba:ba:36:d2:4f:85:96:ff:c7:4f:69:0c:a4:38:
8b:45:83:3d:08:1c:59:e6:6f:a6:08:52:ed:f5:22:14:90:2a:
95:24:92:4e:10:be:f4:34:d4:57:5a:12:52:8a:ca:34:0e:7c:
83:b1:16:4a:f7:0e:22:ea:be:9e:de:e9:07:17:81:87:6b:6f:
51:3e:75:79:e6:2a:44:07:e7:98:a5:09:d0:7d:16:fc:87:13:
23:21:32:b8:90:16:9a:f4:26:ec:c8:07:3e:15:17:c8:48:cb:
26:45:b3:96:2b:c3:30:7a:f2:a8:12:36:0f:01:91:83:67:e2:
f0:bc:d0:0a:9f:c6:cd:76:e6:04:85:a9:53:0b:f1:90:1e:fb:
76:74:d5:e1:6c:6d:57:fc:27:2f:48:01:bf:35:62:84:b1:a4:
60:1d:2c:79:bd:26:ec:00:a8:00:0c:24:d2:94:74:ae:77:ad:
f2:b3:c5:2c:2f:54:dd:18:84:a0:22:29:92:5c:d6:69:66:4e:
89:9a:55:3e:39:a6:f7:fd:b9:17:4a:aa:5d:24:a2:e6:ce:a5:
6e:5e:16:63:e4:e5:34:50:69:94:20:85:5a:ff:38:a2:32:bc:
a2:bf:ba:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV1fTT8jml0jMyV7VOlfDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi
MjhkNzUwHhcNMjUwNjA4MDcwMDM2WhcNMjUwNjA5MDcwMDM2WjAzMTEwLwYDVQQD
EyhjOWRmZTU1NDcyM2QzYmViOGJhY2VjY2Q2ZjAwN2VhM2ZmYjMyYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi7Hg1DNgbWz8AvTDtZAWm6sUldg
PwDILVFiQkEHAO3ymp4vEbolY6eUZUzJZBR/mLZ7A0mVQqMCbWDUSEaE74eGd2Kw
m9OTFDOXCYYGoC6EQl+UctowpyKbnjJXYdJuWruDJjvhUHFzs9cp6KaKHdMZgauC
u3GQRUxylYzEZK6knIu4UM6zClqeJ7aSPBYqs6F7kIm2lV+AE3W2PBMuVfFd2d1b
hlQXfqqwVzOXYdlO6EIUT8IEm5PW052MayYb3sKTNb35HtVqovUzJezq04jCF9bt
//pzZY9dDRCEOAoSEZj1fD5ezr/jhS+TnEyUP2+9Zuk+zgupg+jBdUp/CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnf5VRyPTvri6zszW8AfqP/sywIMB8GA1UdIwQY
MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt
YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3
LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAPMvJ78
MLXo5CKGwwMWxvu9NCpJWrq6NtJPhZb/x09pDKQ4i0WDPQgcWeZvpghS7fUiFJAq
lSSSThC+9DTUV1oSUorKNA58g7EWSvcOIuq+nt7pBxeBh2tvUT51eeYqRAfnmKUJ
0H0W/IcTIyEyuJAWmvQm7MgHPhUXyEjLJkWzlivDMHryqBI2DwGRg2fi8LzQCp/G
zXbmBIWpUwvxkB77dnTV4WxtV/wnL0gBvzVihLGkYB0seb0m7ACoAAwk0pR0rnet
8rPFLC9U3RiEoCIpklzWaWZOiZpVPjmm9/25F0qqXSSi5s6lbl4WY+TlNFBplCCF
Wv84ojK8or+64A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:01:40 2025 by rpki-client