Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: kCj/eSMu8oi1EAM1JAmOkfmjNyoj8wmOXrQk0k8GVUQ=
Subject key identifier: 3F:08:BB:24:C4:A9:7D:8E:60:2D:A3:94:DA:AD:2F:31:36:4A:17:B4
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019761A73A34B464FD113D23A2FC910A895F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 01:00:38 +0000
Manifest this update: Thu 12 Jun 2025 01:00:38 +0000
Manifest next update: Fri 13 Jun 2025 01:00:38 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: pCds+Yxzq9hbzEWK95FO7obZU2Iuh0vPM9Y64Jl8ymU=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:a7:3a:34:b4:64:fd:11:3d:23:a2:fc:91:0a:89:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jun 12 01:00:38 2025 GMT
Not After : Jun 13 01:00:38 2025 GMT
Subject: CN=3f08bb24c4a97d8e602da394daad2f31364a17b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:0f:0c:a1:bd:47:ad:a7:e3:a6:40:36:a4:
48:9a:94:4b:14:72:f1:1a:f5:8b:59:23:13:bf:2d:
48:5d:c8:ac:29:42:5a:2e:c6:60:25:77:53:e7:3e:
82:09:d6:b9:da:a2:8a:5f:09:46:ff:2b:ca:b7:bd:
c5:cf:21:4f:f4:e9:d8:63:3e:a4:eb:7f:d0:0c:fc:
35:25:f8:73:f9:c4:60:47:c2:9b:c2:a3:a6:d7:2d:
30:7b:2e:cc:cf:0a:d0:cd:bb:5d:82:02:de:14:e7:
d6:08:6f:83:b8:01:8a:c6:4b:d0:20:d9:bf:a7:91:
0a:0d:a0:a5:87:d7:bc:5d:a6:6d:da:1d:6e:2a:03:
47:25:26:8c:95:6a:87:dc:53:f1:65:54:f7:94:e1:
05:92:c9:7e:c7:80:99:de:13:05:52:2b:aa:31:a5:
26:c9:4a:e9:9e:89:7a:d5:18:a9:aa:d1:17:34:55:
01:90:2d:24:3c:48:26:90:f9:f9:da:84:6f:45:b5:
e0:6e:8f:cb:45:4e:68:75:d0:c9:97:43:35:b6:da:
97:01:4c:17:e3:ba:79:85:ec:65:4b:b2:90:ac:72:
b6:96:59:6d:b6:20:ac:cf:a8:f8:10:6d:8a:75:11:
6b:6b:b9:db:1b:7b:00:56:b8:62:06:eb:6d:45:67:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:BB:24:C4:A9:7D:8E:60:2D:A3:94:DA:AD:2F:31:36:4A:17:B4
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:3e:eb:6c:87:c6:5a:1a:5f:35:a8:5f:3b:69:b9:20:03:
91:0e:8d:08:84:ce:50:2d:ba:95:37:59:52:07:08:be:06:5c:
74:ef:94:d3:04:01:68:0c:b2:cd:3f:da:4a:66:77:4c:9c:f7:
ba:1f:da:79:2c:ef:02:15:74:7f:26:31:07:1a:6a:a2:54:d4:
a3:be:70:cf:94:90:61:c3:45:88:4f:0a:64:23:93:55:43:da:
ac:04:42:eb:a6:ea:61:fe:30:ee:44:d8:d9:77:e5:0e:0b:77:
8f:13:e2:6c:4a:b4:8e:a0:9c:68:4b:0e:b7:f0:82:95:27:50:
ef:ff:d3:5d:4d:4a:8c:30:27:54:96:41:e0:af:df:1e:51:d0:
50:f9:e5:66:76:4d:66:9f:53:93:06:ca:59:c2:38:10:dc:e3:
5a:18:f9:a8:51:d1:08:95:1c:36:79:6f:63:10:38:4f:a7:ce:
14:d0:3f:e9:1c:7c:b6:c7:d9:5c:1e:ca:78:c8:45:56:09:57:
0b:28:ee:91:60:1e:b4:59:9c:04:6e:19:31:59:c9:87:bf:f3:
75:fb:6c:32:b9:5f:59:cf:c2:26:5e:dc:07:dc:5f:7b:58:6b:
66:d4:a0:a0:35:11:b4:e6:fb:76:33:58:4d:e0:a8:4f:7d:86:
af:8a:e8:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhpzo0tGT9ET0jovyRColfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll
Y2IyZDYwHhcNMjUwNjEyMDEwMDM4WhcNMjUwNjEzMDEwMDM4WjAzMTEwLwYDVQQD
EygzZjA4YmIyNGM0YTk3ZDhlNjAyZGEzOTRkYWFkMmYzMTM2NGExN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3doPDKG9R62n46ZANqRImpRLFHLx
GvWLWSMTvy1IXcisKUJaLsZgJXdT5z6CCda52qKKXwlG/yvKt73FzyFP9OnYYz6k
63/QDPw1Jfhz+cRgR8KbwqOm1y0wey7MzwrQzbtdggLeFOfWCG+DuAGKxkvQINm/
p5EKDaClh9e8XaZt2h1uKgNHJSaMlWqH3FPxZVT3lOEFksl+x4CZ3hMFUiuqMaUm
yUrpnol61RipqtEXNFUBkC0kPEgmkPn52oRvRbXgbo/LRU5oddDJl0M1ttqXAUwX
47p5hexlS7KQrHK2lllttiCsz6j4EG2KdRFra7nbG3sAVrhiButtRWeB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8IuyTEqX2OYC2jlNqtLzE2She0MB8GA1UdIwQY
MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt
ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll
LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0I+62yH
xloaXzWoXztpuSADkQ6NCITOUC26lTdZUgcIvgZcdO+U0wQBaAyyzT/aSmZ3TJz3
uh/aeSzvAhV0fyYxBxpqolTUo75wz5SQYcNFiE8KZCOTVUParARC66bqYf4w7kTY
2XflDgt3jxPibEq0jqCcaEsOt/CClSdQ7//TXU1KjDAnVJZB4K/fHlHQUPnlZnZN
Zp9TkwbKWcI4ENzjWhj5qFHRCJUcNnlvYxA4T6fOFNA/6Rx8tsfZXB7KeMhFVglX
CyjukWAetFmcBG4ZMVnJh7/zdftsMrlfWc/CJl7cB9xfe1hrZtSgoDURtOb7djNY
TeCoT32Gr4rouQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:12:22 2025 by rpki-client