Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: xOxemATBJvoAb6lV9x3Kkul9Wh3vHYBxN6EJT3oW6GM=
Subject key identifier: 48:49:98:91:6D:3D:95:57:ED:69:08:A6:F5:1E:C2:18:7C:95:E4:43
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 0197617077800E644E794D5DF146636F616C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0D74
Signing time: Thu 12 Jun 2025 00:00:49 +0000
Manifest this update: Thu 12 Jun 2025 00:00:49 +0000
Manifest next update: Fri 13 Jun 2025 00:00:49 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: Pb4WarMbNBr/B+lIPT8RkjdKcqiHv9ZiRVH7bj2nUes=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:77:80:0e:64:4e:79:4d:5d:f1:46:63:6f:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Jun 12 00:00:49 2025 GMT
Not After : Jun 13 00:00:49 2025 GMT
Subject: CN=484998916d3d9557ed6908a6f51ec2187c95e443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:c6:a2:4e:cc:d3:74:57:e0:37:7c:dd:b4:
05:0b:18:34:70:42:58:9c:62:f9:2d:66:34:cc:3f:
1c:0c:61:5c:b3:49:99:e9:be:75:13:8d:a4:6b:bf:
32:d7:26:88:f1:69:f8:ff:cb:39:ea:83:32:f5:35:
ba:55:ee:79:f4:50:f2:09:bb:b3:86:6d:d4:ab:51:
65:d3:1a:3d:1a:93:0a:f9:c3:82:48:60:ec:bb:28:
1a:5f:e4:c4:af:82:13:8f:47:5e:47:c1:8e:71:e3:
83:bc:15:c4:62:9d:23:b9:55:d9:c1:20:ae:da:52:
0a:57:04:2b:91:72:f9:b8:40:51:43:1f:06:f4:af:
90:e1:ac:52:7c:74:84:5a:bf:8e:78:35:b0:96:0d:
78:30:cd:b8:46:ac:af:db:5a:ce:43:8a:cf:34:c4:
95:26:86:a2:ed:2c:98:9e:44:7f:d2:00:b6:4e:14:
25:49:6d:8b:07:ea:f4:b6:09:ad:5e:d8:11:84:04:
fd:53:79:99:d7:d5:0a:6c:32:92:83:23:42:8f:7d:
9d:a3:f3:99:44:33:e3:c6:94:fc:c4:29:ce:b0:88:
6b:5d:e4:24:4d:f6:65:60:c7:94:c3:09:83:84:53:
e9:e3:2e:5c:74:02:79:10:94:0e:cb:87:da:71:64:
1d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:98:91:6D:3D:95:57:ED:69:08:A6:F5:1E:C2:18:7C:95:E4:43
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:b2:a3:cc:46:fc:e8:5e:68:e4:19:aa:0f:a5:a9:7e:75:f7:
84:f5:0b:66:11:b9:79:52:14:bb:2c:63:82:4c:69:06:73:e1:
9d:83:ce:c0:e8:26:48:7a:79:6b:11:8b:3e:3e:2a:17:6c:29:
8a:12:9e:9f:f6:08:cb:2e:c1:18:59:fc:a4:e3:4f:81:e2:79:
24:45:d5:53:29:65:61:26:07:02:36:70:a2:94:99:e0:1a:2e:
8e:f7:0c:ad:4e:93:5f:6c:28:a1:6c:52:da:35:d6:b8:f6:63:
34:ce:64:77:c9:d2:65:30:32:aa:4d:55:30:1a:5b:66:d4:0c:
e1:0d:75:b7:f6:0b:46:05:79:b7:df:38:cb:22:6a:1f:f1:75:
f4:17:8e:3a:55:f7:bb:3d:7f:47:94:f4:79:48:8f:35:7e:bc:
80:e3:2b:59:7a:6f:c4:0d:d5:41:36:96:4a:26:a6:8f:77:54:
19:a5:e4:0a:1a:2f:30:a2:b2:a3:2b:7d:0d:52:56:9c:6d:72:
91:e6:8d:00:d6:20:a9:a8:c2:d0:ee:44:41:01:3d:88:d5:a5:
07:8f:53:80:74:62:e8:24:e4:9c:13:26:eb:d2:51:a3:4c:ad:
82:8a:96:f2:cc:8f:6c:6c:4a:9f:fc:ae:e0:db:7d:f1:be:d5:
c8:8f:cd:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhcHeADmROeU1d8UZjb2FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YTRiMzVjOGUwMjU2ZWFhMmZiZjc1MWU2YzAxZTVlOTA5
YzBhMWYwHhcNMjUwNjEyMDAwMDQ5WhcNMjUwNjEzMDAwMDQ5WjAzMTEwLwYDVQQD
Eyg0ODQ5OTg5MTZkM2Q5NTU3ZWQ2OTA4YTZmNTFlYzIxODdjOTVlNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfGok7M03RX4Dd83bQFCxg0cEJY
nGL5LWY0zD8cDGFcs0mZ6b51E42ka78y1yaI8Wn4/8s56oMy9TW6Ve559FDyCbuz
hm3Uq1Fl0xo9GpMK+cOCSGDsuygaX+TEr4ITj0deR8GOceODvBXEYp0juVXZwSCu
2lIKVwQrkXL5uEBRQx8G9K+Q4axSfHSEWr+OeDWwlg14MM24Rqyv21rOQ4rPNMSV
Joai7SyYnkR/0gC2ThQlSW2LB+r0tgmtXtgRhAT9U3mZ19UKbDKSgyNCj32do/OZ
RDPjxpT8xCnOsIhrXeQkTfZlYMeUwwmDhFPp4y5cdAJ5EJQOy4facWQdPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhJmJFtPZVX7WkIpvUewhh8leRDMB8GA1UdIwQY
MBaAFEaks1yOAlbqovv3UebAHl6QnAofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmIt
MTE3ODg2ZWI3ZDY3LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmItMTE3ODg2ZWI3ZDY3
LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1bKjzEb8
6F5o5BmqD6WpfnX3hPULZhG5eVIUuyxjgkxpBnPhnYPOwOgmSHp5axGLPj4qF2wp
ihKen/YIyy7BGFn8pONPgeJ5JEXVUyllYSYHAjZwopSZ4BoujvcMrU6TX2wooWxS
2jXWuPZjNM5kd8nSZTAyqk1VMBpbZtQM4Q11t/YLRgV5t984yyJqH/F19BeOOlX3
uz1/R5T0eUiPNX68gOMrWXpvxA3VQTaWSiamj3dUGaXkChovMKKyoyt9DVJWnG1y
keaNANYgqajC0O5EQQE9iNWlB49TgHRi6CTknBMm69JRo0ytgoqW8syPbGxKn/yu
4Nt98b7VyI/N8A==
-----END CERTIFICATE-----
Generated at Thu Jun 12 04:28:49 2025 by rpki-client