Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: XuLgjJOAsHcwH8vrSgsdUzbdEW3Z/eUIS3yCx7z6vck=
Subject key identifier: 05:95:8B:5B:AB:FB:DB:D9:67:89:6B:DE:F6:63:BC:74:AB:3D:D8:CD
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 01975CB783126AB327F2EE6A9C4F01940799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0581
Signing time: Wed 11 Jun 2025 02:00:19 +0000
Manifest this update: Wed 11 Jun 2025 02:00:19 +0000
Manifest next update: Thu 12 Jun 2025 02:00:19 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: sBIaJudrBlkbwaWGY83BmwrWTHoyV6DI3T5yruz84wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:b7:83:12:6a:b3:27:f2:ee:6a:9c:4f:01:94:07:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jun 11 02:00:19 2025 GMT
Not After : Jun 12 02:00:19 2025 GMT
Subject: CN=05958b5babfbdbd967896bdef663bc74ab3dd8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:74:26:f3:cd:48:d4:09:29:78:de:cf:86:
44:d0:f6:3a:61:1f:e3:41:63:80:60:59:c6:df:12:
8d:fb:34:25:c5:b6:71:fe:00:00:a8:1e:02:7f:7b:
b2:08:c4:a4:04:c6:50:ec:73:22:61:d7:ca:42:1a:
d1:6f:06:70:10:fd:3b:b7:68:52:08:d9:30:e2:21:
fc:b8:7c:05:f3:f3:73:c7:f4:7a:e4:87:d6:55:37:
c9:8e:94:77:3f:0a:3d:77:b1:77:be:53:3e:8b:62:
aa:39:34:ee:35:d0:07:4e:39:6f:4f:0c:f4:d7:17:
2a:af:09:3c:bc:eb:90:ac:61:e8:c7:90:94:b3:1f:
cf:ca:21:f0:0f:88:37:d5:22:c6:66:15:6a:3b:43:
aa:c7:4e:d2:7d:dd:a4:58:24:1b:99:3a:a7:08:95:
73:23:0c:8f:cb:80:10:69:4a:fc:fb:09:9e:78:08:
30:5b:02:ca:d9:30:a2:10:17:eb:a8:d2:60:1a:98:
d2:5c:1b:a9:14:2f:89:98:b3:46:76:0d:94:1f:4d:
ac:66:2e:ba:e6:30:18:1b:f0:c4:f1:cd:bc:08:4a:
b6:95:85:b5:1a:08:a8:a7:01:d3:2d:70:7d:05:d0:
09:f8:f0:eb:de:4d:d1:97:88:39:0c:ce:2a:2d:e9:
2c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:8B:5B:AB:FB:DB:D9:67:89:6B:DE:F6:63:BC:74:AB:3D:D8:CD
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:16:21:ca:23:9b:78:31:11:99:f9:df:23:69:a3:0b:2e:d3:
8e:7d:35:a7:22:7c:7b:99:18:af:74:9f:8d:d4:53:07:4b:78:
a4:3f:3d:79:42:77:ac:57:4f:b8:05:39:dc:fd:bd:ea:61:81:
47:49:29:f6:26:07:36:95:5c:d9:9d:2b:87:01:4d:c9:b3:04:
c3:b9:65:14:6c:de:61:a1:d9:6d:82:32:52:df:8c:c1:72:f1:
a0:e6:23:56:67:ba:27:0a:ab:79:e0:a2:f5:bb:f6:d9:1f:9e:
5c:9e:67:c4:3f:87:94:66:4b:49:ed:5e:53:72:60:62:38:11:
f9:5e:e9:e9:f0:e1:df:ea:d3:ef:c1:d3:b3:36:ca:eb:ef:cb:
c2:a2:6f:aa:af:4d:1a:5a:a9:2a:0a:6a:b1:69:2e:42:1b:dd:
70:89:10:cb:40:70:07:91:37:e2:06:08:6c:bc:5c:38:d9:82:
48:58:f8:e1:4d:2b:4c:41:d6:08:26:38:a0:a4:fd:9c:9e:a0:
c0:9a:34:e0:76:6d:36:c7:fc:44:08:d2:3f:93:5d:01:19:c9:
7c:4e:0b:8b:08:bf:b7:72:3b:08:c7:5b:fe:fc:60:dc:88:59:
41:fc:59:eb:01:02:04:6a:b3:a3:cf:e5:1d:0a:10:58:3d:79:
af:e7:48:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdct4MSarMn8u5qnE8BlAeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0
ZWE1OWIwHhcNMjUwNjExMDIwMDE5WhcNMjUwNjEyMDIwMDE5WjAzMTEwLwYDVQQD
EygwNTk1OGI1YmFiZmJkYmQ5Njc4OTZiZGVmNjYzYmM3NGFiM2RkOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1N0JvPNSNQJKXjez4ZE0PY6YR/j
QWOAYFnG3xKN+zQlxbZx/gAAqB4Cf3uyCMSkBMZQ7HMiYdfKQhrRbwZwEP07t2hS
CNkw4iH8uHwF8/Nzx/R65IfWVTfJjpR3Pwo9d7F3vlM+i2KqOTTuNdAHTjlvTwz0
1xcqrwk8vOuQrGHox5CUsx/PyiHwD4g31SLGZhVqO0Oqx07Sfd2kWCQbmTqnCJVz
IwyPy4AQaUr8+wmeeAgwWwLK2TCiEBfrqNJgGpjSXBupFC+JmLNGdg2UH02sZi66
5jAYG/DE8c28CEq2lYW1GgiopwHTLXB9BdAJ+PDr3k3Rl4g5DM4qLeks3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWVi1ur+9vZZ4lr3vZjvHSrPdjNMB8GA1UdIwQY
MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt
OTRiYjgzYTIwMDI5LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5
LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihYhyiOb
eDERmfnfI2mjCy7Tjn01pyJ8e5kYr3SfjdRTB0t4pD89eUJ3rFdPuAU53P296mGB
R0kp9iYHNpVc2Z0rhwFNybMEw7llFGzeYaHZbYIyUt+MwXLxoOYjVme6JwqreeCi
9bv22R+eXJ5nxD+HlGZLSe1eU3JgYjgR+V7p6fDh3+rT78HTszbK6+/LwqJvqq9N
GlqpKgpqsWkuQhvdcIkQy0BwB5E34gYIbLxcONmCSFj44U0rTEHWCCY4oKT9nJ6g
wJo04HZtNsf8RAjSP5NdARnJfE4Liwi/t3I7CMdb/vxg3IhZQfxZ6wECBGqzo8/l
HQoQWD15r+dIgA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:58:07 2025 by rpki-client