Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: zUqqjDbUkJDL7nSX8HVhjBAXDbZOhl81b6EgPYQ1Vg4=
Subject key identifier: F0:1A:C1:C2:38:FC:EE:C6:FF:0F:1E:F5:F6:CF:17:29:1F:CA:4B:27
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 01974D7BB27323777F161DF54364310A85B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0AD6
Signing time: Sun 08 Jun 2025 03:00:41 +0000
Manifest this update: Sun 08 Jun 2025 03:00:41 +0000
Manifest next update: Mon 09 Jun 2025 03:00:41 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: wYXAo1dk62/hMddqsuNUwSh3omcNd9eoI5QoDSR0fJk=)
2: PBq5zLGD_CUeX0SfhuWUFrucnGw.roa (hash: rPbgNnUy1CwR89NF9bSl2HtGtuQRXqqe8MrxpHJ/Dco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:b2:73:23:77:7f:16:1d:f5:43:64:31:0a:85:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Jun 8 03:00:41 2025 GMT
Not After : Jun 9 03:00:41 2025 GMT
Subject: CN=f01ac1c238fceec6ff0f1ef5f6cf17291fca4b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:34:4e:ec:59:3f:13:22:42:cb:06:57:b7:
6b:e9:48:7a:eb:a3:ee:5a:42:0b:01:5c:46:a4:26:
fa:54:6a:3f:9f:e5:a7:e1:e9:b3:e8:8c:b0:db:e0:
61:bd:6f:0f:dc:ef:f3:7d:9f:2e:aa:14:48:83:82:
3b:ec:00:82:c5:83:ad:b7:17:cc:36:a1:b6:8d:fe:
97:fd:c9:01:fa:b3:03:08:57:e3:20:d3:ce:ec:5d:
3a:37:25:1d:9e:8f:d2:f3:b1:b9:7f:73:56:24:53:
20:17:3d:f0:b1:39:9d:2e:d8:6e:e1:5b:83:a2:ae:
09:88:27:31:e1:0b:10:a9:03:47:3b:9f:58:f2:8e:
ae:d8:7d:00:66:a0:02:63:da:33:70:46:8c:61:da:
2d:fd:6c:8a:a7:de:a4:f7:9a:1f:07:79:f8:64:08:
a6:d4:bd:66:23:b2:24:25:9d:65:80:16:06:ca:ca:
15:33:1d:23:b8:46:04:29:76:f6:3d:14:70:44:16:
8d:44:54:4b:25:e1:a1:52:6a:dd:ec:d0:26:5e:23:
58:79:bb:65:de:8d:86:e8:3e:89:c2:c9:c4:dc:97:
77:52:86:a8:fe:c3:13:5c:d7:73:ed:aa:54:fb:1e:
3e:85:9d:96:a0:16:65:c9:82:80:4a:6b:b5:5f:44:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1A:C1:C2:38:FC:EE:C6:FF:0F:1E:F5:F6:CF:17:29:1F:CA:4B:27
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:08:bd:55:75:27:c8:e3:e2:d7:c4:7e:00:2b:3a:1c:3a:61:
52:6b:cd:11:b5:ba:9b:3a:be:b3:99:45:dc:54:23:d7:c7:1b:
38:ed:45:0e:c9:cd:00:32:a6:19:61:c7:15:b2:e3:83:81:84:
01:4d:a0:c0:e3:b7:25:28:9e:2c:b5:51:aa:51:f1:04:d0:39:
7e:d0:81:1f:73:16:a6:07:dd:1e:45:67:d2:65:70:fb:6b:cc:
53:31:18:f3:ed:b4:36:d4:3d:f4:a5:54:c2:c5:b5:27:4a:8d:
08:3f:9f:27:50:ff:62:5b:fd:f3:26:61:5a:2f:1d:38:f6:ad:
6d:e0:44:a0:76:93:46:e3:84:ec:96:df:12:50:4e:3b:c3:a6:
64:21:8d:0e:6e:2e:e2:f7:85:90:d5:93:66:53:ed:f3:1d:d4:
52:0f:80:26:30:b0:7c:48:ac:d3:d0:a0:90:10:4e:4f:c2:b7:
b4:61:e9:ba:11:c1:8a:77:14:79:68:2a:c8:ff:28:2f:dc:db:
9d:1b:70:f8:6b:22:67:79:bf:3e:ef:3b:da:31:63:e2:d1:4a:
2e:da:13:56:7d:95:36:d0:ac:ee:66:c7:c5:af:97:56:d6:bf:
a8:19:f2:1b:75:e8:12:15:c5:65:23:b1:52:41:16:96:c9:ab:
78:0e:e9:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNe7JzI3d/Fh31Q2QxCoWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1
NjVlOWQwHhcNMjUwNjA4MDMwMDQxWhcNMjUwNjA5MDMwMDQxWjAzMTEwLwYDVQQD
EyhmMDFhYzFjMjM4ZmNlZWM2ZmYwZjFlZjVmNmNmMTcyOTFmY2E0YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjo0TuxZPxMiQssGV7dr6Uh666Pu
WkILAVxGpCb6VGo/n+Wn4emz6Iyw2+BhvW8P3O/zfZ8uqhRIg4I77ACCxYOttxfM
NqG2jf6X/ckB+rMDCFfjINPO7F06NyUdno/S87G5f3NWJFMgFz3wsTmdLthu4VuD
oq4JiCcx4QsQqQNHO59Y8o6u2H0AZqACY9ozcEaMYdot/WyKp96k95ofB3n4ZAim
1L1mI7IkJZ1lgBYGysoVMx0juEYEKXb2PRRwRBaNRFRLJeGhUmrd7NAmXiNYebtl
3o2G6D6JwsnE3Jd3Uoao/sMTXNdz7apU+x4+hZ2WoBZlyYKASmu1X0RRkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAawcI4/O7G/w8e9fbPFykfyksnMB8GA1UdIwQY
MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt
MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl
LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwi9VXUn
yOPi18R+ACs6HDphUmvNEbW6mzq+s5lF3FQj18cbOO1FDsnNADKmGWHHFbLjg4GE
AU2gwOO3JSieLLVRqlHxBNA5ftCBH3MWpgfdHkVn0mVw+2vMUzEY8+20NtQ99KVU
wsW1J0qNCD+fJ1D/Ylv98yZhWi8dOPatbeBEoHaTRuOE7JbfElBOO8OmZCGNDm4u
4veFkNWTZlPt8x3UUg+AJjCwfEis09CgkBBOT8K3tGHpuhHBincUeWgqyP8oL9zb
nRtw+GsiZ3m/Pu872jFj4tFKLtoTVn2VNtCs7mbHxa+XVta/qBnyG3XoEhXFZSOx
UkEWlsmreA7pdQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 10:30:19 2025 by rpki-client