Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: ml1DsmnIL1tvFG7eO5T1fcUQpgI1J+95TWMD4WNcsHI=
Subject key identifier: 6F:B7:8D:84:39:AF:C2:3F:8C:49:38:39:BA:2E:FD:21:5F:FD:DB:7E
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 0197493100D25E888EAC90EE4D608AB3C233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 028D
Signing time: Sat 07 Jun 2025 07:00:37 +0000
Manifest this update: Sat 07 Jun 2025 07:00:37 +0000
Manifest next update: Sun 08 Jun 2025 07:00:37 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: iwlEWMmSx2FWd1eL60JdeZItKCH/yBmNxIst4+xYRVQ=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:00:d2:5e:88:8e:ac:90:ee:4d:60:8a:b3:c2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Jun 7 07:00:37 2025 GMT
Not After : Jun 8 07:00:37 2025 GMT
Subject: CN=6fb78d8439afc23f8c493839ba2efd215ffddb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:44:0e:9b:bf:47:a8:d2:bb:06:33:0c:62:74:
07:76:86:56:c6:f2:dd:3a:2c:2a:9c:68:2d:31:11:
c9:da:b4:45:39:17:9e:72:1a:9d:45:a8:5f:ea:a1:
4b:8f:74:67:c3:a6:a9:94:0a:fb:a5:bd:22:21:b7:
f5:0c:81:ff:b9:9a:d5:51:d8:94:ee:54:3c:e7:c4:
f2:ad:9c:5c:9d:6a:e1:02:0f:64:1d:87:f4:77:96:
aa:92:b8:4e:ab:76:e4:e3:99:40:2d:71:89:ff:cf:
18:ae:7f:85:e2:89:de:c4:18:a6:4a:09:e7:b0:db:
17:de:8f:88:ec:40:e3:71:4e:c9:b1:06:77:d6:91:
f8:b5:37:cf:2f:b2:5a:40:56:48:35:ba:a0:9d:a6:
dc:e9:19:4c:87:fe:81:1d:75:bc:c4:42:81:56:ea:
0f:b6:88:e8:c9:86:a0:3a:79:e4:08:8b:5e:75:89:
f4:83:77:7e:7b:c3:13:c8:53:cc:cf:66:2d:96:6a:
41:4d:d1:ad:ff:06:56:ee:cc:49:e8:e9:c7:a9:c2:
50:a0:14:7e:2b:e4:d6:1a:35:78:26:d6:00:ee:f8:
53:07:44:16:73:76:ac:61:2e:9c:3d:56:3c:4b:b1:
3a:81:ec:cf:99:8b:28:11:21:f4:81:46:a6:72:10:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:8D:84:39:AF:C2:3F:8C:49:38:39:BA:2E:FD:21:5F:FD:DB:7E
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c3:ad:77:98:f0:c1:08:a1:94:61:42:ae:d9:52:92:d3:d7:
34:70:6f:1e:84:1c:92:5a:27:7f:01:bc:f2:3e:12:1a:2a:15:
d0:e5:93:bb:02:10:83:8c:b4:9e:fb:89:97:bf:37:68:5a:a5:
72:80:ed:30:bb:e0:e2:e4:a9:df:2f:ed:17:f4:d4:2c:54:c0:
c3:5a:2f:81:fb:20:7f:9c:82:cb:aa:fb:01:59:db:ff:c0:e8:
fa:38:c4:7b:43:cf:55:1b:0d:e6:e3:6d:99:b8:46:03:ee:f5:
de:76:7e:e8:fe:d7:cc:a8:3c:4b:af:4e:74:6b:41:76:a9:ae:
22:45:b7:38:8a:19:5b:49:35:02:20:9c:9a:a7:12:db:13:4e:
88:e1:bd:02:ec:c9:ba:f1:15:7a:1f:94:21:7f:db:30:cc:a3:
7d:8c:fc:07:1d:4b:05:64:a3:00:af:9f:56:83:fa:18:62:3d:
2e:c6:eb:38:59:b0:46:1e:28:97:db:db:9b:ef:d9:0d:39:4c:
df:31:da:b2:ef:51:f4:84:28:f5:85:21:2b:cd:0d:fd:3a:43:
97:70:1d:d9:15:07:a2:d9:89:23:70:0d:73:96:48:22:97:76:
ac:f6:e7:00:33:50:73:32:95:1d:d8:4b:a2:d0:68:56:94:d3:
9f:01:cf:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMQDSXoiOrJDuTWCKs8IzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMTQyZGYyZjY3MDk0MGNjZjVhNGIyN2EwZDBjOTg3ZWNj
ODg2NTYwHhcNMjUwNjA3MDcwMDM3WhcNMjUwNjA4MDcwMDM3WjAzMTEwLwYDVQQD
Eyg2ZmI3OGQ4NDM5YWZjMjNmOGM0OTM4MzliYTJlZmQyMTVmZmRkYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70QOm79HqNK7BjMMYnQHdoZWxvLd
OiwqnGgtMRHJ2rRFOReechqdRahf6qFLj3Rnw6aplAr7pb0iIbf1DIH/uZrVUdiU
7lQ858TyrZxcnWrhAg9kHYf0d5aqkrhOq3bk45lALXGJ/88Yrn+F4onexBimSgnn
sNsX3o+I7EDjcU7JsQZ31pH4tTfPL7JaQFZINbqgnabc6RlMh/6BHXW8xEKBVuoP
tojoyYagOnnkCItedYn0g3d+e8MTyFPMz2YtlmpBTdGt/wZW7sxJ6OnHqcJQoBR+
K+TWGjV4JtYA7vhTB0QWc3asYS6cPVY8S7E6gezPmYsoESH0gUamchAD7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+3jYQ5r8I/jEk4Obou/SFf/dt+MB8GA1UdIwQY
MBaAFNMULfL2cJQMz1pLJ6DQyYfsyIZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjIt
NjMyY2FlZWY0NTg0LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjItNjMyY2FlZWY0NTg0
LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsOtd5jw
wQihlGFCrtlSktPXNHBvHoQcklonfwG88j4SGioV0OWTuwIQg4y0nvuJl783aFql
coDtMLvg4uSp3y/tF/TULFTAw1ovgfsgf5yCy6r7AVnb/8Do+jjEe0PPVRsN5uNt
mbhGA+713nZ+6P7XzKg8S69OdGtBdqmuIkW3OIoZW0k1AiCcmqcS2xNOiOG9AuzJ
uvEVeh+UIX/bMMyjfYz8Bx1LBWSjAK+fVoP6GGI9LsbrOFmwRh4ol9vbm+/ZDTlM
3zHasu9R9IQo9YUhK80N/TpDl3Ad2RUHotmJI3ANc5ZIIpd2rPbnADNQczKVHdhL
otBoVpTTnwHP2A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:31:31 2025 by rpki-client