Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: GzioBEvy37ihXRhLWvvSjuKqAh63Tc9YIDkZdeoXZ/A=
Subject key identifier: A8:65:BF:EB:B7:71:32:1F:8D:4E:1F:B0:53:CA:E0:CC:8E:10:66:29
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 01974D7C150357875BC944CC72ECD4BFFF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 03:01:06 +0000
Manifest this update: Sun 08 Jun 2025 03:01:06 +0000
Manifest next update: Mon 09 Jun 2025 03:01:06 +0000
Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: p9FGpz6k6Mlnf5lnzKz1d85myT1MWs8fM+Rn+MRnVL8=)
2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:15:03:57:87:5b:c9:44:cc:72:ec:d4:bf:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Jun 8 03:01:06 2025 GMT
Not After : Jun 9 03:01:06 2025 GMT
Subject: CN=a865bfebb771321f8d4e1fb053cae0cc8e106629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:2c:6b:06:9d:a4:b0:33:14:d6:d5:c8:3b:
91:db:b5:56:4c:81:63:d1:c6:1d:8f:fd:93:b1:05:
fb:14:8e:59:82:8d:6a:18:0f:22:14:b3:f7:d6:6c:
13:a7:bf:25:c1:5b:b9:c6:73:e4:1f:90:d8:18:de:
02:35:63:e4:ee:55:2c:e0:50:4c:92:19:94:77:76:
29:30:96:bb:80:7d:1f:b4:fd:7f:ff:f1:f9:61:71:
26:9c:67:18:46:71:3f:3e:5e:46:a2:cd:55:ef:94:
13:74:27:ac:68:4d:34:c8:b1:23:d7:3d:1d:97:41:
17:40:b4:d7:ee:02:c8:a5:d1:98:9e:50:86:1a:b0:
32:72:53:29:5f:40:59:93:a3:ef:3e:d7:45:97:c9:
c3:91:b9:be:4a:6c:fd:eb:16:b7:3a:0c:70:46:f1:
bb:6a:c5:fd:64:f5:55:a9:40:22:77:bb:eb:50:36:
e9:5b:70:0e:84:9a:b6:45:a9:87:a4:e1:e2:3f:46:
5b:0c:d6:d4:47:51:85:39:25:d9:c1:7f:1e:6b:4e:
f8:cd:5c:59:5c:94:d4:12:17:96:33:fe:6b:5e:28:
1c:83:c9:7d:3f:53:ea:6e:31:cb:3d:c7:da:ee:64:
29:ab:32:ac:7b:22:44:f9:e2:48:97:72:a0:7b:92:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:BF:EB:B7:71:32:1F:8D:4E:1F:B0:53:CA:E0:CC:8E:10:66:29
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:49:d8:fc:a1:fc:a6:58:38:af:87:5f:7e:49:25:1d:a1:d5:
84:71:36:8b:a8:9a:4f:b4:de:be:e4:ca:6f:a1:18:27:ad:0a:
66:82:65:43:73:81:8a:d5:f3:8a:a9:40:88:28:b1:02:76:6d:
dd:9e:49:66:1b:ec:7f:45:89:93:a9:40:10:ce:79:4c:cc:f3:
d5:25:56:e1:9f:b4:24:2e:4e:0a:69:57:45:d6:b7:e1:a7:00:
72:20:37:e2:c6:56:28:46:4f:cf:d4:fc:c7:fa:3a:86:bb:99:
a6:6f:66:d5:cd:87:c1:f4:95:a4:e5:4f:35:9a:e1:3b:bc:70:
4b:30:b7:f9:70:e7:7c:4f:e5:ac:ab:26:32:36:ea:53:c5:d2:
b9:2b:17:5e:55:fb:f1:45:e9:4a:73:3a:90:6e:4b:25:75:30:
8d:a2:89:92:8d:e0:5e:5a:c1:b8:45:26:6c:56:df:bf:09:19:
b2:80:7a:ec:58:1c:10:fa:73:8a:2f:29:f4:f5:46:cb:4a:b0:
12:9f:d9:72:89:a6:c2:2b:75:61:59:b5:0d:26:ea:6d:13:bd:
ea:3e:3c:10:ca:07:ef:cf:d2:93:6d:d9:03:52:96:04:89:0b:
e7:d0:d9:96:5c:e1:72:5d:b3:50:35:5a:72:08:32:ef:eb:c6:
e0:63:7c:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfBUDV4dbyUTMcuzUv/9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZWY2MWJkYzAzNGZiNTYzOGJjZjE5ZTA3ZWMyMWQ5MDAx
OWQ0MmMwHhcNMjUwNjA4MDMwMTA2WhcNMjUwNjA5MDMwMTA2WjAzMTEwLwYDVQQD
EyhhODY1YmZlYmI3NzEzMjFmOGQ0ZTFmYjA1M2NhZTBjYzhlMTA2NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQksawadpLAzFNbVyDuR27VWTIFj
0cYdj/2TsQX7FI5Zgo1qGA8iFLP31mwTp78lwVu5xnPkH5DYGN4CNWPk7lUs4FBM
khmUd3YpMJa7gH0ftP1///H5YXEmnGcYRnE/Pl5Gos1V75QTdCesaE00yLEj1z0d
l0EXQLTX7gLIpdGYnlCGGrAyclMpX0BZk6PvPtdFl8nDkbm+Smz96xa3OgxwRvG7
asX9ZPVVqUAid7vrUDbpW3AOhJq2RamHpOHiP0ZbDNbUR1GFOSXZwX8ea074zVxZ
XJTUEheWM/5rXigcg8l9P1PqbjHLPcfa7mQpqzKseyJE+eJIl3Kge5ImNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhlv+u3cTIfjU4fsFPK4MyOEGYpMB8GA1UdIwQY
MBaAFKjvYb3ANPtWOLzxngfsIdkAGdQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYt
MWY0OWJjN2ZkM2JkLzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYtMWY0OWJjN2ZkM2Jk
LzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkknY/KH8
plg4r4dffkklHaHVhHE2i6iaT7TevuTKb6EYJ60KZoJlQ3OBitXziqlAiCixAnZt
3Z5JZhvsf0WJk6lAEM55TMzz1SVW4Z+0JC5OCmlXRda34acAciA34sZWKEZPz9T8
x/o6hruZpm9m1c2HwfSVpOVPNZrhO7xwSzC3+XDnfE/lrKsmMjbqU8XSuSsXXlX7
8UXpSnM6kG5LJXUwjaKJko3gXlrBuEUmbFbfvwkZsoB67FgcEPpzii8p9PVGy0qw
Ep/Zcommwit1YVm1DSbqbRO96j48EMoH78/Sk23ZA1KWBIkL59DZllzhcl2zUDVa
cggy7+vG4GN83Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:01:00 2025 by rpki-client