Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: oOpQ/U1srRbT7X8C9/npMhOAg7jDKN/7rB33Vf1oLiQ=
Subject key identifier: 83:EB:74:C6:C1:FD:0D:19:26:E6:A4:0B:FF:B6:08:DD:49:B3:3C:59
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 01974CA020B73D301B2D25C36F8B43A0386D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0AEC
Signing time: Sat 07 Jun 2025 23:00:51 +0000
Manifest this update: Sat 07 Jun 2025 23:00:51 +0000
Manifest next update: Sun 08 Jun 2025 23:00:51 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: IY3myCBJgIAcL4sloR2NM1jugkMVqj21OJnymo4uGbs=)
2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:20:b7:3d:30:1b:2d:25:c3:6f:8b:43:a0:38:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Jun 7 23:00:51 2025 GMT
Not After : Jun 8 23:00:51 2025 GMT
Subject: CN=83eb74c6c1fd0d1926e6a40bffb608dd49b33c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:a4:22:ea:f2:18:1a:a1:ff:b0:b6:fb:83:
ea:9e:29:bf:6b:7f:42:43:25:1a:21:1b:05:80:12:
a9:c7:93:2d:9f:ff:e0:5c:f5:ca:89:c9:e0:87:6c:
fb:64:0e:71:21:26:51:1c:3a:29:ae:b4:6f:3b:d6:
b9:c1:94:d6:a7:06:4d:78:ac:d8:ea:9d:e1:86:1b:
50:eb:48:8b:4c:90:15:20:46:c1:fa:ce:86:b0:30:
f6:88:52:31:a9:5a:4a:80:71:6c:35:fb:a7:66:62:
0c:40:e1:c7:ac:38:d4:6d:12:d5:f6:d0:4a:b2:93:
9a:56:ae:f8:7f:67:03:57:6c:ce:61:dd:c3:ae:c2:
73:62:5a:c5:d2:ec:95:de:c8:ef:22:24:00:e6:ab:
cf:d5:a5:e7:8e:eb:a1:26:cd:84:86:cb:8b:1b:3f:
be:e3:69:a6:81:af:00:0d:92:14:33:cc:a5:b4:e2:
b8:6a:c3:06:ad:c3:0d:92:6e:ef:9e:cb:a7:4d:e9:
7d:ee:1e:15:ad:b6:12:b7:0d:3c:1a:9f:27:a9:41:
5f:91:a5:3a:89:35:bd:84:40:3c:45:12:d5:28:9e:
67:ce:2e:7b:91:76:43:fa:54:81:b2:3e:50:a7:ca:
35:fa:2a:a4:67:5d:c5:87:a1:8a:fd:03:2b:bd:bd:
ad:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:74:C6:C1:FD:0D:19:26:E6:A4:0B:FF:B6:08:DD:49:B3:3C:59
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:1b:a6:a4:d4:c0:8e:95:28:76:ca:49:7a:ba:ae:95:cd:
1e:46:56:b8:d4:09:6e:dc:04:6d:1e:6e:08:3f:8a:11:e6:8f:
51:0a:a0:c2:59:f4:58:f7:9b:6c:63:8c:ba:c5:20:7f:ba:5f:
ed:96:0a:db:63:f2:dc:05:4e:c1:f4:66:d3:f0:33:4f:b0:4c:
07:d7:35:de:6a:19:d3:e7:fc:ef:89:33:80:53:5e:2c:8e:91:
b8:79:41:52:80:83:00:53:83:14:23:97:de:ac:0a:c2:a6:04:
21:b6:3c:e7:43:f8:40:20:4c:4f:ee:29:d6:f6:83:55:c3:fe:
3d:15:dc:51:e6:df:5f:c2:98:62:86:dc:4e:fe:c9:ec:3d:a5:
bf:c2:01:43:ea:d4:4f:74:65:6f:95:f8:19:37:b0:74:24:96:
82:1f:d2:44:37:71:54:b4:3b:95:61:e1:84:7b:bd:8d:4d:29:
b9:d9:ff:1b:a7:64:44:a7:77:b3:06:2a:c1:41:2e:1b:e0:e7:
97:fb:7f:a1:e3:aa:a6:bd:24:ad:4e:22:40:b9:95:81:2c:57:
35:6d:26:f1:49:a1:03:a6:43:32:31:e3:a9:db:c5:94:20:8a:
d9:99:d1:f1:14:55:a0:db:9f:0c:fb:8d:43:bf:aa:b7:95:6c:
d9:64:1c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoCC3PTAbLSXDb4tDoDhtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNjQ0NmE0YTFjYjU2YjNmNzZmZTZiNGRlZmFiYWQzYmQ5
YjUyMDcwHhcNMjUwNjA3MjMwMDUxWhcNMjUwNjA4MjMwMDUxWjAzMTEwLwYDVQQD
Eyg4M2ViNzRjNmMxZmQwZDE5MjZlNmE0MGJmZmI2MDhkZDQ5YjMzYzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/mkIuryGBqh/7C2+4Pqnim/a39C
QyUaIRsFgBKpx5Mtn//gXPXKicngh2z7ZA5xISZRHDoprrRvO9a5wZTWpwZNeKzY
6p3hhhtQ60iLTJAVIEbB+s6GsDD2iFIxqVpKgHFsNfunZmIMQOHHrDjUbRLV9tBK
spOaVq74f2cDV2zOYd3DrsJzYlrF0uyV3sjvIiQA5qvP1aXnjuuhJs2EhsuLGz++
42mmga8ADZIUM8yltOK4asMGrcMNkm7vnsunTel97h4VrbYStw08Gp8nqUFfkaU6
iTW9hEA8RRLVKJ5nzi57kXZD+lSBsj5Qp8o1+iqkZ13Fh6GK/QMrvb2tKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPrdMbB/Q0ZJuakC/+2CN1JszxZMB8GA1UdIwQY
MBaAFEJkRqShy1az92/mtN76utO9m1IHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEt
ZWRlMDI4MmY5YmI5LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEtZWRlMDI4MmY5YmI5
LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiMbpqTU
wI6VKHbKSXq6rpXNHkZWuNQJbtwEbR5uCD+KEeaPUQqgwln0WPebbGOMusUgf7pf
7ZYK22Py3AVOwfRm0/AzT7BMB9c13moZ0+f874kzgFNeLI6RuHlBUoCDAFODFCOX
3qwKwqYEIbY850P4QCBMT+4p1vaDVcP+PRXcUebfX8KYYobcTv7J7D2lv8IBQ+rU
T3Rlb5X4GTewdCSWgh/SRDdxVLQ7lWHhhHu9jU0pudn/G6dkRKd3swYqwUEuG+Dn
l/t/oeOqpr0krU4iQLmVgSxXNW0m8UmhA6ZDMjHjqdvFlCCK2ZnR8RRVoNufDPuN
Q7+qt5Vs2WQcyQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:10:32 2025 by rpki-client