Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: nFnW5sJR8zQSbu5yaYjcri6/Ck28ip5zwO8OP4hMsIA=
Subject key identifier: D9:E8:5C:31:FD:84:4B:9F:55:26:29:B1:78:42:C9:E3:D6:FE:B2:9F
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 01974AB1767CF8F31FCCCAE07A2B1A039E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0713
Signing time: Sat 07 Jun 2025 14:00:33 +0000
Manifest this update: Sat 07 Jun 2025 14:00:33 +0000
Manifest next update: Sun 08 Jun 2025 14:00:33 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: awvQ2zMxCFPOFyLlYo2swrpj7CFszZQqEtdqM/KjpmI=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:76:7c:f8:f3:1f:cc:ca:e0:7a:2b:1a:03:9e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jun 7 14:00:33 2025 GMT
Not After : Jun 8 14:00:33 2025 GMT
Subject: CN=d9e85c31fd844b9f552629b17842c9e3d6feb29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:98:4a:df:47:35:ff:91:a5:2c:f3:39:71:75:
a6:6c:ea:10:b1:66:69:b3:36:c7:66:b9:32:9f:1e:
8e:8f:04:7a:67:bc:f2:ca:6e:35:6e:81:eb:0d:5d:
5d:17:28:78:81:91:01:fb:e5:a1:dc:9a:95:2e:29:
47:44:b4:35:f3:7e:0d:69:25:6f:7c:3c:1e:20:51:
2f:fa:19:e0:13:c5:5d:ce:a5:33:d0:77:41:d1:87:
3a:51:29:ee:51:62:a8:11:40:52:08:7b:95:4c:71:
a1:9b:10:4e:2c:07:38:fe:e4:47:1a:54:39:f0:f2:
f5:f2:b3:c4:88:52:0d:b5:37:0a:29:01:1e:63:ba:
f3:bf:91:de:6c:90:5f:d5:32:e9:e4:77:7c:7c:ef:
f3:c0:ab:0d:2b:69:24:68:bb:b7:93:97:c6:f7:37:
54:f5:7a:ca:4b:34:57:22:20:07:30:1f:9a:67:f2:
be:31:51:59:fa:cd:07:60:62:e3:ac:e8:d1:59:5f:
cd:f9:de:77:53:cf:f3:6e:69:67:cf:ab:a0:71:e2:
b9:e7:ff:96:fb:68:06:ab:49:51:c9:d1:79:85:9b:
62:cb:70:23:61:b5:54:f2:e6:24:05:4f:fa:b8:79:
57:62:cd:d7:69:b6:d1:97:6d:c5:e2:8c:72:5c:d6:
0f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E8:5C:31:FD:84:4B:9F:55:26:29:B1:78:42:C9:E3:D6:FE:B2:9F
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:27:a9:b6:39:d5:95:ad:88:c7:e3:55:40:66:db:a8:0f:0e:
94:50:15:83:af:01:47:f2:82:33:07:67:5a:f2:3d:1a:2e:8a:
3d:be:b7:68:93:d7:e2:b2:e8:bf:e0:b2:09:38:5e:56:53:1d:
72:a5:da:06:fc:62:0a:f0:bb:e0:d5:e8:c3:92:c1:2d:a9:e8:
b8:e9:84:d4:c1:e2:7e:22:6f:b0:e1:21:6c:23:ca:1c:e8:d5:
36:d3:a2:b3:63:c4:26:1f:0e:22:ae:8c:e1:e2:65:50:80:b9:
55:6f:04:21:c2:ee:65:82:b7:57:a0:62:c5:87:6d:67:dc:b1:
f6:62:ec:2c:c9:b0:84:05:22:8a:6d:1c:2f:7d:36:5b:79:15:
80:a4:01:35:5b:f8:f3:95:0c:0a:0e:16:db:8d:da:2e:6c:66:
dc:5c:3b:cd:86:db:14:a3:85:6f:61:af:04:9a:24:3c:d6:aa:
c2:b1:f8:2d:c4:e0:2c:cf:8c:f6:28:94:f7:02:8a:8b:c4:f9:
f8:e6:ee:5f:c3:0c:09:68:16:f2:7e:86:60:a9:f4:5e:a0:ff:
b9:76:b0:a1:c2:05:93:6e:6b:93:8b:79:2d:cd:7c:df:68:1e:
a8:0f:d5:03:1b:09:ef:1b:ad:9f:41:5f:5b:1e:fa:57:e5:23:
3b:c8:f7:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsXZ8+PMfzMrgeisaA56bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh
YWUyMjgwHhcNMjUwNjA3MTQwMDMzWhcNMjUwNjA4MTQwMDMzWjAzMTEwLwYDVQQD
EyhkOWU4NWMzMWZkODQ0YjlmNTUyNjI5YjE3ODQyYzllM2Q2ZmViMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZhK30c1/5GlLPM5cXWmbOoQsWZp
szbHZrkynx6OjwR6Z7zyym41boHrDV1dFyh4gZEB++Wh3JqVLilHRLQ1834NaSVv
fDweIFEv+hngE8VdzqUz0HdB0Yc6USnuUWKoEUBSCHuVTHGhmxBOLAc4/uRHGlQ5
8PL18rPEiFINtTcKKQEeY7rzv5HebJBf1TLp5Hd8fO/zwKsNK2kkaLu3k5fG9zdU
9XrKSzRXIiAHMB+aZ/K+MVFZ+s0HYGLjrOjRWV/N+d53U8/zbmlnz6ugceK55/+W
+2gGq0lRydF5hZtiy3AjYbVU8uYkBU/6uHlXYs3XabbRl23F4oxyXNYP2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnoXDH9hEufVSYpsXhCyePW/rKfMB8GA1UdIwQY
MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt
MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl
LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyeptjnV
la2Ix+NVQGbbqA8OlFAVg68BR/KCMwdnWvI9Gi6KPb63aJPX4rLov+CyCTheVlMd
cqXaBvxiCvC74NXow5LBLanouOmE1MHifiJvsOEhbCPKHOjVNtOis2PEJh8OIq6M
4eJlUIC5VW8EIcLuZYK3V6BixYdtZ9yx9mLsLMmwhAUiim0cL302W3kVgKQBNVv4
85UMCg4W243aLmxm3Fw7zYbbFKOFb2GvBJokPNaqwrH4LcTgLM+M9iiU9wKKi8T5
+ObuX8MMCWgW8n6GYKn0XqD/uXawocIFk25rk4t5Lc1832geqA/VAxsJ7xutn0Ff
Wx76V+UjO8j3rQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:11 2025 by rpki-client