Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: YJLgi8lD6f7QJQ+UMcjB/MQdhhqAvzuznIbz0As3S88=
Subject key identifier: A5:A3:12:6B:9F:B8:49:B6:66:93:CC:00:C2:29:3B:80:51:00:C6:9E
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 01976C2B5749CBED5571BBD51AB207FCDAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 10AA
Signing time: Sat 14 Jun 2025 02:01:09 +0000
Manifest this update: Sat 14 Jun 2025 02:01:09 +0000
Manifest next update: Sun 15 Jun 2025 02:01:09 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: SqtfVugGmqWuVQT2IhCgiG5CEcdyqze7tIHGE2ut9h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:57:49:cb:ed:55:71:bb:d5:1a:b2:07:fc:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Jun 14 02:01:09 2025 GMT
Not After : Jun 15 02:01:09 2025 GMT
Subject: CN=a5a3126b9fb849b66693cc00c2293b805100c69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:d5:0f:85:d3:0b:82:6a:12:d6:72:f7:df:
fa:19:5a:a2:5b:5a:86:d9:5d:3a:72:27:f4:d2:78:
18:0a:6d:ff:4f:aa:70:ec:27:c1:be:9a:27:b8:94:
53:ec:9a:a8:a4:2a:2b:3b:94:98:74:bc:22:51:7c:
30:8e:14:60:a4:e5:98:ad:c3:11:fc:77:14:8b:14:
79:75:55:40:17:d3:24:ca:dc:85:ca:5d:93:7f:74:
9d:68:54:f9:90:70:0d:0c:9f:67:47:e7:20:87:1c:
4c:d5:f9:96:ed:39:56:94:64:3f:69:b0:43:1e:30:
f6:21:fa:10:ec:b9:7c:1b:72:c9:3e:35:8f:56:46:
d2:e4:7a:96:17:70:15:a3:88:c3:f6:41:dd:3e:8e:
f9:13:b3:ab:d4:43:65:20:c9:27:f3:95:ef:c1:fe:
f2:cb:90:24:8e:ed:66:89:d7:58:c1:4e:a6:b2:c5:
94:5b:9d:e4:d3:6d:11:2b:a2:c2:b6:70:c2:4d:9f:
f3:b7:50:ae:ec:53:0e:20:91:4b:06:e6:e0:ce:1b:
70:2f:1a:f3:d9:12:46:71:17:bf:0b:1b:f8:e0:d2:
da:8c:e4:98:80:50:0f:d2:49:f9:6c:dc:4e:bf:e7:
5c:b3:79:49:7c:d4:c4:6d:d2:d2:0b:86:43:5e:c6:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A3:12:6B:9F:B8:49:B6:66:93:CC:00:C2:29:3B:80:51:00:C6:9E
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a8:0a:52:ec:23:8d:56:0a:8c:3c:79:33:09:21:cf:b7:97:
d8:f7:91:a4:a1:0e:a6:31:49:2a:27:1a:37:d3:e6:d0:42:89:
c6:5f:04:24:af:73:17:a4:56:4f:63:6b:30:5f:64:22:06:ea:
d4:cd:77:01:c4:0e:36:0c:0a:e0:28:01:93:65:88:3b:aa:de:
c4:e9:97:1b:e7:04:7f:21:4d:78:21:06:1b:d4:18:84:00:45:
46:6c:2c:b0:46:c0:73:b2:75:14:4a:cd:0b:da:30:82:0a:89:
cb:50:94:df:a5:9b:1e:8a:40:af:d6:19:b7:41:c4:1e:7c:52:
4a:4f:fb:8d:61:f7:b4:92:01:a6:da:45:88:da:9b:38:98:7e:
5e:1c:26:c2:a9:89:31:14:13:9b:0d:54:fc:58:a9:0d:33:f0:
93:8b:af:45:3a:53:09:fd:b1:5f:fa:58:23:99:4e:97:3e:7d:
ac:6d:25:9d:34:19:27:1a:99:c1:61:f5:10:c4:63:10:5f:f6:
0c:37:71:74:bf:38:6f:98:e4:04:37:37:76:e7:08:0c:0c:28:
fe:d3:64:36:35:82:c8:ca:85:70:13:dd:a9:e7:1d:ea:d5:9c:
5a:29:e9:50:32:57:60:62:15:74:c3:99:da:97:a5:79:d5:f8:
5b:58:87:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK1dJy+1VcbvVGrIH/Nr+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTFlNTgyNjI3MGY0OWVhZTk5OWQ0ODllODVkZWNjYzg0
NzczOGIwHhcNMjUwNjE0MDIwMTA5WhcNMjUwNjE1MDIwMTA5WjAzMTEwLwYDVQQD
EyhhNWEzMTI2YjlmYjg0OWI2NjY5M2NjMDBjMjI5M2I4MDUxMDBjNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY7VD4XTC4JqEtZy99/6GVqiW1qG
2V06cif00ngYCm3/T6pw7CfBvponuJRT7JqopCorO5SYdLwiUXwwjhRgpOWYrcMR
/HcUixR5dVVAF9MkytyFyl2Tf3SdaFT5kHANDJ9nR+cghxxM1fmW7TlWlGQ/abBD
HjD2IfoQ7Ll8G3LJPjWPVkbS5HqWF3AVo4jD9kHdPo75E7Or1ENlIMkn85Xvwf7y
y5Akju1middYwU6mssWUW53k020RK6LCtnDCTZ/zt1Cu7FMOIJFLBubgzhtwLxrz
2RJGcRe/Cxv44NLajOSYgFAP0kn5bNxOv+dcs3lJfNTEbdLSC4ZDXsYfqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWjEmufuEm2ZpPMAMIpO4BRAMaeMB8GA1UdIwQY
MBaAFEGR5YJicPSerpmdSJ6F3szIR3OLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYt
N2RmZGFjZmE2NTExLzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81MWJhYzctOTgwNi00MWU1LTk5MzYtN2RmZGFjZmE2NTEx
LzEvUVpIbGdtSnc5SjZ1bVoxSW5vWGV6TWhIYzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhagKUuwj
jVYKjDx5Mwkhz7eX2PeRpKEOpjFJKicaN9Pm0EKJxl8EJK9zF6RWT2NrMF9kIgbq
1M13AcQONgwK4CgBk2WIO6rexOmXG+cEfyFNeCEGG9QYhABFRmwssEbAc7J1FErN
C9owggqJy1CU36WbHopAr9YZt0HEHnxSSk/7jWH3tJIBptpFiNqbOJh+XhwmwqmJ
MRQTmw1U/FipDTPwk4uvRTpTCf2xX/pYI5lOlz59rG0lnTQZJxqZwWH1EMRjEF/2
DDdxdL84b5jkBDc3ducIDAwo/tNkNjWCyMqFcBPdqecd6tWcWinpUDJXYGIVdMOZ
2peledX4W1iHug==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:31:30 2025 by rpki-client