Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: ZpCO1tQrm4/GHkfidySgqPQqBD7xvoamyMiZz04SFko=
Subject key identifier: AC:98:30:FE:40:96:10:8C:48:4D:6D:60:EA:24:E0:E7:B3:7B:BE:3D
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 019748C35FCD2C4A2F99E7D83E8D9ACA21DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:52 +0000
Manifest this update: Sat 07 Jun 2025 05:00:52 +0000
Manifest next update: Sun 08 Jun 2025 05:00:52 +0000
Files and hashes: 1: ZQzI8pwKz3Y9UFOTdtU4b9ctJXY.roa (hash: m2HxLCCi/fQqzx7YAu5gwnUGUYg0wp/lcNW6PdEdels=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: L0HHoV+VTHNexAwwvssvES8zm4uAfHwxJvlnpriRWII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:5f:cd:2c:4a:2f:99:e7:d8:3e:8d:9a:ca:21:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Jun 7 05:00:52 2025 GMT
Not After : Jun 8 05:00:52 2025 GMT
Subject: CN=ac9830fe4096108c484d6d60ea24e0e7b37bbe3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:00:db:33:c6:ec:f5:6d:a1:db:93:c1:94:
bf:2c:bc:fb:84:d0:72:72:88:d6:59:79:a5:17:ea:
a1:39:ce:d9:f2:a5:72:05:56:5d:0f:b2:68:89:d4:
63:fc:35:74:05:bd:3c:28:0b:b1:5d:ab:a3:6f:ce:
a4:18:83:29:12:67:e4:6b:05:5a:e9:d4:2e:e4:d5:
c4:53:46:7d:41:7c:42:b6:6b:21:0c:9d:dc:6f:10:
cc:74:1f:84:84:36:2d:6b:bd:c0:e2:17:f8:0b:e6:
10:d4:9e:78:39:b0:e5:e3:c4:d5:94:3f:05:0b:17:
54:45:07:a1:5e:01:d3:40:07:62:27:0f:f2:f8:de:
5c:f7:58:65:20:b4:cc:1e:ba:51:53:8d:e0:34:60:
45:b4:9d:d6:0a:3b:6f:15:1c:fc:0f:34:36:f7:3c:
80:89:bf:8b:20:64:99:ce:e9:c1:df:4a:e0:f5:f7:
d1:4b:35:30:4d:fd:15:23:0b:36:02:cc:35:2e:20:
86:e3:2b:81:15:df:e3:b0:f2:ab:26:01:f2:e0:27:
ee:48:7f:0e:42:67:3c:a8:45:8f:b9:32:e8:33:75:
a6:3a:aa:c0:d4:28:c7:57:e7:70:12:e6:a1:f2:07:
a2:6d:0b:93:c4:67:23:60:a9:69:33:ef:1b:33:b8:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:30:FE:40:96:10:8C:48:4D:6D:60:EA:24:E0:E7:B3:7B:BE:3D
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:59:1f:04:d5:99:38:ac:36:21:64:2a:0b:53:41:f6:5a:d2:
6f:fa:7e:ec:4e:19:ed:1f:8e:dc:5f:00:3b:85:5a:36:00:ca:
a2:75:c9:7b:80:96:1b:70:7c:eb:b7:96:94:de:43:cc:f7:e0:
e3:72:39:37:a0:63:a3:30:94:90:b4:9d:6c:20:a6:5f:62:f4:
02:20:13:35:7b:76:67:08:8b:bf:e7:1a:9f:43:d0:74:77:e8:
47:5c:88:17:5d:94:7d:71:2b:bd:89:2b:41:fd:97:c0:e8:23:
a2:6f:9c:35:0b:5d:9c:6b:4c:3e:78:30:0c:81:f8:54:fb:39:
24:1f:30:9c:fa:47:48:97:e4:44:3f:78:bd:f4:b0:f9:27:25:
de:09:b7:0a:b2:7a:6c:c6:fa:3a:bd:3d:ca:ea:cf:0f:ce:f8:
76:4b:26:77:63:fe:cc:26:ff:c4:5b:95:c1:f3:73:65:8d:47:
12:5e:46:e2:68:06:5f:9f:e1:e6:a5:9e:59:15:94:61:3f:32:
3f:75:6a:c5:be:f5:fc:4c:c4:b4:3d:ba:bb:d7:2a:74:9b:1f:
98:07:61:25:ef:40:af:c1:e8:c3:cc:b9:9a:00:dd:87:42:75:
1b:1b:55:93:ae:49:62:1d:ee:43:2f:1b:49:2c:c3:33:87:c2:
de:bd:76:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw1/NLEovmefYPo2ayiHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi
NzM4OGMwHhcNMjUwNjA3MDUwMDUyWhcNMjUwNjA4MDUwMDUyWjAzMTEwLwYDVQQD
EyhhYzk4MzBmZTQwOTYxMDhjNDg0ZDZkNjBlYTI0ZTBlN2IzN2JiZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAkA2zPG7PVtoduTwZS/LLz7hNBy
cojWWXmlF+qhOc7Z8qVyBVZdD7JoidRj/DV0Bb08KAuxXaujb86kGIMpEmfkawVa
6dQu5NXEU0Z9QXxCtmshDJ3cbxDMdB+EhDYta73A4hf4C+YQ1J54ObDl48TVlD8F
CxdURQehXgHTQAdiJw/y+N5c91hlILTMHrpRU43gNGBFtJ3WCjtvFRz8DzQ29zyA
ib+LIGSZzunB30rg9ffRSzUwTf0VIws2Asw1LiCG4yuBFd/jsPKrJgHy4CfuSH8O
Qmc8qEWPuTLoM3WmOqrA1CjHV+dwEuah8geibQuTxGcjYKlpM+8bM7im0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyYMP5AlhCMSE1tYOok4Oeze749MB8GA1UdIwQY
MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt
YjE4ZDc2YjAxMmU3LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3
LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVkfBNWZ
OKw2IWQqC1NB9lrSb/p+7E4Z7R+O3F8AO4VaNgDKonXJe4CWG3B867eWlN5DzPfg
43I5N6BjozCUkLSdbCCmX2L0AiATNXt2ZwiLv+can0PQdHfoR1yIF12UfXErvYkr
Qf2XwOgjom+cNQtdnGtMPngwDIH4VPs5JB8wnPpHSJfkRD94vfSw+Scl3gm3CrJ6
bMb6Or09yurPD874dksmd2P+zCb/xFuVwfNzZY1HEl5G4mgGX5/h5qWeWRWUYT8y
P3Vqxb71/EzEtD26u9cqdJsfmAdhJe9Ar8How8y5mgDdh0J1GxtVk65JYh3uQy8b
SSzDM4fC3r12FA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:44:55 2025 by rpki-client