Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: HQwcfp/nZj5Op2uo5wnVJA+9mf2WJBsPb1MEEJMr2uI=
Subject key identifier: 8E:3F:44:9E:1F:12:C2:85:FE:2A:1D:09:8B:BF:5A:02:66:4D:F6:A7
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 019749317F32BE3CCCD1ACC1CF7498CBD756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0E0F
Signing time: Sat 07 Jun 2025 07:01:09 +0000
Manifest this update: Sat 07 Jun 2025 07:01:09 +0000
Manifest next update: Sun 08 Jun 2025 07:01:09 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: 81yg7OlWvAZD3qSf38xSKU8X5Wue5Jjpdtt4ayJ3EOQ=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:7f:32:be:3c:cc:d1:ac:c1:cf:74:98:cb:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Jun 7 07:01:09 2025 GMT
Not After : Jun 8 07:01:09 2025 GMT
Subject: CN=8e3f449e1f12c285fe2a1d098bbf5a02664df6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:a9:4b:a9:79:f0:ff:27:c4:de:6d:9e:26:
fa:dd:c2:d5:57:91:d1:94:a5:27:94:21:24:60:a6:
8b:c5:c7:42:2c:48:55:cf:0e:ba:97:a2:e1:a3:58:
5c:0c:7b:45:2e:31:06:80:4e:75:f5:d6:45:78:a3:
d4:ef:08:c2:a3:98:fe:6c:c0:84:6b:e7:bc:25:1e:
ef:50:ba:95:fb:b8:90:5e:1f:6c:fa:43:2a:93:67:
ac:fb:b7:07:f7:1a:11:c9:8d:7c:94:9d:57:f0:c9:
6a:7f:f5:e4:54:55:8e:6e:9e:f1:c6:bb:96:7a:5b:
30:1a:c1:bf:96:b6:d0:cc:ed:67:bc:80:16:28:32:
95:f0:f4:83:bc:df:4f:aa:ba:fd:ed:70:03:4d:5c:
38:1e:3d:c6:b0:03:13:28:74:b9:c7:1a:df:51:43:
dd:45:3b:8f:80:17:07:ec:6f:70:02:8d:c1:ce:27:
24:40:17:3c:5c:c8:b7:ba:2c:02:5c:e8:ae:1c:c9:
79:22:71:d9:2c:67:c0:83:62:0e:c0:ee:e9:b4:4b:
94:75:a6:84:df:c6:aa:3b:6f:38:71:8e:90:e0:00:
b1:ec:4c:27:4c:8c:c5:39:cf:30:db:d3:fc:1e:88:
14:61:5d:0c:1b:e4:40:84:85:ec:de:33:9f:9d:34:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:44:9E:1F:12:C2:85:FE:2A:1D:09:8B:BF:5A:02:66:4D:F6:A7
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4d:a0:c8:97:1a:f4:41:d4:c9:98:fd:42:1e:e8:b8:3d:df:
a2:5a:7a:49:58:cf:76:07:5d:ca:c4:27:37:a9:f7:30:92:5d:
66:00:7a:45:a0:ab:06:74:07:ea:a0:36:92:bb:fc:49:72:83:
54:13:b8:98:eb:c1:f1:b5:e9:c0:4f:42:19:f2:0c:fa:2f:f1:
29:88:42:28:f0:02:c6:de:ad:de:3b:8a:5b:ad:5f:9d:66:09:
87:75:62:58:96:3d:cd:95:56:0b:df:c0:56:3e:4b:b4:3f:73:
7e:6f:20:61:d0:61:01:4e:bd:69:b9:d2:b7:79:88:68:0a:d7:
7f:e5:81:19:fe:31:36:76:23:d5:49:5d:1b:27:fd:11:ac:9d:
82:2d:b9:c5:63:33:c8:e4:d0:9b:58:07:4a:e3:67:fe:45:35:
97:da:f7:90:cd:4e:37:ca:95:0a:06:3d:7b:a9:ce:b8:a0:fb:
c7:bd:d9:e8:0a:86:30:81:3b:96:31:6a:5a:45:b3:e5:35:ea:
48:a0:14:ad:87:ad:c2:c8:95:21:fd:aa:6b:3d:69:1b:78:bd:
33:38:12:ab:7c:01:5f:57:ee:22:50:a6:34:33:dd:14:98:51:
e1:4b:d2:3f:4b:01:e8:d6:30:7b:32:0f:c8:bf:cd:72:08:0d:
c6:b9:74:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMX8yvjzM0azBz3SYy9dWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3
OTU2YTYwHhcNMjUwNjA3MDcwMTA5WhcNMjUwNjA4MDcwMTA5WjAzMTEwLwYDVQQD
Eyg4ZTNmNDQ5ZTFmMTJjMjg1ZmUyYTFkMDk4YmJmNWEwMjY2NGRmNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvGpS6l58P8nxN5tnib63cLVV5HR
lKUnlCEkYKaLxcdCLEhVzw66l6Lho1hcDHtFLjEGgE519dZFeKPU7wjCo5j+bMCE
a+e8JR7vULqV+7iQXh9s+kMqk2es+7cH9xoRyY18lJ1X8Mlqf/XkVFWObp7xxruW
elswGsG/lrbQzO1nvIAWKDKV8PSDvN9Pqrr97XADTVw4Hj3GsAMTKHS5xxrfUUPd
RTuPgBcH7G9wAo3BzickQBc8XMi3uiwCXOiuHMl5InHZLGfAg2IOwO7ptEuUdaaE
38aqO284cY6Q4ACx7EwnTIzFOc8w29P8HogUYV0MG+RAhIXs3jOfnTS3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4/RJ4fEsKF/iodCYu/WgJmTfanMB8GA1UdIwQY
MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt
YzAzZjNmZGRkNGFjLzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj
LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAek2gyJca
9EHUyZj9Qh7ouD3folp6SVjPdgddysQnN6n3MJJdZgB6RaCrBnQH6qA2krv8SXKD
VBO4mOvB8bXpwE9CGfIM+i/xKYhCKPACxt6t3juKW61fnWYJh3ViWJY9zZVWC9/A
Vj5LtD9zfm8gYdBhAU69abnSt3mIaArXf+WBGf4xNnYj1UldGyf9Eaydgi25xWMz
yOTQm1gHSuNn/kU1l9r3kM1ON8qVCgY9e6nOuKD7x73Z6AqGMIE7ljFqWkWz5TXq
SKAUrYetwsiVIf2qaz1pG3i9MzgSq3wBX1fuIlCmNDPdFJhR4UvSP0sB6NYwezIP
yL/NcggNxrl0xA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:49 2025 by rpki-client