Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: ER0NF4wgZQKJQmIb++Nnk2hpWGFPEHxK2ESdirYfiN0=
Subject key identifier: 4E:5C:07:79:FF:5D:4F:A8:46:6A:99:E7:97:A9:0A:F0:70:DE:4B:48
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 01975158F02D06D2D350D5AEE7C30CD976CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 06E6
Signing time: Sun 08 Jun 2025 21:01:12 +0000
Manifest this update: Sun 08 Jun 2025 21:01:12 +0000
Manifest next update: Mon 09 Jun 2025 21:01:12 +0000
Files and hashes: 1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=)
2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: Ue6A2fHjF2WMj4XRQXLNOg21EDyUXOcxIPB+EGz95o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:f0:2d:06:d2:d3:50:d5:ae:e7:c3:0c:d9:76:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Jun 8 21:01:12 2025 GMT
Not After : Jun 9 21:01:12 2025 GMT
Subject: CN=4e5c0779ff5d4fa8466a99e797a90af070de4b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:a0:86:d4:b2:18:3c:41:17:47:19:17:35:
4e:71:e6:e6:c1:08:96:aa:76:21:d6:d8:a1:29:da:
92:ab:df:b4:ef:35:71:e3:a4:0a:47:0d:96:c0:0c:
fe:65:79:90:8c:a9:be:65:c4:ae:ef:77:dc:ef:ba:
4f:2c:3b:c4:12:78:81:da:7c:2b:08:36:3b:18:9d:
42:90:3f:09:bb:c9:21:92:2e:c3:8c:d4:01:52:db:
1e:ad:cf:b8:e6:b5:eb:5e:4e:50:6a:28:4d:1b:3d:
bb:3e:a6:3c:5f:a0:1f:44:a6:4b:43:cc:7e:76:91:
27:86:b4:c3:2c:b3:ae:ca:8a:ce:0a:a1:0b:b4:31:
dc:8c:db:70:e2:07:65:97:7d:37:9d:90:97:a6:b1:
34:f3:69:b5:af:56:23:61:27:07:e1:d8:57:28:da:
8c:f8:c6:c0:05:da:f6:3c:33:ba:30:aa:d2:37:81:
f9:92:42:69:26:9f:e0:12:a5:e5:16:37:d7:72:8d:
f6:73:3b:2b:7f:5d:65:f9:70:30:68:78:87:17:ba:
3f:0d:6f:ad:39:d7:70:5e:45:21:2c:cd:9f:50:99:
93:ca:55:85:b5:aa:a2:b6:0f:30:50:1d:fe:a5:5c:
87:75:c9:91:01:42:9a:9e:d2:47:25:3d:f8:8d:22:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5C:07:79:FF:5D:4F:A8:46:6A:99:E7:97:A9:0A:F0:70:DE:4B:48
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:93:d0:26:52:92:a5:72:46:01:18:ad:7f:29:58:25:df:e0:
0e:6c:63:0e:d9:69:53:24:5b:36:59:b7:c8:98:1b:cc:ab:14:
a3:21:0a:8d:7b:20:b9:c0:6b:86:d3:1c:bd:ec:a7:e9:69:e4:
3a:e8:d3:6e:3d:65:bd:52:0f:55:40:74:2e:d3:38:1a:67:e5:
1b:5f:80:29:33:33:9b:65:4e:f7:33:36:a1:6a:74:c9:59:cd:
07:d6:dd:e8:6e:86:6e:ec:f5:b0:d4:dd:4d:76:f3:db:0a:5f:
cf:36:49:51:bd:2f:92:dc:1b:fd:e7:f5:b3:ec:f6:99:e9:2b:
c7:3f:8d:90:fd:72:21:bb:7b:04:84:31:c3:2d:d7:2f:e1:d4:
9e:61:f8:20:98:35:3a:e6:54:1d:35:9f:d2:e1:6b:79:c6:b0:
18:53:b5:6a:81:77:1c:ee:cf:8e:79:f6:f1:47:80:4b:59:5b:
8e:a3:a4:ca:1b:fc:f3:a8:e1:05:23:75:98:40:2d:ef:1f:0d:
cb:bb:c4:74:64:90:06:28:6b:be:f2:73:63:3c:d2:f9:44:8b:
7d:9c:68:48:f2:45:ed:c8:b8:a6:9b:54:7f:94:3a:9d:e3:dc:
93:c5:7c:73:8f:e6:94:ef:4a:c2:8a:2f:23:3c:db:88:d5:de:
92:26:6c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRWPAtBtLTUNWu58MM2XbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMTdkZDE1YjYyYmRkNzExMjU5OWI4MTQyMzM2MGVlZTdh
MDEyOTYwHhcNMjUwNjA4MjEwMTEyWhcNMjUwNjA5MjEwMTEyWjAzMTEwLwYDVQQD
Eyg0ZTVjMDc3OWZmNWQ0ZmE4NDY2YTk5ZTc5N2E5MGFmMDcwZGU0YjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAmghtSyGDxBF0cZFzVOcebmwQiW
qnYh1tihKdqSq9+07zVx46QKRw2WwAz+ZXmQjKm+ZcSu73fc77pPLDvEEniB2nwr
CDY7GJ1CkD8Ju8khki7DjNQBUtserc+45rXrXk5QaihNGz27PqY8X6AfRKZLQ8x+
dpEnhrTDLLOuyorOCqELtDHcjNtw4gdll303nZCXprE082m1r1YjYScH4dhXKNqM
+MbABdr2PDO6MKrSN4H5kkJpJp/gEqXlFjfXco32czsrf11l+XAwaHiHF7o/DW+t
OddwXkUhLM2fUJmTylWFtaqitg8wUB3+pVyHdcmRAUKantJHJT34jSK0iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5cB3n/XU+oRmqZ55epCvBw3ktIMB8GA1UdIwQY
MBaAFEMX3RW2K91xElmbgUIzYO7noBKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXhmZEZiWXIzWEVTV1p1QlFqTmc3dWVnRXBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NTRiODktMzdjMS00MDYxLTkwYjMt
NmI5NTUwMGRhMjNiLzEvUXhmZEZiWXIzWEVTV1p1QlFqTmc3dWVnRXBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NTRiODktMzdjMS00MDYxLTkwYjMtNmI5NTUwMGRhMjNi
LzEvUXhmZEZiWXIzWEVTV1p1QlFqTmc3dWVnRXBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5PQJlKS
pXJGARitfylYJd/gDmxjDtlpUyRbNlm3yJgbzKsUoyEKjXsgucBrhtMcveyn6Wnk
OujTbj1lvVIPVUB0LtM4GmflG1+AKTMzm2VO9zM2oWp0yVnNB9bd6G6Gbuz1sNTd
TXbz2wpfzzZJUb0vktwb/ef1s+z2mekrxz+NkP1yIbt7BIQxwy3XL+HUnmH4IJg1
OuZUHTWf0uFrecawGFO1aoF3HO7Pjnn28UeAS1lbjqOkyhv886jhBSN1mEAt7x8N
y7vEdGSQBihrvvJzYzzS+USLfZxoSPJF7ci4pptUf5Q6nePck8V8c4/mlO9Kwoov
IzzbiNXekiZsyA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:57:39 2025 by rpki-client