Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: 2efM5oe9NhgjuJRJ+0YG5GmsQHpPaIEL3EvRN4gRUoA=
Subject key identifier: 1A:03:B8:1C:49:CF:B0:44:B3:20:0B:90:11:6B:4C:07:3E:4B:43:82
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019749D61BB8EECE957621848F720998B1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 14AD
Signing time: Sat 07 Jun 2025 10:00:57 +0000
Manifest this update: Sat 07 Jun 2025 10:00:57 +0000
Manifest next update: Sun 08 Jun 2025 10:00:57 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: LgRFeiKO9jAnq3w7kJFgdMFTUrHfEHk4Or6JHTrQQ7E=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:1b:b8:ee:ce:95:76:21:84:8f:72:09:98:b1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Jun 7 10:00:57 2025 GMT
Not After : Jun 8 10:00:57 2025 GMT
Subject: CN=1a03b81c49cfb044b3200b90116b4c073e4b4382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:ce:79:3c:f0:89:01:70:99:66:70:23:e6:
fa:d4:10:24:85:3f:89:3a:ff:89:26:07:65:2b:8e:
c0:35:15:5f:d0:ba:e5:aa:69:10:25:53:e8:d4:f6:
e9:db:0f:90:68:bd:2b:6c:66:10:8a:35:d5:19:09:
25:19:57:23:5a:64:2f:d9:69:5d:6b:a2:c7:7b:d9:
d1:ec:bc:07:8c:ce:e6:50:83:00:34:5b:ac:06:51:
e3:09:52:ae:77:1e:fc:9c:12:39:9a:22:a2:02:68:
5f:e1:01:5f:80:2e:0f:ab:b1:17:16:ce:49:4a:b3:
50:97:76:c3:77:aa:c1:3e:b4:57:ad:eb:07:c9:37:
30:b9:64:9a:a7:52:02:cf:de:4e:91:59:01:62:ac:
17:b6:10:f5:30:30:fc:6d:07:1a:b7:f7:ec:a0:81:
fc:00:1f:b9:5a:6c:e5:7d:8f:d1:5b:99:ad:ed:84:
ae:bd:17:ac:f4:38:c4:7f:10:df:69:a8:63:46:d1:
f1:d3:db:a1:17:33:91:6b:62:ca:18:2b:58:d2:27:
27:9f:fe:26:54:d6:0e:ac:ad:58:a3:33:73:ef:8b:
21:ff:2e:5f:6a:05:92:5d:f5:ae:84:f2:ef:32:20:
44:9e:84:18:a7:5b:2b:01:39:1d:39:46:94:71:3f:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:03:B8:1C:49:CF:B0:44:B3:20:0B:90:11:6B:4C:07:3E:4B:43:82
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:89:65:3e:b1:d7:8f:74:f0:38:fd:a8:b5:b2:ee:b2:ba:57:
9d:ca:04:1a:78:62:93:52:f3:ba:55:a0:21:18:67:f9:c8:7f:
99:64:76:83:b7:41:ff:38:94:8e:6d:10:2b:6f:ee:07:f6:98:
2b:ff:c6:6c:c6:b9:74:73:f8:d1:37:67:98:cc:a9:40:50:b9:
13:8c:92:59:48:1e:c1:01:f6:88:a7:f7:aa:32:46:92:01:6a:
4e:be:82:f4:b8:5c:3b:7a:ea:11:39:17:99:88:a6:54:52:c3:
11:4a:d6:d6:74:e1:e8:ce:9c:b0:bc:03:3e:e1:05:d0:8e:b1:
3e:06:c9:4c:69:35:bf:c1:74:2b:f7:79:c5:48:4f:ec:74:df:
81:77:b6:0e:57:f6:c0:93:9e:16:b7:7b:91:b7:73:c7:59:36:
7f:06:74:3a:41:11:f3:7a:17:88:94:ce:f1:dd:b5:64:86:2c:
f7:d3:34:99:32:b3:82:4f:69:46:0e:4a:de:e8:ec:2b:36:4a:
ea:60:be:94:c2:2d:d1:29:83:dd:27:64:88:b4:7d:84:d9:4e:
4b:1b:79:75:8b:90:b2:01:6b:e5:e3:cd:5b:35:8f:80:07:15:
ae:c5:5e:77:03:9e:01:ee:65:ca:89:57:9a:b3:4a:28:48:36:
71:ff:81:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1hu47s6VdiGEj3IJmLH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2
YjgyNGUwHhcNMjUwNjA3MTAwMDU3WhcNMjUwNjA4MTAwMDU3WjAzMTEwLwYDVQQD
EygxYTAzYjgxYzQ5Y2ZiMDQ0YjMyMDBiOTAxMTZiNGMwNzNlNGI0MzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVbOeTzwiQFwmWZwI+b61BAkhT+J
Ov+JJgdlK47ANRVf0LrlqmkQJVPo1Pbp2w+QaL0rbGYQijXVGQklGVcjWmQv2Wld
a6LHe9nR7LwHjM7mUIMANFusBlHjCVKudx78nBI5miKiAmhf4QFfgC4Pq7EXFs5J
SrNQl3bDd6rBPrRXresHyTcwuWSap1ICz95OkVkBYqwXthD1MDD8bQcat/fsoIH8
AB+5WmzlfY/RW5mt7YSuvRes9DjEfxDfaahjRtHx09uhFzORa2LKGCtY0icnn/4m
VNYOrK1YozNz74sh/y5fagWSXfWuhPLvMiBEnoQYp1srATkdOUaUcT+nrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoDuBxJz7BEsyALkBFrTAc+S0OCMB8GA1UdIwQY
MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt
YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh
LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASollPrHX
j3TwOP2otbLusrpXncoEGnhik1LzulWgIRhn+ch/mWR2g7dB/ziUjm0QK2/uB/aY
K//GbMa5dHP40TdnmMypQFC5E4ySWUgewQH2iKf3qjJGkgFqTr6C9LhcO3rqETkX
mYimVFLDEUrW1nTh6M6csLwDPuEF0I6xPgbJTGk1v8F0K/d5xUhP7HTfgXe2Dlf2
wJOeFrd7kbdzx1k2fwZ0OkER83oXiJTO8d21ZIYs99M0mTKzgk9pRg5K3ujsKzZK
6mC+lMIt0SmD3SdkiLR9hNlOSxt5dYuQsgFr5ePNWzWPgAcVrsVedwOeAe5lyolX
mrNKKEg2cf+BwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:12:30 2025 by rpki-client