Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: QXlBd0yD+UmAaEUvWWIz1Tcd+yFrXBiHgHyfzjvG1qc=
Subject key identifier: 17:78:35:96:07:76:93:8A:A3:01:05:58:4A:45:C0:FC:B2:B9:ED:9B
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 0197499F3DD10B1BD06C1B2F0CFB042E1548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0AED
Signing time: Sat 07 Jun 2025 09:01:02 +0000
Manifest this update: Sat 07 Jun 2025 09:01:02 +0000
Manifest next update: Sun 08 Jun 2025 09:01:02 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: ICas5RRdl3c6C1pn7hJGz+Et12RFLBRVH8to6FimwgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:3d:d1:0b:1b:d0:6c:1b:2f:0c:fb:04:2e:15:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Jun 7 09:01:02 2025 GMT
Not After : Jun 8 09:01:02 2025 GMT
Subject: CN=177835960776938aa30105584a45c0fcb2b9ed9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:92:a4:47:3f:cc:b1:9d:a0:f3:34:d6:4f:
0f:96:05:71:c6:9a:92:43:c1:e0:8b:47:f2:b6:94:
9b:ca:bf:a1:c3:e5:d9:67:65:98:62:02:96:49:61:
c2:84:3a:42:80:e8:5b:59:b8:0d:60:53:f7:b7:c1:
9e:a0:62:75:cc:36:c4:1a:f3:5a:4c:b9:ad:3e:cf:
6a:72:93:da:ee:2d:3e:94:33:7f:38:41:3e:54:d2:
80:27:70:ac:dc:b8:13:c5:17:bf:c3:b3:94:81:59:
ad:ef:a4:31:b4:59:97:20:28:93:37:70:ee:e9:35:
62:ec:50:7e:72:12:e6:cd:a0:b3:81:3f:47:3a:79:
25:1e:f1:3d:69:c1:c0:b6:dc:50:2b:78:07:13:8e:
a2:e3:62:05:ca:be:1a:d6:07:84:ab:bb:65:ac:e9:
09:27:38:ec:7d:be:52:2d:bd:fd:bf:c3:df:fd:44:
11:c6:46:e6:19:d7:a4:0b:21:5a:44:d6:5b:78:c6:
ff:ab:82:1f:fa:4a:de:04:3e:ac:83:18:cd:20:93:
65:bd:a8:1c:77:4e:15:b9:2f:56:f3:58:7d:a7:a5:
09:be:13:b6:ba:c4:de:d5:b5:43:9f:89:bd:4e:ef:
0e:45:45:d2:90:8a:c7:8d:c8:be:11:fc:ac:f0:a2:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:78:35:96:07:76:93:8A:A3:01:05:58:4A:45:C0:FC:B2:B9:ED:9B
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6a:aa:c0:86:8d:51:48:a6:8d:d8:3b:d8:67:61:23:08:9a:
9b:79:6d:39:02:06:5a:d4:46:a3:4e:28:ab:27:20:e0:b3:61:
3c:90:68:ca:6f:22:4c:e1:31:41:00:0e:1a:b5:b5:22:d7:01:
70:c7:bf:a0:a5:22:94:aa:95:32:76:8f:a4:af:92:e4:de:30:
2f:34:41:4f:a2:a3:73:97:2d:70:b3:ab:3a:7a:90:16:3c:ac:
52:df:6e:de:e8:14:bb:e4:c0:4b:1d:f7:71:b6:2d:14:5c:f1:
84:01:fb:64:8e:d6:86:33:7f:3e:cd:9f:cb:fb:85:dc:ce:20:
24:7b:8b:9e:05:ac:d0:8a:ba:a1:f0:5f:86:52:14:29:72:c3:
8a:db:35:16:24:29:b1:c2:52:c9:60:c4:b7:56:1f:8b:40:e8:
2b:5c:60:28:6f:0b:f4:2e:7e:40:60:9c:ac:0e:5e:ee:b1:95:
cd:de:52:83:8d:34:f4:8f:f8:97:de:1c:dd:2d:ac:0a:0e:8f:
84:db:c9:21:6a:00:47:e7:2a:09:42:01:df:a2:5f:32:53:73:
7c:d1:73:71:d5:4b:9e:3e:bb:f4:18:20:91:6e:35:68:4e:fc:
31:7a:a4:36:35:30:53:2b:36:1e:a3:20:1f:73:a4:67:71:ee:
f2:1b:09:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnz3RCxvQbBsvDPsELhVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzFjOThlM2NhYjgyMWM4NGRkZWZmMjA2OWUwMjI1OWJk
NmU2MWMwHhcNMjUwNjA3MDkwMTAyWhcNMjUwNjA4MDkwMTAyWjAzMTEwLwYDVQQD
EygxNzc4MzU5NjA3NzY5MzhhYTMwMTA1NTg0YTQ1YzBmY2IyYjllZDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9iSpEc/zLGdoPM01k8PlgVxxpqS
Q8Hgi0fytpSbyr+hw+XZZ2WYYgKWSWHChDpCgOhbWbgNYFP3t8GeoGJ1zDbEGvNa
TLmtPs9qcpPa7i0+lDN/OEE+VNKAJ3Cs3LgTxRe/w7OUgVmt76QxtFmXICiTN3Du
6TVi7FB+chLmzaCzgT9HOnklHvE9acHAttxQK3gHE46i42IFyr4a1geEq7tlrOkJ
Jzjsfb5SLb39v8Pf/UQRxkbmGdekCyFaRNZbeMb/q4If+kreBD6sgxjNIJNlvagc
d04VuS9W81h9p6UJvhO2usTe1bVDn4m9Tu8ORUXSkIrHjci+Efys8KLcxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd4NZYHdpOKowEFWEpFwPyyue2bMB8GA1UdIwQY
MBaAFKoxyY48q4IchN3v8gaeAiWb1uYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMt
MDViZmYzMWM1M2ZlLzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80YjFkNTYtZDI1Zi00ZjY0LThhMGMtMDViZmYzMWM1M2Zl
LzEvcWpISmpqeXJnaHlFM2VfeUJwNENKWnZXNWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWqqwIaN
UUimjdg72GdhIwiam3ltOQIGWtRGo04oqycg4LNhPJBoym8iTOExQQAOGrW1ItcB
cMe/oKUilKqVMnaPpK+S5N4wLzRBT6Kjc5ctcLOrOnqQFjysUt9u3ugUu+TASx33
cbYtFFzxhAH7ZI7WhjN/Ps2fy/uF3M4gJHuLngWs0Iq6ofBfhlIUKXLDits1FiQp
scJSyWDEt1Yfi0DoK1xgKG8L9C5+QGCcrA5e7rGVzd5Sg4009I/4l94c3S2sCg6P
hNvJIWoAR+cqCUIB36JfMlNzfNFzcdVLnj679BggkW41aE78MXqkNjUwUys2HqMg
H3OkZ3Hu8hsJlw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:09 2025 by rpki-client