Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: qCABb5CGDeCDg0+PKK8mzpSMp+n78wkxtiIZZ4Xru/A=
Subject key identifier: D3:58:6B:E9:08:9D:FF:2C:4A:1F:53:FF:7B:24:E8:20:FF:AF:EF:4F
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019739BDF47900A23D3FF3CF98ECEE360C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 14FC
Signing time: Wed 04 Jun 2025 07:00:39 +0000
Manifest this update: Wed 04 Jun 2025 07:00:39 +0000
Manifest next update: Thu 05 Jun 2025 07:00:39 +0000
Files and hashes: 1: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: n1t0Sn/dKmybPzk7WNq/W5QxL8R/WRm1KycHdvm/71g=)
2: Qp2Zm0LEpJDMsLodusVyq9g9MYg.roa (hash: jJeE6L6slkKko4q8jcPSzjO62uXdvaJJCBizVLQKBjk=)
3: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)
4: yd2Ai214QL8GroiQskFrUfMO6Kc.roa (hash: +L6jAlDJgy+4YPDRYuSYnnpI4dCj403915WXULQVYBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:bd:f4:79:00:a2:3d:3f:f3:cf:98:ec:ee:36:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jun 4 07:00:39 2025 GMT
Not After : Jun 5 07:00:39 2025 GMT
Subject: CN=d3586be9089dff2c4a1f53ff7b24e820ffafef4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:59:d6:98:f6:4d:1e:4a:b0:32:17:0e:f7:31:
2c:03:01:b9:5b:1c:fb:29:6a:33:e9:82:9c:2b:8b:
8c:a6:2f:b9:a9:eb:b1:be:d5:92:2f:a8:f3:c5:23:
38:88:fa:ab:11:03:1b:95:60:01:e5:6f:15:d0:3e:
2e:99:66:3c:21:9f:70:5d:b0:c7:1b:42:24:f7:6d:
3b:7e:8d:7a:f7:81:a4:d9:7b:e9:87:d1:1b:1f:86:
f7:3a:50:25:5a:51:2e:29:31:e7:04:21:82:6d:de:
da:46:48:a1:2e:24:95:a2:32:53:49:00:c0:86:f5:
91:03:76:6b:42:a1:ff:76:b0:ec:19:5c:6b:12:67:
24:d2:ff:bf:0b:4e:92:fd:ea:52:3c:d5:9e:a7:f7:
d3:41:85:aa:05:ef:06:29:14:2c:72:bf:7d:da:24:
22:5d:22:b9:c5:7c:8b:32:c6:d5:d2:a2:10:e6:63:
78:cf:7c:28:0f:81:33:3a:c7:dc:3b:e8:30:ff:d4:
28:ee:65:3e:96:b2:1a:a4:3f:de:60:a7:53:11:82:
6f:e8:cd:49:23:fd:c8:42:a9:f8:98:9a:fe:75:2e:
21:fa:de:9f:9f:18:97:ad:94:08:28:4a:a8:16:96:
8e:91:05:8b:bf:ab:ca:2a:ab:f1:2c:ba:85:b4:2a:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:58:6B:E9:08:9D:FF:2C:4A:1F:53:FF:7B:24:E8:20:FF:AF:EF:4F
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:64:47:09:33:40:37:f8:d9:45:e1:d1:04:11:cf:4c:45:54:
60:07:ff:4a:44:7b:6c:70:3b:7b:cc:42:a6:bb:00:a1:54:de:
11:c4:f4:b7:44:0e:fa:24:ba:9e:fc:f2:fa:ad:40:76:af:00:
4e:97:4c:7d:29:56:5d:23:9a:ed:f3:76:66:9d:c8:36:cd:26:
47:9f:aa:fc:95:7f:22:17:e6:d9:2e:66:40:7c:c6:2e:34:bc:
bd:94:a5:7e:d1:7e:b2:49:f5:fd:bd:a5:f9:16:df:70:4a:cd:
fe:59:b0:71:d3:52:ba:62:f8:05:c2:f1:54:1a:10:3d:dd:b5:
d0:d4:64:ba:0d:8c:2f:6e:3a:e5:30:67:18:f4:39:8d:4d:fb:
0d:85:02:50:5d:8b:ff:9c:8a:90:48:ff:11:12:9b:9f:45:56:
4c:a6:5a:bb:a4:72:c5:f2:bf:39:55:e0:98:d0:d4:de:8b:00:
bc:8a:1b:e5:9b:04:e6:d8:a1:7f:4f:19:2a:31:ee:35:29:72:
d3:b1:d5:ba:ec:a5:e3:69:fa:e8:5a:3e:3d:a2:b4:7c:09:96:
30:5d:91:f0:8d:4b:09:2b:ee:c8:33:0f:63:0e:35:3c:9e:04:
b1:d0:8b:33:c6:cc:34:92:4a:74:13:0f:ee:8d:00:4d:90:dd:
b6:b6:a8:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc5vfR5AKI9P/PPmOzuNgwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2
OGRmM2MwHhcNMjUwNjA0MDcwMDM5WhcNMjUwNjA1MDcwMDM5WjAzMTEwLwYDVQQD
EyhkMzU4NmJlOTA4OWRmZjJjNGExZjUzZmY3YjI0ZTgyMGZmYWZlZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61nWmPZNHkqwMhcO9zEsAwG5Wxz7
KWoz6YKcK4uMpi+5qeuxvtWSL6jzxSM4iPqrEQMblWAB5W8V0D4umWY8IZ9wXbDH
G0Ik9207fo1694Gk2Xvph9EbH4b3OlAlWlEuKTHnBCGCbd7aRkihLiSVojJTSQDA
hvWRA3ZrQqH/drDsGVxrEmck0v+/C06S/epSPNWep/fTQYWqBe8GKRQscr992iQi
XSK5xXyLMsbV0qIQ5mN4z3woD4EzOsfcO+gw/9Qo7mU+lrIapD/eYKdTEYJv6M1J
I/3IQqn4mJr+dS4h+t6fnxiXrZQIKEqoFpaOkQWLv6vKKqvxLLqFtCp40wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNYa+kInf8sSh9T/3sk6CD/r+9PMB8GA1UdIwQY
MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt
MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll
LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWRHCTNA
N/jZReHRBBHPTEVUYAf/SkR7bHA7e8xCprsAoVTeEcT0t0QO+iS6nvzy+q1Adq8A
TpdMfSlWXSOa7fN2Zp3INs0mR5+q/JV/Ihfm2S5mQHzGLjS8vZSlftF+skn1/b2l
+RbfcErN/lmwcdNSumL4BcLxVBoQPd210NRkug2ML2465TBnGPQ5jU37DYUCUF2L
/5yKkEj/ERKbn0VWTKZau6RyxfK/OVXgmNDU3osAvIob5ZsE5tihf08ZKjHuNSly
07HVuuyl42n66Fo+PaK0fAmWMF2R8I1LCSvuyDMPYw41PJ4EsdCLM8bMNJJKdBMP
7o0ATZDdtraodg==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:26:58 2025 by rpki-client