Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: DVUcOk1OdimYehyLe3SWjP/VEBWfmkVqlSo58v6NEqs=
Subject key identifier: 7D:0A:BF:2E:77:12:CD:9C:B3:EC:CE:F0:03:BB:5B:27:D1:A6:A1:E5
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 01974A7A4E31D87D7AB72672BDB3F8CBEF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 13:00:18 +0000
Manifest this update: Sat 07 Jun 2025 13:00:18 +0000
Manifest next update: Sun 08 Jun 2025 13:00:18 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: 1b3G/iWeclyltxuozM5XjlhKDqZnAEy1NcVx4gd52Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:4e:31:d8:7d:7a:b7:26:72:bd:b3:f8:cb:ef:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: Jun 7 13:00:18 2025 GMT
Not After : Jun 8 13:00:18 2025 GMT
Subject: CN=7d0abf2e7712cd9cb3eccef003bb5b27d1a6a1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:55:bf:02:dc:ee:94:f8:e9:32:1e:43:89:
88:fa:83:07:f1:b5:78:7e:2c:4b:b1:cc:b1:64:67:
ce:b2:70:b7:a2:3e:12:bf:7c:11:3a:69:0a:6a:6e:
28:cd:97:b5:4a:25:60:ff:c0:98:02:0d:44:5b:95:
01:59:26:f5:0c:98:7d:8e:bf:71:c2:f6:8d:2e:c4:
8a:35:1b:e7:d5:b3:c9:5c:5a:48:c6:a5:b8:4f:c5:
d2:56:fa:65:f3:99:cc:7c:96:74:12:ef:f4:ca:c3:
b2:32:30:c1:87:e7:c6:d7:f8:e7:57:8a:f6:e4:76:
68:39:b4:d9:4c:a3:87:7b:88:aa:a2:d3:af:dd:b8:
50:b7:90:11:89:1d:ed:02:00:c6:76:16:a5:1d:26:
fd:bb:5e:c5:62:df:42:ae:ba:22:8b:1c:5d:a4:9f:
40:56:cb:6f:6b:6c:b3:7d:fe:da:b7:85:b1:95:85:
81:e8:b6:82:b7:e5:11:34:c7:cc:31:23:35:49:81:
7e:5b:62:03:7a:09:d6:a4:3c:27:4d:45:f7:61:fc:
15:96:e8:a8:49:83:a9:d8:69:f6:62:ec:c3:f2:4c:
a8:9a:a6:1a:5c:ac:65:c6:d4:ff:23:05:50:81:ff:
40:30:2e:32:b9:95:75:81:81:4a:c1:ab:0c:5e:48:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:BF:2E:77:12:CD:9C:B3:EC:CE:F0:03:BB:5B:27:D1:A6:A1:E5
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:c0:24:d9:6b:d4:e4:5c:ae:1e:0c:69:0d:17:3b:ba:1e:
e7:1e:8c:fc:fd:25:43:66:dc:d7:3c:1b:f6:6a:f1:b1:6b:ad:
9c:37:02:27:e1:3a:a4:87:a1:75:93:7e:a2:32:e8:5e:b6:59:
64:06:e2:48:10:a0:1d:06:7e:36:1a:69:83:1d:91:68:42:4d:
55:07:a6:90:c8:3d:95:43:63:a2:43:47:b9:2e:42:0a:f3:10:
f1:48:f5:b3:87:66:2d:ea:36:8c:0c:08:38:a3:62:e6:0d:de:
48:19:d8:ed:21:0f:b3:f4:77:d8:63:9f:54:a2:5f:20:7d:5a:
6f:8a:82:85:0a:36:6e:16:98:83:ea:7b:f5:dd:b3:b1:78:48:
79:8c:ae:b7:2f:4f:6a:12:bd:fa:d4:9d:68:cc:03:71:4f:b2:
ed:06:6e:50:f0:6d:61:72:a4:71:e8:03:e3:17:35:c4:48:c8:
89:78:cc:b1:dc:af:6c:8b:2a:93:8f:86:60:d0:b6:ff:5e:d1:
ba:8d:20:b5:aa:71:77:05:a5:4b:af:27:3c:35:1b:e4:9d:dc:
6d:3f:4d:20:46:26:b2:0d:f5:fe:0a:3e:0b:9a:63:6b:9c:02:
d5:06:cb:c5:e7:83:29:bc:ae:d7:fa:08:75:fe:85:bf:9f:05:
ef:3c:81:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKek4x2H16tyZyvbP4y++fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYWRlNmNkOWUwMWFhYTJlMzlkZmY0ODRlNGVkY2U2ZjUw
OTkwYWYwHhcNMjUwNjA3MTMwMDE4WhcNMjUwNjA4MTMwMDE4WjAzMTEwLwYDVQQD
Eyg3ZDBhYmYyZTc3MTJjZDljYjNlY2NlZjAwM2JiNWIyN2QxYTZhMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F1VvwLc7pT46TIeQ4mI+oMH8bV4
fixLscyxZGfOsnC3oj4Sv3wROmkKam4ozZe1SiVg/8CYAg1EW5UBWSb1DJh9jr9x
wvaNLsSKNRvn1bPJXFpIxqW4T8XSVvpl85nMfJZ0Eu/0ysOyMjDBh+fG1/jnV4r2
5HZoObTZTKOHe4iqotOv3bhQt5ARiR3tAgDGdhalHSb9u17FYt9CrroiixxdpJ9A
Vstva2yzff7at4WxlYWB6LaCt+URNMfMMSM1SYF+W2IDegnWpDwnTUX3YfwVluio
SYOp2Gn2YuzD8kyomqYaXKxlxtT/IwVQgf9AMC4yuZV1gYFKwasMXkiQFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0Kvy53Es2cs+zO8AO7WyfRpqHlMB8GA1UdIwQY
MBaAFP6t5s2eAaqi453/SE5O3Ob1CZCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNmViOTItZWQ2Yi00MzEzLWJlZmYt
OTI3ZWNlNjZmODJiLzEvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mNmViOTItZWQ2Yi00MzEzLWJlZmYtOTI3ZWNlNjZmODJi
LzEvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8nAJNlr
1ORcrh4MaQ0XO7oe5x6M/P0lQ2bc1zwb9mrxsWutnDcCJ+E6pIehdZN+ojLoXrZZ
ZAbiSBCgHQZ+Nhppgx2RaEJNVQemkMg9lUNjokNHuS5CCvMQ8Uj1s4dmLeo2jAwI
OKNi5g3eSBnY7SEPs/R32GOfVKJfIH1ab4qChQo2bhaYg+p79d2zsXhIeYyuty9P
ahK9+tSdaMwDcU+y7QZuUPBtYXKkcegD4xc1xEjIiXjMsdyvbIsqk4+GYNC2/17R
uo0gtapxdwWlS68nPDUb5J3cbT9NIEYmsg31/go+C5pja5wC1QbLxeeDKbyu1/oI
df6Fv58F7zyB9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:55 2025 by rpki-client