Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier: 12hY3i2Z4Pxgw2K9JkUuh6kgEfFhKTe6750ZflaRGNo=
Subject key identifier: E1:4E:32:BA:A1:3A:93:5E:4B:4C:70:AD:D7:EC:27:D6:B4:AF:AE:1E
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 01975948D773EFAEB47AC24522A535F321ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number: 14D9
Signing time: Tue 10 Jun 2025 10:00:35 +0000
Manifest this update: Tue 10 Jun 2025 10:00:35 +0000
Manifest next update: Wed 11 Jun 2025 10:00:35 +0000
Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: lVLqSUDINEk1dQgtetzbeUqMoQA9oA5te2s3udPw0CU=)
2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:d7:73:ef:ae:b4:7a:c2:45:22:a5:35:f3:21:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Jun 10 10:00:35 2025 GMT
Not After : Jun 11 10:00:35 2025 GMT
Subject: CN=e14e32baa13a935e4b4c70add7ec27d6b4afae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:34:3a:98:43:34:86:8d:63:cb:c0:b1:4e:
ef:e8:79:9f:b7:6a:59:d8:35:36:a4:52:b2:e6:2e:
e0:e3:5f:bc:16:b5:90:4b:3c:67:f8:8b:b4:36:3e:
7d:52:25:49:4f:b3:0c:2b:10:c9:40:fb:be:c7:e0:
5a:52:64:04:39:08:58:96:80:7d:af:e4:2c:2a:b5:
97:88:8f:3d:c8:4b:4e:52:ba:2f:3d:79:b7:33:b4:
b7:a7:b4:9d:f5:09:67:5c:ed:0e:59:09:0e:08:ab:
2c:2a:e6:93:4a:db:b7:7b:e0:3e:ff:2c:31:9a:ff:
36:2b:90:45:5d:62:6d:28:52:cd:91:19:97:b5:d7:
bc:6b:de:87:39:31:b1:05:b0:36:c3:de:ea:c6:3a:
73:ee:11:c8:8e:81:f3:20:d5:08:33:31:78:ae:1d:
ed:02:f5:42:6e:c2:cd:d0:31:f6:c7:cc:54:0d:cf:
c2:76:ed:d8:8a:14:9b:64:71:ea:ee:43:99:3b:54:
eb:ac:eb:b8:b3:07:3e:ea:6b:a0:7c:e6:ba:0c:38:
48:3e:d4:fc:7b:16:79:19:ad:4f:81:a5:d5:4b:9d:
dd:99:28:a2:29:e8:35:3b:b4:01:58:86:37:b6:5f:
83:3e:a4:38:78:5d:a5:db:94:a5:66:4b:75:c9:8f:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:32:BA:A1:3A:93:5E:4B:4C:70:AD:D7:EC:27:D6:B4:AF:AE:1E
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:8a:46:44:a6:f1:54:3c:6f:15:29:a6:8b:c9:5b:0b:45:
4b:74:0c:0a:75:32:00:c9:86:63:b6:71:22:73:6f:6e:da:f4:
af:db:5d:00:9b:a5:60:82:7c:6c:c8:29:43:06:8f:03:5a:3d:
6e:af:bc:ef:f4:c0:c6:f8:02:d3:b5:47:7c:78:92:cb:60:4f:
0e:bc:52:27:53:55:d5:11:70:92:da:23:7d:c6:f3:de:95:9a:
34:08:79:35:97:3e:81:04:e4:08:5f:ba:32:01:29:14:dd:79:
98:88:18:6c:95:73:a3:52:47:47:73:a5:11:28:be:04:58:08:
99:66:6b:64:10:ae:8a:bf:df:6d:ed:30:da:c3:a6:b8:91:68:
45:52:0a:38:c3:6f:ec:ed:b2:ef:5a:27:a7:c6:58:53:ab:96:
c0:85:7c:49:c4:87:14:e0:14:1f:ea:d7:ae:70:60:cf:2c:66:
5f:86:65:b5:58:82:5e:b9:e2:27:5c:61:77:ce:59:7c:0d:3d:
7a:4f:47:8b:cb:8a:b9:a1:0f:ee:aa:27:73:71:6a:5e:95:6a:
2f:55:18:1b:30:e5:6c:e9:e8:22:0c:f8:a4:35:59:00:e3:d2:
1b:ea:a8:1a:e9:6b:17:d2:c4:78:cf:cf:60:7e:66:d4:e7:99:
ce:87:ac:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSNdz7660esJFIqU18yHtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxODI2ZWU5MDI3MGZkZDE0MjNhZjgwOTA3MjYwMDY3MThk
ZmM2Y2YwHhcNMjUwNjEwMTAwMDM1WhcNMjUwNjExMTAwMDM1WjAzMTEwLwYDVQQD
EyhlMTRlMzJiYWExM2E5MzVlNGI0YzcwYWRkN2VjMjdkNmI0YWZhZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu540OphDNIaNY8vAsU7v6Hmft2pZ
2DU2pFKy5i7g41+8FrWQSzxn+Iu0Nj59UiVJT7MMKxDJQPu+x+BaUmQEOQhYloB9
r+QsKrWXiI89yEtOUrovPXm3M7S3p7Sd9QlnXO0OWQkOCKssKuaTStu3e+A+/ywx
mv82K5BFXWJtKFLNkRmXtde8a96HOTGxBbA2w97qxjpz7hHIjoHzINUIMzF4rh3t
AvVCbsLN0DH2x8xUDc/Cdu3YihSbZHHq7kOZO1TrrOu4swc+6mugfOa6DDhIPtT8
exZ5Ga1PgaXVS53dmSiiKeg1O7QBWIY3tl+DPqQ4eF2l25SlZkt1yY+nbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFOMrqhOpNeS0xwrdfsJ9a0r64eMB8GA1UdIwQY
MBaAFEGCbukCcP3RQjr4CQcmAGcY38bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEt
ZWU1ODZkMzc1YTU4LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEtZWU1ODZkMzc1YTU4
LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceuKRkSm
8VQ8bxUppovJWwtFS3QMCnUyAMmGY7ZxInNvbtr0r9tdAJulYIJ8bMgpQwaPA1o9
bq+87/TAxvgC07VHfHiSy2BPDrxSJ1NV1RFwktojfcbz3pWaNAh5NZc+gQTkCF+6
MgEpFN15mIgYbJVzo1JHR3OlESi+BFgImWZrZBCuir/fbe0w2sOmuJFoRVIKOMNv
7O2y71onp8ZYU6uWwIV8ScSHFOAUH+rXrnBgzyxmX4ZltViCXrniJ1xhd85ZfA09
ek9Hi8uKuaEP7qonc3FqXpVqL1UYGzDlbOnoIgz4pDVZAOPSG+qoGulrF9LEeM/P
YH5m1OeZzoeseQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:37:04 2025 by rpki-client