Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File: qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier: HXOEfeZflQX9nh2qC9n4Kf+K25VNXHWzlnn2gi6ibEk=
Subject key identifier: A8:13:6F:97:86:D7:25:17:DB:7F:BC:41:6A:75:33:DE:72:CA:72:17
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer: /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial: 01973919E667ECF37FE010520D7898B9C75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number: 0C02
Signing time: Wed 04 Jun 2025 04:01:28 +0000
Manifest this update: Wed 04 Jun 2025 04:01:28 +0000
Manifest next update: Thu 05 Jun 2025 04:01:28 +0000
Files and hashes: 1: 468N6r5RPT2f5DQcT-nc3tiYbYo.roa (hash: n/z9/H3ukYX/zuXbah6+bo8U6dHBYWx6B073nDMSCSs=)
2: LkgrvRMkyor3Sl-mJe0dukFEQiw.roa (hash: f/Dqc2xTcB53OeZM5QyPDCr0/e3CXOFI6hD2Qj8d+a0=)
3: X5Pbij4rIL8Dq4Js8EvH7j1Wj7k.roa (hash: JTczwWTBd9G1q76W/pHd7YHIV9ZzN4VCk+pl3uv/6uM=)
4: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: /jNXMPLTx5Yjt+Hde2vBI6VyiSb5vKqGpn4t4QNqhgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:19:e6:67:ec:f3:7f:e0:10:52:0d:78:98:b9:c7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Validity
Not Before: Jun 4 04:01:28 2025 GMT
Not After : Jun 5 04:01:28 2025 GMT
Subject: CN=a8136f9786d72517db7fbc416a7533de72ca7217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:3f:fc:03:fa:70:61:e7:0c:34:5d:d4:50:
9e:6a:8a:42:46:64:5f:ca:b6:92:28:56:07:14:39:
86:1f:9d:5e:96:6b:e9:bf:04:45:6d:49:7c:24:b2:
fa:bd:a3:d0:b8:00:1f:27:e7:d7:f6:f3:e5:b4:f5:
a6:9a:88:65:23:1d:6c:64:75:85:86:e8:cb:67:29:
29:50:05:ca:46:83:66:b7:a5:71:6e:03:76:f3:a3:
c7:f9:b5:43:11:28:69:3b:04:e1:7a:05:27:cf:14:
88:c0:a2:d2:c5:1e:a7:e3:2b:8f:05:fb:77:28:47:
26:52:dd:1c:21:27:cb:be:06:bf:5a:f8:17:20:7e:
5a:ae:08:f1:ac:ae:a2:74:ae:01:4a:3a:a0:67:80:
5d:4c:03:f7:d6:64:66:99:1a:3c:e6:30:e1:f3:d1:
12:03:3c:9d:e6:c9:3e:f7:e4:0f:97:2f:45:aa:2a:
37:14:bc:bd:c9:06:98:0f:ab:de:d2:31:cd:88:5c:
db:8b:63:42:3f:cb:2b:15:a0:9c:86:2d:3d:ae:94:
ac:89:17:a0:4d:19:f3:47:16:0d:e1:87:98:af:1a:
77:fa:75:80:52:16:20:b7:67:47:71:82:05:8f:88:
d3:05:67:16:1c:b4:0b:5e:48:61:87:ea:61:24:6d:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:13:6F:97:86:D7:25:17:DB:7F:BC:41:6A:75:33:DE:72:CA:72:17
X509v3 Authority Key Identifier:
keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a8:36:91:45:97:01:4a:5e:b5:c0:1c:bb:9c:54:24:16:44:
30:89:2d:bb:8d:53:0b:4a:ba:6f:a2:2f:c3:26:36:93:54:09:
75:20:71:72:27:27:08:b2:e9:ed:22:dc:4a:6c:68:d5:00:7e:
fd:4d:bc:15:8b:9e:4a:60:c4:ae:e0:4a:a9:7c:6b:56:1d:65:
ec:f0:28:69:89:c5:b2:d8:b2:cb:07:57:b9:8d:78:52:74:14:
9c:73:3b:6b:07:3d:1e:41:0d:ba:ef:f4:dc:74:13:e2:44:b8:
65:0e:da:a5:b7:aa:dc:7f:0f:2c:9a:cf:e7:fd:9b:4e:11:3a:
2d:39:20:6b:7f:7b:08:26:af:0f:51:69:f5:61:75:ea:dd:c0:
cc:86:99:c9:ee:0f:9b:55:9a:76:85:91:44:6a:60:13:26:6b:
b3:b1:0d:69:21:a7:5a:e9:6a:02:29:51:30:ea:da:ca:27:cc:
4c:7e:a8:e5:66:55:06:d9:42:52:76:49:11:3a:20:85:5f:53:
97:12:37:f4:3e:c1:6e:a0:43:36:92:81:cf:8b:e1:2f:a6:0f:
58:f7:9b:f1:be:3f:5a:b8:c1:02:e5:42:2a:39:ac:3b:21:f4:
73:1c:f3:5d:28:14:0a:04:19:c2:39:cd:8e:ca:69:33:94:c6:
10:e8:92:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc5GeZn7PN/4BBSDXiYucddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjJmZGVhMjYzYjc5ZmNlMTEzODkwNTJiMGNkOTQwOTk1
YzZkZmUwHhcNMjUwNjA0MDQwMTI4WhcNMjUwNjA1MDQwMTI4WjAzMTEwLwYDVQQD
EyhhODEzNmY5Nzg2ZDcyNTE3ZGI3ZmJjNDE2YTc1MzNkZTcyY2E3MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pI//AP6cGHnDDRd1FCeaopCRmRf
yraSKFYHFDmGH51elmvpvwRFbUl8JLL6vaPQuAAfJ+fX9vPltPWmmohlIx1sZHWF
hujLZykpUAXKRoNmt6VxbgN286PH+bVDEShpOwThegUnzxSIwKLSxR6n4yuPBft3
KEcmUt0cISfLvga/WvgXIH5argjxrK6idK4BSjqgZ4BdTAP31mRmmRo85jDh89ES
Azyd5sk+9+QPly9Fqio3FLy9yQaYD6ve0jHNiFzbi2NCP8srFaCchi09rpSsiReg
TRnzRxYN4YeYrxp3+nWAUhYgt2dHcYIFj4jTBWcWHLQLXkhhh+phJG1zcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgTb5eG1yUX23+8QWp1M95yynIXMB8GA1UdIwQY
MBaAFKny/eomO3n84ROJBSsM2UCZXG3+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEt
ZjhhZmZlZjExMmQ4LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81M2ZmNjItYzFhZC00MjQ0LWI5MWEtZjhhZmZlZjExMmQ4
LzEvcWZMOTZpWTdlZnpoRTRrRkt3elpRSmxjYmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKg2kUWX
AUpetcAcu5xUJBZEMIktu41TC0q6b6IvwyY2k1QJdSBxcicnCLLp7SLcSmxo1QB+
/U28FYueSmDEruBKqXxrVh1l7PAoaYnFstiyywdXuY14UnQUnHM7awc9HkENuu/0
3HQT4kS4ZQ7apbeq3H8PLJrP5/2bThE6LTkga397CCavD1Fp9WF16t3AzIaZye4P
m1WadoWRRGpgEyZrs7ENaSGnWulqAilRMOrayifMTH6o5WZVBtlCUnZJEToghV9T
lxI39D7BbqBDNpKBz4vhL6YPWPeb8b4/WrjBAuVCKjmsOyH0cxzzXSgUCgQZwjnN
jsppM5TGEOiSeg==
-----END CERTIFICATE-----
Generated at Wed Jun 4 11:28:19 2025 by rpki-client