Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: GKVdq49OqWqxeAjx1gEM3BZS6VwIurkl/Qe5MKf3xys=
Subject key identifier: D3:64:AA:3B:30:10:15:9C:1B:38:5C:2B:21:3B:35:5B:CC:B8:5C:F4
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 019758A3E47E6021CA69A701763B2CB28BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 0551
Signing time: Tue 10 Jun 2025 07:00:25 +0000
Manifest this update: Tue 10 Jun 2025 07:00:25 +0000
Manifest next update: Wed 11 Jun 2025 07:00:25 +0000
Files and hashes: 1: 4aDro6K4uBzQDwqf0WWWDv-WEKk.roa (hash: KqqgAJBLDDctP248xFMqsm3yeCd/FvEIq/xYuv9Vp94=)
2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: hj07FWHkGkEz6IujBDmcrX7NLYbyAOmrkEiP2RD4514=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a3:e4:7e:60:21:ca:69:a7:01:76:3b:2c:b2:8b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Jun 10 07:00:25 2025 GMT
Not After : Jun 11 07:00:25 2025 GMT
Subject: CN=d364aa3b3010159c1b385c2b213b355bccb85cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:dc:84:5e:0a:78:41:ff:0b:cb:dc:3d:e7:
57:29:d3:9d:bd:84:af:ac:aa:1a:22:ba:8e:19:f0:
52:15:c0:52:5d:72:54:b9:64:f5:0a:5a:d1:26:75:
3d:0e:2f:ed:25:73:64:41:81:43:94:c3:57:aa:82:
dc:b1:19:55:53:b4:d0:29:c6:52:48:9d:83:e8:f1:
63:d8:21:1f:98:37:bc:b1:f7:11:15:99:19:74:ae:
76:03:d3:46:19:2e:f4:be:80:d4:c7:fa:3c:3a:02:
bd:4f:9a:8e:4d:dc:31:9a:e8:d8:a7:70:0b:81:a0:
c3:c9:8b:61:09:e8:eb:b8:30:ec:23:1d:f6:39:1a:
98:e3:87:cf:fb:21:c3:1e:b0:54:e8:93:b4:91:58:
92:01:10:78:c5:07:88:78:b4:04:b8:39:48:61:63:
11:9b:00:13:68:61:b6:b1:75:2e:c3:3b:b4:0d:c3:
6b:a5:f2:63:5c:6b:8c:62:e7:4d:36:c7:08:e5:21:
98:13:1b:19:a4:46:54:22:37:14:2d:df:8f:cc:fa:
49:f0:b7:25:cd:35:8e:4e:12:ca:4c:13:9d:11:20:
46:d7:29:ba:be:ac:d4:a7:8a:79:52:5c:91:91:2a:
2c:6b:07:f7:48:37:1e:71:3b:c7:23:cc:bf:c6:60:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:64:AA:3B:30:10:15:9C:1B:38:5C:2B:21:3B:35:5B:CC:B8:5C:F4
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:5c:15:64:40:73:3e:a2:6e:49:32:25:ed:36:21:af:df:
f3:e2:cd:e6:a5:97:22:43:33:0c:e4:44:0c:b2:28:0a:3d:05:
ac:12:0d:fd:71:47:46:6d:35:cc:65:d2:37:e1:81:dd:3b:83:
38:68:65:40:52:f1:0d:6a:6e:dd:25:df:02:1f:a7:b1:01:52:
f7:35:a3:0c:0d:02:a0:44:fc:c4:29:36:3b:e1:5e:29:c2:c7:
57:6d:d6:be:13:af:d0:ca:25:7b:cc:70:2d:d8:c1:46:a8:65:
f5:5f:bf:4f:16:74:70:f4:bb:db:f3:9c:1e:27:d1:8e:e1:69:
af:cd:da:2b:3e:f4:1b:61:ef:ce:9a:e1:02:59:60:90:34:5c:
7c:b4:c6:86:72:41:7f:ca:69:94:c2:2a:30:ac:22:3b:e2:37:
55:ed:ed:86:c2:e4:df:6b:30:70:38:2e:e1:df:32:6c:7b:9c:
84:b0:c4:bd:9f:1b:bb:3d:89:de:60:99:8b:ca:23:f0:9b:c6:
2f:45:39:47:93:c8:27:39:9a:fc:02:a8:9d:8e:99:a7:12:bc:
fe:97:bd:cb:19:42:3e:5f:a9:0b:b6:07:2d:de:24:cd:5a:86:
a4:1d:71:7a:98:b0:f2:10:ad:2b:17:59:52:ca:1d:84:94:bd:
2c:9b:24:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYo+R+YCHKaacBdjsssouoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy
ZTM0ZjgwHhcNMjUwNjEwMDcwMDI1WhcNMjUwNjExMDcwMDI1WjAzMTEwLwYDVQQD
EyhkMzY0YWEzYjMwMTAxNTljMWIzODVjMmIyMTNiMzU1YmNjYjg1Y2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHjchF4KeEH/C8vcPedXKdOdvYSv
rKoaIrqOGfBSFcBSXXJUuWT1ClrRJnU9Di/tJXNkQYFDlMNXqoLcsRlVU7TQKcZS
SJ2D6PFj2CEfmDe8sfcRFZkZdK52A9NGGS70voDUx/o8OgK9T5qOTdwxmujYp3AL
gaDDyYthCejruDDsIx32ORqY44fP+yHDHrBU6JO0kViSARB4xQeIeLQEuDlIYWMR
mwATaGG2sXUuwzu0DcNrpfJjXGuMYudNNscI5SGYExsZpEZUIjcULd+PzPpJ8Lcl
zTWOThLKTBOdESBG1ym6vqzUp4p5UlyRkSosawf3SDcecTvHI8y/xmBqvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNkqjswEBWcGzhcKyE7NVvMuFz0MB8GA1UdIwQY
MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt
MGIwMmE0NzMyNDc5LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5
LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1FcFWRA
cz6ibkkyJe02Ia/f8+LN5qWXIkMzDOREDLIoCj0FrBIN/XFHRm01zGXSN+GB3TuD
OGhlQFLxDWpu3SXfAh+nsQFS9zWjDA0CoET8xCk2O+FeKcLHV23WvhOv0Mole8xw
LdjBRqhl9V+/TxZ0cPS72/OcHifRjuFpr83aKz70G2HvzprhAllgkDRcfLTGhnJB
f8pplMIqMKwiO+I3Ve3thsLk32swcDgu4d8ybHuchLDEvZ8buz2J3mCZi8oj8JvG
L0U5R5PIJzma/AKonY6ZpxK8/pe9yxlCPl+pC7YHLd4kzVqGpB1xepiw8hCtKxdZ
UsodhJS9LJskdg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 14:22:35 2025 by rpki-client