Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: SIsPULJEJzy2xjPqCRO/mcSdBR5WfNCYMocPqFY/uHQ=
Subject key identifier: AC:34:4E:87:1A:85:E7:41:F0:0C:40:88:60:FA:7C:D2:BC:7C:9D:1C
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 0197643A34EB6E10AB0C1109DB08574643FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 0557
Signing time: Thu 12 Jun 2025 13:00:25 +0000
Manifest this update: Thu 12 Jun 2025 13:00:25 +0000
Manifest next update: Fri 13 Jun 2025 13:00:25 +0000
Files and hashes: 1: 4aDro6K4uBzQDwqf0WWWDv-WEKk.roa (hash: KqqgAJBLDDctP248xFMqsm3yeCd/FvEIq/xYuv9Vp94=)
2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: 5IFG82AN0y8wC2Dwg2WEzgwsW3tqJzho5BbXXv2d2Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:34:eb:6e:10:ab:0c:11:09:db:08:57:46:43:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Jun 12 13:00:25 2025 GMT
Not After : Jun 13 13:00:25 2025 GMT
Subject: CN=ac344e871a85e741f00c408860fa7cd2bc7c9d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:bd:ec:88:2c:10:7b:9e:dd:e9:68:3c:61:
7b:3e:fb:6d:bc:bf:90:84:5e:a6:02:5e:8c:fd:e8:
23:98:4d:e6:ac:00:f1:fc:73:bf:6c:d2:3c:16:cd:
08:5f:23:7e:35:97:8f:e0:2e:99:66:39:42:11:06:
ac:84:59:23:59:ea:55:77:c7:21:44:b7:92:fb:4c:
1b:38:89:6f:7b:7b:7a:b2:09:72:22:3d:a1:10:c0:
30:5b:b6:86:29:c1:58:25:42:b3:37:38:92:76:a7:
62:86:4f:cf:9d:50:34:30:d2:f4:6b:8d:b7:86:31:
a1:52:8b:20:2f:51:6c:8a:5e:97:ec:da:06:2c:3e:
e0:86:ed:18:ed:2e:48:96:ee:fc:68:ff:fb:84:79:
02:b1:6f:29:0f:12:21:aa:0e:95:2d:81:ca:98:85:
95:d5:16:93:ac:bf:97:1b:48:23:3c:70:2a:e9:ad:
b1:69:89:46:eb:7f:3b:fa:3d:bb:ed:9e:3a:bf:e0:
ac:db:a0:1e:11:0a:60:ab:2b:81:bf:68:ed:38:e6:
f6:68:3c:c3:b1:c6:74:f9:f3:84:af:80:6b:9d:64:
2c:7c:30:b9:23:c8:f7:8d:db:4f:56:71:61:75:36:
e7:e0:39:e8:98:d7:d5:56:65:00:db:57:77:99:02:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:34:4E:87:1A:85:E7:41:F0:0C:40:88:60:FA:7C:D2:BC:7C:9D:1C
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:58:92:05:be:9a:37:55:14:87:69:7d:8e:de:20:9d:e1:84:
a4:2b:c0:89:c4:a4:9c:c9:8b:4a:98:e0:9e:e7:18:45:c4:00:
93:d7:6b:e7:83:ea:a9:0b:34:a5:5d:01:dd:df:22:80:d3:4f:
0a:66:db:33:66:cf:b2:e4:e2:d6:ee:8f:02:c1:0b:6f:6c:5e:
04:f8:09:b3:9b:63:ee:48:bf:7e:31:92:0b:34:a5:48:63:b6:
c1:aa:6f:b8:e5:d8:79:3f:2a:68:a5:3a:db:0c:36:dd:d2:eb:
2a:1b:2f:9b:57:60:4e:a1:95:49:53:ed:7b:81:7b:6a:de:84:
8b:d3:ae:e0:c0:4f:7d:76:87:2d:84:af:22:e5:d1:0a:eb:68:
36:a3:1a:ae:d6:65:5e:fa:70:28:4b:ca:d2:5a:4e:14:41:66:
11:e1:75:88:67:7a:c9:fc:36:df:af:e8:16:ba:a8:0d:e3:34:
e5:cf:43:cf:45:fc:b0:25:02:c0:6f:f4:37:09:22:2d:cc:22:
51:56:fe:04:31:08:25:3a:67:54:12:79:f9:89:98:09:80:5b:
11:9d:14:fb:15:ee:9c:d9:79:27:b1:cb:6f:2d:d1:51:39:bb:
cf:87:9b:45:e0:48:f3:ba:58:71:bf:77:b5:81:7d:41:14:8e:
e3:47:cd:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkOjTrbhCrDBEJ2whXRkP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy
ZTM0ZjgwHhcNMjUwNjEyMTMwMDI1WhcNMjUwNjEzMTMwMDI1WjAzMTEwLwYDVQQD
EyhhYzM0NGU4NzFhODVlNzQxZjAwYzQwODg2MGZhN2NkMmJjN2M5ZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+297IgsEHue3eloPGF7PvttvL+Q
hF6mAl6M/egjmE3mrADx/HO/bNI8Fs0IXyN+NZeP4C6ZZjlCEQashFkjWepVd8ch
RLeS+0wbOIlve3t6sglyIj2hEMAwW7aGKcFYJUKzNziSdqdihk/PnVA0MNL0a423
hjGhUosgL1Fsil6X7NoGLD7ghu0Y7S5Ilu78aP/7hHkCsW8pDxIhqg6VLYHKmIWV
1RaTrL+XG0gjPHAq6a2xaYlG6387+j277Z46v+Cs26AeEQpgqyuBv2jtOOb2aDzD
scZ0+fOEr4BrnWQsfDC5I8j3jdtPVnFhdTbn4DnomNfVVmUA21d3mQK/awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw0TocahedB8AxAiGD6fNK8fJ0cMB8GA1UdIwQY
MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt
MGIwMmE0NzMyNDc5LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5
LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACViSBb6a
N1UUh2l9jt4gneGEpCvAicSknMmLSpjgnucYRcQAk9dr54PqqQs0pV0B3d8igNNP
CmbbM2bPsuTi1u6PAsELb2xeBPgJs5tj7ki/fjGSCzSlSGO2wapvuOXYeT8qaKU6
2ww23dLrKhsvm1dgTqGVSVPte4F7at6Ei9Ou4MBPfXaHLYSvIuXRCutoNqMartZl
XvpwKEvK0lpOFEFmEeF1iGd6yfw236/oFrqoDeM05c9Dz0X8sCUCwG/0NwkiLcwi
UVb+BDEIJTpnVBJ5+YmYCYBbEZ0U+xXunNl5J7HLby3RUTm7z4ebReBI87pYcb93
tYF9QRSO40fNaA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 20:20:34 2025 by rpki-client