Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: U+CFJ+pmyAKLn+Ijwq/FGxbGUr3ljXTiRcYCcrldOVc=
Subject key identifier: B0:7A:B2:F9:66:2B:D4:7A:69:11:AF:C8:15:F0:40:DC:9A:55:AD:55
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 0197458AED56D1FE9824218C544AF70F92BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 105D
Signing time: Fri 06 Jun 2025 14:00:22 +0000
Manifest this update: Fri 06 Jun 2025 14:00:22 +0000
Manifest next update: Sat 07 Jun 2025 14:00:22 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: ujG8wYCcHcadMSa+nc/be7BaTKtPouMy1215qXbgOZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8a:ed:56:d1:fe:98:24:21:8c:54:4a:f7:0f:92:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jun 6 14:00:22 2025 GMT
Not After : Jun 7 14:00:22 2025 GMT
Subject: CN=b07ab2f9662bd47a6911afc815f040dc9a55ad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fb:af:6e:91:7b:32:ee:38:75:18:3c:36:0d:
78:9f:92:97:9d:9f:5e:f5:17:31:66:d8:69:69:68:
1a:65:9a:3f:32:ba:d4:d1:59:e0:a2:8e:9f:7c:e5:
47:ef:8a:98:d0:1c:66:d3:9c:68:a3:2a:c7:dc:0b:
bb:c0:1a:2a:ee:e8:1e:4f:29:58:bf:93:3b:8c:18:
44:3a:de:9c:e5:ff:e6:cc:02:89:63:0c:1f:13:ff:
86:d8:61:2a:06:1c:70:ed:f8:60:e6:f5:73:4f:95:
f7:44:43:b6:45:06:bd:31:53:a0:fa:e2:f2:cc:91:
a3:62:d0:57:90:6c:2d:e5:d1:16:1b:ce:9d:c5:68:
98:94:f5:ff:06:ce:95:f0:65:7d:b4:f2:f1:1c:1c:
c3:91:c6:05:aa:13:41:ca:97:a7:8d:b5:f0:67:82:
d6:b9:08:7e:2d:68:13:be:07:f0:4d:58:c2:3b:7b:
bd:2a:ae:ed:a7:72:47:83:e7:18:c4:d7:e6:79:e4:
19:d3:16:eb:99:c8:7a:2c:ae:be:1d:c2:c8:14:98:
2c:c6:a6:35:a7:bf:5d:52:22:83:eb:51:da:2e:6c:
86:69:6e:91:e9:cc:cc:28:3d:f8:c6:c5:72:50:a9:
68:01:e4:a4:99:c2:e4:b0:33:b5:dd:32:10:76:df:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:B2:F9:66:2B:D4:7A:69:11:AF:C8:15:F0:40:DC:9A:55:AD:55
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:09:57:c0:58:69:c2:30:16:dc:49:e6:9a:4e:51:71:df:05:
1a:7a:17:8d:bc:2b:94:c8:40:66:74:35:cd:e6:6f:58:c2:88:
39:25:31:84:23:71:84:3e:d1:c0:e9:67:cb:74:98:09:65:e5:
de:8f:4c:37:0f:4f:39:9b:46:2c:89:a0:9d:99:80:dc:57:cf:
01:fc:a9:3c:da:9c:43:58:ba:5f:03:dd:0a:3e:56:7a:92:7f:
b6:1a:69:46:70:f3:c8:48:be:b2:8b:1e:81:bb:5a:78:5a:9a:
73:b6:2a:d6:bb:97:01:ef:2b:8f:60:c1:09:33:e9:00:7f:ee:
e2:a2:b5:e8:b0:f8:eb:b6:3d:ad:63:f6:6d:c4:c2:ea:c0:5e:
43:eb:32:31:65:81:be:cb:0a:5c:ff:ad:5f:7c:e1:45:81:d2:
f4:54:1e:96:24:cb:e6:80:d1:24:18:19:7c:99:6b:23:3a:11:
1a:af:93:48:7e:a6:62:63:55:67:6d:bd:bd:57:c6:ac:be:e8:
56:fc:fe:35:fc:9d:0c:da:2e:35:78:46:d5:52:dc:22:7a:f0:
36:a4:e8:2e:1f:03:65:d8:8b:b3:e0:b5:e8:8b:c0:be:d6:ec:
21:d8:2a:6d:5a:27:44:70:f5:8f:dc:34:66:d5:11:75:76:d2:
6d:de:7f:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFiu1W0f6YJCGMVEr3D5K7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjNlYjQ0M2MwNmEzZGNjMDg4ZTJjYWEwNWNlMDljZjhk
NGU3YTYwHhcNMjUwNjA2MTQwMDIyWhcNMjUwNjA3MTQwMDIyWjAzMTEwLwYDVQQD
EyhiMDdhYjJmOTY2MmJkNDdhNjkxMWFmYzgxNWYwNDBkYzlhNTVhZDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPuvbpF7Mu44dRg8Ng14n5KXnZ9e
9RcxZthpaWgaZZo/MrrU0Vngoo6ffOVH74qY0Bxm05xooyrH3Au7wBoq7ugeTylY
v5M7jBhEOt6c5f/mzAKJYwwfE/+G2GEqBhxw7fhg5vVzT5X3REO2RQa9MVOg+uLy
zJGjYtBXkGwt5dEWG86dxWiYlPX/Bs6V8GV9tPLxHBzDkcYFqhNBypenjbXwZ4LW
uQh+LWgTvgfwTVjCO3u9Kq7tp3JHg+cYxNfmeeQZ0xbrmch6LK6+HcLIFJgsxqY1
p79dUiKD61HaLmyGaW6R6czMKD34xsVyUKloAeSkmcLksDO13TIQdt82NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB6svlmK9R6aRGvyBXwQNyaVa1VMB8GA1UdIwQY
MBaAFKiz60Q8BqPcwIjiyqBc4Jz41OemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEt
MzEzZGU0ODkyYjhkLzEvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YmRhODItYTJlMS00NWM5LWExODEtMzEzZGU0ODkyYjhk
LzEvcUxQclJEd0dvOXpBaU9MS29GemduUGpVNTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwlXwFhp
wjAW3Enmmk5Rcd8FGnoXjbwrlMhAZnQ1zeZvWMKIOSUxhCNxhD7RwOlny3SYCWXl
3o9MNw9POZtGLImgnZmA3FfPAfypPNqcQ1i6XwPdCj5WepJ/thppRnDzyEi+sose
gbtaeFqac7Yq1ruXAe8rj2DBCTPpAH/u4qK16LD467Y9rWP2bcTC6sBeQ+syMWWB
vssKXP+tX3zhRYHS9FQeliTL5oDRJBgZfJlrIzoRGq+TSH6mYmNVZ229vVfGrL7o
Vvz+NfydDNouNXhG1VLcInrwNqToLh8DZdiLs+C16IvAvtbsIdgqbVonRHD1j9w0
ZtURdXbSbd5/gQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:34 2025 by rpki-client