Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: h1Sp6sOaY4VJm8EwmpuzW0CHc/sjkizC4yO0cWqcCoE=
Subject key identifier: C9:66:E6:10:A7:13:37:0A:C9:23:BC:00:CC:59:C2:B7:13:33:71:29
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01974742AB5975B78A7E0D6FFBEA58B3334C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 1270
Signing time: Fri 06 Jun 2025 22:00:40 +0000
Manifest this update: Fri 06 Jun 2025 22:00:40 +0000
Manifest next update: Sat 07 Jun 2025 22:00:40 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: 8bxbEZKsNsSMeLwLGLAUSsb2J9USKl5amKBCQXMB6w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:ab:59:75:b7:8a:7e:0d:6f:fb:ea:58:b3:33:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Jun 6 22:00:40 2025 GMT
Not After : Jun 7 22:00:40 2025 GMT
Subject: CN=c966e610a713370ac923bc00cc59c2b713337129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:86:06:1f:ab:24:01:b5:7a:ee:0e:af:b0:
49:c5:76:ca:7a:78:9b:84:9e:55:7e:1e:fa:7c:fd:
2f:9b:92:fc:b8:8d:2b:dc:bb:ef:34:58:89:5f:19:
ed:31:7c:c8:16:55:1e:e9:e6:cf:cf:d6:04:0e:82:
0d:c9:46:a1:78:06:4a:7f:38:11:d6:a8:6a:63:7f:
9c:e2:dd:e5:c2:28:f3:5f:93:84:b0:fa:f8:de:42:
aa:c0:24:a8:1a:1e:9c:a6:e0:0c:6a:56:e9:d9:4f:
6a:94:d2:79:e7:de:8e:31:3b:1f:72:a7:17:20:97:
d5:89:36:3a:a5:e9:ea:ef:f6:14:f8:3f:f0:0b:0f:
1b:54:b6:b7:08:08:eb:b3:9a:89:b5:71:6f:04:d3:
f4:e5:3a:2d:f1:bb:51:1f:98:b4:41:63:07:be:b7:
bd:cb:28:32:fe:0d:fc:f2:93:b2:fb:a6:70:88:17:
0f:a8:a0:00:41:d6:b9:57:8c:f9:f2:0b:de:26:f0:
fd:8e:79:07:95:b8:3b:24:04:e8:1b:14:41:05:4a:
89:20:16:98:11:24:59:05:54:e6:7e:a5:b8:8a:5f:
b7:32:92:b3:38:83:39:3a:1f:86:95:8d:ea:83:5a:
51:97:4b:4d:71:47:04:e1:d2:7a:4b:50:34:cc:e8:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:E6:10:A7:13:37:0A:C9:23:BC:00:CC:59:C2:B7:13:33:71:29
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f2:c0:3f:0e:fa:f0:ca:64:7e:6a:7d:ab:b3:7e:99:7e:75:
bc:49:3e:0b:e8:18:f4:1f:cd:45:06:b0:37:d5:3d:80:70:92:
6a:22:da:e6:3e:3b:84:3a:58:52:e3:fe:7d:b6:45:eb:08:c0:
ef:65:12:d7:10:1c:8d:42:05:25:cf:aa:2d:ae:bc:7d:14:54:
ec:58:3e:07:f3:24:f5:3d:de:9c:d2:3c:9c:e6:d1:bd:09:ee:
d8:2b:0a:19:95:e5:c9:cd:b3:97:ca:82:d6:97:bd:1c:23:18:
37:b5:bf:34:52:3b:85:07:0f:83:2f:eb:ca:85:a3:3a:dd:ec:
2b:b9:a1:bc:da:84:12:f6:a6:52:b5:55:0e:f4:e9:31:7f:81:
c0:62:e6:db:f6:f0:da:6a:33:e5:eb:58:17:6f:b7:1b:85:55:
be:a7:3b:1a:9d:58:d6:5c:1b:dd:58:ce:67:94:6a:c0:17:02:
d9:a4:fd:95:01:63:cd:16:27:e4:15:e0:96:a9:4f:21:92:7f:
96:5e:dd:6c:7b:a1:7f:02:7c:5c:60:fd:18:60:dd:a1:c3:dd:
5b:8f:46:8a:6b:de:88:b6:63:d7:d6:2f:7e:08:cf:22:19:fa:
c0:16:d1:c5:22:26:98:5a:fc:ea:88:da:07:0f:7e:b1:26:8c:
bd:d7:a8:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQqtZdbeKfg1v++pYszNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh
MmE1ZWQwHhcNMjUwNjA2MjIwMDQwWhcNMjUwNjA3MjIwMDQwWjAzMTEwLwYDVQQD
EyhjOTY2ZTYxMGE3MTMzNzBhYzkyM2JjMDBjYzU5YzJiNzEzMzM3MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPaGBh+rJAG1eu4Or7BJxXbKenib
hJ5Vfh76fP0vm5L8uI0r3LvvNFiJXxntMXzIFlUe6ebPz9YEDoINyUaheAZKfzgR
1qhqY3+c4t3lwijzX5OEsPr43kKqwCSoGh6cpuAMalbp2U9qlNJ5596OMTsfcqcX
IJfViTY6penq7/YU+D/wCw8bVLa3CAjrs5qJtXFvBNP05Tot8btRH5i0QWMHvre9
yygy/g388pOy+6ZwiBcPqKAAQda5V4z58gveJvD9jnkHlbg7JAToGxRBBUqJIBaY
ESRZBVTmfqW4il+3MpKzOIM5Oh+GlY3qg1pRl0tNcUcE4dJ6S1A0zOgxlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlm5hCnEzcKySO8AMxZwrcTM3EpMB8GA1UdIwQY
MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt
ZWU3YmEwZTlmN2NhLzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh
LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/LAPw76
8Mpkfmp9q7N+mX51vEk+C+gY9B/NRQawN9U9gHCSaiLa5j47hDpYUuP+fbZF6wjA
72US1xAcjUIFJc+qLa68fRRU7Fg+B/Mk9T3enNI8nObRvQnu2CsKGZXlyc2zl8qC
1pe9HCMYN7W/NFI7hQcPgy/ryoWjOt3sK7mhvNqEEvamUrVVDvTpMX+BwGLm2/bw
2moz5etYF2+3G4VVvqc7Gp1Y1lwb3VjOZ5RqwBcC2aT9lQFjzRYn5BXglqlPIZJ/
ll7dbHuhfwJ8XGD9GGDdocPdW49GimveiLZj19YvfgjPIhn6wBbRxSImmFr86oja
Bw9+sSaMvdeoNA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:07 2025 by rpki-client