Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: pU5PNuvc2/Jv3bO0oD5wMvUW6h1fOV+S8C8M414JBtU=
Subject key identifier: 2C:54:D8:6B:08:D6:75:6A:B6:53:2A:F2:72:57:A9:A0:3F:BF:FD:03
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01974779E255CC92B6879C0E0B4BB0FD1819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 10AA
Signing time: Fri 06 Jun 2025 23:00:59 +0000
Manifest this update: Fri 06 Jun 2025 23:00:59 +0000
Manifest next update: Sat 07 Jun 2025 23:00:59 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: wqvLxsIf2JvA76Wm9EleWcEgLyCeTzWpW3zmsomRFTM=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e2:55:cc:92:b6:87:9c:0e:0b:4b:b0:fd:18:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jun 6 23:00:59 2025 GMT
Not After : Jun 7 23:00:59 2025 GMT
Subject: CN=2c54d86b08d6756ab6532af27257a9a03fbffd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:37:45:cd:78:af:e8:1b:80:0a:bf:83:54:
5f:6e:9b:c6:8e:d3:42:ac:ca:85:e3:4b:ed:31:54:
82:a2:e4:4a:ba:5d:a6:f0:2b:8f:91:b2:42:8c:45:
b3:65:65:c5:78:92:60:81:fd:df:44:f0:14:60:bc:
32:33:72:f3:dc:b9:c8:1b:6f:14:94:45:ee:9e:b8:
cc:d8:bd:86:5f:6f:26:6c:a2:25:1e:4f:b6:51:b8:
8d:ec:4b:26:3f:98:1c:85:1d:f3:45:36:2b:8f:a3:
7e:3f:85:6a:04:1e:52:71:c5:8c:e2:df:61:ad:f8:
ad:61:e5:e5:14:e6:bd:3d:b4:93:fc:bf:0b:09:3e:
d6:23:39:dc:18:62:ab:22:10:1a:11:89:49:03:f2:
89:bc:79:6a:fa:cd:85:4a:bd:d0:28:f6:a8:b8:db:
e1:29:b5:ac:72:d4:99:49:f9:98:6a:8e:c6:65:8a:
8d:09:b2:b7:03:0c:3f:fd:cf:84:9c:50:37:fa:bd:
cb:41:24:30:e7:2c:f6:24:7d:1a:c5:a5:9a:3d:07:
d0:14:9b:df:49:5f:89:77:05:01:09:bc:63:32:1f:
95:5b:36:20:7d:a8:a1:14:fc:4d:ed:5f:8c:ac:4c:
92:ee:6a:24:1a:11:5f:d6:db:2e:4c:06:37:9f:91:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:54:D8:6B:08:D6:75:6A:B6:53:2A:F2:72:57:A9:A0:3F:BF:FD:03
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f3:4a:6f:1b:80:0c:fe:60:78:d7:05:f3:cd:61:0f:d1:b9:
9e:53:77:28:49:2b:0f:9c:24:45:00:0b:40:d8:0d:90:04:c5:
b5:c6:8a:75:c2:6d:ce:37:aa:4e:66:da:c1:3b:6c:bb:5d:4e:
7a:11:06:06:20:c1:95:2e:fd:19:3b:14:aa:0f:80:b3:f4:95:
c5:b3:42:4f:a7:63:3d:57:50:c0:c7:0f:2e:5d:86:98:99:11:
7d:8b:90:81:30:54:e7:3b:34:d4:4f:b2:c4:2f:65:27:8a:a3:
85:04:53:7e:ae:f5:19:3a:34:b8:83:a7:62:3e:b3:16:f6:d2:
c3:ce:57:2a:27:f7:e5:9d:49:d7:ca:8c:7b:84:c2:23:a2:cd:
9a:92:f7:eb:2e:89:1f:8e:69:bd:c6:38:3b:58:04:9e:e7:68:
24:70:73:c3:a8:47:80:8f:ad:0d:a6:d5:ee:ae:f5:0c:8d:8d:
cb:d2:73:02:e1:45:b4:2b:24:b1:ad:15:d2:37:1a:bf:43:f7:
b8:92:1f:f7:ae:1b:bb:68:73:4d:c5:30:b4:07:e2:12:dd:d8:
a7:23:bd:bb:ec:75:d5:54:9b:9b:34:3e:e9:cb:cd:69:55:07:
d6:90:d8:1a:66:5e:f3:9b:a4:33:6b:fd:5a:95:18:a3:4f:23:
68:db:db:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeeJVzJK2h5wOC0uw/RgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk
OWNmYmUwHhcNMjUwNjA2MjMwMDU5WhcNMjUwNjA3MjMwMDU5WjAzMTEwLwYDVQQD
EygyYzU0ZDg2YjA4ZDY3NTZhYjY1MzJhZjI3MjU3YTlhMDNmYmZmZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorE3Rc14r+gbgAq/g1RfbpvGjtNC
rMqF40vtMVSCouRKul2m8CuPkbJCjEWzZWXFeJJggf3fRPAUYLwyM3Lz3LnIG28U
lEXunrjM2L2GX28mbKIlHk+2UbiN7EsmP5gchR3zRTYrj6N+P4VqBB5SccWM4t9h
rfitYeXlFOa9PbST/L8LCT7WIzncGGKrIhAaEYlJA/KJvHlq+s2FSr3QKPaouNvh
KbWsctSZSfmYao7GZYqNCbK3Aww//c+EnFA3+r3LQSQw5yz2JH0axaWaPQfQFJvf
SV+JdwUBCbxjMh+VWzYgfaihFPxN7V+MrEyS7mokGhFf1tsuTAY3n5HS7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxU2GsI1nVqtlMq8nJXqaA/v/0DMB8GA1UdIwQY
MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt
Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz
LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPNKbxuA
DP5geNcF881hD9G5nlN3KEkrD5wkRQALQNgNkATFtcaKdcJtzjeqTmbawTtsu11O
ehEGBiDBlS79GTsUqg+As/SVxbNCT6djPVdQwMcPLl2GmJkRfYuQgTBU5zs01E+y
xC9lJ4qjhQRTfq71GTo0uIOnYj6zFvbSw85XKif35Z1J18qMe4TCI6LNmpL36y6J
H45pvcY4O1gEnudoJHBzw6hHgI+tDabV7q71DI2Ny9JzAuFFtCsksa0V0jcav0P3
uJIf964bu2hzTcUwtAfiEt3YpyO9u+x11VSbmzQ+6cvNaVUH1pDYGmZe85ukM2v9
WpUYo08jaNvbtw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:27 2025 by rpki-client