Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: 73Rn/ULHm3rtTD9Jd5iCV7GMPLcxx5B21lHWdMHobjI=
Subject key identifier: 0F:8E:6F:55:FA:87:E6:E6:9C:58:C9:64:B5:9A:59:35:03:D7:B9:C9
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0197428A67636A107ACF0870813CC1162EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1348
Signing time: Fri 06 Jun 2025 00:00:56 +0000
Manifest this update: Fri 06 Jun 2025 00:00:56 +0000
Manifest next update: Sat 07 Jun 2025 00:00:56 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: itjm9EwfX0r0EkJdUxEiDUhFZhmThMVfDoiQluGFnJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:8a:67:63:6a:10:7a:cf:08:70:81:3c:c1:16:2e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jun 6 00:00:56 2025 GMT
Not After : Jun 7 00:00:56 2025 GMT
Subject: CN=0f8e6f55fa87e6e69c58c964b59a593503d7b9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:68:a8:37:13:75:db:0a:a4:c3:e0:f4:6b:
67:e6:43:c7:33:74:4e:94:7d:f3:17:e5:1a:ed:b8:
07:0c:82:16:45:3c:b9:71:e6:07:67:6d:0f:a6:0f:
20:fe:b6:64:c5:2b:ee:32:72:bb:ec:03:67:85:dc:
11:1c:8c:51:94:b7:99:43:c0:49:4d:6c:10:26:b6:
16:8a:59:3d:1e:b4:da:26:f5:75:8c:3b:33:0d:0e:
2f:a5:04:31:87:dc:54:94:2c:84:8b:9c:10:8f:74:
0d:45:87:b9:21:f2:54:fc:98:4d:dc:9b:ab:c7:7a:
c3:9e:16:99:47:2d:9c:3a:f3:79:95:7b:8c:ba:bf:
81:19:96:94:8f:53:9b:aa:86:02:a7:9a:a7:4c:0f:
76:78:6f:d1:63:a7:3a:6b:61:2a:17:f3:af:89:31:
4a:c0:f7:12:b5:95:1c:f4:eb:fa:5f:30:1b:74:cf:
50:e5:5c:27:e0:9b:47:ee:c8:a1:b4:db:32:57:25:
0c:dc:47:fc:f9:75:8f:86:1b:9a:63:d6:a7:4f:13:
93:7c:8b:c6:50:98:b6:43:e3:7d:b3:93:74:f1:8b:
5a:a0:a8:b8:87:33:1d:30:7f:d1:e2:c9:95:13:b3:
ef:46:46:24:1b:8b:23:a3:9f:41:2a:01:71:f7:39:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:6F:55:FA:87:E6:E6:9C:58:C9:64:B5:9A:59:35:03:D7:B9:C9
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f4:f4:9b:d9:d7:92:01:71:2d:26:c6:d1:28:19:8e:1e:5e:
0a:5e:af:ea:5b:08:ef:8d:42:0e:16:c7:e8:82:eb:2e:c8:39:
1e:81:ff:7e:a0:88:6b:00:0e:68:bf:bd:6d:0e:a9:9a:e5:b2:
46:91:7d:0f:38:a1:b6:17:f7:6b:96:68:80:72:9c:ad:b6:65:
10:4a:2e:c8:54:dc:e8:70:1c:b4:dc:1a:39:05:33:e6:5d:ea:
d0:ca:ed:f3:88:be:13:16:5e:75:15:ea:82:9f:40:71:a1:85:
fb:04:d0:f6:f5:34:5c:55:5d:a8:2b:46:ff:7a:ee:92:0d:1c:
c9:4e:67:ac:16:59:90:de:f8:cb:f0:eb:9d:c4:53:91:e4:9a:
94:63:a0:2b:c5:f0:5e:f6:2c:a0:ae:14:d3:33:3b:23:59:85:
6f:35:01:4a:6c:54:1e:f9:a9:8e:ca:84:53:01:18:33:fe:52:
ea:b1:fa:47:3e:80:e5:9c:59:47:aa:30:33:f2:aa:48:f4:d0:
8b:10:d2:a7:8b:74:e2:10:9d:8d:fc:2f:95:bb:7e:06:05:16:
a6:56:30:d3:0e:c2:fb:74:dd:5e:4a:c7:a0:e4:b4:4d:b6:da:
5f:ca:37:e8:cb:e3:ca:96:12:c7:bd:f1:c6:ac:f7:36:ee:32:
b3:3b:79:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdCimdjahB6zwhwgTzBFi79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1
MTI5MzkwHhcNMjUwNjA2MDAwMDU2WhcNMjUwNjA3MDAwMDU2WjAzMTEwLwYDVQQD
EygwZjhlNmY1NWZhODdlNmU2OWM1OGM5NjRiNTlhNTkzNTAzZDdiOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSFoqDcTddsKpMPg9Gtn5kPHM3RO
lH3zF+Ua7bgHDIIWRTy5ceYHZ20Ppg8g/rZkxSvuMnK77ANnhdwRHIxRlLeZQ8BJ
TWwQJrYWilk9HrTaJvV1jDszDQ4vpQQxh9xUlCyEi5wQj3QNRYe5IfJU/JhN3Jur
x3rDnhaZRy2cOvN5lXuMur+BGZaUj1ObqoYCp5qnTA92eG/RY6c6a2EqF/OviTFK
wPcStZUc9Ov6XzAbdM9Q5Vwn4JtH7sihtNsyVyUM3Ef8+XWPhhuaY9anTxOTfIvG
UJi2Q+N9s5N08YtaoKi4hzMdMH/R4smVE7PvRkYkG4sjo59BKgFx9zlA6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+Ob1X6h+bmnFjJZLWaWTUD17nJMB8GA1UdIwQY
MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt
ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx
LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/T0m9nX
kgFxLSbG0SgZjh5eCl6v6lsI741CDhbH6ILrLsg5HoH/fqCIawAOaL+9bQ6pmuWy
RpF9Dzihthf3a5ZogHKcrbZlEEouyFTc6HActNwaOQUz5l3q0Mrt84i+ExZedRXq
gp9AcaGF+wTQ9vU0XFVdqCtG/3rukg0cyU5nrBZZkN74y/DrncRTkeSalGOgK8Xw
XvYsoK4U0zM7I1mFbzUBSmxUHvmpjsqEUwEYM/5S6rH6Rz6A5ZxZR6owM/KqSPTQ
ixDSp4t04hCdjfwvlbt+BgUWplYw0w7C+3TdXkrHoOS0TbbaX8o36MvjypYSx73x
xqz3Nu4yszt5cg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:46:05 2025 by rpki-client