Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: 9iWz5TU1Z/2CXjhLOfUhI/WZkFOED4YBZs/8hqf4zLI=
Subject key identifier: B2:9C:33:E9:05:56:12:99:7F:53:B5:40:05:90:EA:AC:2A:3D:92:8E
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01974A0C9F5CBE1AE93A3F67AFA0225F2DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0757
Signing time: Sat 07 Jun 2025 11:00:30 +0000
Manifest this update: Sat 07 Jun 2025 11:00:30 +0000
Manifest next update: Sun 08 Jun 2025 11:00:30 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: g60Wpg4TNE56+/fc7rF5fgw0WftSJ+GiDohnh4Th4ao=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:9f:5c:be:1a:e9:3a:3f:67:af:a0:22:5f:2d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Jun 7 11:00:30 2025 GMT
Not After : Jun 8 11:00:30 2025 GMT
Subject: CN=b29c33e9055612997f53b5400590eaac2a3d928e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:83:6b:85:7f:ae:f6:34:1f:a2:b5:d3:b7:
b1:b0:62:d0:39:a8:05:6c:7b:e4:30:f1:4b:6a:65:
8e:b3:10:3f:05:11:29:9b:88:64:65:9d:da:47:b4:
59:1e:f0:3c:34:cd:f4:60:0e:45:4c:4b:0f:2d:cb:
94:be:60:ed:e3:f5:53:5b:8f:52:de:3f:77:0a:75:
fa:c9:32:18:da:34:d2:c0:38:37:7a:27:ac:73:1b:
53:66:4b:31:f2:e0:95:b3:d0:53:ca:bf:bd:57:96:
17:73:85:39:15:d0:68:d1:c5:dd:8f:b9:f5:2c:95:
35:9b:bf:5c:f8:af:30:bd:00:ee:26:9f:b5:ed:5b:
81:50:fb:71:fb:1f:71:bb:b4:1a:ec:50:6f:32:e8:
64:d2:22:73:cf:10:06:00:ff:71:5a:1a:c9:dd:83:
ef:8d:47:9f:cc:d8:b8:4e:b0:ec:d5:4d:da:80:0c:
01:ca:e7:31:2a:c7:74:18:5c:69:55:25:b5:ef:8f:
04:6d:16:25:da:39:b2:3c:9c:f9:ed:c9:95:18:7b:
03:a7:52:8b:d4:0d:a0:fe:a2:07:df:fd:f4:f7:59:
ef:67:cb:92:8d:5a:20:2f:2e:eb:1d:2d:3e:5d:2d:
10:37:f0:0b:09:b6:d7:07:73:0c:d6:01:10:c7:50:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:33:E9:05:56:12:99:7F:53:B5:40:05:90:EA:AC:2A:3D:92:8E
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4f:5f:3f:87:96:9a:e6:83:31:a0:3d:ce:b8:4e:54:31:fb:
e9:07:0f:ed:38:94:75:10:48:f7:af:cd:d7:e2:b1:aa:57:02:
f1:47:8b:e6:0b:2b:7e:95:05:f7:2d:73:ff:f9:3f:89:59:93:
08:a2:8f:96:f2:72:ee:ed:1c:36:c0:f0:52:46:18:82:61:d8:
e0:db:81:0c:56:88:bb:53:39:d3:42:15:7c:4d:6e:55:15:2a:
b2:dd:2d:05:be:29:fe:c0:71:26:f7:5a:1e:c4:1e:6f:99:19:
2b:c4:98:64:a9:09:0a:54:c4:47:72:d2:aa:35:81:87:83:12:
87:d5:07:33:f1:70:d4:af:cd:66:d3:07:b1:6d:52:dc:f3:ab:
85:dc:82:3b:45:3d:78:40:b5:2c:e7:dd:26:46:58:fe:6f:69:
40:29:17:35:a5:fb:cf:f6:4d:d7:44:84:62:86:86:35:8e:aa:
89:a3:c2:56:03:5b:77:fa:de:d7:4d:aa:4f:99:df:07:70:ef:
5a:08:4d:67:8f:4a:a2:c9:e0:2b:e0:aa:90:75:de:29:94:af:
dd:77:86:6f:8c:78:78:a4:7d:e6:72:50:30:aa:93:2c:c1:19:
a5:6f:61:b0:76:f6:ed:7c:74:71:f1:01:85:e0:19:79:ba:2a:
32:a3:e1:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDJ9cvhrpOj9nr6AiXy3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw
NmMxNDUwHhcNMjUwNjA3MTEwMDMwWhcNMjUwNjA4MTEwMDMwWjAzMTEwLwYDVQQD
EyhiMjljMzNlOTA1NTYxMjk5N2Y1M2I1NDAwNTkwZWFhYzJhM2Q5MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQmDa4V/rvY0H6K107exsGLQOagF
bHvkMPFLamWOsxA/BREpm4hkZZ3aR7RZHvA8NM30YA5FTEsPLcuUvmDt4/VTW49S
3j93CnX6yTIY2jTSwDg3eiescxtTZksx8uCVs9BTyr+9V5YXc4U5FdBo0cXdj7n1
LJU1m79c+K8wvQDuJp+17VuBUPtx+x9xu7Qa7FBvMuhk0iJzzxAGAP9xWhrJ3YPv
jUefzNi4TrDs1U3agAwByucxKsd0GFxpVSW1748EbRYl2jmyPJz57cmVGHsDp1KL
1A2g/qIH3/3091nvZ8uSjVogLy7rHS0+XS0QN/ALCbbXB3MM1gEQx1AdqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKcM+kFVhKZf1O1QAWQ6qwqPZKOMB8GA1UdIwQY
MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt
Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz
LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd09fP4eW
muaDMaA9zrhOVDH76QcP7TiUdRBI96/N1+KxqlcC8UeL5gsrfpUF9y1z//k/iVmT
CKKPlvJy7u0cNsDwUkYYgmHY4NuBDFaIu1M500IVfE1uVRUqst0tBb4p/sBxJvda
HsQeb5kZK8SYZKkJClTER3LSqjWBh4MSh9UHM/Fw1K/NZtMHsW1S3POrhdyCO0U9
eEC1LOfdJkZY/m9pQCkXNaX7z/ZN10SEYoaGNY6qiaPCVgNbd/re102qT5nfB3Dv
WghNZ49KosngK+CqkHXeKZSv3XeGb4x4eKR95nJQMKqTLMEZpW9hsHb27Xx0cfEB
heAZeboqMqPhvA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:59:57 2025 by rpki-client