Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: KD9H3nCsLELXkhpVmpBSUEZbi5L+w1S9xS2i+w/yMKQ=
Subject key identifier: 71:FD:6F:DB:B2:D4:75:5F:B2:BA:86:21:A1:A5:8B:9D:B8:A7:23:B1
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 01974B8D972ADBA1B7ED673ED06557AC1906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 15A5
Signing time: Sat 07 Jun 2025 18:00:59 +0000
Manifest this update: Sat 07 Jun 2025 18:00:59 +0000
Manifest next update: Sun 08 Jun 2025 18:00:59 +0000
Files and hashes: 1: 4-3sIadXxw8jhxtnKxKVgNL5HSk.roa (hash: XG49j70z1M01uEIsgRHGQd7zn7Dinsd8zw03u121Tz8=)
2: 7ZMUW-4CMsR-5NsmCET4C511LYc.roa (hash: flHUU3cZdn7ebvLYAZpyrnv0Wp5Ls4L3zQ1Agou/ou8=)
3: LQ6wK8IFy4F-UbZLfDTlA9_1t1k.roa (hash: pYYrgfYcpybt5MppLbeq0XNpkLdX1IktWNqSxEFW5DQ=)
4: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: YA6mjjJh6vmXhO5gRid2q1920ETplrtoPMUqE8dwSko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:97:2a:db:a1:b7:ed:67:3e:d0:65:57:ac:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jun 7 18:00:59 2025 GMT
Not After : Jun 8 18:00:59 2025 GMT
Subject: CN=71fd6fdbb2d4755fb2ba8621a1a58b9db8a723b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:29:a2:f4:85:9b:f0:50:44:84:b0:b6:6b:
2c:65:00:47:c9:fd:8c:b9:bb:b0:39:42:04:70:8d:
ed:7e:37:0e:63:82:e0:ba:f3:ab:96:97:06:4f:bc:
98:00:51:58:63:d0:36:68:37:ba:b9:53:7e:7b:9f:
5f:19:48:12:c6:c7:e6:40:1c:3e:a3:0f:d6:87:77:
32:d1:48:9a:bd:2f:6e:da:85:0b:63:fd:40:83:41:
8c:df:3f:f5:9d:d6:5d:9c:19:57:d2:ea:14:07:5a:
7c:5d:55:f1:19:b2:8a:9b:52:f8:a2:ae:e1:9b:bc:
4a:86:3a:fc:d1:a1:bd:b1:c6:a6:72:dd:6f:a9:5b:
ef:1a:b1:d6:12:90:ad:95:2e:8e:bf:31:3b:21:36:
67:39:20:4a:d3:2f:89:04:aa:af:87:8f:af:aa:b4:
b6:2a:89:07:8b:c5:10:33:55:fc:02:0d:14:fc:68:
72:d0:52:af:74:68:04:e1:71:80:0c:76:0e:07:f4:
aa:33:ce:10:46:02:ed:45:89:14:f5:04:e1:07:0c:
d7:2a:60:a4:a3:6f:fa:bf:91:f7:d7:29:25:d3:76:
a4:c6:e3:a1:43:a6:56:40:8f:66:a6:9a:69:63:54:
92:55:0e:84:8b:e1:63:4c:df:2a:de:bb:22:49:94:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FD:6F:DB:B2:D4:75:5F:B2:BA:86:21:A1:A5:8B:9D:B8:A7:23:B1
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:74:d4:5f:a5:75:12:5b:d2:f1:95:a5:bf:1c:8e:85:8a:f8:
33:be:1b:26:74:5a:73:10:b2:97:db:85:74:03:aa:bf:c5:1c:
fb:59:14:91:02:7f:a1:d1:e9:64:ba:46:91:43:cd:5e:cd:b2:
df:7b:2e:a5:da:b8:aa:ba:a2:92:fd:4d:de:d7:d4:4e:91:e5:
b3:a1:cb:2a:9c:6f:6f:b0:9b:f0:51:02:09:49:1b:07:99:de:
44:0c:14:f1:b8:d6:57:19:ef:27:44:74:e5:07:2c:6b:40:1f:
f7:94:33:ce:23:b0:10:1d:2c:f9:b8:1a:31:98:76:8b:27:91:
68:ec:33:94:0f:e9:21:12:c5:72:3f:47:65:bb:06:be:3c:a8:
94:a5:50:a1:b2:e6:bf:54:ea:f3:39:7a:80:93:84:a8:80:43:
05:f3:2a:96:d1:58:d1:15:38:09:27:f3:7e:f8:ac:d6:ff:74:
f6:44:33:c4:49:b6:4c:15:bc:be:69:ed:59:c3:87:af:05:73:
6a:7a:6f:87:87:22:4f:03:ba:ac:6b:e5:61:6a:48:01:db:61:
38:3e:78:68:81:10:4e:86:32:9c:65:1a:b8:61:8f:01:de:f3:
b4:fc:34:f2:e2:42:c4:3d:c2:ab:94:f1:cb:e7:59:a0:9c:da:
6e:b6:d3:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjZcq26G37Wc+0GVXrBkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjUwNjA3MTgwMDU5WhcNMjUwNjA4MTgwMDU5WjAzMTEwLwYDVQQD
Eyg3MWZkNmZkYmIyZDQ3NTVmYjJiYTg2MjFhMWE1OGI5ZGI4YTcyM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIwpovSFm/BQRISwtmssZQBHyf2M
ubuwOUIEcI3tfjcOY4LguvOrlpcGT7yYAFFYY9A2aDe6uVN+e59fGUgSxsfmQBw+
ow/Wh3cy0UiavS9u2oULY/1Ag0GM3z/1ndZdnBlX0uoUB1p8XVXxGbKKm1L4oq7h
m7xKhjr80aG9scamct1vqVvvGrHWEpCtlS6OvzE7ITZnOSBK0y+JBKqvh4+vqrS2
KokHi8UQM1X8Ag0U/Ghy0FKvdGgE4XGADHYOB/SqM84QRgLtRYkU9QThBwzXKmCk
o2/6v5H31ykl03akxuOhQ6ZWQI9mppppY1SSVQ6Ei+FjTN8q3rsiSZR2qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH9b9uy1HVfsrqGIaGli524pyOxMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk
LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXTUX6V1
ElvS8ZWlvxyOhYr4M74bJnRacxCyl9uFdAOqv8Uc+1kUkQJ/odHpZLpGkUPNXs2y
33supdq4qrqikv1N3tfUTpHls6HLKpxvb7Cb8FECCUkbB5neRAwU8bjWVxnvJ0R0
5Qcsa0Af95QzziOwEB0s+bgaMZh2iyeRaOwzlA/pIRLFcj9HZbsGvjyolKVQobLm
v1Tq8zl6gJOEqIBDBfMqltFY0RU4CSfzfvis1v909kQzxEm2TBW8vmntWcOHrwVz
anpvh4ciTwO6rGvlYWpIAdthOD54aIEQToYynGUauGGPAd7ztPw08uJCxD3Cq5Tx
y+dZoJzabrbTWg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:02 2025 by rpki-client