Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: MTxSeQsG6P6sxxhazcDSpyvCd0xQ1tQ5CsdSFEVmtVM=
Subject key identifier: C6:58:C0:1F:16:82:20:17:A8:D8:22:81:DC:21:E8:53:60:B0:4A:74
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 019749D5CE00E3C7383982089328AB6032C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 151D
Signing time: Sat 07 Jun 2025 10:00:37 +0000
Manifest this update: Sat 07 Jun 2025 10:00:37 +0000
Manifest next update: Sun 08 Jun 2025 10:00:37 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: 7lPuUx2lwatYeWp2sbwQ5PU3XbxWg0CJtH+XBJskUJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ce:00:e3:c7:38:39:82:08:93:28:ab:60:32:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Jun 7 10:00:37 2025 GMT
Not After : Jun 8 10:00:37 2025 GMT
Subject: CN=c658c01f16822017a8d82281dc21e85360b04a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:07:6f:4c:27:51:8b:e1:e8:49:77:37:71:
63:a7:06:f8:a8:37:41:38:94:11:47:f1:3b:1d:13:
14:29:89:82:9c:7e:5d:12:02:8f:be:7b:83:f8:d6:
d7:40:5c:8b:0d:86:ae:b0:60:36:0e:b1:8a:a5:1a:
ed:11:af:28:67:de:9e:f8:c9:7a:db:a8:77:3f:5e:
6c:f2:bc:1c:4a:8d:1b:b4:12:b3:05:6c:28:ec:bf:
a4:5a:4d:61:c4:fd:43:74:fb:40:a5:db:b9:7d:36:
b0:a7:b0:6b:af:af:8f:fd:5c:e4:ff:1e:05:72:38:
e9:d1:b6:6c:eb:6d:9a:61:f7:81:84:ac:9b:68:3b:
4e:bb:17:c1:28:50:38:9f:30:f1:d7:48:32:be:9c:
c1:d0:e9:45:34:26:02:d8:03:1e:7f:86:88:c2:89:
00:f2:f3:16:89:e4:21:a9:d1:38:f2:6e:b7:ba:b7:
0d:46:d9:71:3a:91:08:43:b7:07:d1:6f:f8:3b:3a:
78:ca:3d:0d:4a:c1:4b:54:6b:ef:11:e7:1b:23:44:
89:bb:32:79:cc:41:af:ab:4d:91:52:8c:ed:e5:dc:
f9:88:3e:2f:9e:e2:ed:42:13:b8:c3:0b:ee:f7:34:
dc:6c:04:57:6d:4e:73:b3:5e:fe:91:bc:29:71:6f:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:58:C0:1F:16:82:20:17:A8:D8:22:81:DC:21:E8:53:60:B0:4A:74
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1c:0f:6c:2e:9a:1d:92:40:51:8c:e7:b4:ef:38:ec:ce:e7:
4f:bc:11:4d:69:85:c9:43:44:f2:7f:18:1e:84:ad:20:ea:40:
7f:be:c8:d5:5b:4d:cf:e2:42:1f:cf:7d:5b:cd:71:a5:c4:7d:
91:c1:26:83:33:50:aa:d1:b1:49:e2:ad:32:0d:3d:ad:6c:c3:
d3:13:ab:b8:48:03:74:89:94:e2:99:ee:7d:b6:aa:85:64:31:
e9:f4:aa:99:fb:13:0c:c2:c8:90:81:9d:fa:72:2a:e0:5e:7b:
bd:e4:1e:0f:42:9b:55:39:6a:b3:46:02:db:91:b7:3b:38:99:
63:e9:eb:69:3f:a6:a4:c2:92:e2:44:03:9c:2d:cb:1c:ec:fe:
a0:23:01:e6:fc:e4:a3:21:f5:9a:ea:e2:6f:c7:01:b3:66:0e:
02:12:12:d1:55:b9:f5:10:66:27:ef:1f:92:1b:d5:89:bb:a6:
cc:3d:fc:ae:60:3c:a7:bd:bd:41:89:54:b2:ec:aa:a2:ac:45:
62:ba:e7:d6:24:6c:ac:69:fd:5f:5b:ba:15:c6:4b:2f:81:7f:
2e:de:f4:38:8c:82:94:e8:25:90:37:c4:93:af:24:e5:c3:94:
18:9a:66:f0:e0:29:bf:44:75:c7:cb:ec:bd:02:c3:62:d4:79:
d7:75:f6:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1c4A48c4OYIIkyirYDLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz
N2EwYzYwHhcNMjUwNjA3MTAwMDM3WhcNMjUwNjA4MTAwMDM3WjAzMTEwLwYDVQQD
EyhjNjU4YzAxZjE2ODIyMDE3YThkODIyODFkYzIxZTg1MzYwYjA0YTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB0Hb0wnUYvh6El3N3Fjpwb4qDdB
OJQRR/E7HRMUKYmCnH5dEgKPvnuD+NbXQFyLDYausGA2DrGKpRrtEa8oZ96e+Ml6
26h3P15s8rwcSo0btBKzBWwo7L+kWk1hxP1DdPtApdu5fTawp7Brr6+P/Vzk/x4F
cjjp0bZs622aYfeBhKybaDtOuxfBKFA4nzDx10gyvpzB0OlFNCYC2AMef4aIwokA
8vMWieQhqdE48m63urcNRtlxOpEIQ7cH0W/4Ozp4yj0NSsFLVGvvEecbI0SJuzJ5
zEGvq02RUozt5dz5iD4vnuLtQhO4wwvu9zTcbARXbU5zs17+kbwpcW8z2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZYwB8WgiAXqNgigdwh6FNgsEp0MB8GA1UdIwQY
MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt
OGI0NzkzZjkwZjE1LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1
LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRwPbC6a
HZJAUYzntO847M7nT7wRTWmFyUNE8n8YHoStIOpAf77I1VtNz+JCH899W81xpcR9
kcEmgzNQqtGxSeKtMg09rWzD0xOruEgDdImU4pnufbaqhWQx6fSqmfsTDMLIkIGd
+nIq4F57veQeD0KbVTlqs0YC25G3OziZY+nraT+mpMKS4kQDnC3LHOz+oCMB5vzk
oyH1murib8cBs2YOAhIS0VW59RBmJ+8fkhvVibumzD38rmA8p729QYlUsuyqoqxF
Yrrn1iRsrGn9X1u6FcZLL4F/Lt70OIyClOglkDfEk68k5cOUGJpm8OApv0R1x8vs
vQLDYtR513X2HQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:45 2025 by rpki-client