
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: 3eLZiGMYguWcurPNZBNOmqf7tNnfDWyH3BzQ+wO5rzk=
Subject key identifier: B4:07:58:75:F8:B8:2C:6D:C9:D0:5A:0D:7F:D7:5D:B3:50:0B:BE:8D
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 0197507CD10CCA38AC916C514BF468E1966B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 17:00:46 +0000
Manifest this update: Sun 08 Jun 2025 17:00:46 +0000
Manifest next update: Mon 09 Jun 2025 17:00:46 +0000
Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: n3+qbO7ibqpxyhDLcMxpLxAbyFotXcyTYAjZrg4QOhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:d1:0c:ca:38:ac:91:6c:51:4b:f4:68:e1:96:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Jun 8 17:00:46 2025 GMT
Not After : Jun 9 17:00:46 2025 GMT
Subject: CN=b4075875f8b82c6dc9d05a0d7fd75db3500bbe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:c7:76:9a:1a:de:77:db:70:1f:ed:27:36:
5d:47:55:13:d8:7b:f7:86:e4:39:80:a3:3c:66:40:
f3:43:e7:74:9b:4d:f3:a0:59:5f:22:8b:4b:b2:6a:
aa:32:f3:7c:1f:56:66:43:a4:c0:34:31:db:5f:93:
cb:b3:d9:7c:f8:fb:09:65:8d:98:d0:bd:b4:04:78:
ea:a4:bc:48:a3:58:8f:3d:bb:2b:68:71:6e:16:1d:
13:65:16:18:c4:35:a3:92:39:a9:c6:7d:df:53:1c:
15:3e:d7:29:b1:28:81:d3:99:ac:f0:ce:ec:b1:27:
0c:76:7c:cb:7d:ab:da:d5:06:3f:1b:66:8e:05:5f:
64:ba:ef:de:31:a5:5a:6a:ed:e8:34:70:7b:b4:37:
84:ed:2b:cf:d8:c3:54:6b:ca:5e:4f:be:9d:01:74:
4d:35:0a:59:e6:05:73:b8:3f:b5:46:39:20:c2:46:
0f:b2:f0:9d:6a:fa:94:28:05:98:43:04:d9:bd:fd:
4d:73:6d:46:57:63:49:18:45:de:fc:a2:4a:db:50:
d3:cf:c5:57:1b:f5:c1:48:f2:04:a2:71:f4:e6:a4:
5f:62:fb:b7:9b:9c:13:b7:02:1b:47:e5:6a:1f:f8:
cd:d7:d4:87:bf:f6:1e:a7:b2:c8:71:84:37:c5:86:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:58:75:F8:B8:2C:6D:C9:D0:5A:0D:7F:D7:5D:B3:50:0B:BE:8D
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4f:89:8c:cf:1c:13:d9:96:f4:89:be:13:bf:f5:a0:cf:1a:
04:a3:84:5c:07:8f:36:4a:f6:c5:8c:52:20:3a:ff:24:ad:13:
a4:7b:00:d7:6d:15:d0:1e:18:fd:a2:b2:33:33:fd:35:5d:34:
76:38:8b:e5:ab:1e:d3:2e:4e:26:0e:50:8d:46:15:74:f1:cd:
ec:1e:42:f5:bc:8c:c7:08:64:ab:72:0b:b2:42:0e:3f:94:fc:
5c:59:f1:cf:39:1d:89:12:d9:84:a3:1a:17:ff:45:a3:35:f4:
1e:c5:a3:18:70:87:67:40:d8:72:71:4f:5a:46:c9:2f:eb:44:
62:3e:f6:34:d2:c4:38:c2:c9:30:f3:70:a8:7c:c0:eb:bf:20:
d2:0e:17:e5:4d:f1:4e:c5:7b:a1:4c:0d:56:a8:3d:11:6b:60:
f2:ae:c9:c4:f9:df:58:6f:56:e2:b3:86:ba:9b:23:2d:9d:c1:
72:0e:e7:c3:c1:1e:12:12:a0:52:41:36:73:02:e5:c6:f5:5b:
d5:71:b3:b6:48:60:17:a0:7c:bc:25:8c:d4:05:d8:53:f8:88:
03:c1:18:e0:b2:11:ca:13:39:13:a6:0a:2d:81:18:83:7c:3b:
77:26:57:56:43:0c:63:ea:de:4f:a6:10:0b:d0:ca:d9:a1:6e:
d7:9f:ce:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfNEMyjiskWxRS/Ro4ZZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzJkZTgyMGUwMmYzYzNmODZlNWI4YzljNDlkZGM0OTMy
NTEyM2YwHhcNMjUwNjA4MTcwMDQ2WhcNMjUwNjA5MTcwMDQ2WjAzMTEwLwYDVQQD
EyhiNDA3NTg3NWY4YjgyYzZkYzlkMDVhMGQ3ZmQ3NWRiMzUwMGJiZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3/Hdpoa3nfbcB/tJzZdR1UT2Hv3
huQ5gKM8ZkDzQ+d0m03zoFlfIotLsmqqMvN8H1ZmQ6TANDHbX5PLs9l8+PsJZY2Y
0L20BHjqpLxIo1iPPbsraHFuFh0TZRYYxDWjkjmpxn3fUxwVPtcpsSiB05ms8M7s
sScMdnzLfava1QY/G2aOBV9kuu/eMaVaau3oNHB7tDeE7SvP2MNUa8peT76dAXRN
NQpZ5gVzuD+1RjkgwkYPsvCdavqUKAWYQwTZvf1Nc21GV2NJGEXe/KJK21DTz8VX
G/XBSPIEonH05qRfYvu3m5wTtwIbR+VqH/jN19SHv/Yep7LIcYQ3xYZlxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQHWHX4uCxtydBaDX/XXbNQC76NMB8GA1UdIwQY
MBaAFKvC3oIOAvPD+G5bjJxJ3cSTJRI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYt
ODk3ODMzMTdlYTI5LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYtODk3ODMzMTdlYTI5
LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE+JjM8c
E9mW9Im+E7/1oM8aBKOEXAePNkr2xYxSIDr/JK0TpHsA120V0B4Y/aKyMzP9NV00
djiL5ase0y5OJg5QjUYVdPHN7B5C9byMxwhkq3ILskIOP5T8XFnxzzkdiRLZhKMa
F/9FozX0HsWjGHCHZ0DYcnFPWkbJL+tEYj72NNLEOMLJMPNwqHzA678g0g4X5U3x
TsV7oUwNVqg9EWtg8q7JxPnfWG9W4rOGupsjLZ3Bcg7nw8EeEhKgUkE2cwLlxvVb
1XGztkhgF6B8vCWM1AXYU/iIA8EY4LIRyhM5E6YKLYEYg3w7dyZXVkMMY+reT6YQ
C9DK2aFu15/OfQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 03:29:59 2025 by rpki-client