
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: 6TwEneDXR2FxH9S05PZexDG7Z60VkOC0xIqIw3Ds9d4=
Subject key identifier: 34:C8:3F:1D:7E:6D:12:E1:EB:06:15:70:7B:B2:08:2E:6C:B0:1B:EB
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 01974CD6E7C85C7AEEB5BABC1DC181D7240A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 00:00:41 +0000
Manifest this update: Sun 08 Jun 2025 00:00:41 +0000
Manifest next update: Mon 09 Jun 2025 00:00:41 +0000
Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: k+1hA7K+Rh8INZJ4VAdYSYNtN3Dt2X8MEIMdS9oDlDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:e7:c8:5c:7a:ee:b5:ba:bc:1d:c1:81:d7:24:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Jun 8 00:00:41 2025 GMT
Not After : Jun 9 00:00:41 2025 GMT
Subject: CN=34c83f1d7e6d12e1eb0615707bb2082e6cb01beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ec:36:e4:9c:8c:e7:db:58:cf:9c:34:72:71:
aa:b5:74:22:08:42:fa:84:e7:71:6d:b5:97:e5:07:
f7:07:70:6b:4c:79:8f:73:99:3f:35:25:6d:37:1b:
e7:79:5e:e4:6a:25:9f:3a:cc:38:04:b9:8f:4f:e0:
62:f6:a2:46:7b:7c:00:b5:fb:52:3d:d5:4e:c5:70:
3b:8b:74:1d:b9:70:ca:f9:a0:ca:c7:60:63:18:97:
f5:a3:43:9a:70:96:42:e1:d5:49:e3:e9:6d:00:90:
92:68:11:e5:d3:20:68:66:f7:00:62:3e:25:79:eb:
8f:5d:ff:6c:ea:4e:9c:3a:34:e7:3b:f7:45:64:23:
5d:a3:fc:dd:13:03:a5:db:42:cd:36:c6:16:a7:76:
09:e5:b0:75:2c:03:ca:f7:4c:95:ef:fe:d3:9a:4e:
f4:bc:75:83:0b:6f:f3:1b:00:1a:45:24:11:9e:12:
41:46:d7:81:f0:ff:25:6d:21:30:09:be:01:fb:1a:
8e:da:23:11:83:aa:c5:77:fb:ef:46:04:01:ad:83:
5d:1f:f4:1d:11:9a:50:22:c0:17:8d:1f:a0:6f:8c:
36:5a:35:3a:34:68:4e:38:54:57:29:87:de:e3:3a:
af:c4:37:27:5a:14:94:a7:06:80:39:a4:0a:05:a8:
2f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:3F:1D:7E:6D:12:E1:EB:06:15:70:7B:B2:08:2E:6C:B0:1B:EB
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:93:1a:72:a8:45:88:72:9d:ee:93:ce:27:b6:3c:5b:53:
d8:bc:b8:21:35:a5:8e:32:ec:12:86:12:20:7e:0a:de:08:b7:
21:5a:54:5f:d7:2d:44:9e:77:8f:70:01:26:f6:27:81:97:39:
df:60:bb:32:91:be:38:43:fb:8d:d3:ed:df:e9:8c:82:c8:4f:
ed:15:98:61:96:23:75:21:42:91:e6:57:7d:ad:97:86:d4:2d:
70:1c:29:1d:fc:27:44:27:f6:07:f6:39:9f:05:d1:b3:8c:62:
ea:04:42:d3:10:f6:da:71:3b:41:60:6c:e5:7a:2c:e2:81:73:
69:c8:87:fe:f7:6e:a7:73:1a:3e:6e:f6:b8:68:13:b0:0c:bc:
06:30:9d:af:37:7c:b9:7b:aa:18:4c:e0:a2:d5:f9:2f:ab:47:
cd:01:29:29:48:08:57:c2:ef:67:f2:38:9e:18:23:5a:28:b2:
fd:97:12:bb:69:e8:4a:35:e0:bf:0c:17:0f:f4:59:6b:59:01:
b2:72:1a:2d:2d:5a:08:f2:ec:bb:9a:3b:52:fd:41:63:e8:c2:
bd:1b:ff:77:a0:29:eb:24:06:85:e6:97:6b:e9:1e:f8:41:2f:
f6:8b:43:34:93:dd:7b:27:02:8b:05:40:8e:e5:a0:27:35:42:
4f:05:96:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1ufIXHrutbq8HcGB1yQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4
OThlY2IwHhcNMjUwNjA4MDAwMDQxWhcNMjUwNjA5MDAwMDQxWjAzMTEwLwYDVQQD
EygzNGM4M2YxZDdlNmQxMmUxZWIwNjE1NzA3YmIyMDgyZTZjYjAxYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+w25JyM59tYz5w0cnGqtXQiCEL6
hOdxbbWX5Qf3B3BrTHmPc5k/NSVtNxvneV7kaiWfOsw4BLmPT+Bi9qJGe3wAtftS
PdVOxXA7i3QduXDK+aDKx2BjGJf1o0OacJZC4dVJ4+ltAJCSaBHl0yBoZvcAYj4l
eeuPXf9s6k6cOjTnO/dFZCNdo/zdEwOl20LNNsYWp3YJ5bB1LAPK90yV7/7Tmk70
vHWDC2/zGwAaRSQRnhJBRteB8P8lbSEwCb4B+xqO2iMRg6rFd/vvRgQBrYNdH/Qd
EZpQIsAXjR+gb4w2WjU6NGhOOFRXKYfe4zqvxDcnWhSUpwaAOaQKBagv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTIPx1+bRLh6wYVcHuyCC5ssBvrMB8GA1UdIwQY
MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt
MzFkMjQ1ZjNiM2I4LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4
LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi+TGnKo
RYhyne6Tzie2PFtT2Ly4ITWljjLsEoYSIH4K3gi3IVpUX9ctRJ53j3ABJvYngZc5
32C7MpG+OEP7jdPt3+mMgshP7RWYYZYjdSFCkeZXfa2XhtQtcBwpHfwnRCf2B/Y5
nwXRs4xi6gRC0xD22nE7QWBs5Xos4oFzaciH/vdup3MaPm72uGgTsAy8BjCdrzd8
uXuqGEzgotX5L6tHzQEpKUgIV8LvZ/I4nhgjWiiy/ZcSu2noSjXgvwwXD/RZa1kB
snIaLS1aCPLsu5o7Uv1BY+jCvRv/d6Ap6yQGheaXa+ke+EEv9otDNJPdeycCiwVA
juWgJzVCTwWWyQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:56:08 2025 by rpki-client