Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: z/PlsAWM3gqNpVhTjs36vY67YCDOnQ1UqeLNm47YKhI=
Subject key identifier: EC:57:75:FA:09:ED:4F:90:9C:A5:74:5D:D7:74:15:E2:88:9F:BC:C2
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 0197414052D89CC655497C7FCB919B43E414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 047B
Signing time: Thu 05 Jun 2025 18:00:23 +0000
Manifest this update: Thu 05 Jun 2025 18:00:23 +0000
Manifest next update: Fri 06 Jun 2025 18:00:23 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: yIGcUGBbNmuhovpX579qk51ZJwM15gJjnbiyNWr0UzM=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:40:52:d8:9c:c6:55:49:7c:7f:cb:91:9b:43:e4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jun 5 18:00:23 2025 GMT
Not After : Jun 6 18:00:23 2025 GMT
Subject: CN=ec5775fa09ed4f909ca5745dd77415e2889fbcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:42:d9:6b:9a:03:72:5b:8f:05:24:61:dc:
03:bf:e6:96:13:c7:c1:e3:53:2c:ce:6a:99:fd:f9:
7f:c5:d2:a6:7e:64:4e:62:be:f9:74:a4:af:63:0c:
9b:05:56:e7:07:27:6f:06:50:80:46:a4:68:ad:d3:
b7:29:d8:7c:c3:cc:82:23:7c:10:4d:17:1f:3a:86:
d3:f0:78:50:5e:ae:35:62:ff:99:82:89:5d:fe:db:
dc:92:ff:6a:58:55:64:bf:26:7f:c4:46:2a:d6:04:
96:11:12:51:da:95:af:d3:f4:af:0e:82:6e:44:25:
7c:b4:9b:51:41:57:74:a3:95:0b:9d:66:8b:8f:48:
98:80:11:18:0a:0d:d4:e4:08:58:a4:2a:e3:a0:83:
81:d2:fe:fd:68:89:e7:07:c3:8a:8d:48:e6:33:c8:
87:b1:3b:02:60:1a:53:a2:dc:78:6c:f9:3e:47:c2:
b6:ea:58:e2:52:3f:2c:dc:97:82:1f:3d:6c:1d:ea:
9c:65:33:95:75:9c:26:f5:14:d4:91:50:9a:27:80:
c6:cf:5f:bc:0d:06:de:82:5f:ba:a2:02:5c:82:b0:
08:88:ba:11:fd:2f:39:e0:f2:8d:be:67:df:40:18:
2e:2a:2e:1d:98:a0:de:9c:e8:9f:b6:dc:1d:79:bc:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:57:75:FA:09:ED:4F:90:9C:A5:74:5D:D7:74:15:E2:88:9F:BC:C2
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:08:66:26:62:8d:4b:c4:0b:bd:6b:60:f2:6c:1e:dc:27:9f:
37:61:d1:40:2d:03:b4:a6:84:01:4e:f1:0f:ee:a1:7c:c3:04:
d3:f0:b4:87:a7:5c:4c:9b:55:9a:86:5a:da:de:26:9a:55:f8:
45:22:24:2d:e4:90:07:fe:2c:de:2a:d3:df:1a:ca:7b:1b:9f:
f5:74:a2:82:4f:78:b0:53:7f:e8:d8:41:c2:37:ef:a4:e6:10:
ac:58:fb:f4:4c:5d:37:89:2c:68:ab:58:4d:5a:a8:0a:27:8d:
34:9f:26:59:6a:da:c2:91:64:c0:39:0e:97:12:15:ce:42:74:
40:62:e2:5c:c0:3e:76:08:28:f8:d2:6f:dd:db:5e:00:13:3d:
34:af:78:f7:77:5d:6a:63:9f:88:5d:00:aa:f2:d1:15:d7:12:
9d:64:93:4c:c1:75:2f:33:b8:ec:87:fc:d8:a5:61:71:7c:32:
2f:fe:db:37:51:c3:b3:ab:26:1e:ef:81:8c:ac:00:83:81:1d:
e2:c4:7e:ba:ca:92:4f:12:2b:e6:94:46:4d:b9:83:5b:2a:db:
ca:bb:a1:18:7d:6e:5a:4e:e2:5a:26:f8:d6:f8:18:58:c9:0d:
1c:2a:75:fe:d6:86:5c:5b:b3:3a:7d:cb:40:ce:34:fa:37:93:
69:95:19:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdBQFLYnMZVSXx/y5GbQ+QUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw
MzBjOWQwHhcNMjUwNjA1MTgwMDIzWhcNMjUwNjA2MTgwMDIzWjAzMTEwLwYDVQQD
EyhlYzU3NzVmYTA5ZWQ0ZjkwOWNhNTc0NWRkNzc0MTVlMjg4OWZiY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1VC2WuaA3JbjwUkYdwDv+aWE8fB
41MszmqZ/fl/xdKmfmROYr75dKSvYwybBVbnBydvBlCARqRordO3Kdh8w8yCI3wQ
TRcfOobT8HhQXq41Yv+Zgold/tvckv9qWFVkvyZ/xEYq1gSWERJR2pWv0/SvDoJu
RCV8tJtRQVd0o5ULnWaLj0iYgBEYCg3U5AhYpCrjoIOB0v79aInnB8OKjUjmM8iH
sTsCYBpTotx4bPk+R8K26ljiUj8s3JeCHz1sHeqcZTOVdZwm9RTUkVCaJ4DGz1+8
DQbegl+6ogJcgrAIiLoR/S854PKNvmffQBguKi4dmKDenOifttwdebyBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxXdfoJ7U+QnKV0Xdd0FeKIn7zCMB8GA1UdIwQY
MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt
MjJkZDBmMzkyOGQ1LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1
LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwhmJmKN
S8QLvWtg8mwe3CefN2HRQC0DtKaEAU7xD+6hfMME0/C0h6dcTJtVmoZa2t4mmlX4
RSIkLeSQB/4s3irT3xrKexuf9XSigk94sFN/6NhBwjfvpOYQrFj79ExdN4ksaKtY
TVqoCieNNJ8mWWrawpFkwDkOlxIVzkJ0QGLiXMA+dggo+NJv3dteABM9NK9493dd
amOfiF0AqvLRFdcSnWSTTMF1LzO47If82KVhcXwyL/7bN1HDs6smHu+BjKwAg4Ed
4sR+usqSTxIr5pRGTbmDWyrbyruhGH1uWk7iWib41vgYWMkNHCp1/taGXFuzOn3L
QM40+jeTaZUZrg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 04:58:19 2025 by rpki-client