Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier: 5t1QazysNR0eCm8vFYlRGx2lIVFGs2xmbz3ZOz9QkAo=
Subject key identifier: E6:34:5D:86:87:EA:E3:3D:3D:00:F9:BA:CE:39:FC:0A:D6:96:C0:BC
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 0197496806BB4805B53E548D02C3FB7D3CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number: 0D2C
Signing time: Sat 07 Jun 2025 08:00:43 +0000
Manifest this update: Sat 07 Jun 2025 08:00:43 +0000
Manifest next update: Sun 08 Jun 2025 08:00:43 +0000
Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: CfNp1aEJGHruNWQjiqVexpEc5t8AlTIhvegtPj7iRjs=)
2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:06:bb:48:05:b5:3e:54:8d:02:c3:fb:7d:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Jun 7 08:00:43 2025 GMT
Not After : Jun 8 08:00:43 2025 GMT
Subject: CN=e6345d8687eae33d3d00f9bace39fc0ad696c0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:2e:7e:e0:b5:29:2b:c7:c9:cc:c6:6b:64:
b3:f7:eb:7e:33:61:1c:e8:77:32:87:7e:72:56:16:
20:70:8e:81:57:3f:bb:4a:9c:45:e3:e7:ff:00:42:
9c:14:6f:1c:6d:3b:59:7f:bc:f4:b3:af:67:82:ee:
f0:8b:a5:5c:da:d4:d5:e4:b7:f9:db:67:c9:a3:98:
40:53:6e:b5:04:29:72:00:e7:a7:63:42:07:7d:76:
a7:3a:93:db:2f:89:40:5d:2d:ce:93:3e:fb:0f:91:
1b:c9:c1:96:12:81:ed:58:df:f6:18:50:a8:dd:61:
28:c7:fa:55:f6:b2:f5:ef:db:63:a4:91:32:cc:2a:
83:5f:77:36:fb:03:5f:d4:a8:f1:b6:71:b5:24:b9:
65:bb:61:d3:ee:7e:f1:bc:98:02:3e:90:93:91:5a:
16:26:ba:c6:dc:61:ef:ec:04:85:a0:bc:07:55:da:
45:92:5d:eb:18:b5:ff:99:b1:fa:ec:70:20:3e:cb:
39:a8:b2:3b:2f:a4:70:a4:35:1f:f5:cc:56:d5:39:
77:fd:0d:62:fa:79:fc:69:6a:93:68:b4:a2:00:88:
45:95:cb:70:0c:a7:c3:84:c2:d8:63:3d:d0:6b:09:
2c:6e:fe:b6:27:72:2a:87:21:ae:ca:eb:f5:d6:ac:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:34:5D:86:87:EA:E3:3D:3D:00:F9:BA:CE:39:FC:0A:D6:96:C0:BC
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f1:be:0e:ba:66:bc:3e:c1:2f:06:20:dd:5b:af:89:07:b7:
62:58:0b:36:fe:e5:b5:32:67:9e:c0:e3:32:86:79:11:f1:08:
f5:28:16:03:7f:1b:d0:ff:2c:f9:6f:4e:99:78:ea:8b:8e:2b:
4e:bb:24:08:db:7f:c7:56:73:65:18:2f:b9:6c:93:c0:02:53:
77:cb:44:e6:59:34:4a:c1:55:38:0f:33:9f:d3:08:e1:9e:c9:
ed:1c:4b:4a:3d:8a:0b:9f:86:34:2b:37:e4:13:ee:25:6a:b3:
65:26:fd:44:c3:c2:a5:f1:6d:51:25:64:14:3a:e6:81:06:a5:
79:16:a5:8e:7c:f0:48:85:88:66:c0:4c:94:e5:ab:85:15:4e:
ff:93:9d:3e:fb:7e:a2:bf:d3:31:77:2f:22:e7:f2:02:91:29:
03:34:ff:49:59:14:23:ef:70:38:d2:a7:33:d9:16:4d:64:22:
7a:8e:00:b8:a1:72:47:13:bf:33:f5:5a:44:86:8d:d4:0e:52:
df:c1:38:a0:df:4d:11:87:78:07:47:1f:c1:e7:8b:fa:df:09:
9c:a2:7c:f4:fd:91:84:ce:a8:25:a1:95:7c:2e:c9:5a:61:18:
81:18:ba:38:74:41:5e:8a:a9:60:63:fc:d1:10:7e:08:6f:35:
34:4d:bb:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaAa7SAW1PlSNAsP7fTy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYjg4ZmYxZWRmYjY3MjA2NjAzMDI2NzcxYWFhZWM4NGI4
YjFlYjgwHhcNMjUwNjA3MDgwMDQzWhcNMjUwNjA4MDgwMDQzWjAzMTEwLwYDVQQD
EyhlNjM0NWQ4Njg3ZWFlMzNkM2QwMGY5YmFjZTM5ZmMwYWQ2OTZjMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPwufuC1KSvHyczGa2Sz9+t+M2Ec
6Hcyh35yVhYgcI6BVz+7SpxF4+f/AEKcFG8cbTtZf7z0s69ngu7wi6Vc2tTV5Lf5
22fJo5hAU261BClyAOenY0IHfXanOpPbL4lAXS3Okz77D5EbycGWEoHtWN/2GFCo
3WEox/pV9rL179tjpJEyzCqDX3c2+wNf1KjxtnG1JLllu2HT7n7xvJgCPpCTkVoW
JrrG3GHv7ASFoLwHVdpFkl3rGLX/mbH67HAgPss5qLI7L6RwpDUf9cxW1Tl3/Q1i
+nn8aWqTaLSiAIhFlctwDKfDhMLYYz3Qawksbv62J3IqhyGuyuv11qy4OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY0XYaH6uM9PQD5us45/ArWlsC8MB8GA1UdIwQY
MBaAFEO4j/Ht+2cgZgMCZ3GqrshLix64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQt
YzFiZTVkYzAxYmJlLzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQtYzFiZTVkYzAxYmJl
LzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfG+Drpm
vD7BLwYg3VuviQe3YlgLNv7ltTJnnsDjMoZ5EfEI9SgWA38b0P8s+W9OmXjqi44r
TrskCNt/x1ZzZRgvuWyTwAJTd8tE5lk0SsFVOA8zn9MI4Z7J7RxLSj2KC5+GNCs3
5BPuJWqzZSb9RMPCpfFtUSVkFDrmgQaleRaljnzwSIWIZsBMlOWrhRVO/5OdPvt+
or/TMXcvIufyApEpAzT/SVkUI+9wONKnM9kWTWQieo4AuKFyRxO/M/VaRIaN1A5S
38E4oN9NEYd4B0cfweeL+t8JnKJ89P2RhM6oJaGVfC7JWmEYgRi6OHRBXoqpYGP8
0RB+CG81NE27Gg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:23:15 2025 by rpki-client