Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File: q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier: g1tn8/qZjf4q7PqHz5xpG71W9ccJXNazMXf5A2yGo+E=
Subject key identifier: 48:7F:E4:A5:13:E3:21:38:B0:72:E7:6E:23:DB:6E:B4:EF:8D:0E:36
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer: /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial: 019749313BF5082D21BECDABB795395E4EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 07:00:52 +0000
Manifest this update: Sat 07 Jun 2025 07:00:52 +0000
Manifest next update: Sun 08 Jun 2025 07:00:52 +0000
Files and hashes: 1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: PbC8ErZUtp+mW6rRaoRjwiL4TNhne6rfi58W92Nj6PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3b:f5:08:2d:21:be:cd:ab:b7:95:39:5e:4e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Validity
Not Before: Jun 7 07:00:52 2025 GMT
Not After : Jun 8 07:00:52 2025 GMT
Subject: CN=487fe4a513e32138b072e76e23db6eb4ef8d0e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:84:f2:e3:ef:d9:3a:f6:31:fc:c6:0d:af:
2f:2e:7c:80:f1:3d:0c:89:be:68:26:ea:eb:10:aa:
e1:87:7e:dc:3d:d9:be:8c:0e:3c:e4:57:59:dd:6b:
6f:4d:03:5a:23:c9:5a:27:c1:25:cf:61:87:d8:12:
e4:13:71:ae:e4:77:1b:55:5b:54:69:17:4b:55:fa:
46:4a:8e:df:bd:91:98:0a:d4:f8:57:5d:0c:6c:cc:
3f:02:11:cc:e1:58:20:b3:0d:b4:ce:54:3f:a8:3b:
8e:e3:28:c1:a5:08:1e:41:d9:a6:56:50:43:37:30:
07:76:c5:70:15:02:5a:a2:69:34:4f:51:97:a6:41:
15:e0:d6:5d:c6:11:6b:c4:1d:da:5d:e7:67:8f:4b:
a9:b1:f6:e6:91:87:80:a3:02:25:b9:e6:e2:45:1b:
2d:be:4a:36:10:a7:d0:5b:07:ff:d2:bc:da:63:78:
67:e8:ba:ac:83:d6:d1:d2:bc:69:19:8a:27:83:68:
84:1e:ef:7a:79:28:08:3c:0a:d4:8b:e8:88:da:99:
db:81:78:83:61:2e:c1:dc:c9:a3:d7:46:1a:ec:cd:
8a:ea:8c:fc:1c:cb:3f:c3:9f:0a:d8:f2:67:95:90:
15:df:f8:e8:08:00:21:ed:0a:3f:d1:17:91:07:ac:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7F:E4:A5:13:E3:21:38:B0:72:E7:6E:23:DB:6E:B4:EF:8D:0E:36
X509v3 Authority Key Identifier:
keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:89:59:f5:3c:18:f9:b8:d3:1b:d4:40:e2:7c:a9:4d:36:8d:
bc:50:c8:77:49:e5:e0:43:66:69:ef:71:1a:c6:9d:8c:97:3a:
17:e4:df:28:18:3d:82:10:1e:21:53:4e:53:f1:4b:da:72:ed:
9e:ab:b4:e5:5a:5f:54:0f:cd:fd:df:79:1a:bf:ce:3f:33:9c:
5c:d6:8a:0f:95:5b:37:9e:9c:04:69:a6:b4:64:98:1b:dd:ba:
f4:2e:3f:29:0e:8c:9d:06:7c:1e:ae:cf:bc:aa:89:a8:bf:40:
12:1f:9f:dc:5d:7d:c7:24:75:08:b9:2b:2f:8e:4d:6f:00:78:
a8:50:59:b4:21:b1:ad:1c:f4:2e:1e:a6:8e:e3:2b:64:62:8f:
73:27:e3:7b:1c:e2:98:af:41:e4:5e:b9:c9:65:da:3f:8f:a7:
ef:47:70:c7:6e:22:df:1e:e9:89:e4:20:60:8d:f8:36:30:bd:
ec:cc:58:14:98:80:e2:3e:5e:ad:15:c5:4b:cd:6c:ad:d8:ec:
e3:22:24:b3:a7:5b:f6:8b:97:10:47:9b:f9:90:68:33:a1:d4:
5c:d5:e6:ff:c2:be:4c:dc:f0:c7:ad:9a:f0:b7:32:f5:04:04:
e5:88:cd:72:9a:f4:99:c6:e9:cd:74:04:47:23:74:57:ee:5b:
cc:55:ad:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMTv1CC0hvs2rt5U5Xk7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGViMWUwYzUzYTY4MGVhYTQwYjhjN2NkM2YyMWNjOTYw
NDNlOGEwHhcNMjUwNjA3MDcwMDUyWhcNMjUwNjA4MDcwMDUyWjAzMTEwLwYDVQQD
Eyg0ODdmZTRhNTEzZTMyMTM4YjA3MmU3NmUyM2RiNmViNGVmOGQwZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyCE8uPv2Tr2MfzGDa8vLnyA8T0M
ib5oJurrEKrhh37cPdm+jA485FdZ3WtvTQNaI8laJ8Elz2GH2BLkE3Gu5HcbVVtU
aRdLVfpGSo7fvZGYCtT4V10MbMw/AhHM4Vggsw20zlQ/qDuO4yjBpQgeQdmmVlBD
NzAHdsVwFQJaomk0T1GXpkEV4NZdxhFrxB3aXednj0upsfbmkYeAowIluebiRRst
vko2EKfQWwf/0rzaY3hn6Lqsg9bR0rxpGYong2iEHu96eSgIPArUi+iI2pnbgXiD
YS7B3Mmj10Ya7M2K6oz8HMs/w58K2PJnlZAV3/joCAAh7Qo/0ReRB6wM+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh/5KUT4yE4sHLnbiPbbrTvjQ42MB8GA1UdIwQY
MBaAFKtOseDFOmgOqkC4x80/IcyWBD6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZTAyZTgtN2UwNS00ZmNmLThhNmEt
MzdjMjM0MmM1YzJmLzEvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82ZTAyZTgtN2UwNS00ZmNmLThhNmEtMzdjMjM0MmM1YzJm
LzEvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIlZ9TwY
+bjTG9RA4nypTTaNvFDId0nl4ENmae9xGsadjJc6F+TfKBg9ghAeIVNOU/FL2nLt
nqu05VpfVA/N/d95Gr/OPzOcXNaKD5VbN56cBGmmtGSYG9269C4/KQ6MnQZ8Hq7P
vKqJqL9AEh+f3F19xyR1CLkrL45NbwB4qFBZtCGxrRz0Lh6mjuMrZGKPcyfjexzi
mK9B5F65yWXaP4+n70dwx24i3x7pieQgYI34NjC97MxYFJiA4j5erRXFS81srdjs
4yIks6db9ouXEEeb+ZBoM6HUXNXm/8K+TNzwx62a8Lcy9QQE5YjNcpr0mcbpzXQE
RyN0V+5bzFWtpQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:25:45 2025 by rpki-client