Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: 4gpG4hU/yVRR9DeuKurybp9Vstqi7eRwvZE3DHaMwLM=
Subject key identifier: 4F:86:53:09:A9:CD:AE:F1:C3:A9:1A:B4:32:2B:C2:65:4F:7C:9E:54
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 01974AB15258578BB28313BD7670DAE12741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 1558
Signing time: Sat 07 Jun 2025 14:00:24 +0000
Manifest this update: Sat 07 Jun 2025 14:00:24 +0000
Manifest next update: Sun 08 Jun 2025 14:00:24 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: ntJ9Cu7GjznxF2dVmI+6DmwXThi5S5wZy4QyMmEbecQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:52:58:57:8b:b2:83:13:bd:76:70:da:e1:27:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Jun 7 14:00:24 2025 GMT
Not After : Jun 8 14:00:24 2025 GMT
Subject: CN=4f865309a9cdaef1c3a91ab4322bc2654f7c9e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:6e:b1:46:71:c5:72:ce:c7:b9:ea:43:0d:
0f:3a:1a:b5:b6:27:fe:13:15:21:95:ab:b1:92:2a:
2a:21:5c:cf:7f:2f:d0:b8:6c:89:c4:76:ec:00:9d:
51:45:29:e0:ac:16:76:98:db:bd:56:e4:be:0f:65:
c0:1c:77:88:21:37:85:5a:64:80:9b:78:07:1f:3f:
dc:99:e2:f7:8a:8b:e3:65:10:43:bf:e8:15:67:66:
3c:a9:bb:5d:f0:bd:bf:90:29:f3:9b:ca:1c:3c:13:
64:b7:00:e3:0e:07:49:e2:ae:df:1c:7f:c1:33:e3:
1b:ea:0f:cf:37:41:78:e8:60:31:51:f1:bb:e1:3b:
4a:d6:93:26:6b:13:d9:1f:88:6d:fe:a8:d1:1a:41:
15:14:e1:6a:a4:5c:7d:bf:3d:59:f5:59:19:8c:62:
ab:66:bb:97:e0:0e:bc:5c:a3:e4:d5:41:35:b8:25:
f3:61:35:fb:8a:7a:fe:da:77:27:1b:eb:8d:0f:bf:
67:16:1d:a1:07:28:56:25:17:41:d7:c1:cc:69:7e:
00:1e:a6:50:2e:14:24:c0:78:95:b6:88:07:c0:c2:
2c:b2:67:86:89:a7:77:71:09:fa:3f:91:52:51:33:
0d:dd:1b:b5:03:33:3c:73:25:d0:ef:35:a1:d3:7d:
9f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:53:09:A9:CD:AE:F1:C3:A9:1A:B4:32:2B:C2:65:4F:7C:9E:54
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7c:47:8d:b5:62:e1:eb:ca:f4:39:17:5d:da:5a:0b:b1:2c:
3d:3d:f9:10:33:8a:89:c8:e6:21:bb:0f:aa:35:b6:0a:cd:32:
03:72:0d:99:73:bd:33:d6:08:57:d0:99:98:0e:fd:b1:f3:1f:
9e:34:80:9f:18:f2:c5:b5:3b:b6:ce:a9:a5:c6:69:36:ca:43:
b8:02:c3:b7:ab:85:54:d3:53:77:79:b7:55:99:95:ec:d3:bd:
c8:ba:ee:a6:dc:9d:7b:2c:ee:35:91:02:75:d3:5e:ad:03:c0:
81:6f:f6:80:2b:80:a4:74:4e:5e:9f:9d:ec:38:25:dd:44:5d:
c8:d5:8f:ea:7a:98:1a:54:ce:64:7f:91:34:14:1a:3e:54:fa:
3f:ce:b1:40:32:93:2e:8b:9d:50:1b:47:9f:3b:f7:f9:7e:d8:
ec:0b:9d:56:02:f1:a0:93:4f:41:37:d6:b9:07:cd:12:d0:e6:
be:5d:49:38:5d:03:5c:26:fc:58:c9:d9:89:99:f5:92:71:8e:
c5:2a:e8:fe:bf:98:f0:b0:df:93:6b:66:f2:94:d2:34:0e:bf:
10:12:ca:69:40:4f:c5:c1:8f:42:92:09:d9:5b:a6:bb:21:2d:
14:4e:fe:aa:68:a9:10:15:01:9e:11:51:1e:d0:7c:59:bf:bd:
d5:9d:68:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsVJYV4uygxO9dnDa4SdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx
YWRmODgwHhcNMjUwNjA3MTQwMDI0WhcNMjUwNjA4MTQwMDI0WjAzMTEwLwYDVQQD
Eyg0Zjg2NTMwOWE5Y2RhZWYxYzNhOTFhYjQzMjJiYzI2NTRmN2M5ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijNusUZxxXLOx7nqQw0POhq1tif+
ExUhlauxkioqIVzPfy/QuGyJxHbsAJ1RRSngrBZ2mNu9VuS+D2XAHHeIITeFWmSA
m3gHHz/cmeL3iovjZRBDv+gVZ2Y8qbtd8L2/kCnzm8ocPBNktwDjDgdJ4q7fHH/B
M+Mb6g/PN0F46GAxUfG74TtK1pMmaxPZH4ht/qjRGkEVFOFqpFx9vz1Z9VkZjGKr
ZruX4A68XKPk1UE1uCXzYTX7inr+2ncnG+uND79nFh2hByhWJRdB18HMaX4AHqZQ
LhQkwHiVtogHwMIssmeGiad3cQn6P5FSUTMN3Ru1AzM8cyXQ7zWh032fSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+GUwmpza7xw6katDIrwmVPfJ5UMB8GA1UdIwQY
MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt
NTFjM2NjY2U3MmRmLzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm
LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXxHjbVi
4evK9DkXXdpaC7EsPT35EDOKicjmIbsPqjW2Cs0yA3INmXO9M9YIV9CZmA79sfMf
njSAnxjyxbU7ts6ppcZpNspDuALDt6uFVNNTd3m3VZmV7NO9yLruptydeyzuNZEC
ddNerQPAgW/2gCuApHROXp+d7Dgl3URdyNWP6nqYGlTOZH+RNBQaPlT6P86xQDKT
LoudUBtHnzv3+X7Y7AudVgLxoJNPQTfWuQfNEtDmvl1JOF0DXCb8WMnZiZn1knGO
xSro/r+Y8LDfk2tm8pTSNA6/EBLKaUBPxcGPQpIJ2VumuyEtFE7+qmipEBUBnhFR
HtB8Wb+91Z1odQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:47 2025 by rpki-client