Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: /v3WY1+DwsfvYG4SUTrfYyKGOiiwfPYJhlIS0zET2nU=
Subject key identifier: C7:4B:34:2E:42:FD:D9:70:D4:B5:85:16:A4:67:92:31:3C:F5:D5:13
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 0197500F173E9429B7FD2495F469C3CB95E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 15:00:55 +0000
Manifest this update: Sun 08 Jun 2025 15:00:55 +0000
Manifest next update: Mon 09 Jun 2025 15:00:55 +0000
Files and hashes: 1: eIuvCKiUKqnjxChjtjEAvL7JvnI.roa (hash: wyV3lMaUUP7vVQqM6FlcaWTPKvU8kW+p1xMsgVv6OJA=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: UR9X5jTNvzYhCrpNO1E6QBvHg5w/+yrDnKcraWvcmUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:17:3e:94:29:b7:fd:24:95:f4:69:c3:cb:95:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Jun 8 15:00:55 2025 GMT
Not After : Jun 9 15:00:55 2025 GMT
Subject: CN=c74b342e42fdd970d4b58516a46792313cf5d513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:ce:42:71:b9:89:8d:c4:5a:8a:ae:fd:fc:
2b:79:8c:e4:9f:6c:f1:c2:d4:f1:95:9e:c6:30:f8:
61:63:a6:a3:66:fe:19:e3:a1:12:46:4f:43:2f:14:
ef:57:9c:9e:c5:3d:10:a8:ef:3c:a3:38:b8:2e:09:
f2:e9:c3:8c:25:3a:76:2b:9e:bf:5e:01:7b:11:5b:
67:ab:fd:cf:62:b0:08:68:59:ab:ed:4c:a2:0a:1a:
5d:f4:0e:fa:2f:67:e8:68:a5:67:6d:3c:e8:c2:56:
3f:da:c0:db:3a:a0:f2:77:f3:93:b1:5d:0d:38:e5:
6f:17:3b:c5:cb:2e:bc:89:ca:e0:4f:b4:a8:12:ae:
40:db:d8:e4:fb:02:3e:aa:6f:28:cc:08:9d:3d:1f:
ba:02:1b:4a:b9:81:ac:77:73:c8:97:78:02:c2:92:
8a:db:6f:97:97:b1:8f:d5:62:c2:40:c3:20:66:5d:
70:c3:06:0a:c1:5c:6f:c2:c7:8a:91:67:c1:c3:88:
77:e5:10:7d:bd:a0:56:92:50:11:5b:53:b7:d1:78:
18:ce:3b:e9:48:e5:01:17:c9:47:1b:2b:eb:a7:bc:
bd:9c:8d:c9:e2:5c:ac:8e:c3:4c:34:37:f1:9c:51:
81:20:4f:cb:03:49:4a:ac:36:c5:de:41:67:ce:24:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4B:34:2E:42:FD:D9:70:D4:B5:85:16:A4:67:92:31:3C:F5:D5:13
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cb:cb:20:c7:67:b3:64:1b:39:dd:2f:e1:48:4f:b1:00:07:
4d:86:bb:96:89:9b:c0:3a:a5:96:5a:fd:8d:5a:c2:b6:4d:45:
a9:35:59:ed:76:98:c3:22:d2:e0:a7:1c:d9:b3:74:d8:30:cd:
1e:2e:be:39:e4:37:38:1e:03:7f:04:16:8b:51:88:bd:c2:c2:
61:73:f9:46:58:f0:76:c9:3b:94:1b:42:80:e7:92:c2:fe:38:
31:76:9c:a3:13:ff:0d:e7:69:00:75:eb:92:56:6f:de:7b:ef:
44:d1:76:75:b7:d8:98:50:b2:bf:77:62:4b:f1:88:e9:7b:c8:
dd:8e:45:90:0d:73:8f:0e:d7:bd:94:9f:f6:7f:a0:20:fd:6b:
c1:9b:f4:01:fc:65:d2:9d:6a:ed:f3:a0:63:a2:7c:87:65:fb:
3f:a7:a5:9e:74:24:01:37:f5:b3:57:83:fe:e2:03:5c:ea:b7:
d8:67:b4:0c:1c:f6:5e:a4:b1:22:4b:d5:1d:f2:d2:77:85:a1:
31:7e:ee:0f:d7:26:49:93:ce:19:13:8d:75:ae:64:99:ce:ed:
c6:37:9a:5b:78:87:48:f1:7a:a0:68:3c:fb:e9:8b:f2:0d:4d:
f5:c1:66:e7:d8:b8:78:22:cd:c3:28:8f:a7:7e:0e:33:8e:d6:
6a:f4:dc:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDxc+lCm3/SSV9GnDy5XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTNjZDJjNTg0YTNkYzE2MjA4YmE5M2IwZGI3NDc3M2Iz
ZjIzYmUwHhcNMjUwNjA4MTUwMDU1WhcNMjUwNjA5MTUwMDU1WjAzMTEwLwYDVQQD
EyhjNzRiMzQyZTQyZmRkOTcwZDRiNTg1MTZhNDY3OTIzMTNjZjVkNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7TOQnG5iY3EWoqu/fwreYzkn2zx
wtTxlZ7GMPhhY6ajZv4Z46ESRk9DLxTvV5yexT0QqO88ozi4Lgny6cOMJTp2K56/
XgF7EVtnq/3PYrAIaFmr7UyiChpd9A76L2foaKVnbTzowlY/2sDbOqDyd/OTsV0N
OOVvFzvFyy68icrgT7SoEq5A29jk+wI+qm8ozAidPR+6AhtKuYGsd3PIl3gCwpKK
22+Xl7GP1WLCQMMgZl1wwwYKwVxvwseKkWfBw4h35RB9vaBWklARW1O30XgYzjvp
SOUBF8lHGyvrp7y9nI3J4lysjsNMNDfxnFGBIE/LA0lKrDbF3kFnziSy4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdLNC5C/dlw1LWFFqRnkjE89dUTMB8GA1UdIwQY
MBaAFKpTzSxYSj3BYgi6k7DbdHc7PyO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAt
MDA3OTc4YmRiMDUyLzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAtMDA3OTc4YmRiMDUy
LzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcvLIMdn
s2QbOd0v4UhPsQAHTYa7lombwDqlllr9jVrCtk1FqTVZ7XaYwyLS4Kcc2bN02DDN
Hi6+OeQ3OB4DfwQWi1GIvcLCYXP5Rljwdsk7lBtCgOeSwv44MXacoxP/DedpAHXr
klZv3nvvRNF2dbfYmFCyv3diS/GI6XvI3Y5FkA1zjw7XvZSf9n+gIP1rwZv0Afxl
0p1q7fOgY6J8h2X7P6elnnQkATf1s1eD/uIDXOq32Ge0DBz2XqSxIkvVHfLSd4Wh
MX7uD9cmSZPOGRONda5kmc7txjeaW3iHSPF6oGg8++mL8g1N9cFm59i4eCLNwyiP
p34OM47WavTcUw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:34:46 2025 by rpki-client