Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: DSb4xJmTUVE2yvy7rUgCcNQPR4cACz8CPTyf3nfVg0M=
Subject key identifier: EF:7B:12:D5:36:8F:C9:89:96:72:5B:F8:1E:6A:F3:A4:35:F7:F2:10
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 01974B8DC89D74DE3C3AEFBDE282369E667E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 1312
Signing time: Sat 07 Jun 2025 18:01:12 +0000
Manifest this update: Sat 07 Jun 2025 18:01:12 +0000
Manifest next update: Sun 08 Jun 2025 18:01:12 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: GxUZkbc0tAxLr4WZ6fGqi2eOTPEBXVx+9YCFNseGi4c=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:c8:9d:74:de:3c:3a:ef:bd:e2:82:36:9e:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Jun 7 18:01:12 2025 GMT
Not After : Jun 8 18:01:12 2025 GMT
Subject: CN=ef7b12d5368fc98996725bf81e6af3a435f7f210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:81:ed:6c:ad:53:ae:f5:43:0a:ab:dd:fd:
d9:1a:bb:fc:83:4a:7b:7d:08:9b:f0:33:52:28:26:
f5:d3:d4:7d:49:79:77:43:bb:85:e6:f2:50:5a:c4:
15:24:7a:2c:c0:7a:de:43:15:34:c1:16:3c:38:6d:
bd:e1:14:ac:d4:e3:57:89:11:d6:02:39:95:0f:3a:
4b:70:b3:c3:ec:64:0c:13:f1:6b:96:dd:b3:6e:5f:
a9:16:48:be:06:23:3e:ab:b8:02:b0:cd:07:05:12:
66:65:7f:20:cf:20:8e:ea:cb:14:5c:b2:24:4c:f1:
8c:6e:22:0b:9a:6a:74:95:11:47:d1:48:ae:77:1c:
96:fc:08:5b:b1:ed:2a:8a:45:11:0e:59:bf:18:ea:
1f:77:72:02:4d:1b:46:30:86:14:52:61:c6:01:29:
cb:8c:df:fa:26:7b:e4:d9:86:9c:87:df:ac:77:bd:
c2:86:8d:d6:d3:74:ae:21:f2:53:d1:96:a0:23:30:
c4:c4:4e:8a:32:30:93:b9:64:55:ff:86:6c:1c:42:
96:15:3d:5a:6e:55:ad:24:87:a2:17:23:57:1e:da:
3d:4f:29:8c:a5:78:74:9a:11:5c:eb:fd:78:b9:be:
75:53:02:2d:45:a4:12:3b:2e:eb:02:63:44:cf:4d:
10:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:12:D5:36:8F:C9:89:96:72:5B:F8:1E:6A:F3:A4:35:F7:F2:10
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:01:96:d3:b4:ec:fe:fe:02:57:7a:c9:cb:62:2c:42:93:1a:
34:51:c5:dc:96:f3:a6:06:bd:8a:de:7e:5a:60:f0:ab:e5:eb:
b6:4f:98:91:d1:b8:ee:7e:92:cc:f6:31:91:69:51:5c:9c:3f:
23:a2:63:0f:7d:f2:99:a2:a0:39:f4:30:ac:37:0d:d8:22:b2:
16:3b:37:cf:ac:b8:a3:a2:4f:9b:a0:de:e2:5f:ce:ab:83:cc:
95:8b:91:de:c6:85:c6:bc:cc:db:ca:22:c6:61:97:34:9a:93:
84:c9:e6:38:1d:a7:53:b9:d7:8a:d2:06:1c:41:de:98:6d:fd:
5a:49:15:e5:ea:26:7f:20:48:de:5e:0d:22:8c:c4:fe:b3:b2:
7f:85:5b:97:32:f3:47:99:5d:2d:62:55:2c:b6:ee:f5:a0:02:
5e:ea:28:5e:6e:f1:39:0b:21:13:a9:9b:d6:be:7e:90:ab:e7:
5f:b4:11:6a:d0:f1:87:1b:09:12:de:a2:bf:c9:c5:20:93:c8:
15:b0:bd:0b:f7:79:96:a5:b3:4a:5d:75:e3:6e:be:ba:14:fc:
8b:8a:49:7f:f5:f2:b7:6e:99:72:a0:ec:61:72:f0:65:ec:63:
6c:66:f4:00:d5:d7:ea:3e:03:0e:db:54:35:ad:a0:d8:44:87:
c1:4e:94:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjciddN48Ou+94oI2nmZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzRjOTBlZDE2YWEyMGU0OTE3ODQyMGJmYzg0YTg4M2Mx
MmFjNjgwHhcNMjUwNjA3MTgwMTEyWhcNMjUwNjA4MTgwMTEyWjAzMTEwLwYDVQQD
EyhlZjdiMTJkNTM2OGZjOTg5OTY3MjViZjgxZTZhZjNhNDM1ZjdmMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM6B7WytU671Qwqr3f3ZGrv8g0p7
fQib8DNSKCb109R9SXl3Q7uF5vJQWsQVJHoswHreQxU0wRY8OG294RSs1ONXiRHW
AjmVDzpLcLPD7GQME/Frlt2zbl+pFki+BiM+q7gCsM0HBRJmZX8gzyCO6ssUXLIk
TPGMbiILmmp0lRFH0UiudxyW/Ahbse0qikURDlm/GOofd3ICTRtGMIYUUmHGASnL
jN/6Jnvk2Yach9+sd73Cho3W03SuIfJT0ZagIzDExE6KMjCTuWRV/4ZsHEKWFT1a
blWtJIeiFyNXHto9TymMpXh0mhFc6/14ub51UwItRaQSOy7rAmNEz00QWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO97EtU2j8mJlnJb+B5q86Q19/IQMB8GA1UdIwQY
MBaAFELEyQ7RaqIOSReEIL/ISog8EqxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYt
YThlNGU3MWJlZTUxLzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYtYThlNGU3MWJlZTUx
LzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQGW07Ts
/v4CV3rJy2IsQpMaNFHF3Jbzpga9it5+WmDwq+Xrtk+YkdG47n6SzPYxkWlRXJw/
I6JjD33ymaKgOfQwrDcN2CKyFjs3z6y4o6JPm6De4l/Oq4PMlYuR3saFxrzM28oi
xmGXNJqThMnmOB2nU7nXitIGHEHemG39WkkV5eomfyBI3l4NIozE/rOyf4VblzLz
R5ldLWJVLLbu9aACXuooXm7xOQshE6mb1r5+kKvnX7QRatDxhxsJEt6iv8nFIJPI
FbC9C/d5lqWzSl11426+uhT8i4pJf/Xyt26ZcqDsYXLwZexjbGb0ANXX6j4DDttU
Na2g2ESHwU6UFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:31:35 2025 by rpki-client