Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier: pAKP9fx14DGNrasw4nkInHBWBXvqNdPhvTMr7I6RIvg=
Subject key identifier: 13:C8:7E:BF:FD:A0:C3:A3:B6:45:2C:42:5E:EE:69:56:86:2E:D1:C4
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019747E7670A21BDAA9C2A6619669D402336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number: 1591
Signing time: Sat 07 Jun 2025 01:00:36 +0000
Manifest this update: Sat 07 Jun 2025 01:00:36 +0000
Manifest next update: Sun 08 Jun 2025 01:00:36 +0000
Files and hashes: 1: LxK49wQNApdxyp8v_k05CLgMI5E.roa (hash: cyuNB9STnC1KALLJGwZIhbMMjarSRyXyHryPQj2j9DA=)
2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: CRB5DMkgM/FcqYZpnATJTAR1LsOaYFKIGPiGRj9o6mw=)
3: cIaNp2bTtQ5M6jCssmyGRmD8_eg.roa (hash: DakUxNySLzPYiUEmVKH8Wuu4g1X+hz1O/JIQ3JCKnTY=)
4: qNueyq_ZoTbC4yFoRImera8I8G8.roa (hash: 0QLi9xBNjhGIdVQu2iU+1fR1OTjQ09YNPx13rOGAPmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:67:0a:21:bd:aa:9c:2a:66:19:66:9d:40:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jun 7 01:00:36 2025 GMT
Not After : Jun 8 01:00:36 2025 GMT
Subject: CN=13c87ebffda0c3a3b6452c425eee6956862ed1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:fd:8a:de:91:61:b2:c5:20:77:f5:79:65:
b3:3b:0b:66:1d:6e:43:06:af:4a:19:30:78:2b:f2:
08:6e:0b:63:f9:a4:92:78:ba:6d:0e:b0:28:af:7a:
ff:83:b6:78:dc:06:73:7c:aa:30:dc:9a:d8:9a:35:
b9:00:24:5a:06:a5:85:21:fe:38:b1:e4:45:18:20:
09:38:a7:b6:5f:a9:6a:aa:93:18:be:85:c5:c6:48:
7f:50:21:d7:a3:5e:c1:14:36:52:b2:a7:d6:12:80:
81:83:bf:5d:97:bc:10:ec:12:87:4a:be:81:2f:71:
c8:15:98:b4:2b:97:16:4a:6d:df:81:42:a4:20:5a:
89:67:a9:c0:74:d0:de:41:d6:5b:a4:31:f7:ed:5f:
30:25:19:c1:f0:05:51:93:d6:4b:b9:46:67:89:71:
08:30:42:d9:83:53:2c:8a:59:13:01:d5:3c:03:cf:
73:18:6e:10:8c:2b:18:d9:70:45:4f:39:f9:8d:dd:
78:87:8d:e6:d7:d0:86:76:ca:83:c8:44:71:a6:4a:
3d:4b:5b:ef:bb:5b:9c:36:c2:29:00:4f:87:ae:cb:
17:98:f5:a7:57:1f:7e:6b:7a:f6:b0:91:c6:f5:04:
ad:97:80:84:a7:14:85:8f:29:90:a2:45:a2:12:c9:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C8:7E:BF:FD:A0:C3:A3:B6:45:2C:42:5E:EE:69:56:86:2E:D1:C4
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:65:d0:c1:66:74:14:b0:e4:22:2d:60:f4:23:8c:05:10:e4:
07:92:be:c7:a8:ab:78:9f:cf:32:7e:57:e9:48:da:93:1d:6a:
64:4a:4d:9f:22:99:31:01:3f:44:9f:cb:68:2b:72:bd:84:70:
b8:cb:74:63:2f:6e:5f:41:75:86:1c:79:7d:73:32:81:19:e0:
84:14:42:b7:3b:e0:e8:d4:fa:db:cb:59:b4:82:20:53:de:0f:
4c:34:b2:a7:74:71:57:8b:94:87:d1:b5:53:78:48:89:2e:52:
b0:9a:04:da:cb:90:da:02:d2:4f:33:b3:bf:bc:e6:15:25:b2:
90:52:98:44:bb:bb:ca:98:ef:5b:7f:ab:e1:7a:dd:4d:9a:b0:
39:ba:30:1a:06:64:4c:19:cb:18:f1:d5:7d:ef:2e:54:9d:9a:
a3:91:01:5b:89:78:f3:fa:6d:03:e4:de:57:0e:8b:65:4e:bb:
74:6d:b3:22:00:2e:ec:1c:10:7c:87:4f:e9:a7:1c:1c:8c:8a:
20:19:d3:a6:db:34:7d:43:5f:93:f5:55:08:32:5d:16:9f:07:
9f:56:4b:0a:91:f6:56:32:7f:a3:3a:05:a1:48:9f:e9:2d:9b:
95:68:e5:bd:41:40:b4:fd:51:38:7d:3b:79:e1:9d:57:aa:41:
d5:0f:c8:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH52cKIb2qnCpmGWadQCM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODM2OTY3MTZkYmNjMzYwYjlhNjJlZjdkODRiNGQyOGY5
NThiZGQwHhcNMjUwNjA3MDEwMDM2WhcNMjUwNjA4MDEwMDM2WjAzMTEwLwYDVQQD
EygxM2M4N2ViZmZkYTBjM2EzYjY0NTJjNDI1ZWVlNjk1Njg2MmVkMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cP9it6RYbLFIHf1eWWzOwtmHW5D
Bq9KGTB4K/IIbgtj+aSSeLptDrAor3r/g7Z43AZzfKow3JrYmjW5ACRaBqWFIf44
seRFGCAJOKe2X6lqqpMYvoXFxkh/UCHXo17BFDZSsqfWEoCBg79dl7wQ7BKHSr6B
L3HIFZi0K5cWSm3fgUKkIFqJZ6nAdNDeQdZbpDH37V8wJRnB8AVRk9ZLuUZniXEI
MELZg1MsilkTAdU8A89zGG4QjCsY2XBFTzn5jd14h43m19CGdsqDyERxpko9S1vv
u1ucNsIpAE+HrssXmPWnVx9+a3r2sJHG9QStl4CEpxSFjymQokWiEsk/EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPIfr/9oMOjtkUsQl7uaVaGLtHEMB8GA1UdIwQY
MBaAFEKDaWcW28w2C5pi732EtNKPlYvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAt
OTI0MGQ5Zjc1YWU2LzEvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAtOTI0MGQ5Zjc1YWU2
LzEvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2XQwWZ0
FLDkIi1g9COMBRDkB5K+x6ireJ/PMn5X6Ujakx1qZEpNnyKZMQE/RJ/LaCtyvYRw
uMt0Yy9uX0F1hhx5fXMygRnghBRCtzvg6NT628tZtIIgU94PTDSyp3RxV4uUh9G1
U3hIiS5SsJoE2suQ2gLSTzOzv7zmFSWykFKYRLu7ypjvW3+r4XrdTZqwObowGgZk
TBnLGPHVfe8uVJ2ao5EBW4l48/ptA+TeVw6LZU67dG2zIgAu7BwQfIdP6accHIyK
IBnTpts0fUNfk/VVCDJdFp8Hn1ZLCpH2VjJ/ozoFoUif6S2blWjlvUFAtP1ROH07
eeGdV6pB1Q/IYw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:32 2025 by rpki-client