Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File: q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier: xs+oX7EA1ffaPhIiitdS7SrhewnGfGVSpiEhLF9Tayg=
Subject key identifier: B6:8B:46:86:F5:B5:6C:85:CE:51:AF:2D:84:84:69:9A:75:73:A0:9E
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer: /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial: 01974A43DB0B9FB1A3CE0182FEB0913C6C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number: 06C8
Signing time: Sat 07 Jun 2025 12:00:50 +0000
Manifest this update: Sat 07 Jun 2025 12:00:50 +0000
Manifest next update: Sun 08 Jun 2025 12:00:50 +0000
Files and hashes: 1: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (hash: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=)
2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: b3F/RUbWH+H0qhfXHpJKe35L2T752ocLrYMbvXc/ndg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:db:0b:9f:b1:a3:ce:01:82:fe:b0:91:3c:6c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Validity
Not Before: Jun 7 12:00:50 2025 GMT
Not After : Jun 8 12:00:50 2025 GMT
Subject: CN=b68b4686f5b56c85ce51af2d8484699a7573a09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:d6:4b:8a:d9:ae:e7:6f:5c:45:f8:04:33:
1f:7e:4d:4e:68:28:56:23:b2:14:0f:3e:41:f9:2c:
b0:e2:ef:d0:c8:5d:13:32:ba:51:74:55:59:c1:d1:
d7:11:8c:a3:fc:84:a2:b5:55:15:d7:4c:ab:96:8a:
1b:c9:3f:43:d5:64:16:71:5a:c0:9f:a1:54:12:fc:
37:b4:87:14:38:53:b5:14:f6:57:0b:94:7b:2f:a7:
be:43:68:15:8f:32:62:d6:32:b2:26:f1:6d:c1:35:
bd:95:5f:f4:03:50:6a:48:ef:8b:90:42:d5:12:cb:
22:76:b4:b5:3e:3b:1a:71:9e:50:24:da:d0:cf:0b:
17:78:60:f4:a8:ee:ae:92:bb:5e:a2:fa:ef:ed:28:
da:eb:af:a4:21:33:79:39:15:76:d8:c5:aa:03:6f:
1c:03:d6:64:63:e4:39:75:87:7f:cc:5f:56:ee:48:
b6:e2:ad:50:19:47:bc:e0:8f:c4:fb:d4:e3:99:ac:
d5:2e:9d:a0:91:bb:4f:0b:31:21:ef:83:ba:a2:0d:
32:58:3f:e5:cc:01:53:27:17:2a:81:1f:dc:39:21:
39:32:d9:95:2b:be:07:dc:9f:01:2c:bb:25:fe:4f:
9d:77:71:1f:28:5c:2b:55:70:1e:7e:be:7b:16:3a:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:46:86:F5:B5:6C:85:CE:51:AF:2D:84:84:69:9A:75:73:A0:9E
X509v3 Authority Key Identifier:
keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:76:84:36:d5:84:90:cf:35:af:88:52:c7:53:fd:05:a0:0a:
10:e8:ab:c3:ac:9e:d0:5c:23:33:16:aa:29:a3:67:ee:9a:d8:
00:24:dc:be:d1:52:af:5c:f4:94:7a:47:24:41:b2:ac:bf:85:
ab:88:4b:fe:c6:85:2a:20:bd:88:5c:80:c6:ab:45:42:0f:3e:
b9:44:96:e0:ee:26:a8:de:e9:e5:b9:53:d2:94:0c:f7:41:b1:
ca:42:bc:9d:b5:68:63:e2:b5:ee:e7:90:d2:c4:7f:0c:99:cc:
cc:f3:39:f9:43:ed:8b:b3:b4:8f:85:ae:c7:2a:e0:59:f6:b6:
5b:04:40:11:3c:47:dd:a0:d0:be:31:9c:14:c9:1d:4f:90:6c:
01:c4:44:80:28:71:1a:d4:5d:1c:cf:04:91:de:1a:75:a6:f8:
2d:74:d3:fd:79:ac:a5:c6:2a:ff:84:8a:88:b7:50:9d:8b:f7:
e7:96:15:a3:c5:28:c3:72:c5:07:85:54:aa:e6:48:66:54:56:
7f:1e:07:f8:1a:62:29:b8:a0:99:29:b1:74:f6:80:a5:08:a5:
ea:a1:c5:ba:ed:b7:8c:64:59:a2:4f:92:60:ce:bc:f5:63:38:
d4:bc:88:61:46:de:cc:f1:55:15:80:83:2d:43:a0:df:95:72:
ba:16:bd:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ9sLn7GjzgGC/rCRPGySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYWVkZjJmODEyOGY0OGViODExM2JmYWY0ZDY3ZDkwMTA0
OTA5M2EwHhcNMjUwNjA3MTIwMDUwWhcNMjUwNjA4MTIwMDUwWjAzMTEwLwYDVQQD
EyhiNjhiNDY4NmY1YjU2Yzg1Y2U1MWFmMmQ4NDg0Njk5YTc1NzNhMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2abWS4rZrudvXEX4BDMffk1OaChW
I7IUDz5B+Syw4u/QyF0TMrpRdFVZwdHXEYyj/ISitVUV10yrloobyT9D1WQWcVrA
n6FUEvw3tIcUOFO1FPZXC5R7L6e+Q2gVjzJi1jKyJvFtwTW9lV/0A1BqSO+LkELV
EssidrS1PjsacZ5QJNrQzwsXeGD0qO6ukrteovrv7Sja66+kITN5ORV22MWqA28c
A9ZkY+Q5dYd/zF9W7ki24q1QGUe84I/E+9TjmazVLp2gkbtPCzEh74O6og0yWD/l
zAFTJxcqgR/cOSE5MtmVK74H3J8BLLsl/k+dd3EfKFwrVXAefr57FjoLBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaLRob1tWyFzlGvLYSEaZp1c6CeMB8GA1UdIwQY
MBaAFKuu3y+BKPSOuBE7+vTWfZAQSQk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kZDQxZjUtYmMwNi00Yzk3LTllZDgt
ZmM0NjBmZjk4ZTMxLzEvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kZDQxZjUtYmMwNi00Yzk3LTllZDgtZmM0NjBmZjk4ZTMx
LzEvcTY3Zkw0RW85STY0RVR2NjlOWjlrQkJKQ1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3aENtWE
kM81r4hSx1P9BaAKEOirw6ye0FwjMxaqKaNn7prYACTcvtFSr1z0lHpHJEGyrL+F
q4hL/saFKiC9iFyAxqtFQg8+uUSW4O4mqN7p5blT0pQM90GxykK8nbVoY+K17ueQ
0sR/DJnMzPM5+UPti7O0j4WuxyrgWfa2WwRAETxH3aDQvjGcFMkdT5BsAcREgChx
GtRdHM8Ekd4adab4LXTT/XmspcYq/4SKiLdQnYv355YVo8Uow3LFB4VUquZIZlRW
fx4H+BpiKbigmSmxdPaApQil6qHFuu23jGRZok+SYM689WM41LyIYUbezPFVFYCD
LUOg35Vyuha97A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:32:19 2025 by rpki-client