Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: 7a3czWsrPAtM56HxgaqEJSO40RczyQSmfy1w7aGLTYA=
Subject key identifier: 3F:00:5A:3E:08:E3:AB:DC:29:3D:A3:62:06:F4:60:03:D7:72:9F:CF
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 0197470C2B6E1AB1B0028329B927909CD657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0D9A
Signing time: Fri 06 Jun 2025 21:01:09 +0000
Manifest this update: Fri 06 Jun 2025 21:01:09 +0000
Manifest next update: Sat 07 Jun 2025 21:01:09 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: QERJeNBhuNyddIYR0ABcbSUO6NItQfjmq5G5MZDyYNI=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:2b:6e:1a:b1:b0:02:83:29:b9:27:90:9c:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Jun 6 21:01:09 2025 GMT
Not After : Jun 7 21:01:09 2025 GMT
Subject: CN=3f005a3e08e3abdc293da36206f46003d7729fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:93:30:22:2f:02:c0:04:70:e1:a6:43:ab:
c9:6b:a4:31:c8:7c:89:2f:52:64:bb:52:f1:1f:3f:
98:b2:f6:fd:b6:cf:5d:0a:58:7c:26:3d:d9:e9:1e:
98:f4:76:4f:53:5c:8e:92:7d:77:e9:35:8d:df:43:
2c:31:36:73:0f:b9:5d:59:4a:54:c1:68:67:0d:23:
c1:63:0e:18:c0:2c:76:e4:6e:49:c9:01:72:8a:27:
24:99:3e:9c:6b:e3:f3:db:98:32:6f:39:9d:e5:95:
3a:0b:7d:97:ff:44:92:e9:66:1b:7c:eb:07:19:63:
e1:c1:2f:33:85:a9:48:eb:b2:ca:2a:a9:2f:74:a6:
14:21:a7:2b:04:9d:fa:ef:93:c5:da:70:e5:b7:13:
0e:c1:79:c8:be:8e:3f:42:ee:77:ad:37:30:e0:3d:
c5:42:fb:15:cb:6f:21:be:b8:3e:d9:04:2a:c5:d3:
bb:58:b2:0c:fe:0e:be:c1:81:06:23:b0:1b:5c:9d:
72:b1:6a:f5:47:ee:b2:1a:48:5a:89:21:6e:b1:d0:
af:98:79:62:e3:ba:c4:32:51:91:5e:88:e7:e3:54:
4f:98:4f:26:60:b3:01:14:6b:61:7e:5c:00:3c:1c:
d2:30:37:bf:35:03:79:12:00:bb:28:86:87:a4:6e:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:5A:3E:08:E3:AB:DC:29:3D:A3:62:06:F4:60:03:D7:72:9F:CF
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:08:8f:6b:59:46:6f:51:41:82:05:a7:a8:4f:0d:40:a8:70:
50:5f:59:dd:7b:18:f6:8a:e9:35:39:62:8a:c8:70:b4:2e:eb:
c0:3b:94:5d:90:9d:36:13:eb:2e:a2:0d:30:89:5b:2c:44:b8:
55:9b:bc:5a:37:af:82:49:05:76:73:8e:b8:c9:d4:92:bf:8d:
af:0d:c3:d4:36:aa:ad:57:1d:d2:36:a3:b8:77:67:b6:72:eb:
cc:cf:c5:5f:d6:2e:4f:57:d0:44:36:fb:c7:5e:19:66:56:23:
91:77:a0:3c:59:2f:21:9c:cc:9e:84:d6:67:d1:3f:da:59:66:
95:27:7b:ed:49:6d:d4:c1:e3:44:1e:6c:34:a6:d0:31:97:bf:
51:7b:43:b1:71:47:a0:f4:21:ec:62:89:72:a9:3f:ba:f4:6f:
b2:9b:ef:6b:8d:78:8c:44:07:66:db:31:73:64:24:48:b4:bb:
a1:3a:89:3f:83:f8:3b:c2:59:0a:ba:58:47:a1:e9:95:9d:cc:
5a:76:46:a1:27:84:37:7c:b0:f7:a7:2a:5a:ac:bc:20:99:a6:
66:25:50:e9:b8:f2:66:bf:b2:f1:ad:f2:c6:6a:35:50:f5:22:
20:03:07:9f:72:c8:2e:a9:79:1b:f7:14:12:1d:fb:79:04:e4:
b5:a0:45:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDCtuGrGwAoMpuSeQnNZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGJjNjdmNTQ5ZWIwNDkyNTc3MjBhMDAwZWIwNWI1NGY1
ZDJiYzAwHhcNMjUwNjA2MjEwMTA5WhcNMjUwNjA3MjEwMTA5WjAzMTEwLwYDVQQD
EygzZjAwNWEzZTA4ZTNhYmRjMjkzZGEzNjIwNmY0NjAwM2Q3NzI5ZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRWTMCIvAsAEcOGmQ6vJa6QxyHyJ
L1Jku1LxHz+Ysvb9ts9dClh8Jj3Z6R6Y9HZPU1yOkn136TWN30MsMTZzD7ldWUpU
wWhnDSPBYw4YwCx25G5JyQFyiickmT6ca+Pz25gybzmd5ZU6C32X/0SS6WYbfOsH
GWPhwS8zhalI67LKKqkvdKYUIacrBJ3675PF2nDltxMOwXnIvo4/Qu53rTcw4D3F
QvsVy28hvrg+2QQqxdO7WLIM/g6+wYEGI7AbXJ1ysWr1R+6yGkhaiSFusdCvmHli
47rEMlGRXojn41RPmE8mYLMBFGthflwAPBzSMDe/NQN5EgC7KIaHpG5i8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8AWj4I46vcKT2jYgb0YAPXcp/PMB8GA1UdIwQY
MBaAFEULxn9UnrBJJXcgoADrBbVPXSvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYt
MjRhOGQ5YmYzN2JjLzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YzZjZDYtMzdhOS00MTE1LTgzNjYtMjRhOGQ5YmYzN2Jj
LzEvUlF2R2YxU2VzRWtsZHlDZ0FPc0Z0VTlkSzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAiPa1lG
b1FBggWnqE8NQKhwUF9Z3XsY9orpNTliishwtC7rwDuUXZCdNhPrLqINMIlbLES4
VZu8WjevgkkFdnOOuMnUkr+Nrw3D1DaqrVcd0jajuHdntnLrzM/FX9YuT1fQRDb7
x14ZZlYjkXegPFkvIZzMnoTWZ9E/2llmlSd77Ult1MHjRB5sNKbQMZe/UXtDsXFH
oPQh7GKJcqk/uvRvspvva414jEQHZtsxc2QkSLS7oTqJP4P4O8JZCrpYR6HplZ3M
WnZGoSeEN3yw96cqWqy8IJmmZiVQ6bjyZr+y8a3yxmo1UPUiIAMHn3LILql5G/cU
Eh37eQTktaBFHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:36:36 2025 by rpki-client