Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
File: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft (raw, json)
Hash identifier: NWHCqrs8J7zthZb9WzcIJw6zvTqAO8YfH+I2zVmjgOo=
Subject key identifier: 87:74:FB:B8:E1:3D:8A:74:27:D6:A8:09:B8:49:98:6D:27:68:AE:23
Authority key identifier: F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
Certificate issuer: /CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Certificate serial: 0197B6D762F0F8BB979F901B09209339D391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
Manifest number: 0DAA
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: 1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl (hash: uqfXb9K1YFUU8PXWfv5kDXx5K0Y6CVJstw7KRM84xwE=)
2: C3CtZTgV6FhDx8jPsObo2L6FO8k.roa (hash: NvkBnoMHiuCQDQqP9VPXNRtC0nvpW5lhq9MDa3+jS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:62:f0:f8:bb:97:9f:90:1b:09:20:93:39:d3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d40a2a1389f54c23e7871b5ae87f653f659008
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=8774fbb8e13d8a7427d6a809b849986d2768ae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:ef:4f:0a:16:b4:24:08:54:d2:fc:d9:24:
02:d4:21:01:72:b1:96:19:31:b9:51:eb:44:61:e2:
40:3b:2b:c5:4a:21:83:4b:0c:39:8c:92:ed:af:bf:
50:7d:27:27:81:17:4e:f8:d9:43:5e:d4:ba:8f:02:
de:24:79:3b:1a:15:38:eb:c5:ef:77:b7:f8:25:1b:
a7:6c:74:27:05:b2:dc:d2:bc:37:2a:e4:ef:99:e6:
83:42:b1:4c:42:6d:96:0e:66:23:13:2d:2d:6b:f6:
fd:88:3a:29:71:c5:1b:9c:6e:44:dd:9d:2c:bb:5d:
b3:0e:c0:dd:bf:db:bc:38:5b:7b:4a:35:03:fe:b8:
6c:4c:82:15:34:67:6c:00:60:59:6e:f1:da:7f:1c:
c3:68:84:de:ce:28:40:57:f2:92:88:65:47:5c:7e:
e4:59:68:7e:d0:c3:68:c3:c8:60:66:35:44:50:05:
c9:31:60:30:f0:da:d2:02:3b:92:60:28:be:58:fb:
1b:5f:63:6a:79:00:3a:c7:74:3e:66:5d:50:52:38:
e1:4e:fa:21:26:a7:5a:3f:f5:7f:28:f5:80:ed:0d:
cf:4b:63:a8:c9:e8:87:ea:5c:2f:14:43:0e:be:8a:
b9:6d:5e:1c:b8:55:1d:25:a8:69:71:26:2d:ee:7a:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:74:FB:B8:E1:3D:8A:74:27:D6:A8:09:B8:49:98:6D:27:68:AE:23
X509v3 Authority Key Identifier:
keyid:F8:D4:0A:2A:13:89:F5:4C:23:E7:87:1B:5A:E8:7F:65:3F:65:90:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7bc5f0-e21b-423e-be1c-2d460e0726fa/1/1-NQKKhOJ9Uwj54cbWuh_ZT9lkAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6a:ef:fe:e2:f0:b8:0f:e1:05:fe:5b:2b:d1:a5:de:8d:0b:
91:d0:af:c5:96:5e:e0:b4:b7:e3:6b:fe:98:99:53:78:d3:11:
6c:47:15:82:9b:bd:66:db:4d:e1:0e:b0:d5:7e:fe:ed:70:24:
86:43:56:a9:a0:6a:e6:37:1f:4b:42:af:81:65:d4:07:ed:e9:
d4:1b:55:c3:94:be:a9:77:5a:05:f6:3b:7d:75:2d:19:b0:28:
64:58:20:5a:45:4e:37:c4:52:cb:b6:65:4c:f7:f2:ab:b3:2d:
82:a5:8d:d9:e2:f0:5c:bf:c0:2f:07:20:b2:5d:46:cb:99:cd:
bb:ae:4e:a2:ac:3a:53:b1:0a:49:31:4e:16:0c:f6:02:49:2e:
cb:e3:fa:bd:cc:37:90:0b:8b:17:d8:53:43:df:67:3d:e0:12:
fd:27:03:d0:ca:bc:50:9a:b9:ee:0d:1f:3e:cf:f9:01:fb:b4:
46:f0:f4:db:ae:8e:14:8d:c8:f9:34:c1:9b:46:f1:1a:8b:e2:
04:2a:b3:1b:2c:cd:8b:93:b0:dc:ad:86:e7:07:23:02:ae:5b:
16:18:af:24:c0:68:80:5f:46:a3:26:28:58:6e:57:07:7d:27:
44:ab:d8:bc:d1:2c:85:dd:21:c2:71:9c:41:1e:14:e5:d6:17:
86:4f:f1:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe212Lw+LuXn5AbCSCTOdORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDQwYTJhMTM4OWY1NGMyM2U3ODcxYjVhZTg3ZjY1M2Y2
NTkwMDgwHhcNMjUwNjI4MTQwMDU4WhcNMjUwNjI5MTQwMDU4WjAzMTEwLwYDVQQD
Eyg4Nzc0ZmJiOGUxM2Q4YTc0MjdkNmE4MDliODQ5OTg2ZDI3NjhhZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXnvTwoWtCQIVNL82SQC1CEBcrGW
GTG5UetEYeJAOyvFSiGDSww5jJLtr79QfScngRdO+NlDXtS6jwLeJHk7GhU468Xv
d7f4JRunbHQnBbLc0rw3KuTvmeaDQrFMQm2WDmYjEy0ta/b9iDopccUbnG5E3Z0s
u12zDsDdv9u8OFt7SjUD/rhsTIIVNGdsAGBZbvHafxzDaITezihAV/KSiGVHXH7k
WWh+0MNow8hgZjVEUAXJMWAw8NrSAjuSYCi+WPsbX2NqeQA6x3Q+Zl1QUjjhTvoh
JqdaP/V/KPWA7Q3PS2OoyeiH6lwvFEMOvoq5bV4cuFUdJahpcSYt7noYgQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFId0+7jhPYp0J9aoCbhJmG0naK4jMB8GA1UdIwQY
MBaAFPjUCioTifVMI+eHG1rof2U/ZZAIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OUUtLaE9KOVV3ajU0Y2JXdWhfWlQ5bGtBZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvN2JjNWYwLWUyMWItNDIzZS1iZTFj
LTJkNDYwZTA3MjZmYS8xLzEtTlFLS2hPSjlVd2o1NGNiV3VoX1pUOWxrQWcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA0LzdiYzVmMC1lMjFiLTQyM2UtYmUxYy0yZDQ2MGUwNzI2
ZmEvMS8xLU5RS0toT0o5VXdqNTRjYld1aF9aVDlsa0FnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmrv
/uLwuA/hBf5bK9Gl3o0LkdCvxZZe4LS342v+mJlTeNMRbEcVgpu9ZttN4Q6w1X7+
7XAkhkNWqaBq5jcfS0KvgWXUB+3p1BtVw5S+qXdaBfY7fXUtGbAoZFggWkVON8RS
y7ZlTPfyq7MtgqWN2eLwXL/ALwcgsl1Gy5nNu65Ooqw6U7EKSTFOFgz2Akkuy+P6
vcw3kAuLF9hTQ99nPeAS/ScD0Mq8UJq57g0fPs/5Afu0RvD0266OFI3I+TTBm0bx
GoviBCqzGyzNi5Ow3K2G5wcjAq5bFhivJMBogF9GoyYoWG5XB30nRKvYvNEshd0h
wnGcQR4U5dYXhk/xNg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:23 2025 by rpki-client