Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json)
Hash identifier: bo7h6Hdfhuo62V0aAAWueVg5ZeKvuDgLXRMMplrwq4Q=
Subject key identifier: 22:37:47:7D:6F:9F:26:B9:85:73:25:54:8A:EA:3B:67:50:04:9B:81
Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Certificate serial: 0197B7B30AF5B4D1346633021789AE5870E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
Manifest number: 02CD
Signing time: Sat 28 Jun 2025 18:00:53 +0000
Manifest this update: Sat 28 Jun 2025 18:00:53 +0000
Manifest next update: Sun 29 Jun 2025 18:00:53 +0000
Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: 2ArhAZYRIiP0whDBZl/qlbzz8q+1yN32kU3Ktoag7Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0a:f5:b4:d1:34:66:33:02:17:89:ae:58:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Validity
Not Before: Jun 28 18:00:53 2025 GMT
Not After : Jun 29 18:00:53 2025 GMT
Subject: CN=2237477d6f9f26b9857325548aea3b6750049b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:9d:57:77:95:8c:7e:64:b7:15:93:7b:1a:
a6:4c:37:bc:83:42:c9:99:6f:42:dc:dd:19:ab:16:
10:25:58:14:3c:71:1b:7b:ca:64:58:4e:7f:1e:51:
01:a1:28:77:4b:90:36:78:60:7a:b3:4d:94:96:aa:
06:a4:e0:d8:dc:08:e8:da:44:9a:57:73:2a:00:62:
26:9b:c8:68:16:93:58:1d:3b:5b:2f:14:de:d7:7c:
a4:e6:6f:66:fa:1f:4f:40:ef:f6:44:21:df:f9:92:
f1:b5:7d:3e:21:f8:c4:ee:0e:ae:c3:bd:b8:52:c5:
4f:7e:b1:0f:63:17:90:1a:cc:57:4c:02:be:68:c2:
b1:46:ca:75:1f:b6:80:df:c8:1a:aa:ce:8c:3e:cb:
b2:57:63:3f:6e:3e:f1:1a:ae:b7:73:36:d6:ae:34:
6f:8c:3e:81:5a:43:c7:d4:4e:18:40:54:b8:59:3e:
65:51:83:c9:c8:fc:3d:d4:a3:28:37:d3:76:8c:d3:
9e:ae:28:50:65:00:cc:db:ca:2a:44:f7:ad:38:5c:
93:76:ea:66:c0:8c:a5:79:0f:9f:36:c7:1d:ec:d2:
17:80:94:96:09:09:2a:4c:26:11:1e:d1:84:42:d5:
b9:02:ba:8d:20:1d:f0:c7:d8:9d:cc:60:9f:01:04:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:37:47:7D:6F:9F:26:B9:85:73:25:54:8A:EA:3B:67:50:04:9B:81
X509v3 Authority Key Identifier:
keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4d:17:0d:75:ac:9c:82:45:3d:e6:38:ab:96:29:c1:97:4a:
96:99:a3:34:63:60:4b:c0:11:60:c0:34:ed:b5:51:9c:ba:cf:
cd:25:79:83:a0:3d:fc:de:04:59:87:a0:ba:4c:3e:f8:78:68:
59:c0:92:f2:21:45:eb:ec:fd:a0:0b:08:56:bc:fc:22:eb:31:
01:a3:8a:f2:02:a5:3d:1c:c3:36:30:27:57:37:ed:7e:aa:7e:
06:89:c9:30:61:7f:9d:db:1d:e8:99:a2:b7:1e:60:61:55:fe:
b4:94:cf:db:a1:be:5b:15:ca:5c:70:b2:8c:6c:0e:81:12:36:
f3:0b:18:6d:22:66:12:eb:6b:65:b6:68:e8:7c:8b:68:ba:d7:
1a:fc:01:11:46:3c:e3:f3:7e:89:de:10:39:25:23:ba:91:90:
c5:5b:24:ae:6d:f8:81:ee:e3:33:1c:76:6e:d7:e2:8c:9e:b3:
fb:59:5e:38:12:69:19:12:44:90:59:ed:df:de:50:6c:7f:74:
7c:ce:5a:e4:59:e3:2e:b2:a9:7a:9a:cd:f6:6d:ef:52:07:ec:
55:e9:f6:c0:42:39:0f:75:2c:64:21:22:c2:fc:15:64:49:d0:
cd:4d:a5:49:b5:86:e4:a9:26:2e:a3:b9:87:75:fc:88:a6:df:
3a:ee:df:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swr1tNE0ZjMCF4muWHDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NDhkMDExZWRiOGNkMzNlNjY3Njc4ODBjYTRhYjMwNjFk
OWM1MjMwHhcNMjUwNjI4MTgwMDUzWhcNMjUwNjI5MTgwMDUzWjAzMTEwLwYDVQQD
EygyMjM3NDc3ZDZmOWYyNmI5ODU3MzI1NTQ4YWVhM2I2NzUwMDQ5YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlKdV3eVjH5ktxWTexqmTDe8g0LJ
mW9C3N0ZqxYQJVgUPHEbe8pkWE5/HlEBoSh3S5A2eGB6s02UlqoGpODY3Ajo2kSa
V3MqAGImm8hoFpNYHTtbLxTe13yk5m9m+h9PQO/2RCHf+ZLxtX0+IfjE7g6uw724
UsVPfrEPYxeQGsxXTAK+aMKxRsp1H7aA38gaqs6MPsuyV2M/bj7xGq63czbWrjRv
jD6BWkPH1E4YQFS4WT5lUYPJyPw91KMoN9N2jNOerihQZQDM28oqRPetOFyTdupm
wIyleQ+fNscd7NIXgJSWCQkqTCYRHtGEQtW5ArqNIB3wx9idzGCfAQQM+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI3R31vnya5hXMlVIrqO2dQBJuBMB8GA1UdIwQY
MBaAFKlI0BHtuM0z5mdniAykqzBh2cUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZWIzZWItNTEwOS00Nzk4LTg4Mjgt
M2Q1NDlmYmI4MzdmLzEvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZWIzZWItNTEwOS00Nzk4LTg4MjgtM2Q1NDlmYmI4Mzdm
LzEvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ00XDXWs
nIJFPeY4q5YpwZdKlpmjNGNgS8ARYMA07bVRnLrPzSV5g6A9/N4EWYegukw++Hho
WcCS8iFF6+z9oAsIVrz8IusxAaOK8gKlPRzDNjAnVzftfqp+BonJMGF/ndsd6Jmi
tx5gYVX+tJTP26G+WxXKXHCyjGwOgRI28wsYbSJmEutrZbZo6HyLaLrXGvwBEUY8
4/N+id4QOSUjupGQxVskrm34ge7jMxx2btfijJ6z+1leOBJpGRJEkFnt395QbH90
fM5a5FnjLrKpeprN9m3vUgfsVen2wEI5D3UsZCEiwvwVZEnQzU2lSbWG5KkmLqO5
h3X8iKbfOu7f7w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:50 2025 by rpki-client