Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier: 6iMj6hekx6xTe/SDh0VloJXKFkHv/crHeLUygGAgbyw=
Subject key identifier: E9:C2:1E:06:AD:E3:8F:59:20:C7:8C:8E:DC:80:1F:74:85:36:BA:78
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 0197B6A1B7F9E21335C0695A6290BEC2D8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number: 106D
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: 3bX/lyQ93jWRIzQ7xVMWK71ikMW6vVfe4YH/MsbCA8g=)
2: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (hash: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b7:f9:e2:13:35:c0:69:5a:62:90:be:c2:d8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=e9c21e06ade38f5920c78c8edc801f748536ba78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:26:78:8d:66:43:3a:8b:7f:e5:91:2d:17:
39:e2:b4:0e:3f:86:eb:b7:e2:5d:0d:cd:63:2c:a9:
4d:cf:7f:42:57:46:f1:4c:58:19:6b:d8:d1:d3:90:
30:22:5d:66:6e:b6:ca:cc:9e:e9:7a:5e:60:22:ae:
65:20:fc:85:f0:61:a8:58:b8:06:e2:5e:fd:01:d0:
4f:1e:d9:f0:70:6c:e1:1d:1d:1a:a4:b8:9b:3c:41:
35:91:92:42:d3:18:56:8e:8e:2b:31:4d:95:8d:55:
cb:6e:f5:00:ca:cf:84:23:2d:a3:4f:ef:c9:45:1d:
ae:8f:69:bf:e9:48:26:2e:b3:b4:5e:99:88:7f:dd:
bb:46:29:b4:d6:3d:87:a3:6d:a0:dc:91:69:25:7a:
0f:df:64:b5:14:b5:11:fb:4c:9b:a5:6b:f8:03:72:
87:97:bf:cb:0e:35:39:eb:b2:19:b5:79:6f:92:87:
a5:00:e5:88:de:c4:55:51:99:15:2e:54:97:f6:14:
36:e4:fd:33:c6:92:b9:9b:39:52:c5:c4:dc:67:42:
c0:c2:a0:79:c1:0a:24:69:8e:88:9a:2b:da:00:35:
15:93:9e:24:3c:52:8d:b3:b4:82:d1:14:47:82:b2:
4b:07:07:7a:6b:bb:c3:21:c5:17:74:f5:fc:96:48:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:1E:06:AD:E3:8F:59:20:C7:8C:8E:DC:80:1F:74:85:36:BA:78
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:81:3c:84:21:16:05:ef:96:7b:40:dd:a6:dd:f2:75:65:c5:
f1:cc:61:b7:a4:02:6b:21:1c:5b:9f:1e:be:4d:bf:af:04:35:
50:2d:de:94:f6:37:7b:03:fb:7a:b0:46:97:49:f9:99:f8:c2:
d0:11:d1:34:c1:5a:5f:16:1e:08:f8:b8:ac:66:25:11:f2:66:
55:0f:26:83:3d:e6:ca:6f:52:93:5b:24:c7:88:4a:db:21:3d:
88:cc:b4:ed:79:68:9b:de:e7:64:39:86:ce:b3:15:50:3a:f8:
4d:f3:c8:10:c5:0f:a3:9f:74:f0:03:a9:45:ca:57:4b:33:db:
14:e0:ea:89:85:03:37:af:48:b9:07:1d:a2:4f:99:94:b5:dd:
58:e0:55:32:12:23:fc:1e:65:cf:7d:86:70:5e:81:b9:a1:b2:
0b:f3:4f:9b:d8:4b:5f:57:89:6e:d3:fa:7d:f7:a4:e1:d9:b9:
8a:0e:ca:e0:03:c9:99:e0:35:63:35:41:40:2f:a1:9e:85:06:
ac:0f:59:32:5b:1c:a2:07:4d:0d:9b:b4:2d:57:0f:d6:0f:a2:
d0:36:75:ab:62:0e:52:5c:72:a1:58:b7:d9:2c:ff:f4:5b:56:
4a:32:d6:50:80:9a:22:f4:73:ab:cb:21:95:af:c0:2a:22:70:
8e:ab:5c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obf54hM1wGlaYpC+wtjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDQyM2FhMTdkMDRmNTZjNjkwMDQwMzQ1ZDY3NjJiYmZk
MWY4OGIwHhcNMjUwNjI4MTMwMjIwWhcNMjUwNjI5MTMwMjIwWjAzMTEwLwYDVQQD
EyhlOWMyMWUwNmFkZTM4ZjU5MjBjNzhjOGVkYzgwMWY3NDg1MzZiYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqugmeI1mQzqLf+WRLRc54rQOP4br
t+JdDc1jLKlNz39CV0bxTFgZa9jR05AwIl1mbrbKzJ7pel5gIq5lIPyF8GGoWLgG
4l79AdBPHtnwcGzhHR0apLibPEE1kZJC0xhWjo4rMU2VjVXLbvUAys+EIy2jT+/J
RR2uj2m/6UgmLrO0XpmIf927Rim01j2Ho22g3JFpJXoP32S1FLUR+0ybpWv4A3KH
l7/LDjU567IZtXlvkoelAOWI3sRVUZkVLlSX9hQ25P0zxpK5mzlSxcTcZ0LAwqB5
wQokaY6ImivaADUVk54kPFKNs7SC0RRHgrJLBwd6a7vDIcUXdPX8lkj5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnCHgat449ZIMeMjtyAH3SFNrp4MB8GA1UdIwQY
MBaAFEgEI6oX0E9WxpAEA0XWdiu/0fiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEt
Y2RhNTc0MjZkZTIyLzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9mMGY1ZmYtYTgyMC00ZGJhLThlZTEtY2RhNTc0MjZkZTIy
LzEvU0FRanFoZlFUMWJHa0FRRFJkWjJLN19SLUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4E8hCEW
Be+We0Ddpt3ydWXF8cxht6QCayEcW58evk2/rwQ1UC3elPY3ewP7erBGl0n5mfjC
0BHRNMFaXxYeCPi4rGYlEfJmVQ8mgz3mym9Sk1skx4hK2yE9iMy07Xlom97nZDmG
zrMVUDr4TfPIEMUPo5908AOpRcpXSzPbFODqiYUDN69IuQcdok+ZlLXdWOBVMhIj
/B5lz32GcF6BuaGyC/NPm9hLX1eJbtP6ffek4dm5ig7K4APJmeA1YzVBQC+hnoUG
rA9ZMlscogdNDZu0LVcP1g+i0DZ1q2IOUlxyoVi32Sz/9FtWSjLWUICaIvRzq8sh
la/AKiJwjqtc6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:51 2025 by rpki-client