Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: XwN9+Dipd6nLPTAitPHwuCN63gqQCNkHh7A/fWoXTn0=
Subject key identifier: 3C:3E:86:40:CD:63:93:3E:F4:F4:55:A2:32:B0:AD:7D:76:C3:8C:25
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 0197CEA8E1CF5045EFBCF806CDCCD1DB09C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 05BC
Signing time: Thu 03 Jul 2025 05:01:03 +0000
Manifest this update: Thu 03 Jul 2025 05:01:03 +0000
Manifest next update: Fri 04 Jul 2025 05:01:03 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: hQHbGCM6HdRzTHfvJCfIMgdkPImeb7mhMPyeRP7eByk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a8:e1:cf:50:45:ef:bc:f8:06:cd:cc:d1:db:09:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Jul 3 05:01:03 2025 GMT
Not After : Jul 4 05:01:03 2025 GMT
Subject: CN=3c3e8640cd63933ef4f455a232b0ad7d76c38c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:4d:0c:ae:f2:85:e7:83:9b:e6:43:a8:ae:
27:77:5e:50:50:1e:18:41:55:3d:33:ab:d8:ee:91:
e6:1b:65:0a:4a:f1:55:1d:b8:40:81:03:e3:cd:5e:
f7:4a:46:93:94:0b:8a:2e:b9:bb:ef:5e:79:42:36:
b7:ac:e3:76:66:77:94:2b:13:c5:ab:24:f2:7c:2c:
8d:37:b4:af:81:d9:95:5b:1a:72:21:a1:37:1c:1a:
21:a9:77:db:d8:02:a0:92:d8:bf:20:77:1f:ce:f1:
b1:a9:e4:6d:71:ad:4c:ce:9d:b9:ce:d8:c3:32:3d:
89:27:7a:09:31:ad:1c:bd:e4:95:fb:cd:c4:69:8c:
8c:7b:ed:bd:4d:b6:bd:79:8c:fe:12:23:ec:c9:6b:
ee:e9:c5:7b:64:9b:11:3b:35:7f:90:1f:e6:a3:e2:
88:d7:c1:e3:30:8f:a8:ce:7e:9f:8c:23:8b:aa:9a:
08:91:4f:cb:d2:41:a6:3e:30:53:70:cf:ff:fd:4f:
23:05:5a:b7:f9:90:fe:bf:ef:91:57:52:d1:9b:33:
d4:47:1b:2a:36:f1:96:19:74:7c:94:8c:db:d4:6a:
27:9e:05:89:2c:02:d6:98:a5:42:07:14:4f:57:8f:
64:d1:a8:02:f4:6b:90:ea:af:ad:98:27:b0:bb:6b:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3E:86:40:CD:63:93:3E:F4:F4:55:A2:32:B0:AD:7D:76:C3:8C:25
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:01:51:c9:5f:2d:86:37:8b:a1:af:51:17:e3:0a:3d:91:e0:
45:56:bf:05:56:d0:22:93:bd:db:7f:f0:2d:18:9c:9c:07:b1:
da:df:7e:36:51:73:68:36:75:24:71:f5:4e:ee:97:51:f2:4a:
56:49:ae:6e:54:ee:6b:d8:70:6a:1d:23:8e:b0:f0:eb:53:c7:
d8:e8:ea:08:9c:29:5d:d1:d0:14:45:34:d1:1f:44:54:e0:d1:
df:a3:f6:50:1a:54:55:49:2d:76:c3:82:2e:d1:9b:3f:e7:a7:
3a:57:9f:69:1e:23:be:28:4e:ef:69:8b:47:1c:01:f8:6f:e5:
94:b8:e5:c8:82:de:c5:52:d8:5a:77:a3:b7:9a:4e:fc:dc:97:
3a:b0:d3:54:dc:df:4d:55:d0:1c:ba:62:fd:4f:39:b4:30:78:
b2:09:14:44:2c:18:41:5e:ad:de:ab:47:34:e9:bf:ef:fc:fd:
c4:a7:be:c9:b2:41:90:d4:b1:b3:10:dc:49:3c:8c:45:69:c2:
c7:47:6e:bc:0b:26:f0:49:47:2f:23:ce:31:6a:ed:b7:3f:66:
7c:a8:31:23:d2:4c:78:49:0c:de:e0:87:58:97:38:33:c5:b0:
43:59:09:b4:4b:3f:6d:d4:1b:0a:e6:2e:8e:1b:4d:e8:29:f0:
af:3c:09:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOqOHPUEXvvPgGzczR2wnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0
ZWE1OWIwHhcNMjUwNzAzMDUwMTAzWhcNMjUwNzA0MDUwMTAzWjAzMTEwLwYDVQQD
EygzYzNlODY0MGNkNjM5MzNlZjRmNDU1YTIzMmIwYWQ3ZDc2YzM4YzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cBNDK7yheeDm+ZDqK4nd15QUB4Y
QVU9M6vY7pHmG2UKSvFVHbhAgQPjzV73SkaTlAuKLrm77155Qja3rON2ZneUKxPF
qyTyfCyNN7SvgdmVWxpyIaE3HBohqXfb2AKgkti/IHcfzvGxqeRtca1Mzp25ztjD
Mj2JJ3oJMa0cveSV+83EaYyMe+29Tba9eYz+EiPsyWvu6cV7ZJsROzV/kB/mo+KI
18HjMI+ozn6fjCOLqpoIkU/L0kGmPjBTcM///U8jBVq3+ZD+v++RV1LRmzPURxsq
NvGWGXR8lIzb1GonngWJLALWmKVCBxRPV49k0agC9GuQ6q+tmCewu2sYowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw+hkDNY5M+9PRVojKwrX12w4wlMB8GA1UdIwQY
MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt
OTRiYjgzYTIwMDI5LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5
LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAFRyV8t
hjeLoa9RF+MKPZHgRVa/BVbQIpO923/wLRicnAex2t9+NlFzaDZ1JHH1Tu6XUfJK
VkmublTua9hwah0jjrDw61PH2OjqCJwpXdHQFEU00R9EVODR36P2UBpUVUktdsOC
LtGbP+enOlefaR4jvihO72mLRxwB+G/llLjlyILexVLYWnejt5pO/NyXOrDTVNzf
TVXQHLpi/U85tDB4sgkURCwYQV6t3qtHNOm/7/z9xKe+ybJBkNSxsxDcSTyMRWnC
x0duvAsm8ElHLyPOMWrttz9mfKgxI9JMeEkM3uCHWJc4M8WwQ1kJtEs/bdQbCuYu
jhtN6CnwrzwJwg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:53:59 2025 by rpki-client