Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: 4cGvPOPZJWmwYJtqBMMQIFcSwqXaWEU9q9CPyw390iw=
Subject key identifier: B6:FE:10:E2:B5:69:A1:40:A1:0E:86:F4:A2:44:7B:7A:95:79:D7:74
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 0197B88F9C996A739B7B1D2A6AD929D830F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:01:48 +0000
Manifest this update: Sat 28 Jun 2025 22:01:48 +0000
Manifest next update: Sun 29 Jun 2025 22:01:48 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: 1ml72ElCmiyyk26GFSvMDwpuCtZDVvg/tFsoT/C4/bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:9c:99:6a:73:9b:7b:1d:2a:6a:d9:29:d8:30:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: Jun 28 22:01:48 2025 GMT
Not After : Jun 29 22:01:48 2025 GMT
Subject: CN=b6fe10e2b569a140a10e86f4a2447b7a9579d774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d1:51:38:85:27:05:d3:1b:8c:e1:5c:c5:24:
d0:17:82:51:6b:1b:08:77:ac:01:fd:3f:b8:60:7e:
81:6a:dc:1f:b5:90:79:b0:97:40:7d:5a:d1:ca:4c:
55:6a:a6:71:1c:1e:0d:0a:bc:dd:9c:22:b9:4d:dc:
19:2d:23:e3:55:f5:91:38:8c:4c:d0:1d:63:04:d0:
90:5a:a5:8f:cf:67:e5:c3:88:6a:ff:1c:cc:c1:7b:
b0:03:85:4b:26:89:62:fb:76:b3:ab:5d:1e:2b:f9:
3a:c4:d7:c1:d9:57:04:d2:ac:c2:a4:a9:7c:76:a8:
92:e2:ae:b7:4d:c7:be:04:f2:8e:45:70:ae:71:0a:
b6:b2:13:2a:4e:63:04:25:76:35:9a:22:e1:fc:8c:
87:4a:a6:9d:f9:8a:40:01:43:8f:06:d2:b1:f7:60:
2b:23:f7:75:7a:88:8e:47:d1:70:e8:b5:3c:16:d8:
55:d1:b4:18:60:37:e0:a8:32:21:d0:de:c9:16:ab:
dd:cb:0a:11:48:e9:62:ca:11:2f:2e:0b:a9:a2:39:
52:b7:7a:3f:a1:d7:c0:08:95:1f:be:5f:41:ca:6d:
5e:bb:f2:0a:5f:f3:72:7a:d6:6b:8f:93:b3:34:bc:
a3:26:da:14:60:25:6e:7c:cc:54:02:e1:52:c3:af:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FE:10:E2:B5:69:A1:40:A1:0E:86:F4:A2:44:7B:7A:95:79:D7:74
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b4:67:82:04:03:c2:26:ac:d4:f9:e3:46:dc:a9:ff:65:b0:
98:04:3d:55:b3:e3:cb:3a:7b:ed:86:cb:e7:45:50:d4:bb:27:
8a:f8:55:49:5b:34:70:c4:32:6a:a1:11:d9:11:6c:0e:95:d6:
5a:ff:82:4e:a1:6a:25:ed:67:4f:5b:99:16:96:c6:75:b8:d5:
de:ce:7a:2b:c3:c9:7e:a7:df:31:90:92:08:18:1d:5e:58:22:
a1:4d:6c:4a:0d:c2:8f:0b:6e:2c:3c:29:3d:40:be:4a:f9:f1:
c3:86:43:27:84:b7:16:2d:01:6a:dd:f2:a6:af:0d:c3:80:a5:
51:d8:f2:92:9c:2e:26:fb:13:d1:f6:16:67:9d:e6:73:1c:4b:
4e:ac:23:16:15:b9:9a:16:07:e7:f4:7e:ca:35:4e:ce:e9:c0:
62:40:ff:34:37:9e:25:4f:5d:cb:b8:af:b8:25:d9:7b:89:3b:
a0:1b:2f:31:0b:4a:2a:c9:37:d9:5d:de:f2:de:02:8d:ce:74:
ed:2f:0f:5f:d2:5a:4f:67:14:92:b9:ac:7e:b0:7d:99:51:b9:
0a:92:67:29:3b:77:e0:18:b6:38:e8:11:8b:dc:ba:8f:ab:73:
ab:28:28:fa:58:4c:df:e3:4a:fc:f1:4a:fb:b3:ef:49:a2:5d:
66:16:ca:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j5yZanObex0qatkp2DD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YWIzYmY4MzYyNjVmMmFhYjhmOTE5YmU4Y2ZiNmViNzQ3
ZTVmNzgwHhcNMjUwNjI4MjIwMTQ4WhcNMjUwNjI5MjIwMTQ4WjAzMTEwLwYDVQQD
EyhiNmZlMTBlMmI1NjlhMTQwYTEwZTg2ZjRhMjQ0N2I3YTk1NzlkNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtFROIUnBdMbjOFcxSTQF4JRaxsI
d6wB/T+4YH6BatwftZB5sJdAfVrRykxVaqZxHB4NCrzdnCK5TdwZLSPjVfWROIxM
0B1jBNCQWqWPz2flw4hq/xzMwXuwA4VLJoli+3azq10eK/k6xNfB2VcE0qzCpKl8
dqiS4q63Tce+BPKORXCucQq2shMqTmMEJXY1miLh/IyHSqad+YpAAUOPBtKx92Ar
I/d1eoiOR9Fw6LU8FthV0bQYYDfgqDIh0N7JFqvdywoRSOliyhEvLgupojlSt3o/
odfACJUfvl9Bym1eu/IKX/NyetZrj5OzNLyjJtoUYCVufMxUAuFSw6/KkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLb+EOK1aaFAoQ6G9KJEe3qVedd0MB8GA1UdIwQY
MBaAFEarO/g2Jl8qq4+Rm+jPtut0fl94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMt
M2QyODZlODY1MWZjLzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMtM2QyODZlODY1MWZj
LzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbRnggQD
wias1PnjRtyp/2WwmAQ9VbPjyzp77YbL50VQ1LsnivhVSVs0cMQyaqER2RFsDpXW
Wv+CTqFqJe1nT1uZFpbGdbjV3s56K8PJfqffMZCSCBgdXlgioU1sSg3CjwtuLDwp
PUC+Svnxw4ZDJ4S3Fi0Bat3ypq8Nw4ClUdjykpwuJvsT0fYWZ53mcxxLTqwjFhW5
mhYH5/R+yjVOzunAYkD/NDeeJU9dy7ivuCXZe4k7oBsvMQtKKsk32V3e8t4Cjc50
7S8PX9JaT2cUkrmsfrB9mVG5CpJnKTt34Bi2OOgRi9y6j6tzqygo+lhM3+NK/PFK
+7PvSaJdZhbK4A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:13:58 2025 by rpki-client