Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: 62z/5mm+jtqSuyXRn1XAc20CFXbU+uLm2difbsGtg1M=
Subject key identifier: F2:15:4B:EF:38:F6:5F:D6:23:6A:97:AE:34:0C:A7:10:6C:35:E7:02
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 0197B890882DFDCCA564E639A9B6DE5BB287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 14EF
Signing time: Sat 28 Jun 2025 22:02:49 +0000
Manifest this update: Sat 28 Jun 2025 22:02:49 +0000
Manifest next update: Sun 29 Jun 2025 22:02:49 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: JWodeNJJTB7zT3EZjJqC75z6Q/Os/aeuHUpF8xevkZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:88:2d:fd:cc:a5:64:e6:39:a9:b6:de:5b:b2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Jun 28 22:02:49 2025 GMT
Not After : Jun 29 22:02:49 2025 GMT
Subject: CN=f2154bef38f65fd6236a97ae340ca7106c35e702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:54:fc:52:fc:86:3d:5b:fa:60:41:5b:9f:53:
c2:ba:85:9e:6c:8b:c3:bb:21:43:d4:0c:fb:96:26:
90:6f:2b:24:a0:d0:2f:36:62:b3:71:ed:7f:4c:5e:
38:74:fe:90:f0:62:e5:50:6b:ef:db:e5:b8:93:be:
99:3f:1d:5c:7a:6c:73:61:f4:97:22:3d:f4:54:ed:
25:ff:54:fe:7f:22:fb:bb:87:35:78:30:1d:82:6d:
68:5b:2c:00:58:59:18:13:ad:f7:e5:78:94:80:42:
53:3a:9c:de:96:a8:6e:23:d2:d9:77:79:f7:22:56:
85:68:0d:a7:e9:9f:50:36:de:12:6d:58:ee:d2:e2:
6f:f2:ca:d1:3f:c3:5a:e6:ae:ab:ce:69:e4:f1:72:
18:2e:a9:81:87:1c:bf:a2:c6:ce:85:a7:16:02:eb:
94:03:9b:98:c4:0e:63:fe:a9:8d:4f:ac:14:45:84:
49:cf:89:33:36:75:a0:a9:f9:4d:36:8f:aa:76:11:
3c:a5:ac:cc:4b:07:90:26:be:c6:49:c3:73:41:24:
4f:6c:7e:67:fc:e8:04:98:89:45:51:f2:73:f9:b0:
7d:51:ff:11:66:f1:e5:37:43:fd:69:c4:1f:a5:b9:
8d:85:aa:91:55:c0:98:ce:d6:ec:8b:e8:15:58:08:
fe:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:15:4B:EF:38:F6:5F:D6:23:6A:97:AE:34:0C:A7:10:6C:35:E7:02
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8d:47:9b:50:a5:c8:f1:53:f5:f8:05:eb:10:8b:6e:82:cb:
96:8e:27:2c:3c:c6:26:92:0f:42:ec:b0:91:c7:0e:3b:0a:8e:
56:21:a5:22:ae:50:61:c1:e8:9f:e8:a7:95:3c:ae:92:76:ac:
b6:45:99:32:3b:dd:94:da:45:0e:1f:84:0d:42:21:f0:92:a9:
af:e2:97:3d:33:67:30:87:6b:e9:5d:7e:30:d8:c8:f4:0a:08:
77:c5:44:70:db:13:74:4e:81:46:45:08:ad:f7:b6:23:6f:f0:
59:1a:a4:75:dd:01:30:5d:6a:2b:03:9c:d8:b1:1e:97:34:86:
47:fe:6c:b4:4b:4f:07:69:f9:27:cc:fb:4e:3d:6c:6e:c8:7f:
95:77:16:04:4d:aa:d4:1f:9f:b3:cc:f5:42:20:f7:00:fc:05:
20:cd:ad:8c:d9:62:ce:bd:94:2b:b7:b7:79:31:15:5f:27:7b:
f4:c0:a2:df:f1:ed:56:dc:5f:ce:a6:15:9e:e7:92:d2:95:46:
da:50:de:d4:19:ef:3e:2d:bf:f3:c8:48:b2:ee:7b:b5:b9:b1:
46:c3:bc:6a:2f:d3:5d:50:4f:b7:22:c8:23:25:db:71:0d:2c:
73:84:ad:80:58:7a:bf:9d:01:d0:b7:a2:be:3d:ad:c0:07:56:
ce:f8:61:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kIgt/cylZOY5qbbeW7KHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzI1OGQ5N2M5YmMyODRkNDg1N2JjZWUzZGYwOTA4MzZi
Y2QyMTIwHhcNMjUwNjI4MjIwMjQ5WhcNMjUwNjI5MjIwMjQ5WjAzMTEwLwYDVQQD
EyhmMjE1NGJlZjM4ZjY1ZmQ2MjM2YTk3YWUzNDBjYTcxMDZjMzVlNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FT8UvyGPVv6YEFbn1PCuoWebIvD
uyFD1Az7liaQbyskoNAvNmKzce1/TF44dP6Q8GLlUGvv2+W4k76ZPx1cemxzYfSX
Ij30VO0l/1T+fyL7u4c1eDAdgm1oWywAWFkYE6335XiUgEJTOpzelqhuI9LZd3n3
IlaFaA2n6Z9QNt4SbVju0uJv8srRP8Na5q6rzmnk8XIYLqmBhxy/osbOhacWAuuU
A5uYxA5j/qmNT6wURYRJz4kzNnWgqflNNo+qdhE8pazMSweQJr7GScNzQSRPbH5n
/OgEmIlFUfJz+bB9Uf8RZvHlN0P9acQfpbmNhaqRVcCYztbsi+gVWAj+lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIVS+849l/WI2qXrjQMpxBsNecCMB8GA1UdIwQY
MBaAFKoyWNl8m8KE1IV7zuPfCQg2vNISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2It
Zjk4ZGM1MzM4ZDJiLzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2ItZjk4ZGM1MzM4ZDJi
LzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI1Hm1Cl
yPFT9fgF6xCLboLLlo4nLDzGJpIPQuywkccOOwqOViGlIq5QYcHon+inlTyuknas
tkWZMjvdlNpFDh+EDUIh8JKpr+KXPTNnMIdr6V1+MNjI9AoId8VEcNsTdE6BRkUI
rfe2I2/wWRqkdd0BMF1qKwOc2LEelzSGR/5stEtPB2n5J8z7Tj1sbsh/lXcWBE2q
1B+fs8z1QiD3APwFIM2tjNlizr2UK7e3eTEVXyd79MCi3/HtVtxfzqYVnueS0pVG
2lDe1BnvPi2/88hIsu57tbmxRsO8ai/TXVBPtyLIIyXbcQ0sc4StgFh6v50B0Lei
vj2twAdWzvhhCw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:28 2025 by rpki-client