Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: lmWFvfNDfiuSuz73mb/qqorE4vsOYEWYtunklGPUjOA=
Subject key identifier: 41:54:CD:B3:2D:6A:41:FE:37:9C:32:69:EF:B7:5E:90:4B:BD:BD:E9
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 0197C86F8C9CFAF71280B4AA1E75C22A3E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 00:00:42 +0000
Manifest this update: Wed 02 Jul 2025 00:00:42 +0000
Manifest next update: Thu 03 Jul 2025 00:00:42 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: Q8FZM/8keLcxGbPX7WY+UyOPE2MXwSr9PvTXO/3CFP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:6f:8c:9c:fa:f7:12:80:b4:aa:1e:75:c2:2a:3e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Jul 2 00:00:42 2025 GMT
Not After : Jul 3 00:00:42 2025 GMT
Subject: CN=4154cdb32d6a41fe379c3269efb75e904bbdbde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:9b:e4:2c:09:29:3c:33:79:47:09:1a:9a:
dd:d0:d2:91:4e:96:53:0b:3b:da:65:f9:52:c6:af:
9f:39:7c:7c:f8:95:26:9d:c9:8a:e3:99:ab:f0:6c:
91:4c:a5:a8:b8:0e:4e:bd:4f:9e:74:8a:1b:f8:6c:
18:ec:94:1b:ca:c0:9a:fc:87:57:75:99:59:f5:9e:
6a:a4:2f:2b:52:46:41:5b:fb:3e:2c:69:48:e1:c9:
e6:ec:2b:59:26:43:2f:ca:7f:3a:3d:f1:68:c9:99:
85:09:5b:82:d3:7b:b5:c1:4d:af:2c:0a:89:e5:a9:
16:88:be:70:26:df:9e:6f:5e:45:e0:ef:26:1d:b4:
a3:fe:13:b5:40:66:9f:14:62:5e:58:e4:c5:d4:6e:
f7:e2:30:b4:ce:1a:ca:91:19:b1:dd:d6:e5:9d:50:
97:08:99:1e:bf:b5:c2:91:8b:98:0c:4b:5b:5a:47:
74:f4:1f:bd:1c:da:29:3b:42:39:d6:9f:b7:36:bc:
72:33:f2:8a:62:db:00:71:3c:80:62:ff:93:f5:f8:
f2:84:37:1b:f2:6e:f5:36:8a:7f:df:bf:b0:ba:df:
0b:cc:1a:db:9d:9a:90:57:cf:2f:60:f0:ac:ae:4c:
57:7e:07:46:37:eb:78:1f:a3:fd:1d:be:2d:82:6e:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:54:CD:B3:2D:6A:41:FE:37:9C:32:69:EF:B7:5E:90:4B:BD:BD:E9
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c7:c8:33:bb:d9:ef:9a:7e:b3:3f:18:ab:2b:6f:d1:a5:52:
2d:3d:96:39:0e:70:1f:7b:59:57:ef:e1:4f:c6:9b:4a:29:0a:
d7:61:d5:5d:67:af:7a:c7:69:22:c8:47:2a:fd:8b:9a:34:06:
73:f6:1f:4c:7a:19:dd:37:b8:1e:21:b2:20:c2:2b:74:3e:c3:
cc:9e:f8:cd:71:72:8a:74:96:9f:ab:da:e6:4e:73:17:af:e5:
49:3d:65:01:c2:70:99:ee:4e:2e:21:ad:ce:5c:d1:34:a3:56:
a8:90:f1:8f:af:a1:8e:94:ed:b0:14:0c:88:d9:9e:53:03:0a:
b2:56:d8:c9:69:2c:1f:1b:19:cb:23:05:b1:2e:73:4e:57:af:
e1:3f:c9:c1:dd:07:b7:a1:20:89:a2:38:1a:98:9b:83:93:89:
c5:8d:76:f3:0f:88:c2:d0:39:bb:29:9a:4c:02:eb:0c:88:0f:
a9:5f:07:97:4b:0c:24:95:72:0e:63:b1:f6:ee:5e:f5:6b:b0:
ff:5c:23:1c:43:60:99:78:44:b4:b6:97:ee:37:1c:3a:0e:99:
bf:fe:83:8e:e5:ec:83:b9:c3:9c:f0:19:d4:f0:d5:cd:ba:a1:
14:90:f2:c3:d1:e0:73:9c:26:ed:76:fc:62:69:da:84:5a:ee:
a6:c9:be:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfIb4yc+vcSgLSqHnXCKj5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4
ZjNkYmYwHhcNMjUwNzAyMDAwMDQyWhcNMjUwNzAzMDAwMDQyWjAzMTEwLwYDVQQD
Eyg0MTU0Y2RiMzJkNmE0MWZlMzc5YzMyNjllZmI3NWU5MDRiYmRiZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw+b5CwJKTwzeUcJGprd0NKRTpZT
CzvaZflSxq+fOXx8+JUmncmK45mr8GyRTKWouA5OvU+edIob+GwY7JQbysCa/IdX
dZlZ9Z5qpC8rUkZBW/s+LGlI4cnm7CtZJkMvyn86PfFoyZmFCVuC03u1wU2vLAqJ
5akWiL5wJt+eb15F4O8mHbSj/hO1QGafFGJeWOTF1G734jC0zhrKkRmx3dblnVCX
CJkev7XCkYuYDEtbWkd09B+9HNopO0I51p+3NrxyM/KKYtsAcTyAYv+T9fjyhDcb
8m71Nop/37+wut8LzBrbnZqQV88vYPCsrkxXfgdGN+t4H6P9Hb4tgm57vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFUzbMtakH+N5wyae+3XpBLvb3pMB8GA1UdIwQY
MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt
OGZlZDUwOTA5NzcwLzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw
LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8fIM7vZ
75p+sz8Yqytv0aVSLT2WOQ5wH3tZV+/hT8abSikK12HVXWevesdpIshHKv2LmjQG
c/YfTHoZ3Te4HiGyIMIrdD7DzJ74zXFyinSWn6va5k5zF6/lST1lAcJwme5OLiGt
zlzRNKNWqJDxj6+hjpTtsBQMiNmeUwMKslbYyWksHxsZyyMFsS5zTlev4T/Jwd0H
t6EgiaI4Gpibg5OJxY128w+IwtA5uymaTALrDIgPqV8Hl0sMJJVyDmOx9u5e9Wuw
/1wjHENgmXhEtLaX7jccOg6Zv/6DjuXsg7nDnPAZ1PDVzbqhFJDyw9Hgc5wm7Xb8
YmnahFrupsm++w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 07:18:23 2025 by rpki-client