Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
File: qreGFvOzntSCDQTOCY6nwgZVMUs.mft (raw, json)
Hash identifier: VK/EfL/Vts3ANF+9N+wQafzh7zcCSNuBpsq71RbEwz4=
Subject key identifier: BC:3E:FF:F1:62:67:C7:3E:A4:9E:A9:27:D5:98:43:DA:32:8B:6E:51
Authority key identifier: AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
Certificate issuer: /CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Certificate serial: 0196A0BF653D3098CCDC94E9CE0CB4F9ECC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 14:00:19 +0000
Manifest this update: Mon 05 May 2025 14:00:19 +0000
Manifest next update: Tue 06 May 2025 14:00:19 +0000
Files and hashes: 1: qreGFvOzntSCDQTOCY6nwgZVMUs.crl (hash: J9Mv7zzmz+whengIUU4e+XfAHkpV/RkXneg+WfZZl+A=)
2: rFCa92sZ57rbSlpDFnJkYc6lQas.roa (hash: F4iKR691e2AK34cFxmtOhRMANb+mE4me/fLCv0E4c8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:65:3d:30:98:cc:dc:94:e9:ce:0c:b4:f9:ec:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab78616f3b39ed4820d04ce098ea7c20655314b
Validity
Not Before: May 5 14:00:19 2025 GMT
Not After : May 6 14:00:19 2025 GMT
Subject: CN=bc3efff16267c73ea49ea927d59843da328b6e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:02:e4:ee:8a:91:92:18:64:fb:08:fd:c0:
ec:6a:e9:26:8d:e3:a9:06:80:f9:b4:30:c1:17:d0:
67:31:17:78:63:5c:50:8c:3b:a9:cd:d9:9a:d1:71:
88:40:0f:38:e8:4c:3b:84:e0:36:9c:53:0d:ff:ae:
30:cd:10:ed:e3:72:1a:a7:60:1b:0f:ed:ac:d0:a4:
04:69:a2:60:89:b0:ea:1b:f0:19:45:75:dc:7b:54:
ac:20:83:15:aa:cc:ef:4b:ca:78:37:36:2f:d6:9b:
4e:26:cb:d6:64:2e:01:e9:92:30:99:ea:c2:85:9e:
9f:67:43:d5:f8:37:3f:82:87:ad:7f:87:fd:95:36:
5b:e4:05:07:d9:e8:0e:79:4c:99:7c:cf:99:fd:e5:
1a:72:5e:79:05:b8:ad:e1:30:c2:8e:2f:1f:bf:a4:
5c:12:1c:01:e5:65:57:8c:05:56:ce:18:6b:ef:f4:
6e:be:1a:3c:4f:b6:6c:02:ed:4c:2d:4b:b4:11:59:
5b:96:ea:f6:c7:45:c9:a3:e1:4b:cf:c5:2c:d4:01:
7a:1a:02:db:b6:7d:be:6e:35:fe:70:c5:95:40:2e:
8b:cd:3a:51:40:05:17:92:bf:85:98:49:17:7f:fc:
2f:76:3c:18:17:14:1f:51:6c:7c:bb:12:a8:16:76:
77:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3E:FF:F1:62:67:C7:3E:A4:9E:A9:27:D5:98:43:DA:32:8B:6E:51
X509v3 Authority Key Identifier:
keyid:AA:B7:86:16:F3:B3:9E:D4:82:0D:04:CE:09:8E:A7:C2:06:55:31:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qreGFvOzntSCDQTOCY6nwgZVMUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c38b6b-ab09-46aa-87ef-ebaa6ff7d886/1/qreGFvOzntSCDQTOCY6nwgZVMUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:67:0b:ba:5a:79:53:cd:cb:ba:98:c1:b5:d2:f6:7e:41:cf:
56:99:41:b5:e4:ab:f1:0f:d7:0d:9a:fd:f3:8d:63:b0:82:0f:
ad:35:ce:47:9d:27:20:a7:ea:69:33:f9:da:fa:37:92:6d:59:
17:5a:2b:d9:92:d0:d4:e5:97:cc:2d:57:89:70:96:bb:3f:ab:
fc:7f:50:67:ca:7f:49:33:58:aa:67:07:3b:72:cb:a5:e7:69:
b8:68:4e:51:ea:da:0f:2f:9d:74:48:3d:d1:d8:01:4a:4d:0f:
ad:67:43:e7:49:8f:bf:a1:26:ea:6d:5a:5a:56:c7:9b:61:71:
a6:11:a9:63:d4:1d:72:16:44:e2:94:0d:67:8e:a3:4a:8c:f3:
c7:f8:5f:8c:80:ac:2d:84:98:b5:50:c4:e1:4a:9a:b2:df:27:
17:17:c7:65:76:df:e7:04:a0:53:01:38:7c:0b:d1:72:b2:ee:
34:83:90:d6:c9:71:97:1e:66:46:43:bb:fb:d1:a9:a7:be:fc:
82:e4:b5:23:36:97:05:5b:1c:88:51:f8:e7:24:af:9f:ae:10:
26:54:c1:cb:46:e5:ce:e0:29:63:bd:59:6c:ca:65:71:0b:e2:
91:ab:38:8c:f3:f8:03:0e:5e:56:40:b8:13:91:17:15:f1:a9:
e0:67:06:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagv2U9MJjM3JTpzgy0+ezIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYjc4NjE2ZjNiMzllZDQ4MjBkMDRjZTA5OGVhN2MyMDY1
NTMxNGIwHhcNMjUwNTA1MTQwMDE5WhcNMjUwNTA2MTQwMDE5WjAzMTEwLwYDVQQD
EyhiYzNlZmZmMTYyNjdjNzNlYTQ5ZWE5MjdkNTk4NDNkYTMyOGI2ZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCwC5O6KkZIYZPsI/cDsaukmjeOp
BoD5tDDBF9BnMRd4Y1xQjDupzdma0XGIQA846Ew7hOA2nFMN/64wzRDt43Iap2Ab
D+2s0KQEaaJgibDqG/AZRXXce1SsIIMVqszvS8p4NzYv1ptOJsvWZC4B6ZIwmerC
hZ6fZ0PV+Dc/goetf4f9lTZb5AUH2egOeUyZfM+Z/eUacl55Bbit4TDCji8fv6Rc
EhwB5WVXjAVWzhhr7/Ruvho8T7ZsAu1MLUu0EVlblur2x0XJo+FLz8Us1AF6GgLb
tn2+bjX+cMWVQC6LzTpRQAUXkr+FmEkXf/wvdjwYFxQfUWx8uxKoFnZ3PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw+//FiZ8c+pJ6pJ9WYQ9oyi25RMB8GA1UdIwQY
MBaAFKq3hhbzs57Ugg0EzgmOp8IGVTFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXJlR0Z2T3pudFNDRFFUT0NZNm53Z1pWTVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jMzhiNmItYWIwOS00NmFhLTg3ZWYt
ZWJhYTZmZjdkODg2LzEvcXJlR0Z2T3pudFNDRFFUT0NZNm53Z1pWTVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jMzhiNmItYWIwOS00NmFhLTg3ZWYtZWJhYTZmZjdkODg2
LzEvcXJlR0Z2T3pudFNDRFFUT0NZNm53Z1pWTVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2cLulp5
U83LupjBtdL2fkHPVplBteSr8Q/XDZr9841jsIIPrTXOR50nIKfqaTP52vo3km1Z
F1or2ZLQ1OWXzC1XiXCWuz+r/H9QZ8p/STNYqmcHO3LLpedpuGhOUeraDy+ddEg9
0dgBSk0PrWdD50mPv6Em6m1aWlbHm2FxphGpY9QdchZE4pQNZ46jSozzx/hfjICs
LYSYtVDE4Uqast8nFxfHZXbf5wSgUwE4fAvRcrLuNIOQ1slxlx5mRkO7+9Gpp778
guS1IzaXBVsciFH45ySvn64QJlTBy0blzuApY71ZbMplcQvikas4jPP4Aw5eVkC4
E5EXFfGp4GcGNw==
-----END CERTIFICATE-----
Generated at Mon May 5 16:14:16 2025 by rpki-client