Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: OO5DNupqHXZoA7K4pFDUO134EljfyHWuuMwl2eZPAlY=
Subject key identifier: 8B:22:DF:C7:EB:A0:B7:EB:55:E5:B1:A4:38:6A:27:DF:49:73:90:73
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 0197B70EBA38E67C9F7DC09DE7FD89F37CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 067B
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: fY4jAqTd3HXt1M8aTKwAk9oF4AZH+rymNP5RtlM+ZL4=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ba:38:e6:7c:9f:7d:c0:9d:e7:fd:89:f3:7c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=8b22dfc7eba0b7eb55e5b1a4386a27df49739073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:b8:39:50:4c:52:9f:3c:52:f9:23:fc:f8:
bb:00:2e:2d:2a:e8:dd:4c:fb:ba:8e:a7:d9:5c:95:
f6:d5:37:17:30:4e:f3:09:65:a5:69:39:a7:59:19:
a6:73:ea:ba:41:de:0a:8d:4a:92:6a:1b:12:cb:6d:
73:50:0b:8b:9c:c8:bb:5f:61:14:70:7f:63:dd:f2:
1d:f0:9a:a9:f5:31:a4:3a:fb:b3:a4:2c:1b:11:73:
19:72:81:9f:cb:6f:ca:c8:e1:92:92:5e:f8:11:63:
fa:35:bc:47:74:bb:a5:33:e8:db:4f:3b:54:bb:fa:
ef:12:01:bd:f4:e7:e0:db:8d:1a:95:87:7f:f7:a4:
c4:3c:f0:cc:57:ca:3e:88:63:17:d6:0a:0b:c5:2e:
ac:ff:91:0b:f0:7f:e1:ab:ae:3e:35:25:9c:8c:4c:
7c:99:f5:fc:95:8e:df:25:e0:90:6e:54:91:5b:c9:
36:17:8c:26:d8:4f:bc:f0:1f:d6:77:b9:dd:e8:4f:
1f:f4:46:1c:cf:58:03:51:fb:ba:62:b7:85:b1:a3:
f0:78:92:32:60:ed:7a:d6:81:c9:9c:0d:05:81:18:
66:57:aa:53:b9:f2:5a:c7:5f:f7:27:f2:ea:0a:4c:
d4:65:e7:13:06:9f:5b:95:3c:af:ea:41:65:d9:26:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:22:DF:C7:EB:A0:B7:EB:55:E5:B1:A4:38:6A:27:DF:49:73:90:73
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:74:a9:ec:70:b0:1a:c3:5a:c6:a8:d2:e6:ef:e2:96:3f:a8:
6c:23:d6:07:8a:d5:d4:de:63:33:1f:81:b7:4c:d0:cb:01:9d:
44:e8:21:db:f4:10:a3:25:90:99:81:a1:d7:c4:8f:ef:d1:64:
e1:29:a9:b3:ba:c2:c1:5d:65:69:80:db:ad:61:85:eb:f1:5d:
24:cd:17:72:21:a1:7b:28:06:46:b3:ee:56:13:5a:ae:25:53:
dc:7f:0a:72:be:58:00:87:5b:ce:d5:ce:af:ed:90:8c:33:cc:
66:9b:fc:99:02:23:16:82:20:3c:7c:37:1c:a2:2e:e4:88:00:
e6:16:80:52:5a:ac:01:b1:f9:d8:fe:1c:a8:da:fa:88:7d:cf:
52:02:d3:af:90:ab:ac:3f:88:de:5c:57:dd:e0:d9:19:db:d3:
4d:ae:b2:e7:40:d0:6e:94:a2:ce:ca:45:d4:0e:ef:60:a0:a7:
22:ca:99:b1:b7:f0:35:2e:6a:51:5a:15:59:6e:c0:3d:8b:89:
a0:cb:33:91:f3:b6:73:eb:86:fe:ab:15:5b:6f:52:be:37:1d:
9e:85:7c:ab:c8:d7:39:38:ab:88:a9:d0:2b:e4:8b:06:3b:fc:
77:b0:40:53:18:c3:b4:74:ff:2e:1e:85:e1:02:b7:42:36:59:
4c:64:fe:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dro45nyffcCd5/2J83zTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjUxYWVhZjc3NGI2MzNhNDdmOTYwYTcwODliMTViMzVi
MWE0Y2IwHhcNMjUwNjI4MTUwMTI0WhcNMjUwNjI5MTUwMTI0WjAzMTEwLwYDVQQD
Eyg4YjIyZGZjN2ViYTBiN2ViNTVlNWIxYTQzODZhMjdkZjQ5NzM5MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIC4OVBMUp88Uvkj/Pi7AC4tKujd
TPu6jqfZXJX21TcXME7zCWWlaTmnWRmmc+q6Qd4KjUqSahsSy21zUAuLnMi7X2EU
cH9j3fId8Jqp9TGkOvuzpCwbEXMZcoGfy2/KyOGSkl74EWP6NbxHdLulM+jbTztU
u/rvEgG99Ofg240alYd/96TEPPDMV8o+iGMX1goLxS6s/5EL8H/hq64+NSWcjEx8
mfX8lY7fJeCQblSRW8k2F4wm2E+88B/Wd7nd6E8f9EYcz1gDUfu6YreFsaPweJIy
YO161oHJnA0FgRhmV6pTufJax1/3J/LqCkzUZecTBp9blTyv6kFl2SYwKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsi38froLfrVeWxpDhqJ99Jc5BzMB8GA1UdIwQY
MBaAFEL1Gur3dLYzpH+WCnCJsVs1saTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUt
MWJhNjUxNzRiZDFkLzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUtMWJhNjUxNzRiZDFk
LzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnSp7HCw
GsNaxqjS5u/ilj+obCPWB4rV1N5jMx+Bt0zQywGdROgh2/QQoyWQmYGh18SP79Fk
4Smps7rCwV1laYDbrWGF6/FdJM0XciGheygGRrPuVhNariVT3H8Kcr5YAIdbztXO
r+2QjDPMZpv8mQIjFoIgPHw3HKIu5IgA5haAUlqsAbH52P4cqNr6iH3PUgLTr5Cr
rD+I3lxX3eDZGdvTTa6y50DQbpSizspF1A7vYKCnIsqZsbfwNS5qUVoVWW7APYuJ
oMszkfO2c+uG/qsVW29SvjcdnoV8q8jXOTiriKnQK+SLBjv8d7BAUxjDtHT/Lh6F
4QK3QjZZTGT+OA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:16 2025 by rpki-client