Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier: 9BesKdQMu9f7CGssZ9byx9tHbEfUzHnvLRAHJpMpEtc=
Subject key identifier: BA:EA:00:3E:08:7E:88:8C:3E:83:F6:40:84:95:C5:AC:CE:F4:58:5C
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial: 0197B70E7679917D6EA3D1361F445B8BC61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number: 0E37
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: hWYo2aYE+eEx5z2UxXH3PJwKq1w7GzWU/DXOeNI3aRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:76:79:91:7d:6e:a3:d1:36:1f:44:5b:8b:c6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=baea003e087e888c3e83f6408495c5accef4585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:56:89:da:04:f7:f9:fa:bb:ab:f2:9d:83:
df:80:a0:c6:89:0c:38:3a:45:10:5d:8f:35:6f:56:
59:4b:a9:47:64:3b:ad:71:ec:48:92:f4:b4:35:92:
4c:cf:02:fa:1e:c8:28:11:a9:fa:96:c6:df:d0:68:
c6:a7:3b:d2:87:4f:bd:11:68:e0:c9:ad:69:f6:e3:
96:b9:5a:a9:3c:04:a2:8f:e6:09:ce:34:38:b9:14:
51:7e:42:19:f2:cb:ab:84:e3:bd:2e:7c:b7:12:d8:
1b:bf:d0:1d:db:fe:bb:d0:14:d5:e7:a2:27:48:17:
53:1a:66:f8:22:41:61:d1:0c:68:8a:e5:e2:4b:84:
80:2a:d1:c5:da:56:3f:96:0e:9a:03:a7:c9:28:11:
99:50:69:82:6d:24:a8:f6:af:e5:6b:af:98:43:e7:
27:1f:e8:6e:1f:4a:f8:1a:19:29:ae:6f:ab:84:8a:
95:a8:20:75:81:94:c4:78:e7:3b:76:14:18:a6:db:
2d:05:11:ee:11:93:b8:26:32:f3:7c:a1:47:88:12:
3e:9c:91:25:ef:5f:bb:95:8e:7d:38:0b:37:54:6d:
87:42:ce:26:21:4d:c6:07:49:a9:19:56:02:32:5b:
23:79:da:ad:87:08:4a:fe:a5:0f:e8:7c:4d:3f:b3:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EA:00:3E:08:7E:88:8C:3E:83:F6:40:84:95:C5:AC:CE:F4:58:5C
X509v3 Authority Key Identifier:
keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7b:92:0a:57:12:b6:90:b3:47:70:0c:1d:b4:87:f1:0d:aa:
97:fc:e7:f9:c5:ad:8d:bf:ac:1e:06:ba:5a:5c:e0:71:73:ea:
a9:4a:b1:d8:55:d5:77:9f:f5:28:31:6a:51:37:6c:67:e5:a5:
a9:33:b8:a2:fc:e4:86:f8:df:e9:0b:86:fd:8f:c2:93:2b:ec:
5d:03:4e:50:64:e1:a1:92:61:3e:e1:df:62:7d:81:cd:31:5e:
e3:c8:b4:47:6f:18:5d:00:d7:74:cd:42:6c:38:b8:c9:0a:2b:
0e:af:94:22:3b:fb:9d:f7:55:cd:da:f1:fd:86:c4:18:80:66:
2a:91:a8:06:3b:b9:40:4d:16:58:c4:e6:b8:b9:8b:97:5d:b7:
7f:c4:d2:af:fd:f7:83:f1:5d:e6:d5:d6:04:95:af:a3:11:61:
ae:75:bb:41:95:11:a5:2b:ba:16:a4:7d:5b:e0:41:01:30:0a:
d9:51:ee:71:54:17:cb:77:4f:d3:33:fd:5f:d6:5e:ab:39:24:
95:ad:27:58:87:c8:f3:d7:75:75:a1:7a:56:6e:69:c2:90:37:
b1:19:48:f8:42:05:e2:31:6a:93:01:31:03:69:0d:b1:e0:0c:
07:15:c3:31:71:7c:2a:d3:0a:bc:f5:a8:90:2a:f1:9f:06:b9:
a0:22:53:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnZ5kX1uo9E2H0Rbi8YeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMmE3MDc5MzhiYTYyZmUxOWU2NDc0ZGFjNzg3ZGYzZjhj
ZmRlZTQwHhcNMjUwNjI4MTUwMTA3WhcNMjUwNjI5MTUwMTA3WjAzMTEwLwYDVQQD
EyhiYWVhMDAzZTA4N2U4ODhjM2U4M2Y2NDA4NDk1YzVhY2NlZjQ1ODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGNWidoE9/n6u6vynYPfgKDGiQw4
OkUQXY81b1ZZS6lHZDutcexIkvS0NZJMzwL6HsgoEan6lsbf0GjGpzvSh0+9EWjg
ya1p9uOWuVqpPASij+YJzjQ4uRRRfkIZ8surhOO9Lny3Etgbv9Ad2/670BTV56In
SBdTGmb4IkFh0QxoiuXiS4SAKtHF2lY/lg6aA6fJKBGZUGmCbSSo9q/la6+YQ+cn
H+huH0r4Ghkprm+rhIqVqCB1gZTEeOc7dhQYptstBRHuEZO4JjLzfKFHiBI+nJEl
71+7lY59OAs3VG2HQs4mIU3GB0mpGVYCMlsjedqthwhK/qUP6HxNP7NMkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrqAD4IfoiMPoP2QISVxazO9FhcMB8GA1UdIwQY
MBaAFKoqcHk4umL+GeZHTax4ffP4z97kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMt
ZDcxNmY0MDY4MTM5LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMtZDcxNmY0MDY4MTM5
LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXuSClcS
tpCzR3AMHbSH8Q2ql/zn+cWtjb+sHga6WlzgcXPqqUqx2FXVd5/1KDFqUTdsZ+Wl
qTO4ovzkhvjf6QuG/Y/CkyvsXQNOUGThoZJhPuHfYn2BzTFe48i0R28YXQDXdM1C
bDi4yQorDq+UIjv7nfdVzdrx/YbEGIBmKpGoBju5QE0WWMTmuLmLl123f8TSr/33
g/Fd5tXWBJWvoxFhrnW7QZURpSu6FqR9W+BBATAK2VHucVQXy3dP0zP9X9Zeqzkk
la0nWIfI89d1daF6Vm5pwpA3sRlI+EIF4jFqkwExA2kNseAMBxXDMXF8KtMKvPWo
kCrxnwa5oCJTXw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:40 2025 by rpki-client