Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: fDp/q+GElBDmF5wVKMDL7P39xZYPocmHlF6VhKSfQ6w=
Subject key identifier: 7E:3B:96:CD:22:EC:B6:5F:96:16:3A:AA:5C:6B:8D:60:6E:50:26:2E
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 0197B7EA5901688FC9168CC574A4345270CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: fc4brGlD2V9aXaMOkj_E0RZ_J08.roa (hash: OhUlbRmFgYOLeHLw8imL9BrjCyNfPZwGRzxzejrVjWo=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: EXFIe0hjhIe66USmnjG3Yf8m3w5zhD+hA30i3ZjOjiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:59:01:68:8f:c9:16:8c:c5:74:a4:34:52:70:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=7e3b96cd22ecb65f96163aaa5c6b8d606e50262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:cd:e2:43:85:b0:f8:b1:b7:5a:e2:41:e1:
4e:29:c5:75:ad:76:c8:93:eb:8a:ef:10:e2:0a:3c:
bb:6a:5c:df:bd:f2:9b:51:f6:05:36:59:83:fa:2f:
d1:eb:b0:48:7e:dc:a1:bc:fc:1b:c1:19:7b:87:3f:
9d:76:07:c4:df:a4:f6:51:72:ef:61:19:e6:0b:eb:
9a:f9:b1:c9:ff:bf:7a:a1:a0:84:cd:d9:a5:34:33:
a1:4b:ab:83:ac:13:0c:32:de:51:e4:38:b6:8c:59:
e3:f5:b0:7b:fa:c5:a3:60:50:04:aa:9c:f0:c0:fb:
e8:63:4c:55:c0:8b:9a:44:7f:f3:54:f0:35:f0:04:
dd:0f:eb:70:37:cd:4a:c4:90:c6:94:3d:8d:d0:7f:
f6:24:1f:ce:a4:d3:9b:09:49:61:94:f5:f4:a9:07:
a0:b8:0a:33:48:72:1c:13:06:fc:5d:e3:54:9c:f1:
c6:b9:6a:07:3d:d9:8e:1a:60:3e:3a:15:ee:24:24:
4c:7e:a1:76:0e:28:cb:b1:91:5d:e2:b2:e2:91:34:
d3:41:6b:df:13:2e:97:0d:da:72:e7:3f:97:3d:73:
24:22:f8:16:fa:e6:c4:4d:9d:8f:5d:6a:9a:a5:93:
b7:97:35:ee:9e:a9:76:2c:ff:90:c2:a8:e5:34:2e:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:96:CD:22:EC:B6:5F:96:16:3A:AA:5C:6B:8D:60:6E:50:26:2E
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9c:16:f3:3b:cd:16:b3:c0:ca:a1:ec:7e:e4:ee:de:73:da:
4f:c0:3b:0d:67:91:09:47:4f:8e:2d:49:ee:1a:ea:73:06:1a:
6e:1b:51:93:54:01:8f:62:12:4a:91:13:2d:d7:ab:fd:97:51:
40:01:00:0c:89:dc:16:69:0d:b5:e1:26:9b:b8:b7:67:56:98:
7c:f5:f8:5f:19:26:c6:2b:33:7f:ee:fe:62:6d:05:60:e5:a7:
d5:c5:e7:8b:ce:ae:34:a6:6f:b5:de:5e:08:06:a2:f2:0b:16:
10:88:b2:b9:0e:f0:48:6a:60:df:d0:ee:93:72:2e:9e:c0:01:
47:73:69:f7:5a:ea:42:28:06:44:03:e5:56:21:d7:f3:c0:67:
d6:23:1f:63:33:30:72:54:35:a7:71:66:94:b2:71:c2:70:a9:
5c:32:3f:05:76:98:c6:46:39:03:7b:d0:fc:bb:58:ac:99:9b:
d8:55:24:c6:e7:b2:6e:51:2b:93:43:fc:82:72:17:2d:ce:90:
1b:b4:e8:d6:1a:d7:83:a3:54:27:68:e7:02:b2:56:44:1a:ca:
02:f5:ea:2a:de:55:28:cf:68:20:14:ce:6d:bf:69:b4:db:9f:
ab:8d:f9:78:92:2d:bc:69:f6:de:71:ec:7a:e2:94:92:04:de:
69:5a:4c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36lkBaI/JFozFdKQ0UnDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTIzNTNkOWJkNWI4YzViNThjYzcxMDIxMzI0YmI5MGRk
MmRkOTEwHhcNMjUwNjI4MTkwMTE4WhcNMjUwNjI5MTkwMTE4WjAzMTEwLwYDVQQD
Eyg3ZTNiOTZjZDIyZWNiNjVmOTYxNjNhYWE1YzZiOGQ2MDZlNTAyNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/fN4kOFsPixt1riQeFOKcV1rXbI
k+uK7xDiCjy7alzfvfKbUfYFNlmD+i/R67BIftyhvPwbwRl7hz+ddgfE36T2UXLv
YRnmC+ua+bHJ/796oaCEzdmlNDOhS6uDrBMMMt5R5Di2jFnj9bB7+sWjYFAEqpzw
wPvoY0xVwIuaRH/zVPA18ATdD+twN81KxJDGlD2N0H/2JB/OpNObCUlhlPX0qQeg
uAozSHIcEwb8XeNUnPHGuWoHPdmOGmA+OhXuJCRMfqF2DijLsZFd4rLikTTTQWvf
Ey6XDdpy5z+XPXMkIvgW+ubETZ2PXWqapZO3lzXunql2LP+QwqjlNC4WNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH47ls0i7LZflhY6qlxrjWBuUCYuMB8GA1UdIwQY
MBaAFKviNT2b1bjFtYzHECEyS7kN0t2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUt
ZWVjNDkwZDUwNmY3LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUtZWVjNDkwZDUwNmY3
LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm5wW8zvN
FrPAyqHsfuTu3nPaT8A7DWeRCUdPji1J7hrqcwYabhtRk1QBj2ISSpETLder/ZdR
QAEADIncFmkNteEmm7i3Z1aYfPX4Xxkmxiszf+7+Ym0FYOWn1cXni86uNKZvtd5e
CAai8gsWEIiyuQ7wSGpg39Duk3IunsABR3Np91rqQigGRAPlViHX88Bn1iMfYzMw
clQ1p3FmlLJxwnCpXDI/BXaYxkY5A3vQ/LtYrJmb2FUkxueyblErk0P8gnIXLc6Q
G7To1hrXg6NUJ2jnArJWRBrKAvXqKt5VKM9oIBTObb9ptNufq435eJItvGn23nHs
euKUkgTeaVpM7Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:39 2025 by rpki-client