Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: +v0JMPGCg4WnlgDYuR8rkmpfll0XjcoRNy2BteZJnhI=
Subject key identifier: 2B:E7:10:DF:63:49:15:F2:EE:3E:71:4B:7D:60:93:EA:D6:1B:1A:36
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 0197B7B36E3165C758564EBE23373C93BC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 1248
Signing time: Sat 28 Jun 2025 18:01:19 +0000
Manifest this update: Sat 28 Jun 2025 18:01:19 +0000
Manifest next update: Sun 29 Jun 2025 18:01:19 +0000
Files and hashes: 1: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: lYNUOw+Yx7sG6FFEluPVGFB4Dy1udOyEhNOxN29bowg=)
2: oGPLcgnT5_jMQFeXtQh3bXaXriM.roa (hash: QUvCaj08Q2TK+WnTDqsu5pyPq9XzMOcObz9WAotvcYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:6e:31:65:c7:58:56:4e:be:23:37:3c:93:bc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Jun 28 18:01:19 2025 GMT
Not After : Jun 29 18:01:19 2025 GMT
Subject: CN=2be710df634915f2ee3e714b7d6093ead61b1a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:47:a1:10:fe:46:0f:b1:a3:7f:c8:87:c1:
db:f7:1d:ec:ca:7f:50:f2:88:d0:19:f2:da:f4:18:
8b:db:29:41:a8:6b:a0:f8:99:45:fb:a5:2d:f2:70:
82:fa:0d:e0:9d:b5:0f:1d:3c:2b:57:24:e9:58:bf:
3e:d3:2b:9f:76:c0:83:ff:f7:a0:1e:23:b3:7d:84:
79:35:77:c1:21:e2:db:6c:64:42:90:ac:af:41:5a:
d3:a5:e7:49:fa:0c:55:f5:00:49:4b:80:63:79:6b:
5a:49:03:63:dd:59:29:f5:9d:da:c9:3e:d7:4e:14:
74:2b:e2:e4:65:ea:68:42:34:5d:72:e4:cc:65:e7:
74:8f:77:5c:c6:49:f8:c2:2c:0a:91:d0:7c:b6:93:
5f:cf:05:82:07:ed:62:12:9d:21:07:95:5b:34:88:
d9:98:65:04:c3:d2:80:c7:a0:b4:c3:cc:55:bb:5b:
65:ad:05:53:04:8e:a0:aa:04:52:d6:79:89:27:2b:
55:dd:8b:e6:ec:dd:4d:24:86:c4:73:a3:ec:77:7f:
aa:4d:a4:e3:a6:75:98:47:3e:c5:a9:17:da:67:2f:
48:71:6a:77:03:2f:fc:ca:b0:62:57:66:24:d4:64:
61:21:90:e9:2d:2d:11:6e:ef:36:10:56:69:c1:da:
b4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E7:10:DF:63:49:15:F2:EE:3E:71:4B:7D:60:93:EA:D6:1B:1A:36
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d5:b7:53:d9:4e:29:3b:ef:28:c9:a7:ca:d7:c5:0d:4f:47:
60:cf:c0:c6:06:2a:ce:24:45:26:1d:c8:ea:98:c0:eb:16:27:
74:da:b7:3a:8d:33:19:5d:87:e1:9e:33:c3:0b:61:4a:ad:41:
cc:1e:fb:5b:78:b9:51:2b:36:1f:d0:e3:c9:5c:5d:85:c7:75:
97:34:15:49:86:7c:d1:09:0a:68:60:24:ab:98:71:e6:91:cf:
9c:db:63:ce:01:c6:10:95:ee:99:86:a9:81:a1:4d:11:90:2f:
3d:14:16:51:40:e3:6e:25:66:d7:99:18:0b:af:67:4e:e2:24:
49:f1:d2:a5:63:cf:3c:d8:9e:19:c5:76:f9:c5:f7:f7:f2:83:
d5:08:0b:97:2c:7d:67:04:c6:34:09:a6:52:db:35:00:1d:98:
48:f1:b7:81:4b:5e:9c:69:df:31:1b:da:72:ac:0b:cf:51:d6:
22:d6:da:f6:ce:84:d7:b1:41:57:bc:9e:3c:21:ce:e7:e5:d1:
7f:93:73:bc:45:39:f1:d6:87:be:9b:13:af:21:c4:81:5f:5d:
a3:7e:a6:c5:e5:52:10:dc:fa:4b:28:98:54:53:f5:3e:53:0c:
47:76:bb:b7:ed:d8:ae:05:b3:da:4f:d9:4b:27:4b:16:fe:2e:
e7:cf:6e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s24xZcdYVk6+Izc8k7x+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NmY5MDNmOTFhODVhNjBjNTQ2ZWUxMTQxMzQ4Y2MzYzgw
MzY5MjcwHhcNMjUwNjI4MTgwMTE5WhcNMjUwNjI5MTgwMTE5WjAzMTEwLwYDVQQD
EygyYmU3MTBkZjYzNDkxNWYyZWUzZTcxNGI3ZDYwOTNlYWQ2MWIxYTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr59HoRD+Rg+xo3/Ih8Hb9x3syn9Q
8ojQGfLa9BiL2ylBqGug+JlF+6Ut8nCC+g3gnbUPHTwrVyTpWL8+0yufdsCD//eg
HiOzfYR5NXfBIeLbbGRCkKyvQVrTpedJ+gxV9QBJS4BjeWtaSQNj3Vkp9Z3ayT7X
ThR0K+LkZepoQjRdcuTMZed0j3dcxkn4wiwKkdB8tpNfzwWCB+1iEp0hB5VbNIjZ
mGUEw9KAx6C0w8xVu1tlrQVTBI6gqgRS1nmJJytV3Yvm7N1NJIbEc6Psd3+qTaTj
pnWYRz7FqRfaZy9IcWp3Ay/8yrBiV2Yk1GRhIZDpLS0Rbu82EFZpwdq0cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvnEN9jSRXy7j5xS31gk+rWGxo2MB8GA1UdIwQY
MBaAFJlvkD+RqFpgxUbuEUE0jMPIA2knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzct
NTE5MGY3ODY5YTdmLzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMjAxMDEtMWM5Zi00NGM1LTgwNzctNTE5MGY3ODY5YTdm
LzEvbVctUVA1R29XbURGUnU0UlFUU013OGdEYVNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNW3U9lO
KTvvKMmnytfFDU9HYM/AxgYqziRFJh3I6pjA6xYndNq3Oo0zGV2H4Z4zwwthSq1B
zB77W3i5USs2H9DjyVxdhcd1lzQVSYZ80QkKaGAkq5hx5pHPnNtjzgHGEJXumYap
gaFNEZAvPRQWUUDjbiVm15kYC69nTuIkSfHSpWPPPNieGcV2+cX39/KD1QgLlyx9
ZwTGNAmmUts1AB2YSPG3gUtenGnfMRvacqwLz1HWItba9s6E17FBV7yePCHO5+XR
f5NzvEU58daHvpsTryHEgV9do36mxeVSENz6SyiYVFP1PlMMR3a7t+3YrgWz2k/Z
SydLFv4u589ugg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:04 2025 by rpki-client