Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
File: cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft (raw, json)
Hash identifier: d/dx67BOhql0agRncRTOnH/bPjFbQJv+DvaHaSV1Yts=
Subject key identifier: 8F:02:48:AD:03:F2:BC:05:39:82:B6:8B:70:54:C4:D0:BB:B0:D5:FF
Authority key identifier: 70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
Certificate issuer: /CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Certificate serial: 0197C4935FF8C8CA9AAEDC69471605AC2172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 06:01:22 +0000
Manifest this update: Tue 01 Jul 2025 06:01:22 +0000
Manifest next update: Wed 02 Jul 2025 06:01:22 +0000
Files and hashes: 1: cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl (hash: mD4vv5i6GHqS0PDo4ijYTQYbPRM8WyH2ossNXHSL3ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:5f:f8:c8:ca:9a:ae:dc:69:47:16:05:ac:21:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Validity
Not Before: Jul 1 06:01:22 2025 GMT
Not After : Jul 2 06:01:22 2025 GMT
Subject: CN=8f0248ad03f2bc053982b68b7054c4d0bbb0d5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:91:4c:4b:27:8d:dd:05:9e:00:83:ed:99:
f4:12:f9:76:75:96:b4:e2:56:29:c9:79:4a:f1:bf:
96:5f:cd:3b:b3:ef:f6:17:f3:bc:54:f1:39:e1:7e:
84:05:ca:3c:22:87:90:fc:19:25:11:c0:94:59:d4:
a3:23:68:1b:ec:67:c0:21:76:9e:7f:2d:52:df:95:
15:a8:60:78:68:c7:da:94:38:75:b4:b9:f8:16:b5:
29:00:76:f7:d6:c1:6e:7f:5a:a0:44:ee:d2:3d:b7:
3b:dd:44:65:f9:f7:a8:37:21:94:0d:84:1a:7b:26:
d6:f7:99:9b:82:d6:0c:cf:ba:ba:42:b5:1f:07:7f:
38:9a:00:c3:05:ce:8c:74:dc:01:72:c6:8b:c5:cf:
21:38:c2:f9:0f:c8:a1:c5:24:02:60:7a:62:1f:9a:
18:7a:ba:b2:36:80:5f:8c:e5:b1:5c:37:e6:37:a7:
6c:46:4c:2e:c3:04:5a:92:a1:1a:8f:19:87:fb:f0:
2f:61:b6:d1:4e:29:96:15:17:f3:a6:30:52:71:7d:
c7:7f:71:e3:a0:d4:61:85:9a:1f:eb:fa:0d:6c:4a:
48:0e:ac:b2:9d:dc:4a:b8:d3:2a:37:16:2f:96:6b:
9d:95:5a:09:d4:4a:ab:ea:8b:e6:85:3e:1c:17:50:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:48:AD:03:F2:BC:05:39:82:B6:8B:70:54:C4:D0:BB:B0:D5:FF
X509v3 Authority Key Identifier:
keyid:70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:77:3e:d9:64:45:c0:11:8c:3f:b0:a7:e2:31:4f:30:a5:b1:
3e:aa:af:5d:5b:44:a6:01:c1:f7:a7:f3:d9:e0:5e:cc:ca:59:
2a:30:a4:89:f7:84:3e:fc:41:6b:bc:38:d7:da:5e:12:c9:c6:
ab:d3:d7:b4:99:ac:94:60:37:ea:ea:68:7c:a0:30:46:2f:68:
07:a3:d4:b5:37:9f:c8:5a:dc:c5:54:0a:a5:22:f4:4a:41:6d:
f3:46:6b:fd:ff:70:87:c5:61:b7:29:a5:38:74:ca:c5:b9:c4:
c8:be:ef:48:06:49:8d:2a:c8:b3:c9:ca:9f:84:3c:a3:e4:54:
e8:15:16:64:52:d9:10:f5:ae:74:4d:a7:e4:8c:49:2e:3d:8b:
8d:6f:d7:51:0f:9c:02:fd:42:e3:8d:34:39:ee:9f:8b:e9:45:
7e:6a:e4:e1:fd:bf:2a:b5:ac:78:4c:d2:ad:9a:94:2a:83:f3:
20:c4:26:40:4b:54:1b:88:22:cd:a4:7a:4e:dd:05:26:4f:e7:
ad:cb:58:70:84:35:f3:d9:ea:6f:e2:97:39:79:18:c7:6b:ae:
89:04:b8:8c:9b:45:1c:00:02:2b:85:6d:cf:17:2d:bd:88:3f:
7b:bd:b9:d7:47:da:b6:b7:46:ae:a7:6b:b6:d4:e1:86:21:0a:
f6:61:6a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEk1/4yMqartxpRxYFrCFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYjQxM2ZhNzgyYTMwNDI4MzBkYTIzYWEzZjM1OTRhN2Q1
ZWEyZjQwHhcNMjUwNzAxMDYwMTIyWhcNMjUwNzAyMDYwMTIyWjAzMTEwLwYDVQQD
Eyg4ZjAyNDhhZDAzZjJiYzA1Mzk4MmI2OGI3MDU0YzRkMGJiYjBkNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroiRTEsnjd0FngCD7Zn0Evl2dZa0
4lYpyXlK8b+WX807s+/2F/O8VPE54X6EBco8IoeQ/BklEcCUWdSjI2gb7GfAIXae
fy1S35UVqGB4aMfalDh1tLn4FrUpAHb31sFuf1qgRO7SPbc73URl+feoNyGUDYQa
eybW95mbgtYMz7q6QrUfB384mgDDBc6MdNwBcsaLxc8hOML5D8ihxSQCYHpiH5oY
erqyNoBfjOWxXDfmN6dsRkwuwwRakqEajxmH+/AvYbbRTimWFRfzpjBScX3Hf3Hj
oNRhhZof6/oNbEpIDqyyndxKuNMqNxYvlmudlVoJ1Eqr6ovmhT4cF1CwiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8CSK0D8rwFOYK2i3BUxNC7sNX/MB8GA1UdIwQY
MBaAFHC0E/p4KjBCgw2iOqPzWUp9XqL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0xRVC1uZ3FNRUtERGFJNm9fTlpTbjFlb3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84Y2YxZjUtMjA5NS00OGZhLThjM2Et
YTMxMzdiYzgzZDBhLzEvY0xRVC1uZ3FNRUtERGFJNm9fTlpTbjFlb3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi84Y2YxZjUtMjA5NS00OGZhLThjM2EtYTMxMzdiYzgzZDBh
LzEvY0xRVC1uZ3FNRUtERGFJNm9fTlpTbjFlb3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXc+2WRF
wBGMP7Cn4jFPMKWxPqqvXVtEpgHB96fz2eBezMpZKjCkifeEPvxBa7w419peEsnG
q9PXtJmslGA36upofKAwRi9oB6PUtTefyFrcxVQKpSL0SkFt80Zr/f9wh8Vhtyml
OHTKxbnEyL7vSAZJjSrIs8nKn4Q8o+RU6BUWZFLZEPWudE2n5IxJLj2LjW/XUQ+c
Av1C4400Oe6fi+lFfmrk4f2/KrWseEzSrZqUKoPzIMQmQEtUG4gizaR6Tt0FJk/n
rctYcIQ189nqb+KXOXkYx2uuiQS4jJtFHAACK4VtzxctvYg/e72510fatrdGrqdr
ttThhiEK9mFqeg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:20:20 2025 by rpki-client