Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: A4X3PI3cgkAJ6i0Hci1RasdplGF+Vku4iDSw6K9lAt8=
Subject key identifier: C7:36:71:63:B5:C8:EE:99:F9:9B:9A:D5:52:C9:DC:2F:ED:47:F3:2B
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 0197B74528B2EBE8838D190524E74143063D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 1111
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: HmBukZT5y59h2rRFoO2zqFwBxqKiAewidhc67+lXVRo=)
2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:28:b2:eb:e8:83:8d:19:05:24:e7:41:43:06:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=c7367163b5c8ee99f99b9ad552c9dc2fed47f32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:c8:f3:e7:a8:8a:f3:d1:ca:76:bf:a2:07:
6e:b9:ee:d1:39:40:b1:15:c5:96:e3:e5:cf:1a:40:
c2:51:04:cd:af:89:dd:41:8d:20:e0:29:ba:a7:25:
9e:07:f4:44:33:06:27:18:c7:a4:a6:7c:a5:31:f9:
34:b0:61:3c:93:11:3a:8f:4c:ec:05:24:3f:ed:67:
60:98:9a:f3:13:c3:63:a5:6f:22:9c:7d:93:0a:ec:
e3:88:cb:d0:48:cf:4d:9f:2b:1e:b9:39:ee:60:36:
51:b8:78:2d:ba:61:f8:de:92:01:8c:90:13:12:b8:
c2:a0:c6:03:da:bc:62:f1:1b:0e:9e:22:b6:2a:1c:
84:43:99:5d:63:c0:0d:7f:9d:fb:62:6c:0b:b5:5f:
2f:7f:3b:c6:d7:d1:ee:67:8a:c1:5e:f1:22:c8:c7:
50:75:97:f2:a7:9c:09:52:35:92:be:c4:6e:d9:fd:
ee:b4:03:f3:44:83:d9:35:dc:01:5a:70:8a:eb:cd:
a1:72:b6:0d:4f:7c:5c:ef:19:58:cd:74:5c:49:76:
78:cd:e0:c9:e4:e8:9f:d3:22:6c:2d:79:7e:58:02:
d1:be:9e:43:84:4f:2d:70:b4:61:af:70:3e:13:bd:
20:03:74:b5:1f:25:a3:cd:d4:1e:ac:35:e3:f2:ad:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:71:63:B5:C8:EE:99:F9:9B:9A:D5:52:C9:DC:2F:ED:47:F3:2B
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:86:39:99:77:0a:ad:55:a1:e2:10:04:46:2d:a9:57:37:f4:
2b:ce:f8:3b:04:f7:cb:95:52:df:81:62:89:4c:27:74:98:54:
72:28:b4:a7:a6:8d:2c:4d:5d:a8:16:95:09:31:d1:4d:96:db:
b3:d4:f0:b6:3f:6a:a5:79:9d:a3:06:17:47:3d:00:8c:4d:32:
5a:a7:90:15:c7:49:ae:63:fc:21:a0:70:8e:f2:4b:0c:7c:05:
02:7e:14:34:a1:32:c1:fb:7a:d3:dd:13:b9:1e:0b:7b:1a:37:
e1:d8:c8:19:52:7b:cb:8b:41:bb:61:de:8f:94:e7:35:16:e7:
d5:73:13:e3:d3:f0:fe:e0:db:de:d9:e7:fa:f4:a7:11:94:f2:
ce:19:80:64:18:1e:71:b0:46:8d:a0:3a:e5:3e:71:d9:d4:bc:
ea:6b:82:48:03:51:66:1c:76:bc:f6:6f:dc:0c:e5:8c:61:71:
24:e0:3f:69:6e:ff:86:22:17:c4:93:03:6f:ca:a4:80:2d:0e:
e4:ad:00:c1:27:7b:ad:30:cc:fb:b8:99:87:ef:47:94:54:0c:
78:15:83:49:ba:ae:78:55:e1:35:e4:ea:45:77:b8:07:8c:68:
02:6e:98:76:9b:d4:56:1b:80:99:48:91:d0:58:45:95:3b:ea:
fc:1d:07:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSiy6+iDjRkFJOdBQwY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWJkNzFjY2VhMzdlZDlhNzk4ZDVhMDY5YjIxNjljZjRk
NGU1OTIwHhcNMjUwNjI4MTYwMDUyWhcNMjUwNjI5MTYwMDUyWjAzMTEwLwYDVQQD
EyhjNzM2NzE2M2I1YzhlZTk5Zjk5YjlhZDU1MmM5ZGMyZmVkNDdmMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPPI8+eoivPRyna/ogduue7ROUCx
FcWW4+XPGkDCUQTNr4ndQY0g4Cm6pyWeB/REMwYnGMekpnylMfk0sGE8kxE6j0zs
BSQ/7WdgmJrzE8NjpW8inH2TCuzjiMvQSM9NnyseuTnuYDZRuHgtumH43pIBjJAT
ErjCoMYD2rxi8RsOniK2KhyEQ5ldY8ANf537YmwLtV8vfzvG19HuZ4rBXvEiyMdQ
dZfyp5wJUjWSvsRu2f3utAPzRIPZNdwBWnCK682hcrYNT3xc7xlYzXRcSXZ4zeDJ
5Oif0yJsLXl+WALRvp5DhE8tcLRhr3A+E70gA3S1HyWjzdQerDXj8q2LXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc2cWO1yO6Z+Zua1VLJ3C/tR/MrMB8GA1UdIwQY
MBaAFECb1xzOo37Zp5jVoGmyFpz01OWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQt
MmJmODc0YTY3MWU4LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yMjIzOTktZWNmMC00MzYwLWFkMzQtMmJmODc0YTY3MWU4
LzEvUUp2WEhNNmpmdG1ubU5XZ2FiSVduUFRVNVpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzYY5mXcK
rVWh4hAERi2pVzf0K874OwT3y5VS34FiiUwndJhUcii0p6aNLE1dqBaVCTHRTZbb
s9Twtj9qpXmdowYXRz0AjE0yWqeQFcdJrmP8IaBwjvJLDHwFAn4UNKEywft6090T
uR4Lexo34djIGVJ7y4tBu2Hej5TnNRbn1XMT49Pw/uDb3tnn+vSnEZTyzhmAZBge
cbBGjaA65T5x2dS86muCSANRZhx2vPZv3AzljGFxJOA/aW7/hiIXxJMDb8qkgC0O
5K0AwSd7rTDM+7iZh+9HlFQMeBWDSbqueFXhNeTqRXe4B4xoAm6YdpvUVhuAmUiR
0FhFlTvq/B0H9A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:12 2025 by rpki-client