Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: of5FURLJwF34toJmrvsWAPExIGEvYLq6Q6LPCrzxWyk=
Subject key identifier: C0:47:DE:CB:59:11:23:F0:10:05:A2:76:A5:A9:E7:F6:CB:69:B5:65
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 0197D1AAB7CB2EB5937305E1815E43BFBF54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 0FBD
Signing time: Thu 03 Jul 2025 19:01:55 +0000
Manifest this update: Thu 03 Jul 2025 19:01:55 +0000
Manifest next update: Fri 04 Jul 2025 19:01:55 +0000
Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: ma+X04VwP/c7wT+/VxcS2vStZS8UcgoYBzCqVGCySyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:aa:b7:cb:2e:b5:93:73:05:e1:81:5e:43:bf:bf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Jul 3 19:01:55 2025 GMT
Not After : Jul 4 19:01:55 2025 GMT
Subject: CN=c047decb591123f01005a276a5a9e7f6cb69b565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:31:39:4c:c1:1f:71:9c:b5:b9:c5:be:e1:
ee:dc:d7:be:45:81:5a:9f:c9:e2:45:d6:9e:67:ac:
87:f6:0d:bb:d8:4c:fa:5e:75:18:9f:f1:09:f5:34:
34:94:fd:b4:c0:ac:33:21:04:53:9e:00:d5:0f:b0:
9e:bf:c9:c2:96:ac:11:1b:ec:ca:35:5a:52:b9:f5:
60:77:be:b7:97:0a:3e:0b:bd:bf:ee:63:c3:32:4e:
69:6a:5d:d3:c1:bb:e3:4f:ee:b4:e9:64:ec:24:6b:
f7:5f:81:92:26:6c:ef:b0:c3:df:50:2a:3f:33:d5:
90:42:a1:39:54:d1:32:6f:3d:bf:35:5a:d6:f7:69:
d1:2b:f9:84:05:89:d2:30:ab:d3:bb:51:28:01:4e:
3b:97:2c:ba:5c:6d:73:ce:ef:db:f9:1c:ea:11:bc:
db:dc:55:1b:ce:6c:9a:ce:0a:59:78:bf:e7:62:26:
25:73:9c:cb:d8:c8:9a:85:bb:29:e7:97:1b:a5:98:
54:29:50:a3:2e:50:2f:86:0b:fa:d1:f9:d1:99:a6:
44:df:f7:8e:4d:c1:2d:5c:59:0f:1d:9c:d0:69:6b:
f5:7f:74:31:4b:63:7b:7f:e7:c2:fe:51:1b:2c:0e:
ca:15:fd:5f:da:bf:f1:85:4f:e4:35:b6:64:b6:6f:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:DE:CB:59:11:23:F0:10:05:A2:76:A5:A9:E7:F6:CB:69:B5:65
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:69:a0:a7:2a:4f:8e:fa:d1:a0:44:01:ba:81:b2:f8:41:e9:
2e:d3:2f:f3:79:16:3f:ba:ac:c4:0d:e2:f1:12:e8:fb:0b:f1:
d7:13:b9:e4:68:54:ed:4c:08:21:82:d8:44:1f:0b:89:58:91:
f0:d3:e1:7b:b0:02:a7:67:98:2b:bc:7c:c3:d7:11:ed:c9:42:
ea:a3:c5:c5:3e:35:9d:23:40:ab:af:1f:81:8f:32:f2:13:62:
e5:8c:8e:0b:58:4f:03:13:c6:b6:9f:bf:07:37:54:fa:60:e7:
40:d3:43:ba:48:4c:d4:c5:23:be:94:20:01:b1:ae:14:ab:59:
f8:b7:1b:8f:fc:b6:ba:ed:21:93:79:06:83:5d:3f:9f:4e:34:
16:74:ab:8f:3d:e1:76:d0:8f:5a:28:79:a4:bd:72:fd:30:01:
2d:cc:82:c7:cd:dc:5e:fe:14:f7:06:55:91:18:27:fc:07:72:
16:1f:1a:25:0f:1d:ac:6a:02:0b:e6:65:c2:14:41:ab:b9:cd:
f5:fa:51:f2:20:8c:42:58:de:67:83:c2:3e:4b:10:30:7d:98:
5f:59:72:85:0b:17:80:f7:68:ba:dd:e9:63:b1:33:42:cf:e7:
9d:2a:95:e4:8b:13:a8:0e:ec:a4:39:16:18:08:f3:66:d0:cc:
a3:82:cb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfRqrfLLrWTcwXhgV5Dv79UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMDQ1YzU3OTk2YzlhM2M5ZTYyNzdhNDMyNmIxMTgzMjE1
ZDViNmEwHhcNMjUwNzAzMTkwMTU1WhcNMjUwNzA0MTkwMTU1WjAzMTEwLwYDVQQD
EyhjMDQ3ZGVjYjU5MTEyM2YwMTAwNWEyNzZhNWE5ZTdmNmNiNjliNTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu38xOUzBH3GctbnFvuHu3Ne+RYFa
n8niRdaeZ6yH9g272Ez6XnUYn/EJ9TQ0lP20wKwzIQRTngDVD7Cev8nClqwRG+zK
NVpSufVgd763lwo+C72/7mPDMk5pal3TwbvjT+606WTsJGv3X4GSJmzvsMPfUCo/
M9WQQqE5VNEybz2/NVrW92nRK/mEBYnSMKvTu1EoAU47lyy6XG1zzu/b+RzqEbzb
3FUbzmyazgpZeL/nYiYlc5zL2Miahbsp55cbpZhUKVCjLlAvhgv60fnRmaZE3/eO
TcEtXFkPHZzQaWv1f3QxS2N7f+fC/lEbLA7KFf1f2r/xhU/kNbZktm9GvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBH3stZESPwEAWidqWp5/bLabVlMB8GA1UdIwQY
MBaAFJEEXFeZbJo8nmJ3pDJrEYMhXVtqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQt
NWRmNDQyOTViNGM5LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZmE2ODEtMjU2Ni00MGVlLTlmMDQtNWRmNDQyOTViNGM5
LzEva1FSY1Y1bHNtanllWW5la01tc1JneUZkVzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemmgpypP
jvrRoEQBuoGy+EHpLtMv83kWP7qsxA3i8RLo+wvx1xO55GhU7UwIIYLYRB8LiViR
8NPhe7ACp2eYK7x8w9cR7clC6qPFxT41nSNAq68fgY8y8hNi5YyOC1hPAxPGtp+/
BzdU+mDnQNNDukhM1MUjvpQgAbGuFKtZ+Lcbj/y2uu0hk3kGg10/n040FnSrjz3h
dtCPWih5pL1y/TABLcyCx83cXv4U9wZVkRgn/AdyFh8aJQ8drGoCC+ZlwhRBq7nN
9fpR8iCMQljeZ4PCPksQMH2YX1lyhQsXgPdout3pY7EzQs/nnSqV5IsTqA7spDkW
GAjzZtDMo4LL0Q==
-----END CERTIFICATE-----
Generated at Thu Jul 3 21:27:02 2025 by rpki-client