Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: oF29Rg/c3W11pDb+iXUgUPgOaCMYu6g/PjkrhjBiSMI=
Subject key identifier: 19:2E:FA:64:A7:E9:F8:4B:69:5D:23:78:B3:E7:F8:73:EF:C0:98:A9
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 0197BB90108940D1FD7888A34288CC6E617D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 12:01:10 +0000
Manifest this update: Sun 29 Jun 2025 12:01:10 +0000
Manifest next update: Mon 30 Jun 2025 12:01:10 +0000
Files and hashes: 1: 52v68hN6UT4PPJjjqq1uuE_KUSs.roa (hash: /ZapQrg7UEXSt0NcWwZ+kj+0zgSiaiRBd7g+qhPDHBg=)
2: 8S9ibO6esCTeLY2sD14WhmMZOvI.roa (hash: bmTNDF41Sq+c7Se/EWf8YA8iGIHNg20TI2zfC/lGrO0=)
3: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: /wsHP7T5Nb0CDkSkgnP3OccWH4oO6dgeWN6HDepapfY=)
4: WvCj9VbsFj7fqJOx6tk2wit_WpE.roa (hash: /cLe2CDT0v+6sDR4E14KbBpNPCZZWPI/9CgtItdZn+0=)
5: a5Civ4TQY8vU2rue9PuRjdGc5Mc.roa (hash: QP4yk7Jx/AL7wrs9Y5ybfTghTEkjk/U3Nsn5OFbBsqk=)
6: gqvKWohVcj0Z7jlOtSMQwdCwp3g.roa (hash: hvyUYeos7vf6+TZ2NgvLPFstgzyNO3xqXZO7/gB/Dow=)
7: i6WUIDE1FurqyNNZ1EYEHsIVqvc.roa (hash: n8PwD1+DrWnTVld/M9MqGCrSY8HTEouEds18pHnIKJc=)
8: ih3tlDmlbrDwbuabWdJCxXWHffo.roa (hash: 80OP5bzoyzQkUOxJ3u7VzQr4QzoK9uZZaNU7fzcue8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:10:89:40:d1:fd:78:88:a3:42:88:cc:6e:61:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Jun 29 12:01:10 2025 GMT
Not After : Jun 30 12:01:10 2025 GMT
Subject: CN=192efa64a7e9f84b695d2378b3e7f873efc098a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:26:71:17:98:d8:64:ca:2a:5a:db:6f:fc:
4f:09:15:83:d8:02:fd:b4:93:91:a0:9c:ac:75:78:
8d:22:13:de:4b:1d:3d:0a:32:79:f0:ff:43:90:2c:
8e:8c:d4:e6:35:7e:6c:ed:eb:4a:84:e0:65:f6:fa:
7a:6c:a6:c5:23:eb:a2:fc:b7:a1:21:a2:16:2d:61:
b7:52:c6:c8:e7:eb:fe:dc:2f:93:35:ab:9c:6d:7b:
3a:ce:15:b6:ed:ee:cc:33:48:5c:e3:bd:ec:d1:7d:
27:b2:31:54:01:83:45:cb:2b:f4:2a:51:5c:54:13:
ac:77:7d:ca:e6:6b:54:d9:95:28:a5:3b:01:60:c1:
79:ba:2f:2c:cd:bb:92:9d:10:03:f5:89:52:db:96:
fa:67:ca:90:1b:96:48:51:af:0b:24:af:b6:7c:b6:
d6:b6:68:4b:12:0c:91:82:0d:d5:e0:71:fb:7e:d2:
d3:c4:86:65:95:49:b6:46:2c:6c:29:5f:8b:a4:b8:
98:a6:8b:25:ac:cc:bb:1d:23:e9:9b:56:b2:63:a6:
28:28:90:e3:87:93:5c:e3:d1:f0:06:7d:bd:ff:76:
c5:84:e3:4d:d3:49:98:4c:d5:43:fd:06:3d:56:a7:
38:fb:0d:ab:56:39:4e:f4:13:1d:21:6e:1e:77:ff:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2E:FA:64:A7:E9:F8:4B:69:5D:23:78:B3:E7:F8:73:EF:C0:98:A9
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:08:3e:64:c6:74:36:2b:56:74:31:65:5b:f7:31:db:9c:48:
c0:ff:a8:2e:8d:0a:b5:09:35:72:0e:99:4b:fb:50:b3:67:30:
b5:2d:fb:bc:ae:f8:ff:39:de:3a:35:f3:7d:52:a8:7d:55:51:
3d:c4:11:07:53:23:ee:f4:df:42:a2:af:2e:d5:eb:4c:9c:c1:
71:d3:a3:42:92:d7:57:15:ad:64:5a:3e:82:c6:46:22:2d:51:
78:ef:11:c5:5a:f2:46:65:24:42:bb:9a:e9:a6:55:b5:d8:a5:
21:9b:28:9b:53:ab:c3:53:b6:6e:99:2a:6b:82:81:8b:ce:d5:
9c:d8:46:69:e9:d0:db:28:12:4d:4b:3a:00:6a:6d:29:c6:99:
5f:db:39:de:b8:7d:3c:0e:6c:91:54:c5:ee:69:b4:fd:7f:2c:
51:e2:23:b0:0a:97:40:22:09:22:de:ad:48:ca:78:4a:d3:a8:
a2:f2:b5:8a:91:99:de:37:d0:e1:be:42:9a:f0:06:d5:85:b1:
bc:1b:33:cc:b4:6d:db:ae:42:e2:2f:03:cf:e1:71:d8:25:c2:
fc:0d:33:fc:bb:68:f3:f2:77:68:19:2b:56:c0:da:0b:f4:0b:
e4:25:28:a8:38:a3:af:fd:04:8a:73:2a:7a:77:c1:f4:ee:c4:
1a:99:45:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7kBCJQNH9eIijQojMbmF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYzE2NTk1OTY2YWZiMGJhY2YxZDc5MzdmMjQ1ZDZhMDUy
MjIxYTMwHhcNMjUwNjI5MTIwMTEwWhcNMjUwNjMwMTIwMTEwWjAzMTEwLwYDVQQD
EygxOTJlZmE2NGE3ZTlmODRiNjk1ZDIzNzhiM2U3Zjg3M2VmYzA5OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH4mcReY2GTKKlrbb/xPCRWD2AL9
tJORoJysdXiNIhPeSx09CjJ58P9DkCyOjNTmNX5s7etKhOBl9vp6bKbFI+ui/Leh
IaIWLWG3UsbI5+v+3C+TNaucbXs6zhW27e7MM0hc473s0X0nsjFUAYNFyyv0KlFc
VBOsd33K5mtU2ZUopTsBYMF5ui8szbuSnRAD9YlS25b6Z8qQG5ZIUa8LJK+2fLbW
tmhLEgyRgg3V4HH7ftLTxIZllUm2RixsKV+LpLiYposlrMy7HSPpm1ayY6YoKJDj
h5Nc49HwBn29/3bFhONN00mYTNVD/QY9Vqc4+w2rVjlO9BMdIW4ed//OvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBku+mSn6fhLaV0jeLPn+HPvwJipMB8GA1UdIwQY
MBaAFEPBZZWWavsLrPHXk38kXWoFIiGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGIt
NTk5MGVhNThlMDMwLzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9kOTI5MTktOTYyYi00NDhkLTk4ZGItNTk5MGVhNThlMDMw
LzEvUThGbGxaWnEtd3VzOGRlVGZ5UmRhZ1VpSWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAg+ZMZ0
NitWdDFlW/cx25xIwP+oLo0KtQk1cg6ZS/tQs2cwtS37vK74/zneOjXzfVKofVVR
PcQRB1Mj7vTfQqKvLtXrTJzBcdOjQpLXVxWtZFo+gsZGIi1ReO8RxVryRmUkQrua
6aZVtdilIZsom1Orw1O2bpkqa4KBi87VnNhGaenQ2ygSTUs6AGptKcaZX9s53rh9
PA5skVTF7mm0/X8sUeIjsAqXQCIJIt6tSMp4StOoovK1ipGZ3jfQ4b5CmvAG1YWx
vBszzLRt265C4i8Dz+Fx2CXC/A0z/Lto8/J3aBkrVsDaC/QL5CUoqDijr/0EinMq
enfB9O7EGplFsw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:20 2025 by rpki-client