Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: gDV1KKWWowLwBRobCOGwsEiihr16E2DvATzeL27X4bM=
Subject key identifier: 84:F3:CD:A1:BA:B9:25:8F:A6:7B:E1:10:5D:CD:11:34:F3:DA:5A:B0
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 0197B88ED78CB71845A35A4A627ECD5849A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:00:58 +0000
Manifest this update: Sat 28 Jun 2025 22:00:58 +0000
Manifest next update: Sun 29 Jun 2025 22:00:58 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: 7fNfUBEeATLk6qi7/7SFejIm1k+NIvnqat74r5Mh/a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:d7:8c:b7:18:45:a3:5a:4a:62:7e:cd:58:49:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Jun 28 22:00:58 2025 GMT
Not After : Jun 29 22:00:58 2025 GMT
Subject: CN=84f3cda1bab9258fa67be1105dcd1134f3da5ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:6d:61:ce:ce:e2:c5:84:f4:b9:e0:f7:8e:
0f:2f:61:ad:0d:79:8c:ad:9e:ec:fc:0a:1c:35:f6:
9d:17:c1:e4:bc:54:bd:a6:82:80:32:8d:c6:b5:35:
ef:a6:59:2f:ba:59:f6:b2:d3:56:95:7a:82:82:ed:
41:6b:fd:00:65:b6:b5:51:e6:5e:5f:54:25:51:1f:
5e:2c:f5:7f:a4:ff:2b:3c:0e:74:53:7b:c4:3f:46:
97:14:e9:4f:96:1d:f8:8e:5b:d8:26:5f:8c:db:16:
31:c9:78:bd:70:3a:35:bc:b6:aa:49:a8:d2:c8:3a:
70:3a:a4:64:6c:2f:7c:93:9f:85:37:8d:ef:98:a6:
58:99:1c:bd:f7:2d:fa:a3:a1:69:47:a1:ca:d8:be:
a6:fc:31:98:0d:bc:5a:a8:a3:0f:58:35:07:aa:7b:
02:b2:d8:26:a6:76:96:00:04:3c:b7:30:88:88:ce:
e8:96:e8:cd:d8:d1:b0:57:d9:9a:f0:32:ec:17:78:
83:a1:a3:f4:30:30:b8:fe:ca:25:98:44:36:fa:2b:
7a:fb:d8:30:a7:84:54:e1:19:9e:73:d9:69:5c:55:
dd:79:f1:dd:99:c2:c2:92:8c:25:b9:b7:76:7c:86:
21:e3:f5:0c:c7:c2:bc:29:2a:d7:70:2d:3d:12:4a:
31:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F3:CD:A1:BA:B9:25:8F:A6:7B:E1:10:5D:CD:11:34:F3:DA:5A:B0
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e4:0d:e7:3a:e3:8a:f6:36:ab:2b:2a:be:96:6b:94:d4:ad:
26:5d:e3:59:27:d0:9b:6d:b5:8b:1b:af:c9:72:0a:b5:1c:7b:
5d:5b:da:20:d3:e3:83:a1:cd:4c:41:c0:89:79:dd:e5:51:72:
98:c5:45:1f:55:f9:5f:8c:9d:b2:4e:8e:25:d9:78:9a:17:98:
fd:69:59:62:99:21:d4:af:ab:6c:53:51:fe:a7:4b:4b:ec:d5:
a4:ac:d8:55:cd:58:f1:36:bd:fd:87:4c:e3:da:d2:48:3e:96:
b1:fd:8c:fe:0e:7c:45:fc:5b:67:e2:16:ad:7f:8f:e6:61:1c:
ee:e1:c0:f5:2c:c8:4a:a8:22:fd:75:27:41:58:15:75:5c:aa:
e3:25:83:dc:34:52:8e:21:49:6b:0b:21:d9:b9:0e:2d:b4:21:
0d:c2:17:27:e2:b0:4e:9d:27:ed:04:45:7e:58:3d:2a:9c:f0:
0a:41:82:6d:3d:48:6a:8a:3d:c4:e6:47:d4:e9:0e:f1:fd:ca:
d4:7c:03:b2:f5:2e:bd:54:2b:38:04:b2:1e:1c:c0:fd:bb:e4:
30:97:a0:3f:a4:cd:b5:2e:09:f3:78:f3:f5:e8:fc:0f:e8:0c:
60:f0:6d:82:5c:50:b5:2b:90:e4:c7:01:4e:72:f2:a1:96:d3:
58:d5:db:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jteMtxhFo1pKYn7NWEmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NmVlNDUwZGViM2E3MDhhZWU4NWI3ODIzOGZhMzcwZjkw
NDU3ZjkwHhcNMjUwNjI4MjIwMDU4WhcNMjUwNjI5MjIwMDU4WjAzMTEwLwYDVQQD
Eyg4NGYzY2RhMWJhYjkyNThmYTY3YmUxMTA1ZGNkMTEzNGYzZGE1YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WdtYc7O4sWE9Lng944PL2GtDXmM
rZ7s/AocNfadF8HkvFS9poKAMo3GtTXvplkvuln2stNWlXqCgu1Ba/0AZba1UeZe
X1QlUR9eLPV/pP8rPA50U3vEP0aXFOlPlh34jlvYJl+M2xYxyXi9cDo1vLaqSajS
yDpwOqRkbC98k5+FN43vmKZYmRy99y36o6FpR6HK2L6m/DGYDbxaqKMPWDUHqnsC
stgmpnaWAAQ8tzCIiM7olujN2NGwV9ma8DLsF3iDoaP0MDC4/solmEQ2+it6+9gw
p4RU4Rmec9lpXFXdefHdmcLCkowlubd2fIYh4/UMx8K8KSrXcC09EkoxzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITzzaG6uSWPpnvhEF3NETTz2lqwMB8GA1UdIwQY
MBaAFKhu5FDes6cIruhbeCOPo3D5BFf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMTdkNmEtNGUyZS00MTNlLWExMjgt
YWFjNmIwZTgyNWI5LzEvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kMTdkNmEtNGUyZS00MTNlLWExMjgtYWFjNmIwZTgyNWI5
LzEvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADeQN5zrj
ivY2qysqvpZrlNStJl3jWSfQm221ixuvyXIKtRx7XVvaINPjg6HNTEHAiXnd5VFy
mMVFH1X5X4ydsk6OJdl4mheY/WlZYpkh1K+rbFNR/qdLS+zVpKzYVc1Y8Ta9/YdM
49rSSD6Wsf2M/g58RfxbZ+IWrX+P5mEc7uHA9SzISqgi/XUnQVgVdVyq4yWD3DRS
jiFJawsh2bkOLbQhDcIXJ+KwTp0n7QRFflg9KpzwCkGCbT1Iaoo9xOZH1OkO8f3K
1HwDsvUuvVQrOASyHhzA/bvkMJegP6TNtS4J83jz9ej8D+gMYPBtglxQtSuQ5McB
TnLyoZbTWNXbKw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:13:18 2025 by rpki-client