Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: ocQumxIOSnyQ/+63UyPWY2GpwJfC2kBQCbzTriip7YE=
Subject key identifier: FF:52:FA:09:60:60:CA:E8:53:5F:0D:F8:A7:9C:85:4B:1F:8C:EC:8B
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 0197B8210B660CBA9A95EDC94B8E70EB3343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:01:02 +0000
Manifest this update: Sat 28 Jun 2025 20:01:02 +0000
Manifest next update: Sun 29 Jun 2025 20:01:02 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: 94FWuOzT5a/zNteEaSYWiCMB1cmoMa5lBcXX6A1K4DE=)
2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0b:66:0c:ba:9a:95:ed:c9:4b:8e:70:eb:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Jun 28 20:01:02 2025 GMT
Not After : Jun 29 20:01:02 2025 GMT
Subject: CN=ff52fa096060cae8535f0df8a79c854b1f8cec8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:7c:a2:31:6f:5e:eb:71:22:9e:1f:f7:4d:
f4:55:77:7d:23:fd:ec:7e:f9:1e:23:ce:5c:67:ac:
11:27:cc:73:2c:0c:03:f7:96:95:5e:ee:ea:2f:3c:
49:ac:31:2e:a2:2c:db:38:a5:53:3b:ff:6b:f7:cd:
cf:4c:00:01:6a:b6:89:e1:53:0e:45:68:7b:f9:13:
e6:45:0f:c9:92:5d:52:37:fb:07:c0:69:a6:66:4d:
e8:85:fd:ec:8e:07:8c:f2:f9:e9:fc:2f:22:fb:55:
b8:2b:fa:a0:38:c7:3a:a6:1f:42:91:ef:a7:10:da:
f6:98:ba:6d:06:c3:89:51:80:1a:ae:38:12:4e:8b:
e1:d3:37:4b:d3:42:ac:f5:3c:05:dc:6d:b8:42:1e:
76:07:ff:d2:95:46:c0:b1:00:bd:7d:d7:d5:13:fb:
29:91:da:90:bc:90:3d:66:07:84:bf:87:be:99:64:
f7:65:9f:d9:6c:65:bb:1e:1b:b3:fb:1a:87:2c:3d:
74:58:1e:eb:d5:fc:3d:5a:22:07:79:69:f5:f9:d5:
5e:51:a9:20:30:99:0a:ed:c5:63:73:e9:4f:99:06:
1b:6c:85:94:23:40:f7:12:0c:93:92:4e:fc:68:d6:
24:e8:fd:84:f0:34:7b:a5:0a:a0:8e:dd:b6:ed:35:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:52:FA:09:60:60:CA:E8:53:5F:0D:F8:A7:9C:85:4B:1F:8C:EC:8B
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ba:91:fe:a7:ea:bd:71:3b:a5:4b:ff:4e:c0:07:29:61:dc:
8c:77:7a:d9:79:80:96:db:c3:8c:66:f6:b1:a6:77:f9:f6:8a:
1b:b4:a5:04:a2:d8:70:cd:fb:62:15:ee:7a:bf:ad:17:ed:78:
cd:2b:ca:08:c3:8c:0b:ac:50:0d:4e:91:16:1a:08:fa:79:60:
ba:d9:df:c4:cb:92:c9:5b:b6:e8:1a:de:cb:11:2c:60:37:f8:
e0:6a:1b:68:52:50:37:38:fb:b4:0f:39:96:a6:6e:08:76:de:
66:ea:c4:87:1b:e9:10:59:e2:72:d1:cf:ec:b0:17:f3:a8:82:
00:ac:b6:bb:83:15:c5:fe:e5:2f:61:37:fe:5c:53:13:ac:3c:
6d:25:60:4e:cf:c7:42:84:44:8f:8f:b2:7d:80:35:6f:f0:d8:
da:16:38:d2:46:a0:98:f3:dd:4f:32:5d:cf:01:6a:9b:9c:57:
f2:72:6c:eb:52:f4:17:e7:dc:13:2b:bd:fb:46:80:72:70:95:
fc:3a:01:c2:bd:b6:d1:5d:5c:53:fb:85:f3:34:21:dc:4f:19:
4d:95:59:a4:69:c1:fc:95:f8:e4:7f:f2:9c:9d:2f:95:d5:21:
50:da:32:2b:10:9c:ab:69:8c:37:05:5d:62:b9:25:57:c1:09:
18:df:f0:92
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZe4IQtmDLqale3JS45w6zNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTYxZTI5YzE2NmJmMDYzNWM4Y2VmZThkYTgyMTA0YTc4
M2I0NTQwHhcNMjUwNjI4MjAwMTAyWhcNMjUwNjI5MjAwMTAyWjAzMTEwLwYDVQQD
EyhmZjUyZmEwOTYwNjBjYWU4NTM1ZjBkZjhhNzljODU0YjFmOGNlYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd58ojFvXutxIp4f9030VXd9I/3s
fvkeI85cZ6wRJ8xzLAwD95aVXu7qLzxJrDEuoizbOKVTO/9r983PTAABaraJ4VMO
RWh7+RPmRQ/Jkl1SN/sHwGmmZk3ohf3sjgeM8vnp/C8i+1W4K/qgOMc6ph9Cke+n
ENr2mLptBsOJUYAarjgSTovh0zdL00Ks9TwF3G24Qh52B//SlUbAsQC9fdfVE/sp
kdqQvJA9ZgeEv4e+mWT3ZZ/ZbGW7Hhuz+xqHLD10WB7r1fw9WiIHeWn1+dVeUakg
MJkK7cVjc+lPmQYbbIWUI0D3EgyTkk78aNYk6P2E8DR7pQqgjt227TVcXwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFP9S+glgYMroU18N+KechUsfjOyLMB8GA1UdIwQY
MBaAFPqmHinBZr8GNcjO/o2oIQSng7RUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xWWVLY0ZtdndZMXlNNy1qYWdoQktlRHRGUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTQ2NzFlLTg2ZDItNDJmYy04MGQ5
LTgyNWQzZmYxZGRlOC8xLzEtcVllS2NGbXZ3WTF5TTctamFnaEJLZUR0RlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U5LzE0NjcxZS04NmQyLTQyZmMtODBkOS04MjVkM2ZmMWRk
ZTgvMS8xLXFZZUtjRm12d1kxeU03LWphZ2hCS2VEdEZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLqR
/qfqvXE7pUv/TsAHKWHcjHd62XmAltvDjGb2saZ3+faKG7SlBKLYcM37YhXuer+t
F+14zSvKCMOMC6xQDU6RFhoI+nlgutnfxMuSyVu26BreyxEsYDf44GobaFJQNzj7
tA85lqZuCHbeZurEhxvpEFnictHP7LAX86iCAKy2u4MVxf7lL2E3/lxTE6w8bSVg
Ts/HQoREj4+yfYA1b/DY2hY40kagmPPdTzJdzwFqm5xX8nJs61L0F+fcEyu9+0aA
cnCV/DoBwr220V1cU/uF8zQh3E8ZTZVZpGnB/JX45H/ynJ0vldUhUNoyKxCcq2mM
NwVdYrklV8EJGN/wkg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:15 2025 by rpki-client