Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier: Q3qiYiu5T0vVFvHXJDFEESMv4jwn5a2vUlzRELXytfw=
Subject key identifier: 88:25:68:FE:DF:AF:00:24:33:79:2E:A2:B0:41:34:D3:75:30:A9:0F
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer: /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial: 0197B5FC37793221BB73C42E8573247F7719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number: 1448
Signing time: Sat 28 Jun 2025 10:01:34 +0000
Manifest this update: Sat 28 Jun 2025 10:01:34 +0000
Manifest next update: Sun 29 Jun 2025 10:01:34 +0000
Files and hashes: 1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: i4yz337wCfS9Z+2IMFsFrC67FdwzFAxRRtl7iiF6fZo=)
2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=)
3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:37:79:32:21:bb:73:c4:2e:85:73:24:7f:77:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Validity
Not Before: Jun 28 10:01:34 2025 GMT
Not After : Jun 29 10:01:34 2025 GMT
Subject: CN=882568fedfaf002433792ea2b04134d37530a90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:0c:70:02:95:4d:07:ad:0c:cd:c3:3f:fc:
99:47:11:6c:de:08:c6:a6:d0:30:46:8b:e5:1f:02:
59:4b:6d:ec:af:b9:53:94:4d:f8:75:37:3f:fe:03:
76:13:8b:d4:53:6e:c3:34:33:a2:4f:ae:c0:e8:ea:
ef:4b:5c:86:e4:68:f2:a5:9b:06:42:de:25:ac:af:
01:13:5f:1b:54:43:ff:63:52:7d:77:37:e4:60:dc:
56:57:0f:5f:7d:cd:f9:57:5c:fb:17:94:0e:ab:55:
f2:66:1d:30:8b:05:fe:69:09:df:24:ff:d7:9d:f3:
5e:46:20:f3:62:71:f0:ea:ef:09:3a:f1:6b:2f:c6:
2d:93:84:81:85:92:f7:21:89:2f:23:e7:07:c3:2c:
2f:e0:f0:d5:f0:7b:b1:1c:f7:42:17:27:ef:96:06:
e2:a7:e0:b0:df:d5:04:2d:f3:f0:bd:a9:73:de:72:
b5:4b:62:21:ca:d9:5e:b2:83:c1:42:ee:cc:c6:83:
c3:d0:54:58:1d:06:55:68:78:62:4e:7d:f9:bf:88:
96:ba:7e:db:e2:26:07:75:4a:3e:9c:2f:2b:3e:68:
26:72:ac:98:09:a8:34:34:2a:fb:66:1c:93:bc:0b:
94:f2:03:b7:44:83:5d:bb:8d:97:9a:3d:fb:0c:6b:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:68:FE:DF:AF:00:24:33:79:2E:A2:B0:41:34:D3:75:30:A9:0F
X509v3 Authority Key Identifier:
keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0d:0d:1f:5b:3a:76:44:3e:78:70:b9:99:c0:fa:6d:77:e9:
7a:e3:5c:a9:dc:23:fd:b4:91:a1:fe:e0:91:4a:17:32:60:28:
11:2b:40:73:45:10:bc:68:0f:e0:2c:0e:ba:35:9d:96:9e:ba:
5c:e2:93:08:18:52:08:3f:c8:ac:98:0a:83:4b:ec:85:6d:1f:
44:ca:c3:ab:ce:96:88:6a:4a:a2:3a:97:3c:af:b8:b9:36:31:
8f:59:7a:f4:e2:f9:d3:13:20:8f:5d:60:c6:7c:a5:ee:28:07:
75:79:6d:d2:3d:d1:93:64:b2:29:1b:44:c4:f8:e0:4e:b7:4a:
92:c9:2a:18:9d:33:58:a7:86:2a:9d:85:8c:41:b5:a2:a0:79:
01:29:0a:5f:da:67:5d:db:91:c8:8b:2f:20:24:57:e7:27:c7:
4f:7f:83:aa:08:c9:54:79:61:32:53:9e:19:c0:35:0b:e8:96:
23:cc:1b:e5:0d:d4:b3:44:b5:cd:91:ba:bc:19:4e:c4:29:92:
0d:71:cc:7c:c0:f7:4c:04:88:30:ae:57:2f:b0:48:f2:11:01:
3a:3f:da:42:32:96:0a:42:88:97:69:3e:79:7e:ff:c2:e1:ae:
49:6f:0b:8b:17:c0:74:31:1d:66:2b:f7:1c:bb:7a:19:a2:ee:
ae:97:21:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/Dd5MiG7c8QuhXMkf3cZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGQ1MGFiMGY2Nzg4N2M1ZjVlZDFlODg3ZTc4ZGQyZjM1
OTI2ZmQwHhcNMjUwNjI4MTAwMTM0WhcNMjUwNjI5MTAwMTM0WjAzMTEwLwYDVQQD
Eyg4ODI1NjhmZWRmYWYwMDI0MzM3OTJlYTJiMDQxMzRkMzc1MzBhOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+sMcAKVTQetDM3DP/yZRxFs3gjG
ptAwRovlHwJZS23sr7lTlE34dTc//gN2E4vUU27DNDOiT67A6OrvS1yG5GjypZsG
Qt4lrK8BE18bVEP/Y1J9dzfkYNxWVw9ffc35V1z7F5QOq1XyZh0wiwX+aQnfJP/X
nfNeRiDzYnHw6u8JOvFrL8Ytk4SBhZL3IYkvI+cHwywv4PDV8HuxHPdCFyfvlgbi
p+Cw39UELfPwvalz3nK1S2IhytlesoPBQu7MxoPD0FRYHQZVaHhiTn35v4iWun7b
4iYHdUo+nC8rPmgmcqyYCag0NCr7ZhyTvAuU8gO3RINdu42Xmj37DGu+FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIglaP7frwAkM3kuorBBNNN1MKkPMB8GA1UdIwQY
MBaAFAkNUKsPZ4h8X17R6IfnjdLzWSb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMt
YWQxMzc4Mjg5YTEzLzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83ZWZjZGMtZjg2Yi00MWZkLWFkOTMtYWQxMzc4Mjg5YTEz
LzEvQ1ExUXF3OW5pSHhmWHRIb2gtZU4wdk5aSnYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQ0NH1s6
dkQ+eHC5mcD6bXfpeuNcqdwj/bSRof7gkUoXMmAoEStAc0UQvGgP4CwOujWdlp66
XOKTCBhSCD/IrJgKg0vshW0fRMrDq86WiGpKojqXPK+4uTYxj1l69OL50xMgj11g
xnyl7igHdXlt0j3Rk2SyKRtExPjgTrdKkskqGJ0zWKeGKp2FjEG1oqB5ASkKX9pn
XduRyIsvICRX5yfHT3+DqgjJVHlhMlOeGcA1C+iWI8wb5Q3Us0S1zZG6vBlOxCmS
DXHMfMD3TASIMK5XL7BI8hEBOj/aQjKWCkKIl2k+eX7/wuGuSW8LixfAdDEdZiv3
HLt6GaLurpchgg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:03:43 2025 by rpki-client