Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
File: ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft (raw, json)
Hash identifier: LrHNg1WaGEXnKX2XLeld0AIWE/mllATytnFQcq7thVY=
Subject key identifier: A7:C0:A3:B0:A6:C3:03:45:2D:DB:5C:0D:BE:F7:3F:7E:06:37:BD:1B
Authority key identifier: 8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
Certificate issuer: /CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Certificate serial: 0197BF6CAEDD7B0D48F419E5E47B458D15E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
Manifest number: 15B8
Signing time: Mon 30 Jun 2025 06:01:00 +0000
Manifest this update: Mon 30 Jun 2025 06:01:00 +0000
Manifest next update: Tue 01 Jul 2025 06:01:00 +0000
Files and hashes: 1: ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl (hash: PNMe1wvxVbuEgsc3qiBKJRtDnB/9U9ldgU4L/qJw5BE=)
2: yIUv-9UBFSosZaxk_SAM-oPYWDg.roa (hash: A5HtFiQ3ZfwDO/6Fs5djNbIUq/3hrajgNOS9o/n1CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:6c:ae:dd:7b:0d:48:f4:19:e5:e4:7b:45:8d:15:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b19f3d7ffea957261501e91664ff6823ed936ad
Validity
Not Before: Jun 30 06:01:00 2025 GMT
Not After : Jul 1 06:01:00 2025 GMT
Subject: CN=a7c0a3b0a6c303452ddb5c0dbef73f7e0637bd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:c8:54:40:89:5d:fb:00:eb:eb:84:3c:cd:
51:81:4f:0a:f0:68:fd:d5:b6:eb:92:52:71:40:d6:
cc:70:71:c1:6a:b2:d8:b2:9d:ba:25:f2:60:8e:1a:
79:6d:57:e4:c4:c2:cf:be:00:00:59:fb:0f:f1:c4:
8d:af:8a:42:b0:0d:c3:ba:4c:31:86:ff:a9:21:71:
c7:b4:2f:44:d9:aa:c3:40:ed:57:25:b6:9c:4f:43:
c5:fd:b9:d7:9d:3d:36:91:dd:eb:41:58:5b:d1:dc:
97:ae:47:24:87:33:16:71:40:35:27:0f:c7:14:66:
a3:ee:d9:d9:cd:59:b9:00:ed:a4:c5:3e:3d:81:f9:
59:53:e9:fb:7d:21:1e:1b:3a:0e:65:e0:ce:a8:53:
8d:f9:8f:ab:93:43:33:e9:6b:81:08:7f:22:c0:ba:
09:6a:da:2c:62:7b:4e:7c:d0:aa:70:50:fd:ff:0b:
d6:08:b6:2f:0c:d7:f8:ea:32:72:fa:68:ef:7f:40:
ed:7b:ff:ea:b7:86:15:a3:41:c2:6d:d9:f8:b0:3f:
1f:2d:49:27:8f:39:04:7a:2d:65:62:fc:e7:d5:38:
c9:ef:6d:56:9b:8d:3f:d3:77:b0:34:08:81:77:50:
d8:9e:1d:1b:77:ae:e2:75:8e:e5:cf:a5:be:17:0f:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C0:A3:B0:A6:C3:03:45:2D:DB:5C:0D:BE:F7:3F:7E:06:37:BD:1B
X509v3 Authority Key Identifier:
keyid:8B:19:F3:D7:FF:EA:95:72:61:50:1E:91:66:4F:F6:82:3E:D9:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixnz1__qlXJhUB6RZk_2gj7ZNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1ade7-fbe2-4203-8551-b6542e6447a0/1/ixnz1__qlXJhUB6RZk_2gj7ZNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:79:33:87:f8:12:cc:28:48:88:18:2c:06:a8:46:1b:a6:25:
32:44:25:3f:e4:0e:f0:ef:0b:0e:08:f1:01:71:41:46:0c:60:
75:b5:f9:7e:c6:c5:2a:6c:27:99:3f:08:6b:28:da:8d:eb:c7:
cb:d3:0a:96:05:df:bf:24:c3:4f:b7:a4:0e:88:3d:4a:dc:79:
14:6f:fd:56:90:ab:09:56:3b:63:6f:61:38:f2:56:58:c8:3e:
43:38:25:bd:a7:7a:c1:7e:e1:1f:a9:25:7e:66:ca:bd:e5:44:
84:3e:69:c3:85:cc:e4:55:34:fd:19:74:4c:91:09:dc:7e:ff:
66:4b:ac:cf:f0:b0:f9:d2:af:a7:0f:e5:b6:d5:89:46:26:8c:
6e:7e:bd:7c:67:4f:97:3a:79:63:e4:0f:ee:83:50:0b:44:1b:
48:c3:8c:0b:21:97:76:3f:36:cd:2e:42:74:58:36:b7:ac:88:
a9:d2:4f:c4:7a:35:ca:54:18:e4:c7:08:af:b7:87:55:d5:c7:
94:c8:f3:09:8b:8a:10:96:27:b3:e6:87:a1:6a:ae:b6:c2:78:
1d:be:90:15:bb:ac:f5:90:65:bd:4f:9f:3b:a8:09:65:2c:22:
ac:d3:ab:fa:99:05:ad:58:8b:44:48:4a:39:92:b7:85:27:63:
dd:67:35:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/bK7dew1I9Bnl5HtFjRXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTlmM2Q3ZmZlYTk1NzI2MTUwMWU5MTY2NGZmNjgyM2Vk
OTM2YWQwHhcNMjUwNjMwMDYwMTAwWhcNMjUwNzAxMDYwMTAwWjAzMTEwLwYDVQQD
EyhhN2MwYTNiMGE2YzMwMzQ1MmRkYjVjMGRiZWY3M2Y3ZTA2MzdiZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRTIVECJXfsA6+uEPM1RgU8K8Gj9
1bbrklJxQNbMcHHBarLYsp26JfJgjhp5bVfkxMLPvgAAWfsP8cSNr4pCsA3Dukwx
hv+pIXHHtC9E2arDQO1XJbacT0PF/bnXnT02kd3rQVhb0dyXrkckhzMWcUA1Jw/H
FGaj7tnZzVm5AO2kxT49gflZU+n7fSEeGzoOZeDOqFON+Y+rk0Mz6WuBCH8iwLoJ
atosYntOfNCqcFD9/wvWCLYvDNf46jJy+mjvf0Dte//qt4YVo0HCbdn4sD8fLUkn
jzkEei1lYvzn1TjJ721Wm40/03ewNAiBd1DYnh0bd67idY7lz6W+Fw848wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfAo7CmwwNFLdtcDb73P34GN70bMB8GA1UdIwQY
MBaAFIsZ89f/6pVyYVAekWZP9oI+2TatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEt
YjY1NDJlNjQ0N2EwLzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kMWFkZTctZmJlMi00MjAzLTg1NTEtYjY1NDJlNjQ0N2Ew
LzEvaXhuejFfX3FsWEpoVUI2UlprXzJnajdaTnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALHkzh/gS
zChIiBgsBqhGG6YlMkQlP+QO8O8LDgjxAXFBRgxgdbX5fsbFKmwnmT8IayjajevH
y9MKlgXfvyTDT7ekDog9Stx5FG/9VpCrCVY7Y29hOPJWWMg+Qzglvad6wX7hH6kl
fmbKveVEhD5pw4XM5FU0/Rl0TJEJ3H7/Zkusz/Cw+dKvpw/lttWJRiaMbn69fGdP
lzp5Y+QP7oNQC0QbSMOMCyGXdj82zS5CdFg2t6yIqdJPxHo1ylQY5McIr7eHVdXH
lMjzCYuKEJYns+aHoWqutsJ4Hb6QFbus9ZBlvU+fO6gJZSwirNOr+pkFrViLREhK
OZK3hSdj3Wc1UA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:09:04 2025 by rpki-client