Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
File: qnD7s9sihDfWBXmaxPRZjSLhPhs.mft (raw, json)
Hash identifier: HIY1rtKaRr5YbX22OGo8z4MuXiOL2D7/8m7ZlalYIRc=
Subject key identifier: 44:E1:ED:15:B6:1F:CB:F4:CC:F3:3E:30:CA:A7:30:06:5A:D9:15:C7
Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Certificate issuer: /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Certificate serial: 01976D3D3CE749BA3BBE696A9C8D618D71CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:00:19 +0000
Manifest this update: Sat 14 Jun 2025 07:00:19 +0000
Manifest next update: Sun 15 Jun 2025 07:00:19 +0000
Files and hashes: 1: JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa (hash: bOxTgT+7J9XF4HocPumdm4M3ak6meIWnJq5cg5Hpmfs=)
2: qnD7s9sihDfWBXmaxPRZjSLhPhs.crl (hash: WolA3j97ph+gKJd3selMf1orjnBcgVVDnCNGNBizyTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:3c:e7:49:ba:3b:be:69:6a:9c:8d:61:8d:71:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Validity
Not Before: Jun 14 07:00:19 2025 GMT
Not After : Jun 15 07:00:19 2025 GMT
Subject: CN=44e1ed15b61fcbf4ccf33e30caa730065ad915c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:17:96:32:ab:67:fa:5a:91:66:4a:f3:49:
60:7c:af:f6:cb:86:df:e9:55:3e:33:ae:9b:1d:6a:
28:df:bf:67:11:d0:a0:a4:9f:3d:bb:8d:2d:34:e2:
4f:93:e8:af:60:cd:58:20:6f:6f:56:b0:85:b7:2c:
34:d1:0a:f0:fa:72:5d:35:6d:e2:a0:51:48:48:97:
c5:22:0d:fe:ff:df:48:94:5b:92:c6:e7:15:d6:78:
0c:0a:a1:26:72:e6:bb:eb:50:7e:3e:03:e8:ef:e1:
f0:7b:ef:94:18:9b:87:5a:e7:29:52:c8:74:2b:f5:
7b:5f:3e:64:87:a1:f1:d5:ce:5b:89:13:81:e4:92:
21:09:84:c7:59:66:1e:0c:42:9a:5f:b2:94:d0:fc:
02:8b:0f:b5:52:c4:96:b7:53:9f:87:ff:5a:0b:5a:
cc:29:7a:9c:a4:85:f3:01:48:67:a7:4c:65:e4:82:
ef:56:3a:16:4f:b9:b7:e3:66:64:de:6e:d8:9e:f8:
92:19:b0:3f:ed:ea:97:38:f7:f9:37:d6:85:e1:4c:
15:e4:3f:76:04:d8:45:01:cc:cc:96:5f:75:7d:86:
31:50:96:7e:e9:8d:a5:64:bd:31:6c:c8:07:58:16:
45:49:c1:25:47:83:7c:92:f7:91:e7:a4:08:eb:cd:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E1:ED:15:B6:1F:CB:F4:CC:F3:3E:30:CA:A7:30:06:5A:D9:15:C7
X509v3 Authority Key Identifier:
keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:22:48:78:27:ea:d3:4e:07:b5:e5:8a:1e:36:76:fb:ba:
38:4c:fd:e3:96:52:2f:96:04:2d:4b:d2:af:90:44:d8:ec:26:
a0:10:d4:4e:5d:42:96:91:67:04:58:81:53:a9:1e:3c:4a:16:
da:67:5a:c7:e7:15:a5:94:f2:49:30:5f:3a:1c:f6:2f:66:33:
ed:a9:2f:0e:da:44:bf:84:66:e6:57:ff:8c:7d:0f:35:b9:8c:
ae:ef:cb:4b:b4:5f:46:cd:7c:9f:a8:73:10:e4:23:80:c7:37:
24:aa:d9:6a:19:35:3f:4f:2b:0f:f6:1a:a7:03:6e:c6:1a:cc:
2f:e9:8e:e7:63:89:de:0b:6e:66:18:84:1f:77:e3:0b:d1:d7:
64:6b:67:d5:86:e1:87:dc:62:fd:b9:83:ba:33:89:d8:7d:7b:
47:02:04:76:8b:b7:02:58:05:05:d6:aa:86:74:af:c3:72:0a:
ce:79:70:82:92:9f:02:ce:58:3c:b1:61:68:29:86:dc:53:3c:
86:8f:e5:56:5b:ff:64:c6:98:e1:d3:91:3c:67:3f:31:45:85:
9e:6c:fa:f5:34:f2:3c:fb:71:c6:2b:ad:78:8a:b6:8c:b4:ce:
dd:4e:ef:43:65:b4:e7:85:fc:4e:9e:1d:90:44:b7:c0:e9:31:
39:f9:60:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPTznSbo7vmlqnI1hjXHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzBmYmIzZGIyMjg0MzdkNjA1Nzk5YWM0ZjQ1OThkMjJl
MTNlMWIwHhcNMjUwNjE0MDcwMDE5WhcNMjUwNjE1MDcwMDE5WjAzMTEwLwYDVQQD
Eyg0NGUxZWQxNWI2MWZjYmY0Y2NmMzNlMzBjYWE3MzAwNjVhZDkxNWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS8XljKrZ/pakWZK80lgfK/2y4bf
6VU+M66bHWoo379nEdCgpJ89u40tNOJPk+ivYM1YIG9vVrCFtyw00Qrw+nJdNW3i
oFFISJfFIg3+/99IlFuSxucV1ngMCqEmcua761B+PgPo7+Hwe++UGJuHWucpUsh0
K/V7Xz5kh6Hx1c5biROB5JIhCYTHWWYeDEKaX7KU0PwCiw+1UsSWt1Ofh/9aC1rM
KXqcpIXzAUhnp0xl5ILvVjoWT7m342Zk3m7YnviSGbA/7eqXOPf5N9aF4UwV5D92
BNhFAczMll91fYYxUJZ+6Y2lZL0xbMgHWBZFScElR4N8kveR56QI682ciQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETh7RW2H8v0zPM+MMqnMAZa2RXHMB8GA1UdIwQY
MBaAFKpw+7PbIoQ31gV5msT0WY0i4T4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kOGUxODQtZTc5Yi00N2ZlLTk2ZGMt
NWJhNDIzNWNlNjE5LzEvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kOGUxODQtZTc5Yi00N2ZlLTk2ZGMtNWJhNDIzNWNlNjE5
LzEvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHV8iSHgn
6tNOB7Xlih42dvu6OEz945ZSL5YELUvSr5BE2OwmoBDUTl1ClpFnBFiBU6kePEoW
2mdax+cVpZTySTBfOhz2L2Yz7akvDtpEv4Rm5lf/jH0PNbmMru/LS7RfRs18n6hz
EOQjgMc3JKrZahk1P08rD/YapwNuxhrML+mO52OJ3gtuZhiEH3fjC9HXZGtn1Ybh
h9xi/bmDujOJ2H17RwIEdou3AlgFBdaqhnSvw3IKznlwgpKfAs5YPLFhaCmG3FM8
ho/lVlv/ZMaY4dORPGc/MUWFnmz69TTyPPtxxiuteIq2jLTO3U7vQ2W054X8Tp4d
kES3wOkxOflg+g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:05:19 2025 by rpki-client