Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: 5mP5L55kiWGCiDBaEHVQeeHCiQoYY53KnasCuPiUCp4=
Subject key identifier: 31:FA:F5:19:88:44:91:3F:30:BA:CF:D5:6B:1D:39:AF:AE:31:E7:99
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 01976A7374947A4D71FCFF93BE3BA7390F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1531
Signing time: Fri 13 Jun 2025 18:00:40 +0000
Manifest this update: Fri 13 Jun 2025 18:00:40 +0000
Manifest next update: Sat 14 Jun 2025 18:00:40 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: V7ngaxAkJMQ0CuJjCAkxWOSovyE2XcYCpGnlLIqrUgM=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:73:74:94:7a:4d:71:fc:ff:93:be:3b:a7:39:0f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jun 13 18:00:40 2025 GMT
Not After : Jun 14 18:00:40 2025 GMT
Subject: CN=31faf5198844913f30bacfd56b1d39afae31e799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:74:28:86:65:74:c9:7a:fa:ba:a0:08:4d:2a:
a9:4b:01:67:45:c4:bd:98:c2:e3:4f:35:70:c1:c5:
c5:e7:5f:01:45:d0:73:f5:d7:54:c5:dc:b6:1e:8e:
6d:c5:35:50:e8:34:fc:29:fc:b9:8a:6c:96:f5:bd:
15:3d:3b:ea:9a:08:40:2c:89:2e:ef:1e:89:23:e8:
40:73:18:d9:28:e4:fb:c7:ab:98:5b:f4:30:08:e9:
9b:4c:f7:a6:ad:34:81:72:dc:39:0e:4f:81:b1:60:
56:f5:0f:17:c7:d6:5d:de:08:79:55:2a:c6:31:e4:
7c:5e:d6:10:c0:c3:f8:62:b4:06:c4:19:9a:35:0f:
a8:c8:f7:70:de:a6:a9:39:1b:a3:9c:f9:98:b1:1b:
6d:60:70:6f:51:a4:48:f7:b0:d1:ee:b3:91:93:40:
cb:57:52:51:14:36:c8:29:5e:40:29:ec:db:a7:85:
8c:7e:51:42:14:4d:83:9a:55:a0:35:c4:2d:07:7a:
04:d8:ce:4a:a7:da:d2:cb:0c:7f:d5:19:e6:08:2c:
16:cb:4f:27:96:e2:30:cc:55:4d:86:f3:4e:2d:d9:
e4:3e:f5:df:98:4c:a0:6d:83:cb:7f:22:ab:fb:1c:
c9:f6:7c:c2:cc:f4:42:cb:82:8d:34:b1:13:99:21:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:F5:19:88:44:91:3F:30:BA:CF:D5:6B:1D:39:AF:AE:31:E7:99
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0f:de:05:83:85:b4:68:a9:5b:b1:69:a1:30:9c:b3:dc:c1:
09:40:16:0b:af:b0:1c:b8:90:b0:2b:dc:d6:b8:80:53:41:eb:
e8:b5:8f:c3:cb:68:09:a1:11:a4:2a:4b:3e:93:9c:c8:02:02:
f4:ae:28:cb:88:17:77:bf:65:2e:99:49:65:27:0e:2f:1f:eb:
89:5a:0e:01:fb:3d:35:35:df:c4:2e:c8:5e:24:42:be:98:f4:
f5:e7:ef:57:cd:49:15:c5:44:11:61:ad:e6:2f:c4:cc:9f:dd:
57:7b:f5:b1:b2:11:6c:f4:3e:2a:1a:92:5a:fe:42:c1:34:60:
db:53:ba:ff:8a:50:9e:00:2d:ea:3e:37:e3:cc:39:0b:1e:00:
f7:77:93:4a:17:21:d8:b6:88:3a:c8:2b:68:52:89:62:64:2e:
4a:b6:72:24:61:16:5c:e1:b4:b9:23:14:94:f3:c6:93:c5:03:
1f:8a:99:5c:54:64:05:ff:9e:c7:c3:ec:7f:96:21:80:20:23:
4b:d3:e8:00:b6:76:7e:a2:04:6d:51:36:b7:38:21:1c:f8:6b:
31:74:83:38:13:6e:90:d3:cd:1c:8e:74:ff:cf:c6:40:27:ba:
f9:e5:14:bc:35:cd:9a:50:61:b0:cd:80:f4:76:ef:74:3a:26:
ab:0a:ee:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqc3SUek1x/P+TvjunOQ8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl
YjE5Y2MwHhcNMjUwNjEzMTgwMDQwWhcNMjUwNjE0MTgwMDQwWjAzMTEwLwYDVQQD
EygzMWZhZjUxOTg4NDQ5MTNmMzBiYWNmZDU2YjFkMzlhZmFlMzFlNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XQohmV0yXr6uqAITSqpSwFnRcS9
mMLjTzVwwcXF518BRdBz9ddUxdy2Ho5txTVQ6DT8Kfy5imyW9b0VPTvqmghALIku
7x6JI+hAcxjZKOT7x6uYW/QwCOmbTPemrTSBctw5Dk+BsWBW9Q8Xx9Zd3gh5VSrG
MeR8XtYQwMP4YrQGxBmaNQ+oyPdw3qapORujnPmYsRttYHBvUaRI97DR7rORk0DL
V1JRFDbIKV5AKezbp4WMflFCFE2DmlWgNcQtB3oE2M5Kp9rSywx/1RnmCCwWy08n
luIwzFVNhvNOLdnkPvXfmEygbYPLfyKr+xzJ9nzCzPRCy4KNNLETmSHuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH69RmIRJE/MLrP1WsdOa+uMeeZMB8GA1UdIwQY
MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt
MGEwNjlkZWMxMDBhLzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh
LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmg/eBYOF
tGipW7FpoTCcs9zBCUAWC6+wHLiQsCvc1riAU0Hr6LWPw8toCaERpCpLPpOcyAIC
9K4oy4gXd79lLplJZScOLx/riVoOAfs9NTXfxC7IXiRCvpj09efvV81JFcVEEWGt
5i/EzJ/dV3v1sbIRbPQ+KhqSWv5CwTRg21O6/4pQngAt6j4348w5Cx4A93eTShch
2LaIOsgraFKJYmQuSrZyJGEWXOG0uSMUlPPGk8UDH4qZXFRkBf+ex8Psf5YhgCAj
S9PoALZ2fqIEbVE2tzghHPhrMXSDOBNukNPNHI50/8/GQCe6+eUUvDXNmlBhsM2A
9HbvdDomqwruKQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:23 2025 by rpki-client