Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: Vtsg49tuNzzStL6pMqSWkbFJUYn74sV5B1BOMWgFoG0=
Subject key identifier: A5:19:DC:A1:CE:AD:9F:6D:81:51:BA:37:47:36:08:84:6F:8B:D9:AA
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 019873E265CD2D047E10BBA27D367EF839DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 1550
Signing time: Mon 04 Aug 2025 07:01:13 +0000
Manifest this update: Mon 04 Aug 2025 07:01:13 +0000
Manifest next update: Tue 05 Aug 2025 07:01:13 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: XXl16s+5iplVYfBjwEyQOg9Hm5DDCht0PPziNKUiObs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:65:cd:2d:04:7e:10:bb:a2:7d:36:7e:f8:39:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Aug 4 07:01:13 2025 GMT
Not After : Aug 5 07:01:13 2025 GMT
Subject: CN=a519dca1cead9f6d8151ba37473608846f8bd9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:2b:c1:42:b7:4c:82:84:19:a2:5f:fa:30:
d1:13:3a:6f:e3:7c:f4:01:c3:e7:2d:cf:43:cb:a4:
a9:81:13:ae:7c:3a:e1:30:14:6b:70:60:51:e2:cf:
b9:56:98:81:4c:5b:79:59:79:c0:4e:38:a4:d3:5d:
37:7a:bc:05:39:b8:e3:c2:5c:bf:44:75:53:f4:95:
b0:19:92:5b:8a:2b:8a:24:1a:43:b2:f9:70:04:01:
0b:a5:06:61:de:8f:ea:c1:34:64:0c:f7:74:60:bc:
74:b5:da:73:e2:46:fb:df:70:c3:2f:31:47:b3:2d:
a7:be:11:7e:1a:d5:05:9c:e7:ef:de:d8:fc:84:ec:
d5:8b:27:74:7e:b9:ed:82:26:2c:c0:02:ff:e2:c9:
08:fe:03:cb:2e:eb:bd:2b:34:d8:d1:11:ba:42:43:
2f:ab:fb:03:23:7e:6d:35:df:9e:82:16:c6:b2:35:
c1:91:cd:9e:5a:5f:ad:fd:06:09:cd:cc:d7:0c:e4:
f3:5c:88:3a:55:a8:cf:60:fd:de:11:78:dc:75:d9:
3a:3b:40:65:48:29:69:ca:71:9b:4c:5a:3b:81:3e:
f2:b6:a7:b0:c6:f0:4d:6f:41:33:d1:54:3e:cc:19:
0d:27:61:71:df:8d:ea:00:dd:8c:d4:25:77:10:f1:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:19:DC:A1:CE:AD:9F:6D:81:51:BA:37:47:36:08:84:6F:8B:D9:AA
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:dd:7e:90:4e:21:fa:c7:1e:02:41:c6:98:e3:b1:8c:7d:41:
9b:20:33:ab:3a:7c:b7:e2:da:33:66:d8:9d:51:cb:db:e7:ac:
b0:0b:1e:8e:99:86:b8:14:80:79:db:e7:9b:2e:42:31:ba:1f:
38:fa:d3:d0:29:5b:29:92:67:20:ea:11:7b:11:0d:28:69:06:
ea:59:3b:af:05:32:f1:f1:1d:64:d4:8a:30:1b:36:5d:d6:9d:
17:c5:12:89:1f:10:d2:4f:78:f3:5c:62:a7:b9:35:46:bc:43:
a5:d8:af:06:9a:70:e2:eb:b8:a4:37:08:c1:51:50:f5:5e:78:
10:b3:ca:66:18:86:96:cf:03:08:9f:55:d0:cf:c7:70:ce:92:
b9:7e:94:bd:f5:d7:98:23:0d:a1:ef:fa:37:91:52:ec:a3:d5:
86:9b:33:ff:f3:6d:5a:c0:2f:a1:92:d8:c7:da:5d:a0:73:b8:
55:4a:b3:44:1b:b9:ac:3d:0f:0c:56:56:4a:e3:dd:47:87:38:
d4:a9:17:f6:73:d0:09:6e:c4:cf:7e:4c:86:8f:6f:f7:47:78:
5b:17:a8:e7:60:7e:6f:84:ea:ad:46:1d:87:52:38:b0:06:df:
25:a0:74:a4:de:3b:f4:2e:1b:08:4e:b9:60:40:2f:53:ac:89:
88:e4:1d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4mXNLQR+ELuifTZ++DnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzI1OGQ5N2M5YmMyODRkNDg1N2JjZWUzZGYwOTA4MzZi
Y2QyMTIwHhcNMjUwODA0MDcwMTEzWhcNMjUwODA1MDcwMTEzWjAzMTEwLwYDVQQD
EyhhNTE5ZGNhMWNlYWQ5ZjZkODE1MWJhMzc0NzM2MDg4NDZmOGJkOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd4rwUK3TIKEGaJf+jDREzpv43z0
AcPnLc9Dy6SpgROufDrhMBRrcGBR4s+5VpiBTFt5WXnATjik0103erwFObjjwly/
RHVT9JWwGZJbiiuKJBpDsvlwBAELpQZh3o/qwTRkDPd0YLx0tdpz4kb733DDLzFH
sy2nvhF+GtUFnOfv3tj8hOzViyd0frntgiYswAL/4skI/gPLLuu9KzTY0RG6QkMv
q/sDI35tNd+eghbGsjXBkc2eWl+t/QYJzczXDOTzXIg6VajPYP3eEXjcddk6O0Bl
SClpynGbTFo7gT7ytqewxvBNb0Ez0VQ+zBkNJ2Fx343qAN2M1CV3EPHkqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUZ3KHOrZ9tgVG6N0c2CIRvi9mqMB8GA1UdIwQY
MBaAFKoyWNl8m8KE1IV7zuPfCQg2vNISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2It
Zjk4ZGM1MzM4ZDJiLzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2ItZjk4ZGM1MzM4ZDJi
LzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoN1+kE4h
+sceAkHGmOOxjH1BmyAzqzp8t+LaM2bYnVHL2+essAsejpmGuBSAedvnmy5CMbof
OPrT0ClbKZJnIOoRexENKGkG6lk7rwUy8fEdZNSKMBs2XdadF8USiR8Q0k9481xi
p7k1RrxDpdivBppw4uu4pDcIwVFQ9V54ELPKZhiGls8DCJ9V0M/HcM6SuX6UvfXX
mCMNoe/6N5FS7KPVhpsz//NtWsAvoZLYx9pdoHO4VUqzRBu5rD0PDFZWSuPdR4c4
1KkX9nPQCW7Ez35Mho9v90d4Wxeo52B+b4TqrUYdh1I4sAbfJaB0pN479C4bCE65
YEAvU6yJiOQdZQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:20 2025 by rpki-client