Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: P8Oh2Zdntjz2DQk2yf4N1bQnXAQMpPdCDHOE0BD/k/E=
Subject key identifier: 54:64:C2:FC:53:D4:1B:A8:E3:B9:95:E1:79:CB:58:49:E2:AB:B9:C9
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 0198737467138AC881ABD4A1C57830DBEC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0DA4
Signing time: Mon 04 Aug 2025 05:01:05 +0000
Manifest this update: Mon 04 Aug 2025 05:01:05 +0000
Manifest next update: Tue 05 Aug 2025 05:01:05 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: UC4vcwyhAtKEH6ZfK2YuwYiMaYtvLF60cvjYPXbSg1s=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:67:13:8a:c8:81:ab:d4:a1:c5:78:30:db:ec:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Aug 4 05:01:05 2025 GMT
Not After : Aug 5 05:01:05 2025 GMT
Subject: CN=5464c2fc53d41ba8e3b995e179cb5849e2abb9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:af:e9:62:50:e0:d1:55:a7:1e:a4:ac:ca:
bf:27:63:80:ed:33:eb:26:e5:c7:ee:cd:d8:21:c3:
f6:da:34:2f:bc:73:50:61:a1:1c:a5:9c:30:33:cf:
7b:71:ca:86:41:1d:3e:ff:f2:dc:6f:c9:0c:ba:4b:
b7:41:27:64:e6:07:89:3b:7b:81:ac:8d:41:31:9a:
a9:b9:81:52:3b:53:09:84:1c:d5:94:32:7e:1e:7c:
ea:81:01:86:24:3f:86:2d:c5:b2:6d:f3:34:22:92:
91:2e:e1:77:87:88:0b:37:f1:77:7d:e0:e5:1d:03:
f1:42:fe:61:29:c7:76:8a:55:9b:29:2d:6f:50:4c:
91:65:4c:41:a2:45:4e:87:98:bf:f6:e9:33:6f:b9:
23:ea:3e:26:23:b3:86:dc:2e:e1:cc:f5:34:7e:f9:
f2:bb:af:36:01:e7:ac:fc:f6:03:fe:27:7a:63:45:
26:42:41:af:c6:5d:c9:46:60:e0:48:89:d1:cf:07:
df:27:d7:25:e1:69:d2:62:e7:d3:d3:c3:77:d9:3e:
73:24:ad:02:49:73:15:67:3e:72:f2:fd:a3:d8:a7:
ce:e6:1b:e1:90:20:cd:8c:c6:4c:e5:4b:81:f7:5b:
e4:0c:23:62:c5:53:99:df:2a:7a:09:19:c5:02:ba:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:64:C2:FC:53:D4:1B:A8:E3:B9:95:E1:79:CB:58:49:E2:AB:B9:C9
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:18:4a:2f:b9:ec:12:34:97:ad:ef:e0:a4:14:2a:76:8c:a5:
0e:38:df:4d:a5:69:9e:01:8b:25:02:82:57:4f:8c:a1:b7:ff:
fe:fe:84:00:d7:28:e0:5d:ef:a8:10:aa:b5:c6:f1:44:e3:11:
88:64:8f:7e:cb:3d:0f:73:1a:68:96:f9:20:76:52:dc:fa:f7:
30:57:ba:57:db:76:17:51:c1:54:90:12:e8:00:1d:08:4b:b8:
37:0f:6b:45:87:54:20:9f:c9:31:1e:0a:8f:14:26:9c:a1:34:
22:b6:bf:ee:6f:d6:84:ad:f9:33:a2:96:34:6b:4d:20:9c:ed:
2b:45:18:a7:b5:5b:23:98:31:4e:7c:1c:af:33:7a:9c:f0:0f:
ad:ae:be:17:da:20:a1:84:40:d2:7e:2c:3d:d9:de:f0:4c:4f:
93:7e:08:51:61:58:6b:af:5c:f4:13:83:ac:b4:40:43:27:68:
57:ff:66:3b:dc:14:b9:e5:79:da:37:7e:a1:73:d1:3b:6d:eb:
e4:1c:19:4e:27:d4:8d:44:cd:58:78:5e:a8:1c:f4:eb:56:9c:
7b:86:27:43:3c:1b:e3:a5:38:a8:63:1f:4e:02:b9:45:2d:d7:
db:70:4e:89:39:36:84:77:b5:b3:41:f0:8a:e1:ca:7d:33:d8:
90:e1:88:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdGcTisiBq9ShxXgw2+xAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw
OTMwMjcwHhcNMjUwODA0MDUwMTA1WhcNMjUwODA1MDUwMTA1WjAzMTEwLwYDVQQD
Eyg1NDY0YzJmYzUzZDQxYmE4ZTNiOTk1ZTE3OWNiNTg0OWUyYWJiOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszev6WJQ4NFVpx6krMq/J2OA7TPr
JuXH7s3YIcP22jQvvHNQYaEcpZwwM897ccqGQR0+//Lcb8kMuku3QSdk5geJO3uB
rI1BMZqpuYFSO1MJhBzVlDJ+HnzqgQGGJD+GLcWybfM0IpKRLuF3h4gLN/F3feDl
HQPxQv5hKcd2ilWbKS1vUEyRZUxBokVOh5i/9ukzb7kj6j4mI7OG3C7hzPU0fvny
u682Aees/PYD/id6Y0UmQkGvxl3JRmDgSInRzwffJ9cl4WnSYufT08N32T5zJK0C
SXMVZz5y8v2j2KfO5hvhkCDNjMZM5UuB91vkDCNixVOZ3yp6CRnFArpBDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRkwvxT1Buo47mV4XnLWEniq7nJMB8GA1UdIwQY
MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt
NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0
LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARhKL7ns
EjSXre/gpBQqdoylDjjfTaVpngGLJQKCV0+Mobf//v6EANco4F3vqBCqtcbxROMR
iGSPfss9D3MaaJb5IHZS3Pr3MFe6V9t2F1HBVJAS6AAdCEu4Nw9rRYdUIJ/JMR4K
jxQmnKE0Ira/7m/WhK35M6KWNGtNIJztK0UYp7VbI5gxTnwcrzN6nPAPra6+F9og
oYRA0n4sPdne8ExPk34IUWFYa69c9BODrLRAQydoV/9mO9wUueV52jd+oXPRO23r
5BwZTifUjUTNWHheqBz061ace4YnQzwb46U4qGMfTgK5RS3X23BOiTk2hHe1s0Hw
iuHKfTPYkOGIKw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:01 2025 by rpki-client