Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: 67MIEYTYcTFhgjp5S0WNcZ3gBU/fyHN9K+C9KXnTJ10=
Subject key identifier: F3:5C:F2:A3:CE:A2:6E:57:34:0C:1B:34:DB:E2:CF:EB:52:C3:89:48
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 019789224E1F9ED55FC88C933304FD5CA5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 04D3
Signing time: Thu 19 Jun 2025 17:00:16 +0000
Manifest this update: Thu 19 Jun 2025 17:00:16 +0000
Manifest next update: Fri 20 Jun 2025 17:00:16 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: uKBy16KRNly44lwRkv90QihmGxaJ5XP4Z69/Q1mCQ44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:89:22:4e:1f:9e:d5:5f:c8:8c:93:33:04:fd:5c:a5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jun 19 17:00:16 2025 GMT
Not After : Jun 20 17:00:16 2025 GMT
Subject: CN=f35cf2a3cea26e57340c1b34dbe2cfeb52c38948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:9f:80:5c:f4:82:55:c5:02:0a:08:06:f1:
e9:95:20:08:8d:15:cb:e7:0b:95:f8:93:9a:06:19:
8f:51:62:3c:c4:b8:aa:bd:7f:f7:2a:22:6f:be:1f:
db:2d:12:4e:23:0d:ec:86:eb:d4:9b:34:ab:cc:dc:
6c:95:89:e1:88:cd:95:fb:61:1f:39:a1:6d:3b:4a:
33:62:b8:8b:3a:f1:58:87:40:d3:4f:67:7c:50:87:
72:79:06:d1:29:5a:68:df:26:68:99:c1:98:8e:b2:
e7:e6:18:7e:3b:66:59:28:a3:d0:b9:c7:db:d2:4f:
cf:df:0a:d4:fa:fc:02:b0:0a:87:8c:f6:58:2a:53:
8b:5d:85:c5:63:cd:07:0d:68:68:b6:3c:d2:f5:d8:
15:5b:ad:d1:f0:07:61:3c:6b:5f:4d:cd:26:5f:1f:
70:80:1b:a9:6f:e2:b4:0d:07:c6:d2:81:39:71:75:
fb:92:09:ca:d4:5f:31:d1:8e:d9:0c:7e:e7:65:7e:
82:71:2c:cd:b7:bf:66:a9:cd:f9:0f:32:ba:5e:c7:
4c:53:49:29:4f:b2:7f:02:e7:87:e3:3b:39:ad:7a:
5f:71:bc:21:d5:b0:2a:c6:52:9e:95:10:86:61:96:
27:a8:f7:77:df:c2:3b:a5:34:cf:33:23:13:07:ce:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:F2:A3:CE:A2:6E:57:34:0C:1B:34:DB:E2:CF:EB:52:C3:89:48
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:55:47:6a:bb:2f:e6:ad:5b:16:9c:ff:3c:09:65:d4:4c:d5:
34:76:23:93:83:92:47:cf:f0:51:f0:41:f3:2b:45:69:01:81:
c0:67:61:73:9f:36:f1:b1:51:f0:ba:aa:0c:c8:ab:98:d8:bc:
17:d5:a0:54:64:cf:99:a1:07:0b:f8:86:7a:70:6f:60:1f:84:
48:c4:9c:fe:37:81:82:0d:3c:4a:e9:21:c9:e9:c8:c4:9b:f7:
13:2a:0a:21:f8:c6:df:55:16:1e:93:56:fb:e9:f4:e1:15:20:
19:36:b5:aa:50:6b:71:f7:8a:b6:c8:ab:9f:b0:f5:3f:5f:15:
18:fa:bf:37:0e:6c:76:3d:fd:ea:cb:37:16:61:bf:10:78:f4:
c2:67:50:6a:9f:48:7f:89:b1:7f:3c:bd:f6:cd:e0:6e:18:9d:
99:76:d8:79:f1:93:96:fd:6d:c1:88:a4:00:3b:b7:af:7d:19:
7e:b2:65:de:c6:1a:1b:a0:5d:99:c1:4d:d9:15:ae:96:b7:92:
5d:48:41:b8:aa:e6:b7:e3:23:33:6d:3d:4c:a3:c8:77:bc:2f:
96:f3:6a:23:e9:96:9c:ab:88:d8:cc:05:73:08:e9:54:f7:bd:
23:5f:bc:ed:63:68:16:11:15:93:12:3f:08:a5:bf:7d:f5:2a:
2d:a4:2e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeJIk4fntVfyIyTMwT9XKXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWNlZDk4MDVhM2M1ZDkzNGUyYzUyMWExN2E4YWI5NGYx
MWFlYzUwHhcNMjUwNjE5MTcwMDE2WhcNMjUwNjIwMTcwMDE2WjAzMTEwLwYDVQQD
EyhmMzVjZjJhM2NlYTI2ZTU3MzQwYzFiMzRkYmUyY2ZlYjUyYzM4OTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8CfgFz0glXFAgoIBvHplSAIjRXL
5wuV+JOaBhmPUWI8xLiqvX/3KiJvvh/bLRJOIw3shuvUmzSrzNxslYnhiM2V+2Ef
OaFtO0ozYriLOvFYh0DTT2d8UIdyeQbRKVpo3yZomcGYjrLn5hh+O2ZZKKPQucfb
0k/P3wrU+vwCsAqHjPZYKlOLXYXFY80HDWhotjzS9dgVW63R8AdhPGtfTc0mXx9w
gBupb+K0DQfG0oE5cXX7kgnK1F8x0Y7ZDH7nZX6CcSzNt79mqc35DzK6XsdMU0kp
T7J/AueH4zs5rXpfcbwh1bAqxlKelRCGYZYnqPd338I7pTTPMyMTB87QXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNc8qPOom5XNAwbNNviz+tSw4lIMB8GA1UdIwQY
MBaAFEOc7ZgFo8XZNOLFIaF6irlPEa7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQt
YTc3ODM0NWFlZDg4LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQtYTc3ODM0NWFlZDg4
LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFVHarsv
5q1bFpz/PAll1EzVNHYjk4OSR8/wUfBB8ytFaQGBwGdhc5828bFR8LqqDMirmNi8
F9WgVGTPmaEHC/iGenBvYB+ESMSc/jeBgg08SukhyenIxJv3EyoKIfjG31UWHpNW
++n04RUgGTa1qlBrcfeKtsirn7D1P18VGPq/Nw5sdj396ss3FmG/EHj0wmdQap9I
f4mxfzy99s3gbhidmXbYefGTlv1twYikADu3r30ZfrJl3sYaG6BdmcFN2RWulreS
XUhBuKrmt+MjM209TKPId7wvlvNqI+mWnKuI2MwFcwjpVPe9I1+87WNoFhEVkxI/
CKW/ffUqLaQuzw==
-----END CERTIFICATE-----
Generated at Thu Jun 19 18:54:43 2025 by rpki-client