Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: WhRumg/1oAXFGnbDAtAI7e4vtgvQXRnflW5KHn86K1g=
Subject key identifier: B9:B9:22:4A:EF:DB:46:5D:A5:59:39:E9:74:9B:9B:A1:F9:19:CD:33
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 019769CEC84597332C8088AF8D502F011AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 0653
Signing time: Fri 13 Jun 2025 15:00:48 +0000
Manifest this update: Fri 13 Jun 2025 15:00:48 +0000
Manifest next update: Sat 14 Jun 2025 15:00:48 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: vPmVi3Uwr7FvWheQbJmEmnnBRQ/4vaUvJjFIKhvdM8I=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:c8:45:97:33:2c:80:88:af:8d:50:2f:01:1a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Jun 13 15:00:48 2025 GMT
Not After : Jun 14 15:00:48 2025 GMT
Subject: CN=b9b9224aefdb465da55939e9749b9ba1f919cd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:21:fe:76:53:0b:83:92:23:76:bc:0f:c1:
c4:23:f1:8f:0f:54:63:d5:79:f0:e6:13:1c:85:cb:
f6:92:8e:80:f3:d9:fb:22:2a:c7:8d:c5:e2:7d:e3:
11:21:37:f0:fb:13:40:d2:8e:45:72:4a:7d:92:3d:
13:5e:14:cc:c5:23:7b:43:7e:7f:39:f7:8c:fc:5d:
2c:0e:4f:f3:cd:99:88:cf:bb:02:3a:90:65:c5:19:
2e:c6:36:dd:b2:71:3c:0e:92:44:56:af:35:16:8d:
b3:9e:b5:2d:3b:13:a4:1e:88:2b:80:ea:f7:5c:5c:
61:d2:31:b4:99:e7:74:da:72:2f:2f:2f:f0:9b:45:
29:e9:d7:8b:cb:91:48:9f:69:45:ed:b5:d8:d8:31:
7d:b8:26:b6:3e:ff:a4:3a:41:9f:7c:06:b9:0b:b0:
a8:9c:cc:37:0c:ab:55:53:70:dc:80:55:7b:ac:92:
11:ad:09:3b:c7:29:ec:51:b9:38:b0:7c:44:e9:d4:
4f:69:79:19:42:f5:0e:ea:00:04:83:69:5b:12:ea:
ff:e3:e3:85:9b:74:4d:b6:9d:00:ba:a7:24:c1:7d:
7f:80:fb:d8:fe:82:3a:03:1c:4c:8e:05:aa:4d:b1:
f4:83:dd:76:93:64:73:6b:3a:7d:89:4c:8c:5a:d9:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B9:22:4A:EF:DB:46:5D:A5:59:39:E9:74:9B:9B:A1:F9:19:CD:33
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:18:0e:a2:1a:9b:a3:e1:27:c7:46:fa:93:ab:de:98:17:1f:
42:64:42:49:94:0d:6b:11:85:ce:6e:0b:9d:1c:5e:d0:77:b3:
b0:ef:11:da:4b:4f:9b:28:c9:41:55:d2:22:06:e3:50:9c:7c:
3a:34:de:29:94:3f:4e:bf:41:1c:b1:8d:b4:de:f1:78:25:fe:
6b:c7:58:84:09:1d:05:8f:1e:fd:1f:93:69:06:7a:36:1d:0a:
d3:2e:79:eb:3c:e2:82:d8:53:1b:df:a9:c8:3e:ac:99:50:58:
54:0c:b2:81:a9:38:a4:59:c7:45:6c:c8:63:d9:08:ec:a1:0e:
ca:bf:87:07:39:a8:2b:ae:fd:11:34:df:c3:c3:91:ed:d7:fc:
f7:9f:ea:35:95:2a:1f:e8:f5:30:b7:a5:21:cb:0e:7e:fd:e2:
08:2a:0b:60:6e:3b:42:e6:11:4a:1d:0e:79:d9:09:90:99:82:
6c:a1:69:06:6e:c4:c3:c9:df:f8:2f:da:be:41:1a:f4:e5:eb:
30:46:68:aa:b7:f1:af:1d:5a:aa:3a:c5:70:82:77:33:8a:5e:
c8:8a:aa:26:72:a6:a6:bc:3d:a9:29:02:0c:ce:53:54:51:6e:
b6:78:74:de:3c:00:74:7a:2e:84:07:a6:63:58:a6:a2:98:32:
66:66:77:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzshFlzMsgIivjVAvARq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjUxYWVhZjc3NGI2MzNhNDdmOTYwYTcwODliMTViMzVi
MWE0Y2IwHhcNMjUwNjEzMTUwMDQ4WhcNMjUwNjE0MTUwMDQ4WjAzMTEwLwYDVQQD
EyhiOWI5MjI0YWVmZGI0NjVkYTU1OTM5ZTk3NDliOWJhMWY5MTljZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFIh/nZTC4OSI3a8D8HEI/GPD1Rj
1Xnw5hMchcv2ko6A89n7IirHjcXifeMRITfw+xNA0o5Fckp9kj0TXhTMxSN7Q35/
OfeM/F0sDk/zzZmIz7sCOpBlxRkuxjbdsnE8DpJEVq81Fo2znrUtOxOkHogrgOr3
XFxh0jG0med02nIvLy/wm0Up6deLy5FIn2lF7bXY2DF9uCa2Pv+kOkGffAa5C7Co
nMw3DKtVU3DcgFV7rJIRrQk7xynsUbk4sHxE6dRPaXkZQvUO6gAEg2lbEur/4+OF
m3RNtp0AuqckwX1/gPvY/oI6AxxMjgWqTbH0g912k2Rzazp9iUyMWtltbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm5Ikrv20ZdpVk56XSbm6H5Gc0zMB8GA1UdIwQY
MBaAFEL1Gur3dLYzpH+WCnCJsVs1saTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUt
MWJhNjUxNzRiZDFkLzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUtMWJhNjUxNzRiZDFk
LzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBgOohqb
o+Enx0b6k6vemBcfQmRCSZQNaxGFzm4LnRxe0HezsO8R2ktPmyjJQVXSIgbjUJx8
OjTeKZQ/Tr9BHLGNtN7xeCX+a8dYhAkdBY8e/R+TaQZ6Nh0K0y556zzigthTG9+p
yD6smVBYVAyygak4pFnHRWzIY9kI7KEOyr+HBzmoK679ETTfw8OR7df895/qNZUq
H+j1MLelIcsOfv3iCCoLYG47QuYRSh0OedkJkJmCbKFpBm7Ew8nf+C/avkEa9OXr
MEZoqrfxrx1aqjrFcIJ3M4peyIqqJnKmprw9qSkCDM5TVFFutnh03jwAdHouhAem
Y1imopgyZmZ3kA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:11 2025 by rpki-client