Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: zmzSxVzEEiHns21jcXY0S8KBZmueqn7waNv7aqVIIpg=
Subject key identifier: 4D:2F:72:5A:ED:31:8F:14:CD:2F:3D:FD:B7:E7:0D:43:68:37:15:CA
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019770E34F169F3359430B636CE37C9FD90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 31
Signing time: Sun 15 Jun 2025 00:00:34 +0000
Manifest this update: Sun 15 Jun 2025 00:00:34 +0000
Manifest next update: Mon 16 Jun 2025 00:00:34 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: Jw8FZWx6N2iFFjwJ2ws5tQyWfOfZWHs7XZH7k41Xjr4=)
2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:4f:16:9f:33:59:43:0b:63:6c:e3:7c:9f:d9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Jun 15 00:00:34 2025 GMT
Not After : Jun 16 00:00:34 2025 GMT
Subject: CN=4d2f725aed318f14cd2f3dfdb7e70d43683715ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:a3:e8:90:7d:3e:aa:88:e1:8a:27:55:05:
79:ad:5d:49:75:80:9e:73:a7:28:8e:5b:e3:b6:51:
ad:03:ee:ca:d4:ac:97:28:4d:84:94:27:80:38:e6:
d1:4a:38:20:27:5f:f2:41:fc:c0:d0:90:88:f9:20:
1c:46:68:10:0f:2c:6d:2b:d9:51:81:2e:5a:03:22:
68:ec:5a:32:16:c1:21:db:2d:aa:fa:64:a1:6a:f8:
a3:01:29:25:41:86:98:4b:37:ee:b6:45:6f:b2:2b:
48:33:2a:0c:46:23:d5:d5:23:63:b4:26:d0:15:0c:
b6:0a:df:e1:62:dd:f3:06:bc:cb:7b:cc:56:ed:6d:
bb:f2:24:85:5a:81:52:05:47:a2:e5:68:47:95:d6:
b3:fc:66:46:49:d4:37:f8:8c:0b:f6:60:f2:40:69:
c4:e1:55:5c:6b:9d:38:aa:78:be:5a:60:4d:17:f9:
a0:0f:83:45:3d:dd:55:31:b6:97:38:89:89:62:ac:
a3:fe:97:a7:6d:c2:28:b8:86:44:d7:ba:0e:71:26:
3a:55:ff:bf:e7:b4:20:26:83:74:de:fd:68:5d:ab:
4f:fa:78:c8:6a:f2:28:80:fc:a4:ff:99:86:3f:70:
30:de:f1:cf:8c:09:cc:54:d7:aa:95:a4:ba:ee:0c:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2F:72:5A:ED:31:8F:14:CD:2F:3D:FD:B7:E7:0D:43:68:37:15:CA
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:55:ab:c0:bb:00:21:cd:17:44:11:7e:49:8b:62:d3:04:
2b:26:e9:0c:23:98:25:b6:dc:66:81:8f:07:03:50:5f:55:7f:
f4:39:4f:7f:bf:d7:e7:60:d1:f4:78:3c:19:9c:53:c5:78:1a:
32:7d:65:72:11:ee:18:26:86:b6:d2:72:d1:19:e3:a3:52:f9:
e7:08:6d:5c:bc:3d:30:ab:ae:3a:64:a5:0f:05:fd:6c:fc:25:
4c:b1:5f:22:14:23:a7:b7:03:ad:7d:3f:92:5f:ed:d8:ca:2d:
ca:3a:b9:f8:71:c3:e9:45:56:20:73:0a:e6:2f:17:f0:7e:f6:
9f:07:72:23:66:b1:b9:bb:3c:5f:90:84:fa:60:80:9a:df:bd:
11:c9:26:df:27:c9:ec:bf:89:93:e1:8f:79:a1:ce:7a:0f:b0:
50:c4:ef:5e:6e:8b:35:5e:d9:3e:63:82:01:aa:bb:f7:1a:cd:
19:f0:66:29:15:75:f5:3b:63:57:7d:af:d2:af:b2:da:52:48:
32:d7:8f:33:f5:88:c8:eb:28:60:e5:95:e0:29:d9:b2:48:fb:
eb:96:23:15:04:74:37:62:b7:1d:99:6e:a4:00:0c:8c:6a:26:
c7:40:c1:98:2f:e4:46:14:16:59:54:d5:4e:e8:84:43:dc:f1:
1e:53:09:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw408WnzNZQwtjbON8n9kPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDA5NjUzODRkYzQ0NDg3YTgzMTcxYTZkNWQwNWE5NGE2
YWQ2N2MwHhcNMjUwNjE1MDAwMDM0WhcNMjUwNjE2MDAwMDM0WjAzMTEwLwYDVQQD
Eyg0ZDJmNzI1YWVkMzE4ZjE0Y2QyZjNkZmRiN2U3MGQ0MzY4MzcxNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9mj6JB9PqqI4YonVQV5rV1JdYCe
c6cojlvjtlGtA+7K1KyXKE2ElCeAOObRSjggJ1/yQfzA0JCI+SAcRmgQDyxtK9lR
gS5aAyJo7FoyFsEh2y2q+mShavijASklQYaYSzfutkVvsitIMyoMRiPV1SNjtCbQ
FQy2Ct/hYt3zBrzLe8xW7W278iSFWoFSBUei5WhHldaz/GZGSdQ3+IwL9mDyQGnE
4VVca504qni+WmBNF/mgD4NFPd1VMbaXOImJYqyj/penbcIouIZE17oOcSY6Vf+/
57QgJoN03v1oXatP+njIavIogPyk/5mGP3Aw3vHPjAnMVNeqlaS67gzG+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0vclrtMY8UzS89/bfnDUNoNxXKMB8GA1UdIwQY
MBaAFEPQllOE3ERIeoMXGm1dBalKatZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYt
ODFhNzgzMTlmZDZhLzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYtODFhNzgzMTlmZDZh
LzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioZVq8C7
ACHNF0QRfkmLYtMEKybpDCOYJbbcZoGPBwNQX1V/9DlPf7/X52DR9Hg8GZxTxXga
Mn1lchHuGCaGttJy0Rnjo1L55whtXLw9MKuuOmSlDwX9bPwlTLFfIhQjp7cDrX0/
kl/t2Motyjq5+HHD6UVWIHMK5i8X8H72nwdyI2axubs8X5CE+mCAmt+9Eckm3yfJ
7L+Jk+GPeaHOeg+wUMTvXm6LNV7ZPmOCAaq79xrNGfBmKRV19TtjV32v0q+y2lJI
MtePM/WIyOsoYOWV4CnZskj765YjFQR0N2K3HZlupAAMjGomx0DBmC/kRhQWWVTV
TuiEQ9zxHlMJHg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:43 2025 by rpki-client