Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: obfI98vjTk8lqLcpkqtLwHt2x02l569qWdDgMbsUJag=
Subject key identifier: 41:48:01:AD:15:BB:E3:E3:06:4C:66:9B:95:84:0E:A4:EA:F0:07:7D
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 019872982E8D749D04A2938A4BEF9155CB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 1612
Signing time: Mon 04 Aug 2025 01:00:32 +0000
Manifest this update: Mon 04 Aug 2025 01:00:32 +0000
Manifest next update: Tue 05 Aug 2025 01:00:32 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: xl9oDojLM9Ie8JUDIlAtCriwPS4scnBBq036/PNXLS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:2e:8d:74:9d:04:a2:93:8a:4b:ef:91:55:cb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Aug 4 01:00:32 2025 GMT
Not After : Aug 5 01:00:32 2025 GMT
Subject: CN=414801ad15bbe3e3064c669b95840ea4eaf0077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:9e:66:15:ac:7c:7e:81:ee:03:8f:63:d9:
af:7b:14:2e:14:19:d9:16:49:8a:18:20:f6:83:d6:
86:2b:bf:74:72:51:e5:40:53:85:df:0c:75:d9:7a:
d1:17:95:7f:f0:67:4d:84:7c:74:bf:81:a5:42:96:
ed:8e:72:cb:34:a4:15:fc:10:ee:d3:12:30:1e:ef:
7e:19:71:46:39:b7:d2:65:ff:22:21:d5:ca:bc:48:
93:fb:b7:f0:5e:ee:26:ed:87:a1:c5:15:d4:26:d7:
89:32:92:23:9b:52:0f:2e:52:21:d6:0c:e8:25:1c:
ed:cc:0d:e9:f7:64:c2:81:8e:29:54:e8:c1:e1:5e:
14:19:13:bd:3d:3b:78:d2:69:4f:e6:a8:59:dd:1b:
ab:83:8b:fa:41:2d:6b:12:69:fb:db:90:b2:09:7f:
e9:8c:07:6a:b5:e6:e8:87:78:40:65:2c:df:18:6e:
fc:5b:d7:7c:d4:e5:c3:2c:9b:9a:53:2f:7f:7b:90:
97:c0:cd:d4:4e:2b:42:fd:ea:45:34:cd:5e:c4:cb:
e4:38:08:b9:25:8d:73:87:bf:ab:6c:a3:a1:57:b7:
ad:ba:dc:f7:17:d9:71:a6:73:06:50:44:cc:cd:bd:
fb:de:06:e3:6b:4b:23:0f:11:fe:63:67:9c:0c:94:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:01:AD:15:BB:E3:E3:06:4C:66:9B:95:84:0E:A4:EA:F0:07:7D
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9b:7e:20:11:26:b8:85:b0:c6:c2:8a:9f:ff:01:9e:a9:fc:
5d:a0:a8:1f:8c:33:73:c1:c7:c6:05:6d:52:b6:11:77:46:1f:
a6:d8:5e:7c:8c:03:ea:be:cd:0c:24:eb:a0:5f:74:0c:38:93:
ea:de:2a:00:16:46:80:eb:d7:8d:92:a0:af:b4:b6:7a:37:63:
d0:e0:6c:dc:a2:c8:8b:4f:6a:19:b1:65:35:b3:06:3c:01:e9:
78:5c:26:22:f4:f9:96:01:dc:74:d1:a8:c8:fa:5e:b1:b3:40:
8c:43:a5:aa:3c:04:91:8a:2e:88:93:b5:98:77:bf:28:8e:be:
4f:3c:0b:43:d9:9b:5c:bd:79:a4:71:35:32:14:61:bf:14:64:
2a:d8:f1:3f:58:5d:69:84:29:92:9c:dd:ad:f6:4c:29:b4:d1:
bf:e8:6c:31:05:5d:c0:75:a1:e4:84:95:90:b4:38:2a:9c:af:
9d:09:d6:a7:63:60:01:6c:b4:91:f0:fa:6d:be:d2:82:86:59:
d2:2e:89:80:9d:3c:77:44:33:ab:cb:9b:7c:86:c5:89:ed:d0:
42:63:fb:3b:86:98:a6:9c:8e:bd:02:0e:a9:e2:3f:a3:e6:85:
0d:ac:88:e4:00:84:ed:56:9c:a7:b9:91:2e:17:fa:04:ae:d1:
c4:cf:1e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymC6NdJ0EopOKS++RVcsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDQyYmQ3ODMyYTZhYmUxNmUxNTIyYTJkN2U0ZTQwZDNl
YmEwYTIwHhcNMjUwODA0MDEwMDMyWhcNMjUwODA1MDEwMDMyWjAzMTEwLwYDVQQD
Eyg0MTQ4MDFhZDE1YmJlM2UzMDY0YzY2OWI5NTg0MGVhNGVhZjAwNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoueZhWsfH6B7gOPY9mvexQuFBnZ
FkmKGCD2g9aGK790clHlQFOF3wx12XrRF5V/8GdNhHx0v4GlQpbtjnLLNKQV/BDu
0xIwHu9+GXFGObfSZf8iIdXKvEiT+7fwXu4m7YehxRXUJteJMpIjm1IPLlIh1gzo
JRztzA3p92TCgY4pVOjB4V4UGRO9PTt40mlP5qhZ3Rurg4v6QS1rEmn725CyCX/p
jAdqteboh3hAZSzfGG78W9d81OXDLJuaUy9/e5CXwM3UTitC/epFNM1exMvkOAi5
JY1zh7+rbKOhV7etutz3F9lxpnMGUETMzb373gbja0sjDxH+Y2ecDJSxAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFIAa0Vu+PjBkxmm5WEDqTq8Ad9MB8GA1UdIwQY
MBaAFLvUK9eDKmq+FuFSKi1+TkDT66CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYt
ODBjOGE4NjdkNzcxLzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYtODBjOGE4NjdkNzcx
LzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZt+IBEm
uIWwxsKKn/8Bnqn8XaCoH4wzc8HHxgVtUrYRd0YfpthefIwD6r7NDCTroF90DDiT
6t4qABZGgOvXjZKgr7S2ejdj0OBs3KLIi09qGbFlNbMGPAHpeFwmIvT5lgHcdNGo
yPpesbNAjEOlqjwEkYouiJO1mHe/KI6+TzwLQ9mbXL15pHE1MhRhvxRkKtjxP1hd
aYQpkpzdrfZMKbTRv+hsMQVdwHWh5ISVkLQ4KpyvnQnWp2NgAWy0kfD6bb7SgoZZ
0i6JgJ08d0Qzq8ubfIbFie3QQmP7O4aYppyOvQIOqeI/o+aFDayI5ACE7Vacp7mR
Lhf6BK7RxM8eyA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:31 2025 by rpki-client