Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
File: q33wfyEEN2kvd-7DRpuaSCuW0ao.mft (raw, json)
Hash identifier: JQeqcQp+eaxQiwfOddOCIYIYlrpkfcJOBXzVBAkXELI=
Subject key identifier: 41:E5:54:6B:75:59:D6:5B:98:EE:79:F0:60:B3:25:03:C2:3E:DD:9F
Authority key identifier: AB:7D:F0:7F:21:04:37:69:2F:77:EE:C3:46:9B:9A:48:2B:96:D1:AA
Certificate issuer: /CN=ab7df07f210437692f77eec3469b9a482b96d1aa
Certificate serial: 0198808B66341FFCB02B6745300DA1AAA02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
Manifest number: 05B2
Signing time: Wed 06 Aug 2025 18:01:15 +0000
Manifest this update: Wed 06 Aug 2025 18:01:15 +0000
Manifest next update: Thu 07 Aug 2025 18:01:15 +0000
Files and hashes: 1: q33wfyEEN2kvd-7DRpuaSCuW0ao.crl (hash: PtLBsDZUuFNxDbyZU5hCizXn0MqNNeSGD2SL4AeT66I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:66:34:1f:fc:b0:2b:67:45:30:0d:a1:aa:a0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7df07f210437692f77eec3469b9a482b96d1aa
Validity
Not Before: Aug 6 18:01:15 2025 GMT
Not After : Aug 7 18:01:15 2025 GMT
Subject: CN=41e5546b7559d65b98ee79f060b32503c23edd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:b5:f2:1e:c9:97:a7:31:ae:71:2b:12:0c:
61:52:ad:83:77:b0:85:6b:3a:91:82:65:58:42:e3:
09:a7:8f:fa:f8:4b:d3:b6:34:1b:14:94:f1:78:57:
13:d9:fa:8d:ea:c5:64:3e:2b:13:2c:87:62:89:7e:
cf:86:4e:ef:24:ac:83:e9:93:ff:03:a6:29:c5:90:
26:da:cd:11:d2:ec:a1:8f:35:e6:6f:b9:4d:bf:8e:
6e:9f:12:68:9d:a2:b8:3f:fa:26:22:53:1e:9e:8a:
84:0d:bb:b1:1f:2d:31:65:0e:54:0b:43:ea:0a:96:
05:f2:0f:b3:ca:3b:ce:fb:cd:44:a5:c5:9f:a2:a5:
45:44:c8:c3:a7:ba:f6:47:39:5b:b5:ed:04:97:f9:
cf:e0:0f:47:b2:af:b1:97:8b:ea:31:c7:3f:15:ed:
4e:0c:bf:2c:cb:ab:45:a9:c1:6e:eb:a2:be:a4:fe:
a2:e4:2c:b6:4f:83:bc:96:f3:c5:55:29:74:8e:a5:
2f:c9:ca:d2:c1:c6:08:27:75:c2:2a:23:fc:b0:e5:
b4:cb:e1:52:df:07:d7:48:a8:c3:31:b2:87:5c:9e:
97:1d:f0:84:e1:c3:a5:ed:0e:0a:0e:d1:41:8e:ea:
2a:12:e8:23:88:8d:ab:a2:4b:1b:68:ab:d3:59:d0:
b9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E5:54:6B:75:59:D6:5B:98:EE:79:F0:60:B3:25:03:C2:3E:DD:9F
X509v3 Authority Key Identifier:
keyid:AB:7D:F0:7F:21:04:37:69:2F:77:EE:C3:46:9B:9A:48:2B:96:D1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q33wfyEEN2kvd-7DRpuaSCuW0ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/287870-0e1b-4cd2-8f24-6710e96a1b6f/1/q33wfyEEN2kvd-7DRpuaSCuW0ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0e:e1:bb:5b:78:60:f7:5e:9b:bc:75:a2:1d:b7:76:a6:0b:
58:e1:29:1e:86:85:d8:b7:6b:15:fa:4d:42:02:b4:af:9b:80:
7a:98:c0:f0:53:fa:8f:d2:99:19:48:8a:35:77:21:53:9b:0f:
05:0b:3e:90:67:86:4d:c9:91:62:84:c5:93:45:93:78:b9:27:
fe:ac:1d:8f:c2:85:72:eb:9e:41:79:1a:1b:49:98:7c:8c:52:
93:ef:21:45:99:49:f7:72:09:6a:e5:54:d8:3c:81:cc:70:a4:
48:38:a0:53:c6:14:c0:3c:29:b0:40:35:49:a1:5a:89:39:1d:
5d:78:a4:e2:82:d6:66:11:c4:4d:69:81:ad:8a:10:31:49:01:
0d:76:4a:e4:d3:7c:1f:25:6f:93:1d:9f:4b:b0:ba:b7:d0:90:
fa:a8:30:f0:f8:16:fb:a9:ea:f5:ae:7c:a9:1f:72:60:ef:08:
f7:7c:36:c4:34:f6:f7:64:1d:91:c2:2a:cf:6d:a2:48:df:30:
58:85:e2:5d:51:e4:50:06:bc:f1:13:bd:f0:47:83:50:b6:84:
1b:52:ab:63:61:2d:b8:d3:1f:b8:c3:3a:65:d2:f8:b8:d8:9c:
2f:95:b2:28:66:69:f3:91:6a:ed:30:92:72:f2:d9:aa:e1:ad:
87:8e:bd:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAi2Y0H/ywK2dFMA2hqqAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2RmMDdmMjEwNDM3NjkyZjc3ZWVjMzQ2OWI5YTQ4MmI5
NmQxYWEwHhcNMjUwODA2MTgwMTE1WhcNMjUwODA3MTgwMTE1WjAzMTEwLwYDVQQD
Eyg0MWU1NTQ2Yjc1NTlkNjViOThlZTc5ZjA2MGIzMjUwM2MyM2VkZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjy18h7Jl6cxrnErEgxhUq2Dd7CF
azqRgmVYQuMJp4/6+EvTtjQbFJTxeFcT2fqN6sVkPisTLIdiiX7Phk7vJKyD6ZP/
A6YpxZAm2s0R0uyhjzXmb7lNv45unxJonaK4P/omIlMenoqEDbuxHy0xZQ5UC0Pq
CpYF8g+zyjvO+81EpcWfoqVFRMjDp7r2Rzlbte0El/nP4A9Hsq+xl4vqMcc/Fe1O
DL8sy6tFqcFu66K+pP6i5Cy2T4O8lvPFVSl0jqUvycrSwcYIJ3XCKiP8sOW0y+FS
3wfXSKjDMbKHXJ6XHfCE4cOl7Q4KDtFBjuoqEugjiI2roksbaKvTWdC5xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHlVGt1WdZbmO558GCzJQPCPt2fMB8GA1UdIwQY
MBaAFKt98H8hBDdpL3fuw0abmkgrltGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTMzd2Z5RUVOMmt2ZC03RFJwdWFTQ3VXMGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yODc4NzAtMGUxYi00Y2QyLThmMjQt
NjcxMGU5NmExYjZmLzEvcTMzd2Z5RUVOMmt2ZC03RFJwdWFTQ3VXMGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yODc4NzAtMGUxYi00Y2QyLThmMjQtNjcxMGU5NmExYjZm
LzEvcTMzd2Z5RUVOMmt2ZC03RFJwdWFTQ3VXMGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfw7hu1t4
YPdem7x1oh23dqYLWOEpHoaF2LdrFfpNQgK0r5uAepjA8FP6j9KZGUiKNXchU5sP
BQs+kGeGTcmRYoTFk0WTeLkn/qwdj8KFcuueQXkaG0mYfIxSk+8hRZlJ93IJauVU
2DyBzHCkSDigU8YUwDwpsEA1SaFaiTkdXXik4oLWZhHETWmBrYoQMUkBDXZK5NN8
HyVvkx2fS7C6t9CQ+qgw8PgW+6nq9a58qR9yYO8I93w2xDT292QdkcIqz22iSN8w
WIXiXVHkUAa88RO98EeDULaEG1KrY2EtuNMfuMM6ZdL4uNicL5WyKGZp85Fq7TCS
cvLZquGth469eQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:19 2025 by rpki-client