Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
File: QCzcwN4_54S70vviah2BZWpGfSI.mft (raw, json)
Hash identifier: ko71eLaZ1uhiWi0UzWE+yTSkEqMV69GOB17DXHrzIp0=
Subject key identifier: 93:50:DA:45:04:E9:F9:E1:79:19:C6:CC:29:F4:C9:D4:4D:63:99:7A
Authority key identifier: 40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
Certificate issuer: /CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Certificate serial: 01976961A523F5AD370B26F566D6602B4522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
Manifest number: 07FF
Signing time: Fri 13 Jun 2025 13:01:36 +0000
Manifest this update: Fri 13 Jun 2025 13:01:36 +0000
Manifest next update: Sat 14 Jun 2025 13:01:36 +0000
Files and hashes: 1: QCzcwN4_54S70vviah2BZWpGfSI.crl (hash: w8SvDbLOQkabkGKZoTY5+Bo8+koUD5sDS6iu/Z+lWqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:a5:23:f5:ad:37:0b:26:f5:66:d6:60:2b:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Validity
Not Before: Jun 13 13:01:36 2025 GMT
Not After : Jun 14 13:01:36 2025 GMT
Subject: CN=9350da4504e9f9e17919c6cc29f4c9d44d63997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:d5:72:33:fb:f9:73:41:eb:ee:f3:32:48:
d5:78:44:9f:64:7c:60:b8:c2:1b:8b:d3:b4:f9:25:
fd:ef:46:6b:2a:ce:88:e7:db:09:ae:40:03:cd:4c:
50:6b:15:9c:55:ac:cc:4b:77:27:33:28:00:fb:b5:
83:fb:50:1d:18:59:3d:6c:d5:bc:8f:c4:f7:7c:60:
0f:1f:f1:ad:75:24:7f:a3:a5:9e:b0:f8:e2:dd:6a:
ac:b8:3b:fc:4b:53:34:28:d1:d8:86:84:4b:90:f3:
8d:2b:8f:73:8d:d2:e7:38:be:62:5b:41:ff:64:df:
ae:19:81:66:60:ed:77:8e:c4:86:e9:3d:78:95:e7:
66:5c:18:13:bf:f2:17:9e:b7:23:c9:45:ab:23:40:
1b:fc:f2:c5:64:44:5c:f6:51:ad:44:ff:ef:45:16:
b9:79:34:fb:e7:79:e2:ee:0a:02:75:84:09:4c:2d:
cb:19:6d:88:c3:d7:7c:40:de:90:c1:eb:85:67:b5:
91:ef:9d:b4:ac:4e:c1:7a:7e:44:d7:05:7e:08:0a:
91:05:b4:23:ef:6f:6c:5e:47:ed:57:ab:3e:43:27:
f0:10:2d:48:8c:27:84:e7:59:c2:a0:e7:bd:de:81:
4f:34:43:50:cc:71:04:64:78:ba:6d:14:00:6f:e3:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:50:DA:45:04:E9:F9:E1:79:19:C6:CC:29:F4:C9:D4:4D:63:99:7A
X509v3 Authority Key Identifier:
keyid:40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:49:4b:df:c5:42:1d:e2:2c:15:12:97:ef:4e:21:43:34:92:
c0:01:51:2e:be:9d:f6:9b:f9:72:2c:06:74:74:98:7b:10:91:
80:f3:60:fc:a6:c9:15:a1:a8:e3:6f:9a:9e:a9:27:b4:8b:62:
88:12:bd:77:7e:2c:4d:95:e3:b0:ef:4d:c9:88:86:fa:bd:f7:
ca:7f:ce:84:0a:ec:0c:1e:76:75:38:3f:af:70:f9:35:29:3c:
8e:72:8a:02:28:0c:58:e8:34:2c:d7:2f:7c:f9:65:85:43:6b:
51:e5:9a:f2:d4:0b:d8:89:7f:62:4a:c7:98:d9:1a:27:05:da:
01:b2:06:de:33:4f:95:6a:9e:04:99:27:9c:62:f9:39:d9:d6:
ab:77:86:87:0f:e2:ad:29:fc:61:e8:5b:cb:46:eb:55:45:73:
f8:57:bb:4c:1d:e7:1b:bb:4e:66:c5:a9:a6:10:94:26:e4:3d:
78:cf:65:a7:01:2b:36:01:5d:27:8f:07:12:56:ae:8b:29:b6:
12:6b:bd:08:98:82:f2:69:dd:47:3d:cc:e1:3b:f4:8f:eb:27:
40:40:d7:b6:e8:c6:0b:65:79:92:04:5e:4f:fd:1e:e7:5b:70:
4a:50:5e:94:d3:ac:ac:8c:5d:52:e3:ef:0c:17:65:58:5c:8a:
49:4b:c7:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYaUj9a03Cyb1ZtZgK0UiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMmNkY2MwZGUzZmU3ODRiYmQyZmJlMjZhMWQ4MTY1NmE0
NjdkMjIwHhcNMjUwNjEzMTMwMTM2WhcNMjUwNjE0MTMwMTM2WjAzMTEwLwYDVQQD
Eyg5MzUwZGE0NTA0ZTlmOWUxNzkxOWM2Y2MyOWY0YzlkNDRkNjM5OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT7VcjP7+XNB6+7zMkjVeESfZHxg
uMIbi9O0+SX970ZrKs6I59sJrkADzUxQaxWcVazMS3cnMygA+7WD+1AdGFk9bNW8
j8T3fGAPH/GtdSR/o6WesPji3WqsuDv8S1M0KNHYhoRLkPONK49zjdLnOL5iW0H/
ZN+uGYFmYO13jsSG6T14ledmXBgTv/IXnrcjyUWrI0Ab/PLFZERc9lGtRP/vRRa5
eTT753ni7goCdYQJTC3LGW2Iw9d8QN6QweuFZ7WR7520rE7Ben5E1wV+CAqRBbQj
729sXkftV6s+QyfwEC1IjCeE51nCoOe93oFPNENQzHEEZHi6bRQAb+NhFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNQ2kUE6fnheRnGzCn0ydRNY5l6MB8GA1UdIwQY
MBaAFEAs3MDeP+eEu9L74modgWVqRn0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMDVkMGQtYzFkOC00N2E2LTlkMWUt
ODY0ZGFjYTZjZmRmLzEvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMDVkMGQtYzFkOC00N2E2LTlkMWUtODY0ZGFjYTZjZmRm
LzEvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0lL38VC
HeIsFRKX704hQzSSwAFRLr6d9pv5ciwGdHSYexCRgPNg/KbJFaGo42+anqkntIti
iBK9d34sTZXjsO9NyYiG+r33yn/OhArsDB52dTg/r3D5NSk8jnKKAigMWOg0LNcv
fPllhUNrUeWa8tQL2Il/YkrHmNkaJwXaAbIG3jNPlWqeBJknnGL5OdnWq3eGhw/i
rSn8Yehby0brVUVz+Fe7TB3nG7tOZsWpphCUJuQ9eM9lpwErNgFdJ48HElauiym2
Emu9CJiC8mndRz3M4Tv0j+snQEDXtujGC2V5kgReT/0e51twSlBelNOsrIxdUuPv
DBdlWFyKSUvHuQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:48 2025 by rpki-client