Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: oVU7NzVF/7CY6qozSnonTEHJLVaevPjbZBFxd4sjaNg=
Subject key identifier: 47:09:56:F0:1B:8C:8D:B7:13:54:61:CA:4F:E2:45:12:78:95:E3:06
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 01976929A374DAF97BA6CDDA145F365CEE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 11CF
Signing time: Fri 13 Jun 2025 12:00:25 +0000
Manifest this update: Fri 13 Jun 2025 12:00:25 +0000
Manifest next update: Sat 14 Jun 2025 12:00:25 +0000
Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: TztxRRxavthSUWE4qYg6MhsKC4wNFj+zcJuPoukCzcg=)
3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a3:74:da:f9:7b:a6:cd:da:14:5f:36:5c:ee:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Jun 13 12:00:25 2025 GMT
Not After : Jun 14 12:00:25 2025 GMT
Subject: CN=470956f01b8c8db7135461ca4fe245127895e306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:bd:54:0e:7e:32:3b:19:ee:c3:22:9d:af:
4a:1a:73:52:47:69:15:be:c3:60:53:86:b4:20:ee:
c8:9f:92:2d:b9:46:65:cc:80:69:6a:1b:15:56:33:
d0:bc:eb:7d:fd:a1:ec:59:ea:e5:c5:b6:95:9c:55:
50:f6:f9:a6:38:11:a8:ea:11:2e:66:4e:d0:4a:99:
0e:c9:b8:57:b1:e3:be:36:19:5d:5e:06:bf:50:87:
91:62:30:82:b6:59:a8:8e:cd:94:fe:23:c0:3d:34:
d6:81:2d:e7:4c:b7:06:fc:31:45:81:65:70:40:4e:
02:2c:28:51:f3:53:cb:51:5d:ba:74:ba:60:f0:4d:
c0:c9:df:f3:27:e1:30:99:c8:bf:9c:79:91:11:6f:
0b:56:8c:e1:1d:0c:fa:1c:0e:02:75:ab:2f:01:16:
63:e2:9c:75:a3:34:87:65:af:e2:69:8f:cd:6d:f2:
e6:a5:a0:e3:2d:ce:10:5b:4f:6b:cd:81:0f:d8:ba:
92:fa:41:a4:e0:57:fb:36:b0:ec:0a:a9:a7:e1:04:
3e:dc:b5:97:95:96:66:b9:34:2e:1c:a8:8b:84:01:
fe:c9:ad:99:75:bb:b1:53:ce:d6:de:4d:56:43:9d:
40:bc:d1:ce:a0:71:b8:2a:47:e2:48:56:6a:a7:25:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:56:F0:1B:8C:8D:B7:13:54:61:CA:4F:E2:45:12:78:95:E3:06
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f7:cf:cc:f3:66:bb:7f:cd:52:32:fa:e0:90:2a:26:14:31:
98:1c:73:50:b9:b5:9d:5c:d9:3f:da:bb:ec:a4:a3:6d:79:0e:
b1:7c:fd:a3:8f:24:05:d5:ff:50:8f:ed:30:2b:71:49:22:21:
e1:b5:75:4e:84:88:e0:5a:67:a3:5f:10:52:c8:b7:9a:1f:78:
4a:97:bd:ba:78:c3:82:85:b3:4f:6a:5f:05:1f:bd:16:c2:16:
d5:7e:eb:f4:7a:41:a5:70:b6:6b:8c:18:3a:d2:0b:3f:c3:68:
7e:5e:1d:4d:bf:9d:8f:2d:a1:4a:54:27:77:44:a3:09:e8:c4:
a2:a5:a7:2a:fd:15:88:06:01:4b:24:3b:02:3f:ae:50:83:da:
e8:5c:5c:e9:a6:dd:1e:16:3b:2d:d2:8f:7b:5e:65:7b:4f:27:
e4:ac:8c:65:f8:02:38:18:6d:a5:a7:83:dd:3c:b7:88:bf:17:
a8:5a:ab:49:5c:56:f2:ec:cf:f3:46:b7:42:23:6b:ec:39:3b:
0d:11:89:d5:cf:b7:96:72:00:6d:1a:f0:90:8b:f9:e1:8b:6f:
63:df:77:98:e9:17:40:14:0b:80:ab:65:80:72:3d:c0:1d:8c:
29:de:51:78:4e:9d:a5:fa:15:fc:b2:0a:25:b8:11:b6:e9:96:
59:e3:ff:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKaN02vl7ps3aFF82XO4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz
MDBiMjAwHhcNMjUwNjEzMTIwMDI1WhcNMjUwNjE0MTIwMDI1WjAzMTEwLwYDVQQD
Eyg0NzA5NTZmMDFiOGM4ZGI3MTM1NDYxY2E0ZmUyNDUxMjc4OTVlMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxq9VA5+MjsZ7sMina9KGnNSR2kV
vsNgU4a0IO7In5ItuUZlzIBpahsVVjPQvOt9/aHsWerlxbaVnFVQ9vmmOBGo6hEu
Zk7QSpkOybhXseO+NhldXga/UIeRYjCCtlmojs2U/iPAPTTWgS3nTLcG/DFFgWVw
QE4CLChR81PLUV26dLpg8E3Ayd/zJ+Ewmci/nHmREW8LVozhHQz6HA4CdasvARZj
4px1ozSHZa/iaY/NbfLmpaDjLc4QW09rzYEP2LqS+kGk4Ff7NrDsCqmn4QQ+3LWX
lZZmuTQuHKiLhAH+ya2ZdbuxU87W3k1WQ51AvNHOoHG4KkfiSFZqpyURZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcJVvAbjI23E1Rhyk/iRRJ4leMGMB8GA1UdIwQY
MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt
MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk
LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/fPzPNm
u3/NUjL64JAqJhQxmBxzULm1nVzZP9q77KSjbXkOsXz9o48kBdX/UI/tMCtxSSIh
4bV1ToSI4Fpno18QUsi3mh94Spe9unjDgoWzT2pfBR+9FsIW1X7r9HpBpXC2a4wY
OtILP8Nofl4dTb+djy2hSlQnd0SjCejEoqWnKv0ViAYBSyQ7Aj+uUIPa6Fxc6abd
HhY7LdKPe15le08n5KyMZfgCOBhtpaeD3Ty3iL8XqFqrSVxW8uzP80a3QiNr7Dk7
DRGJ1c+3lnIAbRrwkIv54YtvY993mOkXQBQLgKtlgHI9wB2MKd5ReE6dpfoV/LIK
JbgRtumWWeP/ew==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:01 2025 by rpki-client