Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: leuYnAMbdpR3GD+MI1dnRApcieUZjfIjNQbtOsJLv8I=
Subject key identifier: CF:C3:D1:5F:4A:C8:F0:36:9C:47:F0:45:C2:D0:E1:D3:45:83:08:BC
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 01987418F0474310651B968178B1A807BD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 0E06
Signing time: Mon 04 Aug 2025 08:00:48 +0000
Manifest this update: Mon 04 Aug 2025 08:00:48 +0000
Manifest next update: Tue 05 Aug 2025 08:00:48 +0000
Files and hashes: 1: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: MUPYvtcDVpA930PI++O6b5kpRowLZ01Pw19TNcmQADY=)
2: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (hash: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=)
3: pSYXiKXGXABhmANIG0Y2vhGLRUA.roa (hash: kjXcWabBcy+Nz9B+eKiIbdHIvrnXu/XwD/9ZftdegXw=)
4: uJ1wgWjtfF_PUvxzUj8noSaLQx0.roa (hash: 5K3mYspcTrH8J1dlAJJG2SBHWuIALi8AQG16SYzuq8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f0:47:43:10:65:1b:96:81:78:b1:a8:07:bd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Aug 4 08:00:48 2025 GMT
Not After : Aug 5 08:00:48 2025 GMT
Subject: CN=cfc3d15f4ac8f0369c47f045c2d0e1d3458308bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:40:be:cb:30:42:1f:f4:2a:17:3b:9d:38:54:
3f:73:ff:ba:b2:8b:84:e1:b1:cd:87:1a:7c:10:cf:
9c:a9:a4:36:bb:a3:74:bc:db:e0:07:b2:cc:76:90:
4d:2e:4a:ef:2f:0e:a8:f8:28:7c:e5:26:cc:6d:2d:
e9:95:44:8b:43:5f:b1:3a:a1:a0:88:50:25:6f:22:
50:d8:f5:43:5e:72:59:04:41:eb:7c:08:e1:37:d0:
4b:af:03:47:33:b9:01:e8:22:05:3e:3d:74:53:55:
d6:0e:d3:6b:20:42:61:33:0d:c0:70:46:e8:df:2f:
19:17:c8:25:a4:9c:02:27:35:43:0d:2c:4a:b2:41:
fa:68:26:a3:51:1f:20:8e:55:2f:c2:3f:38:a1:64:
31:97:de:ac:db:d8:6e:6b:c9:a7:1d:78:f7:31:2e:
1a:8e:dc:07:6c:dc:7f:ea:12:04:6a:63:be:bd:5f:
26:7a:dc:43:bf:ed:42:22:9d:2c:65:35:d3:d4:f3:
5a:29:ec:8f:5d:8f:03:f5:5b:67:26:aa:c1:6c:50:
01:a4:04:76:65:79:df:1b:04:f8:2c:41:18:db:0f:
24:a4:6d:9d:63:d0:74:87:02:19:90:c9:98:21:d5:
ff:94:29:b0:71:50:e7:9d:89:c6:b4:3f:58:01:ca:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:D1:5F:4A:C8:F0:36:9C:47:F0:45:C2:D0:E1:D3:45:83:08:BC
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:65:28:c1:29:78:77:55:39:90:0f:fa:5f:b2:43:37:4b:c5:
60:a6:71:c9:98:24:f2:cf:fe:0d:b0:f2:d6:7e:c9:f1:ee:8f:
6c:2f:91:27:83:77:e2:14:b0:88:f6:4e:81:d2:1b:b4:65:f0:
c3:af:d1:80:d6:4c:75:9c:9f:e3:d5:dc:df:48:03:c1:04:06:
a7:36:38:b2:15:bb:55:a1:a7:41:32:1e:22:bc:24:c5:61:b7:
71:e7:d2:ca:db:49:cc:a7:3a:9d:03:f8:ff:71:71:86:3b:c2:
a4:44:58:3d:32:6a:b2:db:02:df:c4:12:27:f5:7c:88:3a:37:
3b:e6:e0:c3:66:e6:17:b4:d6:f2:f5:24:a8:10:42:b1:e2:71:
3b:32:6b:b7:05:fc:5f:57:90:8f:4c:d7:a9:86:f8:e6:0d:2b:
bd:f2:f4:d3:90:f7:cc:86:1f:d9:d8:15:6b:b1:e5:e2:ae:14:
be:76:1f:8f:bb:2c:39:b2:4e:72:63:c9:f8:b3:0c:19:e5:60:
52:dd:52:28:3a:41:e0:99:5c:99:11:5b:2c:08:18:93:41:10:
d4:ae:aa:48:c1:eb:8a:af:d5:78:d0:80:96:e8:03:16:0f:4a:
79:53:30:fa:b7:29:a5:85:ba:6e:f4:d5:06:5c:b9:44:09:7f:
d4:d7:b3:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GPBHQxBlG5aBeLGoB70fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTQxNmIyMjgyYjQ1MzNjMzUwOWMxOGU5NTdjZTBjODM2
YmM4MzcwHhcNMjUwODA0MDgwMDQ4WhcNMjUwODA1MDgwMDQ4WjAzMTEwLwYDVQQD
EyhjZmMzZDE1ZjRhYzhmMDM2OWM0N2YwNDVjMmQwZTFkMzQ1ODMwOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkC+yzBCH/QqFzudOFQ/c/+6souE
4bHNhxp8EM+cqaQ2u6N0vNvgB7LMdpBNLkrvLw6o+Ch85SbMbS3plUSLQ1+xOqGg
iFAlbyJQ2PVDXnJZBEHrfAjhN9BLrwNHM7kB6CIFPj10U1XWDtNrIEJhMw3AcEbo
3y8ZF8glpJwCJzVDDSxKskH6aCajUR8gjlUvwj84oWQxl96s29hua8mnHXj3MS4a
jtwHbNx/6hIEamO+vV8metxDv+1CIp0sZTXT1PNaKeyPXY8D9VtnJqrBbFABpAR2
ZXnfGwT4LEEY2w8kpG2dY9B0hwIZkMmYIdX/lCmwcVDnnYnGtD9YAcpLtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/D0V9KyPA2nEfwRcLQ4dNFgwi8MB8GA1UdIwQY
MBaAFENUFrIoK0Uzw1CcGOlXzgyDa8g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQt
MjYyZWIzOWJiZTc2LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQtMjYyZWIzOWJiZTc2
LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGUowSl4
d1U5kA/6X7JDN0vFYKZxyZgk8s/+DbDy1n7J8e6PbC+RJ4N34hSwiPZOgdIbtGXw
w6/RgNZMdZyf49Xc30gDwQQGpzY4shW7VaGnQTIeIrwkxWG3cefSyttJzKc6nQP4
/3FxhjvCpERYPTJqstsC38QSJ/V8iDo3O+bgw2bmF7TW8vUkqBBCseJxOzJrtwX8
X1eQj0zXqYb45g0rvfL005D3zIYf2dgVa7Hl4q4UvnYfj7ssObJOcmPJ+LMMGeVg
Ut1SKDpB4JlcmRFbLAgYk0EQ1K6qSMHriq/VeNCAlugDFg9KeVMw+rcppYW6bvTV
Bly5RAl/1NezeQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:09 2025 by rpki-client