Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: aNAmummn8/TLmU9UDVG+cROCQZ4lmXzeu9YkPLNU1cc=
Subject key identifier: E1:D6:E7:3A:ED:44:F4:A6:0A:9C:DA:03:1B:4B:B6:8B:8A:D1:6A:43
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 01987A88BEFD7D8C495E82B4CCD76F519357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 0FB0
Signing time: Tue 05 Aug 2025 14:00:38 +0000
Manifest this update: Tue 05 Aug 2025 14:00:38 +0000
Manifest next update: Wed 06 Aug 2025 14:00:38 +0000
Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=)
2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: Sd/V+pS2I9qxtYGJ0w9CBj0qLw6OBD2qz9GVFGi3QdY=)
3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=)
4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:be:fd:7d:8c:49:5e:82:b4:cc:d7:6f:51:93:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Aug 5 14:00:38 2025 GMT
Not After : Aug 6 14:00:38 2025 GMT
Subject: CN=e1d6e73aed44f4a60a9cda031b4bb68b8ad16a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:a8:85:8f:7a:7a:83:a3:09:fa:4b:47:ae:
40:7b:c7:d7:68:d1:2c:89:2d:86:93:63:77:76:66:
f1:93:8f:4b:77:f8:61:d4:40:ff:8f:96:12:5d:a4:
d8:34:92:13:79:a6:09:95:cb:12:2a:8c:46:28:c8:
c9:bc:ae:09:15:ba:9d:4c:a4:88:d3:b1:ed:e5:6a:
94:2c:c3:7a:54:3c:aa:73:24:99:88:00:1d:40:b4:
d2:3b:0d:80:f1:55:49:76:1f:46:55:9b:17:d4:4b:
57:ed:ac:eb:16:06:02:d1:49:0f:50:e5:61:a9:06:
78:b2:55:f9:94:8d:17:d7:59:3d:b4:ee:7d:a3:e7:
bf:b7:d9:cd:14:b3:2a:fb:43:63:bd:29:df:0d:a7:
0b:de:51:c5:89:d3:85:d8:da:74:78:47:bb:2f:61:
85:b1:47:fe:f6:48:47:28:01:63:f9:af:1c:a4:33:
f2:54:a0:c1:0f:ba:d5:7b:9e:39:81:77:2e:16:b8:
c1:8e:ea:e9:3a:8e:38:5f:2a:9f:89:78:21:98:87:
f9:6a:d8:1c:26:3d:ee:40:7b:d2:d7:20:47:4f:47:
2c:99:6f:c6:cf:13:de:8e:bb:b0:23:73:df:0a:2a:
99:75:0f:6c:c3:ca:71:c9:77:a6:a6:fb:8b:43:15:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D6:E7:3A:ED:44:F4:A6:0A:9C:DA:03:1B:4B:B6:8B:8A:D1:6A:43
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d9:85:72:08:bc:83:ce:92:fc:7c:2d:c8:79:44:7b:3b:ac:
a5:25:6c:35:bb:71:95:75:e0:32:77:ae:64:96:bc:a3:60:7a:
7d:7b:61:24:92:a5:82:c3:e2:25:e3:bd:cf:83:c3:9f:78:32:
42:9f:f1:65:dd:53:de:78:76:e2:84:78:8f:fa:2f:18:98:ce:
c0:8b:c5:34:45:11:a3:07:f3:2f:a9:f6:c3:49:e3:e9:40:df:
83:0f:b2:f5:43:ce:f5:54:2d:3f:b3:35:bf:3c:03:0e:61:db:
37:8d:66:9c:c1:b9:f4:80:d5:54:f2:be:5a:ae:37:ab:51:a1:
47:74:3d:2c:cd:20:dc:3f:4f:26:c6:9c:c7:f7:15:00:e1:43:
72:41:e3:80:bf:0a:fc:f1:60:be:56:d3:89:94:8d:61:bf:92:
73:21:21:2f:24:d8:a9:3b:a8:aa:e2:6d:42:f5:f1:69:d5:8a:
11:99:2f:da:c5:c9:25:25:b5:f4:9c:fb:8f:b1:fa:bd:49:1b:
1e:f2:28:28:b1:d7:b6:fb:fa:28:2f:d7:93:ea:18:7f:a1:3b:
7c:f4:e0:1f:13:53:11:ab:01:cb:81:da:9d:4a:df:e1:21:3e:
69:35:86:b2:3d:92:83:cb:5f:e5:81:3e:22:88:b4:13:54:47:
6a:89:22:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iL79fYxJXoK0zNdvUZNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3
ZWMzNTQwHhcNMjUwODA1MTQwMDM4WhcNMjUwODA2MTQwMDM4WjAzMTEwLwYDVQQD
EyhlMWQ2ZTczYWVkNDRmNGE2MGE5Y2RhMDMxYjRiYjY4YjhhZDE2YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfqohY96eoOjCfpLR65Ae8fXaNEs
iS2Gk2N3dmbxk49Ld/hh1ED/j5YSXaTYNJITeaYJlcsSKoxGKMjJvK4JFbqdTKSI
07Ht5WqULMN6VDyqcySZiAAdQLTSOw2A8VVJdh9GVZsX1EtX7azrFgYC0UkPUOVh
qQZ4slX5lI0X11k9tO59o+e/t9nNFLMq+0NjvSnfDacL3lHFidOF2Np0eEe7L2GF
sUf+9khHKAFj+a8cpDPyVKDBD7rVe545gXcuFrjBjurpOo44XyqfiXghmIf5atgc
Jj3uQHvS1yBHT0csmW/GzxPejruwI3PfCiqZdQ9sw8pxyXempvuLQxXkewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHW5zrtRPSmCpzaAxtLtouK0WpDMB8GA1UdIwQY
MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt
NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj
LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtmFcgi8
g86S/HwtyHlEezuspSVsNbtxlXXgMneuZJa8o2B6fXthJJKlgsPiJeO9z4PDn3gy
Qp/xZd1T3nh24oR4j/ovGJjOwIvFNEURowfzL6n2w0nj6UDfgw+y9UPO9VQtP7M1
vzwDDmHbN41mnMG59IDVVPK+Wq43q1GhR3Q9LM0g3D9PJsacx/cVAOFDckHjgL8K
/PFgvlbTiZSNYb+ScyEhLyTYqTuoquJtQvXxadWKEZkv2sXJJSW19Jz7j7H6vUkb
HvIoKLHXtvv6KC/Xk+oYf6E7fPTgHxNTEasBy4HanUrf4SE+aTWGsj2Sg8tf5YE+
Ioi0E1RHaokiEw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:02 2025 by rpki-client