Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File: q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier: v+Id1CyuO3bifNBnAMgMzExfobpzFAo62QQJvm1tOfQ=
Subject key identifier: 42:E2:30:32:A7:CB:07:F8:02:F1:43:D8:B6:18:F9:50:FB:73:FB:67
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer: /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial: 01976A05A6F86FA31C9EAE5DFBBB69ED3E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 16:00:44 +0000
Manifest this update: Fri 13 Jun 2025 16:00:44 +0000
Manifest next update: Sat 14 Jun 2025 16:00:44 +0000
Files and hashes: 1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: Of8Nx0MNoxD9KMfD6306U1MW1qfu7CEJmq7s+61O4a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:a6:f8:6f:a3:1c:9e:ae:5d:fb:bb:69:ed:3e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Validity
Not Before: Jun 13 16:00:44 2025 GMT
Not After : Jun 14 16:00:44 2025 GMT
Subject: CN=42e23032a7cb07f802f143d8b618f950fb73fb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:5f:49:94:dc:3e:30:11:e0:d2:29:52:17:
ee:93:59:df:8c:f7:bf:7c:ed:ed:50:55:2c:bb:64:
58:cc:2b:d8:8c:31:81:33:38:09:1a:61:9d:2f:b4:
12:51:53:4b:8b:f5:17:e1:f1:62:e7:69:73:27:ff:
c0:52:b0:81:d4:b5:54:0c:a8:35:ad:3d:4c:05:1c:
be:de:f3:e8:22:04:a3:09:93:e7:2e:29:3b:f3:96:
f8:ab:c6:66:4d:d3:ff:87:bb:48:e5:23:b3:e1:a2:
7d:80:d2:1c:32:2f:b0:24:bf:f3:de:c8:d8:29:76:
8f:b3:b8:b4:f1:f3:b3:4a:92:4f:ad:4f:f0:92:57:
81:29:ba:17:ee:37:a6:ec:d0:0e:02:71:31:8a:3c:
b7:48:0a:5a:3a:33:69:c9:8d:52:be:da:07:5d:94:
29:b1:e7:54:01:e5:e2:8a:00:87:74:5f:49:20:8c:
fc:e9:da:f0:fe:30:11:13:da:87:fa:c3:86:ff:09:
d1:d9:56:46:57:1c:c6:a5:24:73:6c:4b:c3:62:6a:
42:46:d9:3b:d9:2e:06:0e:23:00:0a:96:79:7a:1f:
2b:01:e2:35:8c:a2:8e:98:26:f6:8f:29:b9:3a:df:
72:b1:52:30:e6:b8:51:7e:b1:1e:98:80:53:89:3c:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:30:32:A7:CB:07:F8:02:F1:43:D8:B6:18:F9:50:FB:73:FB:67
X509v3 Authority Key Identifier:
keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:35:59:ed:d3:a2:ad:07:ef:00:cc:0c:81:86:58:c6:cc:67:
7f:3d:f6:6d:5a:5d:f1:21:cc:b0:b8:9e:9d:86:7c:12:a1:aa:
c7:67:fc:cf:8a:cb:f8:08:d3:8f:bd:10:c1:f9:a4:13:9d:da:
cc:22:a4:ff:61:9b:f0:89:d3:44:aa:82:ba:53:82:9d:db:16:
10:cd:f2:60:14:a4:c4:64:8b:01:cc:d9:be:e6:3d:de:83:fa:
41:f2:8d:8b:f3:06:27:41:27:bc:5d:f1:20:53:9a:9c:df:b8:
9e:49:67:11:e2:4f:14:18:e3:bb:57:68:c0:5d:b2:71:d2:00:
b4:b0:16:e0:40:21:5f:83:fe:fe:e6:9b:5a:50:bd:e8:d3:c8:
f0:d8:93:e0:b9:0a:fd:e1:a9:9d:38:57:af:af:78:da:6b:fe:
43:72:b4:19:1e:8e:de:c5:74:16:89:06:84:9a:6d:09:02:49:
0d:04:65:39:62:7f:44:fd:5f:d8:fe:e4:63:a1:60:41:a6:78:
7d:34:8e:d0:cb:06:c2:23:ff:1c:e3:35:62:39:c0:5c:c5:27:
97:fa:e7:78:49:9b:65:8a:78:17:c6:8f:93:7e:1f:5d:54:42:
27:db:8d:3e:30:75:3c:8b:5a:6c:0e:62:7b:72:b4:ae:cb:f4:
c5:f6:26:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBab4b6Mcnq5d+7tp7T5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGViMWUwYzUzYTY4MGVhYTQwYjhjN2NkM2YyMWNjOTYw
NDNlOGEwHhcNMjUwNjEzMTYwMDQ0WhcNMjUwNjE0MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg0MmUyMzAzMmE3Y2IwN2Y4MDJmMTQzZDhiNjE4Zjk1MGZiNzNmYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyapfSZTcPjAR4NIpUhfuk1nfjPe/
fO3tUFUsu2RYzCvYjDGBMzgJGmGdL7QSUVNLi/UX4fFi52lzJ//AUrCB1LVUDKg1
rT1MBRy+3vPoIgSjCZPnLik785b4q8ZmTdP/h7tI5SOz4aJ9gNIcMi+wJL/z3sjY
KXaPs7i08fOzSpJPrU/wkleBKboX7jem7NAOAnExijy3SApaOjNpyY1SvtoHXZQp
sedUAeXiigCHdF9JIIz86drw/jARE9qH+sOG/wnR2VZGVxzGpSRzbEvDYmpCRtk7
2S4GDiMACpZ5eh8rAeI1jKKOmCb2jym5Ot9ysVIw5rhRfrEemIBTiTzBHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELiMDKnywf4AvFD2LYY+VD7c/tnMB8GA1UdIwQY
MBaAFKtOseDFOmgOqkC4x80/IcyWBD6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZTAyZTgtN2UwNS00ZmNmLThhNmEt
MzdjMjM0MmM1YzJmLzEvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82ZTAyZTgtN2UwNS00ZmNmLThhNmEtMzdjMjM0MmM1YzJm
LzEvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzVZ7dOi
rQfvAMwMgYZYxsxnfz32bVpd8SHMsLienYZ8EqGqx2f8z4rL+AjTj70QwfmkE53a
zCKk/2Gb8InTRKqCulOCndsWEM3yYBSkxGSLAczZvuY93oP6QfKNi/MGJ0EnvF3x
IFOanN+4nklnEeJPFBjju1dowF2ycdIAtLAW4EAhX4P+/uabWlC96NPI8NiT4LkK
/eGpnThXr6942mv+Q3K0GR6O3sV0FokGhJptCQJJDQRlOWJ/RP1f2P7kY6FgQaZ4
fTSO0MsGwiP/HOM1YjnAXMUnl/rneEmbZYp4F8aPk34fXVRCJ9uNPjB1PItabA5i
e3K0rsv0xfYm7g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:30 2025 by rpki-client