Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: UBqZv70WKWtbBgW2+pp/Q9z/DVqsqgAcAmuS3gHkPcU=
Subject key identifier: B3:05:71:BC:D5:5E:8F:C5:72:6F:84:41:E6:12:64:6E:F1:07:D5:3C
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 01987CAE0B07BA182272983F9E49B7A29CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0E3B
Signing time: Wed 06 Aug 2025 00:00:37 +0000
Manifest this update: Wed 06 Aug 2025 00:00:37 +0000
Manifest next update: Thu 07 Aug 2025 00:00:37 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: R69cAlJbynxScvBnV9dy4V1cnnGlm/Z9BR4PMoMNZrk=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:0b:07:ba:18:22:72:98:3f:9e:49:b7:a2:9c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Aug 6 00:00:37 2025 GMT
Not After : Aug 7 00:00:37 2025 GMT
Subject: CN=b30571bcd55e8fc5726f8441e612646ef107d53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:ff:f0:da:b2:36:4c:b2:c3:d6:98:43:b0:
dd:45:38:c7:e4:b9:5a:56:9a:62:54:8d:18:a2:68:
f3:65:86:f8:b2:b7:2c:4b:1e:f9:bc:0b:44:ec:32:
72:3e:e9:e6:c4:54:a0:85:c0:f4:ad:c2:6d:20:85:
ad:d6:3b:04:6d:25:3e:3d:97:ec:22:6c:27:24:ba:
3a:5b:d4:d6:d4:71:c5:8b:07:56:d3:a9:b1:74:ff:
83:02:80:df:c2:de:99:c0:a2:84:b0:8f:96:c7:97:
9b:9f:14:99:07:52:35:97:69:ee:1e:32:ff:46:17:
34:04:a7:51:2a:d8:48:ff:62:10:a0:c0:fa:b0:76:
39:15:d1:22:43:7b:9d:41:98:56:e5:49:ae:97:d1:
2b:5c:b6:85:18:c6:db:03:8b:f1:9b:47:93:3b:aa:
66:eb:64:f8:75:d9:87:36:5b:60:32:57:4d:3a:f9:
70:f7:b4:20:21:8e:5c:9b:76:e4:80:f5:58:76:e3:
69:f7:c4:bf:d0:c2:0b:ad:b7:10:61:1b:a0:33:00:
6b:fa:ad:1c:e8:a3:ef:4a:81:f9:af:e4:47:e0:30:
4d:a6:db:f2:78:19:1e:78:40:48:6c:bf:33:d6:3e:
ca:60:00:cb:75:93:f0:98:c2:17:49:6c:1c:36:3f:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:71:BC:D5:5E:8F:C5:72:6F:84:41:E6:12:64:6E:F1:07:D5:3C
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7b:24:7b:06:7e:29:54:6f:b9:96:43:7a:7a:70:53:bb:a4:
fc:97:ae:ed:02:8f:63:ce:d2:81:8e:69:de:24:7b:3f:78:95:
19:35:c9:99:d8:bc:49:d3:9f:12:bc:00:e2:d9:a8:fc:c5:9c:
e9:3e:3a:bb:54:69:b5:db:71:f6:2b:3d:15:3e:32:44:76:7f:
81:8a:4e:83:33:05:46:46:a5:7e:87:a2:3a:45:ba:50:69:b7:
44:8e:d1:4c:3a:90:0b:b5:b1:72:2f:8b:b7:96:61:3e:94:40:
92:6b:35:f8:b2:9a:e9:8f:2c:2a:76:da:bd:56:89:2a:a2:99:
50:2c:ec:61:4b:cf:3b:cc:71:8a:6c:89:2f:4e:3a:77:2e:42:
54:88:b5:0e:0b:2e:68:67:fe:8d:76:56:76:0c:56:d8:90:64:
ee:66:ef:5b:a5:89:c7:24:39:73:95:59:02:d7:39:5f:87:e5:
e9:10:a0:78:41:17:0b:da:a6:23:20:cb:1f:77:cd:2e:e3:28:
6a:fe:d2:08:0e:bc:74:29:8c:ad:3b:12:f9:9b:89:d1:8e:31:
cf:d5:ad:08:d3:84:42:5e:36:05:6d:bf:45:c9:5e:77:ce:17:
b5:88:c5:de:ea:fa:a5:4b:20:61:ff:04:8b:da:06:5d:1d:a4:
aa:24:9d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rgsHuhgicpg/nkm3opzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw
ZGM5MmMwHhcNMjUwODA2MDAwMDM3WhcNMjUwODA3MDAwMDM3WjAzMTEwLwYDVQQD
EyhiMzA1NzFiY2Q1NWU4ZmM1NzI2Zjg0NDFlNjEyNjQ2ZWYxMDdkNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwf/8NqyNkyyw9aYQ7DdRTjH5Lla
VppiVI0YomjzZYb4srcsSx75vAtE7DJyPunmxFSghcD0rcJtIIWt1jsEbSU+PZfs
ImwnJLo6W9TW1HHFiwdW06mxdP+DAoDfwt6ZwKKEsI+Wx5ebnxSZB1I1l2nuHjL/
Rhc0BKdRKthI/2IQoMD6sHY5FdEiQ3udQZhW5Umul9ErXLaFGMbbA4vxm0eTO6pm
62T4ddmHNltgMldNOvlw97QgIY5cm3bkgPVYduNp98S/0MILrbcQYRugMwBr+q0c
6KPvSoH5r+RH4DBNptvyeBkeeEBIbL8z1j7KYADLdZPwmMIXSWwcNj8uBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMFcbzVXo/Fcm+EQeYSZG7xB9U8MB8GA1UdIwQY
MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt
YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5
LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3skewZ+
KVRvuZZDenpwU7uk/Jeu7QKPY87SgY5p3iR7P3iVGTXJmdi8SdOfErwA4tmo/MWc
6T46u1Rptdtx9is9FT4yRHZ/gYpOgzMFRkalfoeiOkW6UGm3RI7RTDqQC7Wxci+L
t5ZhPpRAkms1+LKa6Y8sKnbavVaJKqKZUCzsYUvPO8xximyJL046dy5CVIi1Dgsu
aGf+jXZWdgxW2JBk7mbvW6WJxyQ5c5VZAtc5X4fl6RCgeEEXC9qmIyDLH3fNLuMo
av7SCA68dCmMrTsS+ZuJ0Y4xz9WtCNOEQl42BW2/Rcled84XtYjF3ur6pUsgYf8E
i9oGXR2kqiSdHg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:27 2025 by rpki-client