Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: 8vztyiwDangSoQPGWzOcxjw/yNis48AiJpBn8CNfc1w=
Subject key identifier: 43:BC:F6:BB:DA:D0:63:EE:C4:94:8F:1F:50:E8:FB:10:46:02:79:C7
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 01976BF3F3E087825113649396318512D532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0C45
Signing time: Sat 14 Jun 2025 01:00:39 +0000
Manifest this update: Sat 14 Jun 2025 01:00:39 +0000
Manifest next update: Sun 15 Jun 2025 01:00:39 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: RNpF0QeVex6TdNGDmHb0guUwvs8T6pfVBnSE7Ym19jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f3:e0:87:82:51:13:64:93:96:31:85:12:d5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Jun 14 01:00:39 2025 GMT
Not After : Jun 15 01:00:39 2025 GMT
Subject: CN=43bcf6bbdad063eec4948f1f50e8fb10460279c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:4e:2a:54:c7:dc:e1:27:af:a9:f5:bb:9a:
38:1b:2c:9c:a0:55:3b:7d:e3:a1:1b:79:2b:53:f8:
cf:31:98:bf:2c:7e:21:92:47:43:86:8b:5b:ba:4a:
64:3c:2d:07:7e:f0:1e:0d:2e:7c:de:4b:61:81:f0:
15:5b:99:1f:fd:f4:27:67:48:e4:54:b7:ca:a1:27:
1a:fb:17:91:13:79:08:11:13:66:4d:9d:7f:92:67:
9f:4e:a2:c3:15:1a:78:51:41:22:b5:7e:21:a2:e4:
86:fd:dd:9f:a3:17:37:87:82:b3:42:f4:32:e9:43:
a5:8f:23:01:f6:68:a1:58:94:15:1f:37:c2:21:ed:
87:79:47:11:b1:2a:29:ae:e4:79:e8:52:00:18:ce:
14:89:54:3b:e9:ec:df:96:28:1e:73:62:11:a9:16:
77:4b:6a:ee:ba:0d:06:ff:28:95:02:6a:5a:3c:b4:
1a:01:91:44:f8:22:8e:83:98:74:8d:f6:95:9b:8c:
59:14:9b:b3:58:d4:83:7d:9f:96:29:d4:5a:4e:a3:
66:a0:19:9c:c3:ce:83:68:8f:96:30:c8:15:14:eb:
2a:ae:1c:51:ca:a6:ba:4d:6c:41:e6:77:d9:ca:21:
62:c1:dc:58:a5:4d:8e:e5:cc:79:61:69:e7:ff:1a:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BC:F6:BB:DA:D0:63:EE:C4:94:8F:1F:50:E8:FB:10:46:02:79:C7
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b6:64:60:10:a2:21:9d:f3:60:16:0b:93:4c:11:c8:5d:0f:
4c:19:20:27:92:04:e3:6c:fa:63:3a:c7:9a:55:bf:c5:87:64:
42:4a:ec:1f:cf:32:94:84:35:ab:36:fc:db:cd:c8:2f:fc:9c:
31:cd:f9:28:ca:0b:f6:8c:f4:99:eb:e0:6a:b6:dc:e8:ab:e8:
6d:bb:2e:c0:ad:0e:61:f1:db:71:a5:97:78:0c:7d:00:10:03:
af:a4:b7:72:61:e0:2e:2c:3b:9e:a8:3e:61:f1:5d:dc:27:4d:
b4:ab:20:c8:4f:73:91:bb:70:fa:b7:76:2a:40:9f:ac:94:5d:
4d:6d:24:9a:d0:24:15:69:52:ab:54:85:44:66:ac:3c:06:08:
31:47:e6:0a:8f:06:13:ef:c2:8b:19:b8:28:c8:11:af:e9:b1:
95:4e:d5:32:38:5a:b5:58:e8:1b:71:72:73:f6:db:4a:05:68:
12:d3:a5:20:43:59:22:14:0c:3b:63:3b:33:34:51:d1:0c:50:
65:87:3c:df:01:a9:ed:cc:e8:31:95:ae:40:f3:a4:b2:29:93:
29:0c:72:35:ea:ca:f4:73:86:ed:3b:4f:ca:dc:12:a9:42:25:
30:3b:0c:18:72:dd:fc:ac:96:8c:ad:c6:35:55:ad:41:7c:5e:
71:b5:33:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr8/Pgh4JRE2STljGFEtUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTFlNjM4YTJjYjk1YzY4YmJjNTRhMjcyODYwNWIyN2Y1
NzA2ODEwHhcNMjUwNjE0MDEwMDM5WhcNMjUwNjE1MDEwMDM5WjAzMTEwLwYDVQQD
Eyg0M2JjZjZiYmRhZDA2M2VlYzQ5NDhmMWY1MGU4ZmIxMDQ2MDI3OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5NOKlTH3OEnr6n1u5o4GyycoFU7
feOhG3krU/jPMZi/LH4hkkdDhotbukpkPC0HfvAeDS583kthgfAVW5kf/fQnZ0jk
VLfKoSca+xeRE3kIERNmTZ1/kmefTqLDFRp4UUEitX4houSG/d2foxc3h4KzQvQy
6UOljyMB9mihWJQVHzfCIe2HeUcRsSopruR56FIAGM4UiVQ76ezfligec2IRqRZ3
S2ruug0G/yiVAmpaPLQaAZFE+CKOg5h0jfaVm4xZFJuzWNSDfZ+WKdRaTqNmoBmc
w86DaI+WMMgVFOsqrhxRyqa6TWxB5nfZyiFiwdxYpU2O5cx5YWnn/xrjfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO89rva0GPuxJSPH1Do+xBGAnnHMB8GA1UdIwQY
MBaAFKlR5jiiy5XGi7xUonKGBbJ/VwaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEt
YWJkZjkwNmM1YWRlLzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEtYWJkZjkwNmM1YWRl
LzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7ZkYBCi
IZ3zYBYLk0wRyF0PTBkgJ5IE42z6YzrHmlW/xYdkQkrsH88ylIQ1qzb8283IL/yc
Mc35KMoL9oz0mevgarbc6KvobbsuwK0OYfHbcaWXeAx9ABADr6S3cmHgLiw7nqg+
YfFd3CdNtKsgyE9zkbtw+rd2KkCfrJRdTW0kmtAkFWlSq1SFRGasPAYIMUfmCo8G
E+/Cixm4KMgRr+mxlU7VMjhatVjoG3Fyc/bbSgVoEtOlIENZIhQMO2M7MzRR0QxQ
ZYc83wGp7czoMZWuQPOksimTKQxyNerK9HOG7TtPytwSqUIlMDsMGHLd/KyWjK3G
NVWtQXxecbUztQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:52 2025 by rpki-client