Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: GyT7xmT837V+7fTD1DgDRAC8lI4rTE8HGnJUWfdXTK0=
Subject key identifier: 28:65:14:2B:A1:5D:29:B5:4A:A7:7D:B7:CC:9B:4B:8F:D5:2F:AC:70
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 01977E9FD039C2F46C6D18F1020E45625B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 0834
Signing time: Tue 17 Jun 2025 16:01:32 +0000
Manifest this update: Tue 17 Jun 2025 16:01:32 +0000
Manifest next update: Wed 18 Jun 2025 16:01:32 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: eAhFK6HoeeRbOsrAL6FfggslmItVttwD6Bd11PptMCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:d0:39:c2:f4:6c:6d:18:f1:02:0e:45:62:5b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: Jun 17 16:01:32 2025 GMT
Not After : Jun 18 16:01:32 2025 GMT
Subject: CN=2865142ba15d29b54aa77db7cc9b4b8fd52fac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:a4:6f:dc:17:a2:1c:40:a1:df:f6:e1:40:
34:9f:51:fa:57:9a:51:7d:d3:c7:2c:10:57:b5:b1:
e4:79:40:31:95:25:f6:55:c3:ad:c4:7b:e0:66:a2:
7b:e2:3b:f4:20:f7:4c:3c:5c:44:c7:4f:3c:a0:6b:
89:d6:d3:21:61:d4:4d:88:97:a5:61:94:93:e0:f7:
a7:d3:21:cb:bf:40:2a:c9:3c:bb:6e:66:12:c1:57:
45:ec:46:91:d4:10:15:a4:ce:65:95:71:f4:82:85:
20:43:d2:96:50:73:44:3b:53:01:08:93:de:0a:3d:
5c:cf:75:c7:19:38:fb:2b:5b:e9:a3:92:bb:76:2f:
25:3f:17:ea:c7:8f:e3:e2:c3:4c:86:2f:bf:f8:ce:
e3:96:ec:37:84:28:f5:25:fd:ae:4d:c2:df:6d:1f:
0e:36:96:8d:4b:2b:a9:a2:68:40:d0:fb:38:96:3c:
e7:ce:80:86:68:10:f1:30:e7:59:bd:b7:a9:b2:67:
95:5f:e6:98:ba:e5:7b:8a:12:82:39:5d:c7:10:94:
d1:65:33:eb:8f:23:46:53:c3:ce:03:6f:69:d2:d1:
f6:44:69:2a:f1:9b:da:ca:2f:b6:ec:8e:13:7b:a7:
45:82:dd:8e:e7:00:33:ae:db:a7:34:da:61:24:18:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:14:2B:A1:5D:29:B5:4A:A7:7D:B7:CC:9B:4B:8F:D5:2F:AC:70
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:f6:6d:24:53:7b:34:81:9d:25:5e:83:82:9c:7a:b5:b8:
3f:ae:ec:de:67:1f:b7:33:da:6e:c9:86:31:b5:01:7a:bb:1f:
d6:5f:d2:48:96:ad:18:79:9c:70:bf:3e:58:c6:1d:16:e0:f2:
69:45:5e:54:cd:ab:4b:5c:e1:1c:e0:17:e3:ff:10:63:5c:ad:
aa:24:04:10:d5:3c:d8:46:e4:21:25:72:45:78:c4:e6:7a:04:
54:e8:5a:e5:b4:fa:ec:89:04:20:4b:da:fe:21:eb:ab:4b:41:
ff:09:9f:70:57:33:03:f8:e7:6f:6b:98:17:16:01:81:0f:17:
4b:51:64:ee:07:4c:59:db:86:0c:15:3a:08:64:25:72:b6:bb:
93:2a:50:00:86:90:f0:67:58:dd:22:bf:0f:69:5f:bc:ed:49:
4a:cb:cd:26:b0:5e:22:8d:3c:0b:0c:91:36:e8:be:a2:46:2c:
5e:0b:b1:ff:09:b9:39:dd:aa:23:52:65:7b:fa:0a:3f:0b:55:
c9:37:86:cf:d2:56:66:5e:bd:79:9d:a9:9c:c0:8c:3a:fe:3f:
6e:60:ed:92:41:61:76:03:77:a4:5a:98:2e:6c:2f:b2:b3:89:
3d:2d:ff:56:47:dc:9e:67:43:ae:6e:10:a3:b8:4b:3a:07:b1:
d8:e7:7a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd+n9A5wvRsbRjxAg5FYludMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNWMxYWQ4ZGQ3OTIyYTQ1YTJjYzc0ODFlZmUwMWRkNDMz
MDA2YzIwHhcNMjUwNjE3MTYwMTMyWhcNMjUwNjE4MTYwMTMyWjAzMTEwLwYDVQQD
EygyODY1MTQyYmExNWQyOWI1NGFhNzdkYjdjYzliNGI4ZmQ1MmZhYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDikb9wXohxAod/24UA0n1H6V5pR
fdPHLBBXtbHkeUAxlSX2VcOtxHvgZqJ74jv0IPdMPFxEx088oGuJ1tMhYdRNiJel
YZST4Pen0yHLv0AqyTy7bmYSwVdF7EaR1BAVpM5llXH0goUgQ9KWUHNEO1MBCJPe
Cj1cz3XHGTj7K1vpo5K7di8lPxfqx4/j4sNMhi+/+M7jluw3hCj1Jf2uTcLfbR8O
NpaNSyupomhA0Ps4ljznzoCGaBDxMOdZvbepsmeVX+aYuuV7ihKCOV3HEJTRZTPr
jyNGU8POA29p0tH2RGkq8Zvayi+27I4Te6dFgt2O5wAzrtunNNphJBjnQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChlFCuhXSm1Sqd9t8ybS4/VL6xwMB8GA1UdIwQY
MBaAFKtcGtjdeSKkWizHSB7+Ad1DMAbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85ZTk5YmYtMmQ4OS00NDAxLWJjOWYt
Y2JhOGM4YTU0NTNlLzEvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85ZTk5YmYtMmQ4OS00NDAxLWJjOWYtY2JhOGM4YTU0NTNl
LzEvcTF3YTJOMTVJcVJhTE1kSUh2NEIzVU13QnNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALED2bSRT
ezSBnSVeg4KcerW4P67s3mcftzPabsmGMbUBersf1l/SSJatGHmccL8+WMYdFuDy
aUVeVM2rS1zhHOAX4/8QY1ytqiQEENU82EbkISVyRXjE5noEVOha5bT67IkEIEva
/iHrq0tB/wmfcFczA/jnb2uYFxYBgQ8XS1Fk7gdMWduGDBU6CGQlcra7kypQAIaQ
8GdY3SK/D2lfvO1JSsvNJrBeIo08CwyRNui+okYsXgux/wm5Od2qI1Jle/oKPwtV
yTeGz9JWZl69eZ2pnMCMOv4/bmDtkkFhdgN3pFqYLmwvsrOJPS3/VkfcnmdDrm4Q
o7hLOgex2Od61A==
-----END CERTIFICATE-----
Generated at Tue Jun 17 18:39:41 2025 by rpki-client