Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: zs3/5Dqb8ZfcISFgSS3q60ZpHO02XCoaj6qH6qGgbuA=
Subject key identifier: 3B:A0:1D:17:D2:6D:6A:B6:31:58:FD:55:BE:A8:AA:39:B8:5A:58:6F
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 019858D8D01F61CDEB12E3450191CDCA2A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 0FF9
Signing time: Wed 30 Jul 2025 01:01:00 +0000
Manifest this update: Wed 30 Jul 2025 01:01:00 +0000
Manifest next update: Thu 31 Jul 2025 01:01:00 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: IqywEjL0e8hMDKBERCTNPoznp0mQ/c9Tq4H2HtIh93k=)
2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d8:d0:1f:61:cd:eb:12:e3:45:01:91:cd:ca:2a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Jul 30 01:01:00 2025 GMT
Not After : Jul 31 01:01:00 2025 GMT
Subject: CN=3ba01d17d26d6ab63158fd55bea8aa39b85a586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:87:ca:12:ae:ba:a0:55:ca:c4:11:a1:35:
bb:7a:3c:dd:d2:ee:57:45:e7:50:e7:d9:c1:0d:32:
1a:61:5c:1e:4e:90:18:86:67:17:c3:01:0b:ac:29:
44:f6:95:f4:74:6c:b3:73:e6:c6:8a:d4:86:02:24:
c5:3f:66:42:89:83:44:23:d3:71:c1:97:28:44:24:
8b:d7:5a:6d:c5:18:e5:4f:55:86:60:f8:4b:da:70:
e4:1e:70:56:f3:a5:b8:e0:d8:70:d1:87:35:f8:3a:
27:b2:ec:6e:54:82:8f:dd:16:2e:49:db:77:b0:7b:
aa:ee:e8:1e:56:af:a6:0d:69:e7:05:1b:25:35:67:
ff:6e:a4:cd:69:91:d3:5c:d4:03:e6:4a:05:b5:ef:
c0:7b:fb:a2:9d:92:a8:72:52:fa:d4:a0:c2:7c:8b:
95:6f:94:33:51:cd:c9:53:07:30:39:64:ce:4f:7b:
81:c2:58:8a:91:9a:b2:7e:88:2a:da:e1:b2:ec:db:
b0:55:8a:12:69:4d:8f:6b:7a:15:2e:f9:e6:01:38:
74:8b:3b:81:f1:3e:f2:a7:0c:98:07:f0:a2:7c:6a:
71:12:d0:64:86:fe:86:1a:be:8e:59:8a:9f:ce:e4:
ea:3b:65:e3:2c:ce:d7:9f:45:45:63:c0:98:d8:43:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:1D:17:D2:6D:6A:B6:31:58:FD:55:BE:A8:AA:39:B8:5A:58:6F
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cc:f1:17:52:59:9b:12:bc:e8:03:2f:77:fa:40:de:bb:37:
cb:a7:15:c4:ba:fb:fd:1d:be:30:d6:ad:36:3e:2d:41:35:94:
86:a2:fb:fe:e6:46:05:f0:59:a4:07:bc:f0:99:ea:c1:29:90:
6c:d8:f0:29:10:f5:7b:08:77:c4:c8:82:ec:d5:1e:35:fb:bf:
1e:cb:c4:8a:c7:a5:87:88:1c:7f:fb:da:6f:e2:98:29:93:50:
80:85:29:e8:fc:2d:64:99:23:20:f6:62:23:38:f3:16:0f:c0:
49:6c:d2:6d:4a:1e:f9:7d:32:49:ac:9a:29:3b:9b:0f:03:94:
fb:28:74:51:2e:53:4a:49:fb:49:a9:86:98:12:cd:d1:b8:10:
42:df:f4:3c:bc:c4:b7:15:1b:e6:2f:04:f7:ee:5f:c5:e9:84:
5c:4a:0a:96:3f:5e:14:bd:29:db:f8:f7:47:89:bd:d1:06:75:
dc:00:3a:8f:b0:f2:ef:98:39:51:96:73:f4:27:67:ec:6d:07:
86:67:a1:4c:d1:6a:1f:89:98:33:00:3c:6c:34:53:56:79:cf:
45:23:2d:6d:25:91:9a:0e:53:e1:a3:4f:5f:9e:b5:f4:ce:a9:
be:82:24:f3:cb:ca:3f:ff:8d:17:36:22:d1:68:60:07:e1:2b:
8a:04:86:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhY2NAfYc3rEuNFAZHNyipaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi
NzJiZTUwHhcNMjUwNzMwMDEwMTAwWhcNMjUwNzMxMDEwMTAwWjAzMTEwLwYDVQQD
EygzYmEwMWQxN2QyNmQ2YWI2MzE1OGZkNTViZWE4YWEzOWI4NWE1ODZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouaHyhKuuqBVysQRoTW7ejzd0u5X
RedQ59nBDTIaYVweTpAYhmcXwwELrClE9pX0dGyzc+bGitSGAiTFP2ZCiYNEI9Nx
wZcoRCSL11ptxRjlT1WGYPhL2nDkHnBW86W44Nhw0Yc1+DonsuxuVIKP3RYuSdt3
sHuq7ugeVq+mDWnnBRslNWf/bqTNaZHTXNQD5koFte/Ae/uinZKoclL61KDCfIuV
b5QzUc3JUwcwOWTOT3uBwliKkZqyfogq2uGy7NuwVYoSaU2Pa3oVLvnmATh0izuB
8T7ypwyYB/CifGpxEtBkhv6GGr6OWYqfzuTqO2XjLM7Xn0VFY8CY2ENuGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDugHRfSbWq2MVj9Vb6oqjm4WlhvMB8GA1UdIwQY
MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct
YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm
LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXszxF1JZ
mxK86AMvd/pA3rs3y6cVxLr7/R2+MNatNj4tQTWUhqL7/uZGBfBZpAe88JnqwSmQ
bNjwKRD1ewh3xMiC7NUeNfu/HsvEiselh4gcf/vab+KYKZNQgIUp6PwtZJkjIPZi
IzjzFg/ASWzSbUoe+X0ySayaKTubDwOU+yh0US5TSkn7SamGmBLN0bgQQt/0PLzE
txUb5i8E9+5fxemEXEoKlj9eFL0p2/j3R4m90QZ13AA6j7Dy75g5UZZz9Cdn7G0H
hmehTNFqH4mYMwA8bDRTVnnPRSMtbSWRmg5T4aNPX5619M6pvoIk88vKP/+NFzYi
0WhgB+ErigSGKQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 03:01:18 2025 by rpki-client