Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: kYBD14O/f9pJAuCDB9ZrwsZhMUy4dLvF0heSkBNM4Ak=
Subject key identifier: 57:C3:BE:62:DF:F9:24:47:8B:B3:09:22:B2:5C:85:11:6A:C5:A5:FD
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 0198499C27A47EA5FDD959A0B4AF1BD96EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 104B
Signing time: Sun 27 Jul 2025 02:00:27 +0000
Manifest this update: Sun 27 Jul 2025 02:00:27 +0000
Manifest next update: Mon 28 Jul 2025 02:00:27 +0000
Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: HS2swTXaY1u6JNCd16fMwL6yltocNxyoRlbukLnTh+s=)
2: hOsUXVARCl8NqYdv3cI6OIcfqwU.roa (hash: w1gjvrKQRUt3hmiD9OYkOr05DsegCS6tRj5zStTTlPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:27:a4:7e:a5:fd:d9:59:a0:b4:af:1b:d9:6e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: Jul 27 02:00:27 2025 GMT
Not After : Jul 28 02:00:27 2025 GMT
Subject: CN=57c3be62dff924478bb30922b25c85116ac5a5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:0c:67:db:0f:bd:94:fc:1e:0c:c1:2e:33:
af:f2:3f:5a:1b:51:25:1a:72:f5:7b:8a:25:e7:77:
44:88:59:cc:82:c3:82:e6:bd:41:c9:0d:19:96:f9:
03:8c:26:2e:c8:a4:1a:1f:f7:3f:a8:f2:ff:62:9b:
fc:0c:3c:73:46:2c:1c:39:e8:c7:ab:26:51:5e:ee:
74:2d:57:fe:29:33:26:90:c1:b6:f3:84:7c:0f:f8:
87:ae:a2:2c:53:e5:06:3a:38:9a:f1:2b:0b:78:41:
3a:75:e8:f3:4d:36:cf:2e:7e:a5:fd:c5:8d:d6:46:
6f:e4:d4:e9:5f:5f:23:f2:4e:60:24:63:aa:4c:d9:
03:de:72:59:20:0e:51:a1:b0:bd:e2:cf:38:dc:ed:
41:90:23:38:22:13:f3:8f:ac:87:4c:e0:8d:96:4e:
e5:ba:59:b0:c9:71:27:cb:03:ff:15:ac:ed:b7:3d:
bb:45:9f:20:b6:31:37:05:e7:29:b4:09:f8:24:8e:
63:b7:6f:18:ba:c5:f8:c1:33:b3:a9:cc:ca:9d:45:
2c:02:c2:59:98:d6:66:5f:7a:9b:f6:e9:ce:96:6c:
1d:41:c6:af:25:00:d5:72:dd:07:cd:cb:86:50:f6:
fd:82:e9:bc:73:59:b1:1b:65:ab:50:e9:77:cc:b6:
03:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C3:BE:62:DF:F9:24:47:8B:B3:09:22:B2:5C:85:11:6A:C5:A5:FD
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bd:c0:e1:e0:cc:fc:cd:49:a0:62:b0:31:db:00:bf:50:8a:
e0:74:7d:99:c2:7b:1b:05:d9:a6:67:c0:8e:f8:e3:ba:04:1c:
74:c7:e2:c4:aa:3e:7f:71:7f:3f:c6:8e:8c:3f:35:e9:74:c0:
ed:23:6f:83:10:f4:7e:31:28:4e:59:4c:82:24:9d:80:31:9d:
d4:c4:d7:1b:91:e3:94:01:eb:9b:08:a6:3c:44:c6:f1:cc:fb:
7d:32:17:f0:a8:3d:92:39:38:6e:e1:b7:bc:5f:bf:a4:f4:f5:
ad:9d:aa:76:b1:07:21:75:98:ad:4b:b5:ef:37:17:ec:b3:60:
73:7a:5d:93:76:42:ff:20:b5:ad:ae:8d:60:06:da:74:9a:7c:
2b:59:54:70:9f:a8:db:a4:18:5f:d2:fd:65:44:23:c5:50:ad:
41:ac:59:ea:0c:35:a1:f3:e9:28:22:43:40:34:a3:82:78:90:
aa:45:3b:30:7f:2f:21:5e:1d:f3:28:5c:74:64:83:27:7d:c9:
bd:72:01:11:6c:3b:58:42:f4:24:95:0c:40:4c:ce:7f:e0:26:
37:07:c0:51:c2:ad:44:7a:8f:16:0f:f5:30:55:a9:9c:2d:f4:
ec:67:3a:35:58:9b:41:12:01:8b:7c:e9:b6:e5:e2:69:4d:04:
16:d2:7a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnCekfqX92VmgtK8b2W6/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDUxOGQ3MzA3Nzg4ZmNhMzg5MTg3ODQ5MGU0ZjMyZDlh
YWY2YWYwHhcNMjUwNzI3MDIwMDI3WhcNMjUwNzI4MDIwMDI3WjAzMTEwLwYDVQQD
Eyg1N2MzYmU2MmRmZjkyNDQ3OGJiMzA5MjJiMjVjODUxMTZhYzVhNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL0MZ9sPvZT8HgzBLjOv8j9aG1El
GnL1e4ol53dEiFnMgsOC5r1ByQ0ZlvkDjCYuyKQaH/c/qPL/Ypv8DDxzRiwcOejH
qyZRXu50LVf+KTMmkMG284R8D/iHrqIsU+UGOjia8SsLeEE6dejzTTbPLn6l/cWN
1kZv5NTpX18j8k5gJGOqTNkD3nJZIA5RobC94s843O1BkCM4IhPzj6yHTOCNlk7l
ulmwyXEnywP/Fazttz27RZ8gtjE3BecptAn4JI5jt28YusX4wTOzqczKnUUsAsJZ
mNZmX3qb9unOlmwdQcavJQDVct0HzcuGUPb9gum8c1mxG2WrUOl3zLYD8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfDvmLf+SRHi7MJIrJchRFqxaX9MB8GA1UdIwQY
MBaAFEPVGNcwd4j8o4kYeEkOTzLZqvavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAt
ZWRkZjMyMGQ1MGUyLzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAtZWRkZjMyMGQ1MGUy
LzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd73A4eDM
/M1JoGKwMdsAv1CK4HR9mcJ7GwXZpmfAjvjjugQcdMfixKo+f3F/P8aOjD816XTA
7SNvgxD0fjEoTllMgiSdgDGd1MTXG5HjlAHrmwimPETG8cz7fTIX8Kg9kjk4buG3
vF+/pPT1rZ2qdrEHIXWYrUu17zcX7LNgc3pdk3ZC/yC1ra6NYAbadJp8K1lUcJ+o
26QYX9L9ZUQjxVCtQaxZ6gw1ofPpKCJDQDSjgniQqkU7MH8vIV4d8yhcdGSDJ33J
vXIBEWw7WEL0JJUMQEzOf+AmNwfAUcKtRHqPFg/1MFWpnC307Gc6NVibQRIBi3zp
tuXiaU0EFtJ6Hw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:14:22 2025 by rpki-client