Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: 4cJf2vYTT4j/sftM8Q3/Llw86R+NHQa7b18OiAzg7pY=
Subject key identifier: 21:B9:76:6E:35:9F:02:BC:CB:11:C9:06:4A:40:71:BD:64:E0:96:6B
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 019838DF6DDAD0FE2D7DB3AF6A995247952D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 158F
Signing time: Wed 23 Jul 2025 20:00:23 +0000
Manifest this update: Wed 23 Jul 2025 20:00:23 +0000
Manifest next update: Thu 24 Jul 2025 20:00:23 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: XMPFLEiTkUlfDiiJi+jAEgFnmPPjIFIrRezthh0ZVAI=)
2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=)
3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:df:6d:da:d0:fe:2d:7d:b3:af:6a:99:52:47:95:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Jul 23 20:00:23 2025 GMT
Not After : Jul 24 20:00:23 2025 GMT
Subject: CN=21b9766e359f02bccb11c9064a4071bd64e0966b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:5e:fd:2e:d3:74:ff:29:2c:99:30:46:8c:
59:09:f9:28:b4:62:86:59:54:0e:d7:29:9b:02:0f:
81:44:36:e1:11:42:f2:55:88:a9:c1:54:50:16:3a:
52:80:57:26:30:fa:9c:76:84:c4:7d:27:2e:5a:fb:
89:9b:5b:61:27:ec:53:00:2c:94:f2:65:db:70:fc:
5c:a3:56:62:73:52:03:84:c6:8e:72:d8:37:d1:79:
7d:b1:ff:25:59:58:f0:f2:2b:ca:39:24:e3:5b:31:
dc:4d:78:a3:ac:92:b9:ba:a1:48:81:90:88:83:3b:
49:6e:ba:fe:39:4c:65:e4:73:8b:49:6a:5f:e3:5d:
e9:75:e9:ae:08:49:45:77:c1:57:c5:ec:4b:6f:31:
1d:d7:00:4a:ab:70:33:9b:e9:e8:1d:ed:f2:90:b9:
83:d3:07:48:25:fb:df:77:28:02:19:26:ac:35:4e:
5e:09:38:ad:b2:73:e2:53:9c:ca:2c:1a:73:d1:48:
14:41:8a:92:0c:dc:be:7c:c9:e6:e1:28:4a:ec:ad:
2e:51:0f:c9:6c:d2:22:1f:8d:c6:cd:a9:2d:a8:7e:
05:c7:d8:d1:07:37:f5:e5:0e:bd:c5:56:78:2e:a9:
7e:ea:f6:64:00:95:c4:53:6e:75:d2:63:27:6e:9c:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B9:76:6E:35:9F:02:BC:CB:11:C9:06:4A:40:71:BD:64:E0:96:6B
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:bc:75:55:fd:78:e4:e6:36:9e:b1:ea:c6:fb:ff:3e:d4:
b4:33:4c:97:6b:5f:41:23:f8:51:36:d5:28:3b:a7:72:21:97:
6d:ed:44:78:9b:a9:41:a1:63:e8:6b:77:bc:b2:38:75:c4:ee:
c9:fe:a0:74:9b:1d:39:76:4b:45:f0:8f:f0:2e:cd:59:a5:1f:
4d:ca:7f:b9:78:04:39:5a:2c:f8:ab:25:a3:07:ae:27:c9:ba:
df:f0:7d:17:a4:90:47:87:be:f6:cd:c3:ca:a4:f0:a7:84:4e:
73:fb:b7:5c:96:02:02:c4:fe:72:47:f0:b1:90:75:ae:bf:a3:
0d:1e:7f:c1:f0:bd:be:14:bd:1f:35:8d:2f:6c:c3:c3:4e:a6:
7e:2c:a7:cd:8c:f5:d7:e4:99:09:cc:87:29:bd:d0:3f:9d:60:
19:f6:71:93:b4:96:54:64:de:c7:7e:3b:4f:08:7c:43:2a:1f:
f4:a8:bd:9b:e9:8b:db:2f:7d:d7:12:1a:e9:e9:05:41:c5:04:
7f:ad:b3:fe:06:80:e1:2f:7f:29:47:df:70:5b:a3:3b:09:8d:
72:75:bc:de:0d:e3:8f:43:cf:29:fd:5a:2f:38:fc:62:5d:9a:
e0:a0:dc:55:54:5d:7c:ba:e3:cd:bb:5a:b1:60:9d:ee:d4:1e:
dc:46:84:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg4323a0P4tfbOvaplSR5UtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWJmNDM3NWYxN2EwMzU3MDE5NjkwMzAxZjk0MTkzMjRm
ZjdkNDQwHhcNMjUwNzIzMjAwMDIzWhcNMjUwNzI0MjAwMDIzWjAzMTEwLwYDVQQD
EygyMWI5NzY2ZTM1OWYwMmJjY2IxMWM5MDY0YTQwNzFiZDY0ZTA5NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzJe/S7TdP8pLJkwRoxZCfkotGKG
WVQO1ymbAg+BRDbhEULyVYipwVRQFjpSgFcmMPqcdoTEfScuWvuJm1thJ+xTACyU
8mXbcPxco1Zic1IDhMaOctg30Xl9sf8lWVjw8ivKOSTjWzHcTXijrJK5uqFIgZCI
gztJbrr+OUxl5HOLSWpf413pdemuCElFd8FXxexLbzEd1wBKq3Azm+noHe3ykLmD
0wdIJfvfdygCGSasNU5eCTitsnPiU5zKLBpz0UgUQYqSDNy+fMnm4ShK7K0uUQ/J
bNIiH43GzaktqH4Fx9jRBzf15Q69xVZ4Lql+6vZkAJXEU2510mMnbpx4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCG5dm41nwK8yxHJBkpAcb1k4JZrMB8GA1UdIwQY
MBaAFEJb9DdfF6A1cBlpAwH5QZMk/31EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQt
ZjBlZDhmZTgyYjk3LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQtZjBlZDhmZTgyYjk3
LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsy8dVX9
eOTmNp6x6sb7/z7UtDNMl2tfQSP4UTbVKDunciGXbe1EeJupQaFj6Gt3vLI4dcTu
yf6gdJsdOXZLRfCP8C7NWaUfTcp/uXgEOVos+KsloweuJ8m63/B9F6SQR4e+9s3D
yqTwp4ROc/u3XJYCAsT+ckfwsZB1rr+jDR5/wfC9vhS9HzWNL2zDw06mfiynzYz1
1+SZCcyHKb3QP51gGfZxk7SWVGTex347Twh8Qyof9Ki9m+mL2y991xIa6ekFQcUE
f62z/gaA4S9/KUffcFujOwmNcnW83g3jj0PPKf1aLzj8Yl2a4KDcVVRdfLrjzbta
sWCd7tQe3EaESg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:48:06 2025 by rpki-client