Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
File: QwPxM011rEMsDKp404mnDAnBLKY.mft (raw, json)
Hash identifier: p8COxaed8i5ru/1tAzooZqQdW9L25R2FdyT8Uwtm0ro=
Subject key identifier: E6:42:2E:16:38:9A:A4:ED:47:AD:29:A7:F8:8A:92:3A:EC:74:B5:FD
Authority key identifier: 43:03:F1:33:4D:75:AC:43:2C:0C:AA:78:D3:89:A7:0C:09:C1:2C:A6
Certificate issuer: /CN=4303f1334d75ac432c0caa78d389a70c09c12ca6
Certificate serial: 01984C9D185570F19D5CB8B30F8A4A780435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwPxM011rEMsDKp404mnDAnBLKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
Manifest number: 0158
Signing time: Sun 27 Jul 2025 16:00:20 +0000
Manifest this update: Sun 27 Jul 2025 16:00:20 +0000
Manifest next update: Mon 28 Jul 2025 16:00:20 +0000
Files and hashes: 1: QwPxM011rEMsDKp404mnDAnBLKY.crl (hash: FJJHNA5gnZGwhf5i+w4YEUaTr6ELlMe93EfjDwFNQIs=)
2: etqHJp94mEXyM-mZRNVFRO7Kziw.roa (hash: Y6iOU/XBP66s91SGzXjQj2BEKS4QjWa/buoOF4uhFqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwPxM011rEMsDKp404mnDAnBLKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:18:55:70:f1:9d:5c:b8:b3:0f:8a:4a:78:04:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4303f1334d75ac432c0caa78d389a70c09c12ca6
Validity
Not Before: Jul 27 16:00:20 2025 GMT
Not After : Jul 28 16:00:20 2025 GMT
Subject: CN=e6422e16389aa4ed47ad29a7f88a923aec74b5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:9a:65:39:82:81:95:f2:26:f6:69:85:94:
aa:dc:8f:eb:d4:8a:e4:e0:d7:da:7e:1b:73:e0:b2:
fd:ce:b1:cd:64:8d:89:8c:ac:22:ea:fb:8c:84:77:
f7:fb:03:76:42:1a:35:a1:7c:0f:0f:e0:fe:a1:b4:
ea:0f:ab:f1:6a:93:a2:8f:cb:a5:d0:3c:85:84:de:
a9:39:28:a1:1f:be:ea:9a:e4:9c:28:7e:80:34:4b:
9f:69:48:52:82:a4:9c:2c:20:8f:76:ca:38:0c:ae:
c1:12:99:95:73:79:c2:aa:81:27:b3:6e:a5:61:55:
c7:d1:2d:21:73:62:1c:62:92:3d:de:cc:2f:a4:74:
ed:e9:b0:44:43:ca:43:ce:4d:8c:ee:1f:b3:9f:e6:
55:55:70:69:72:d5:25:b0:fc:25:e4:ca:10:42:6b:
f1:fa:e1:65:2f:fb:06:7c:af:33:95:5a:24:e4:95:
b0:99:69:fa:9e:28:55:2e:97:65:3a:f0:45:ba:04:
d5:28:35:c2:d9:60:e4:8b:f5:af:43:70:0f:ff:3f:
c0:77:be:6a:90:15:0d:13:4b:c3:da:41:9b:5c:ff:
be:65:69:29:38:34:d5:b2:0f:e4:64:b7:fe:19:13:
bf:11:1c:f5:e7:95:d5:f3:ab:7f:f5:54:68:62:fa:
60:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:2E:16:38:9A:A4:ED:47:AD:29:A7:F8:8A:92:3A:EC:74:B5:FD
X509v3 Authority Key Identifier:
keyid:43:03:F1:33:4D:75:AC:43:2C:0C:AA:78:D3:89:A7:0C:09:C1:2C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwPxM011rEMsDKp404mnDAnBLKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/438008-338d-4c31-97c5-4cb97076cff2/1/QwPxM011rEMsDKp404mnDAnBLKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8c:ec:2d:72:4f:43:b9:92:ca:d8:37:64:c6:04:51:70:7b:
ea:68:0d:6d:1d:c3:92:5a:c6:55:98:11:ef:9e:0b:f4:86:0d:
08:20:e2:65:62:5c:e5:ca:d6:bc:d4:1e:0d:0e:f4:ac:59:7c:
a3:83:0a:6b:ce:c7:85:a3:58:c9:3d:6d:35:e7:47:4c:48:a2:
7e:5b:9c:47:21:1d:09:19:8e:c6:a3:f3:ff:5d:a7:5a:95:ac:
66:86:3c:65:9d:14:4d:54:c0:c8:3d:7e:3d:6a:fe:23:ef:8b:
3d:de:b2:2b:22:5b:f2:72:d1:6c:3c:65:87:13:30:3a:a4:70:
fe:90:bf:c6:78:15:e0:b2:96:81:ec:b1:4a:01:dc:2c:2a:f6:
07:e5:53:da:3a:bf:9c:f2:bb:a0:e0:d6:27:a9:08:0a:4c:0a:
a5:d1:2b:86:53:3d:d8:f9:e9:cc:5c:4b:ac:23:8c:fc:13:f8:
16:36:a5:88:81:15:32:1f:0e:31:d9:0d:d9:9b:9a:bd:d7:a0:
79:4a:cc:66:81:43:16:e8:64:ba:a2:5a:01:24:73:67:a7:fe:
6c:15:c5:59:6b:83:97:57:49:aa:90:66:a5:96:f3:cb:52:96:
74:6d:ef:e7:8f:a9:05:cc:49:e0:25:1f:65:b2:cc:16:bc:ae:
a0:c2:a5:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhMnRhVcPGdXLizD4pKeAQ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDNmMTMzNGQ3NWFjNDMyYzBjYWE3OGQzODlhNzBjMDlj
MTJjYTYwHhcNMjUwNzI3MTYwMDIwWhcNMjUwNzI4MTYwMDIwWjAzMTEwLwYDVQQD
EyhlNjQyMmUxNjM4OWFhNGVkNDdhZDI5YTdmODhhOTIzYWVjNzRiNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrmaZTmCgZXyJvZphZSq3I/r1Irk
4Nfafhtz4LL9zrHNZI2JjKwi6vuMhHf3+wN2Qho1oXwPD+D+obTqD6vxapOij8ul
0DyFhN6pOSihH77qmuScKH6ANEufaUhSgqScLCCPdso4DK7BEpmVc3nCqoEns26l
YVXH0S0hc2IcYpI93swvpHTt6bBEQ8pDzk2M7h+zn+ZVVXBpctUlsPwl5MoQQmvx
+uFlL/sGfK8zlVok5JWwmWn6nihVLpdlOvBFugTVKDXC2WDki/WvQ3AP/z/Ad75q
kBUNE0vD2kGbXP++ZWkpODTVsg/kZLf+GRO/ERz155XV86t/9VRoYvpg8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZCLhY4mqTtR60pp/iKkjrsdLX9MB8GA1UdIwQY
MBaAFEMD8TNNdaxDLAyqeNOJpwwJwSymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdQeE0wMTFyRU1zREtwNDA0bW5EQW5CTEtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80MzgwMDgtMzM4ZC00YzMxLTk3YzUt
NGNiOTcwNzZjZmYyLzEvUXdQeE0wMTFyRU1zREtwNDA0bW5EQW5CTEtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS80MzgwMDgtMzM4ZC00YzMxLTk3YzUtNGNiOTcwNzZjZmYy
LzEvUXdQeE0wMTFyRU1zREtwNDA0bW5EQW5CTEtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIzsLXJP
Q7mSytg3ZMYEUXB76mgNbR3DklrGVZgR754L9IYNCCDiZWJc5crWvNQeDQ70rFl8
o4MKa87HhaNYyT1tNedHTEiiflucRyEdCRmOxqPz/12nWpWsZoY8ZZ0UTVTAyD1+
PWr+I++LPd6yKyJb8nLRbDxlhxMwOqRw/pC/xngV4LKWgeyxSgHcLCr2B+VT2jq/
nPK7oODWJ6kICkwKpdErhlM92PnpzFxLrCOM/BP4FjaliIEVMh8OMdkN2Zuavdeg
eUrMZoFDFuhkuqJaASRzZ6f+bBXFWWuDl1dJqpBmpZbzy1KWdG3v54+pBcxJ4CUf
ZbLMFryuoMKlmw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 17:02:37 2025 by rpki-client