Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: x1w1KtzXSZX1ryCsW5H0pS80HWzY3Wf/iTM0IbqtxkY=
Subject key identifier: D2:76:07:C2:6E:EB:1A:1A:36:3A:14:59:AC:43:74:81:24:5F:7E:C1
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 019845F695F1DC82ED4C9E7171540D722738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 10F3
Signing time: Sat 26 Jul 2025 09:00:44 +0000
Manifest this update: Sat 26 Jul 2025 09:00:44 +0000
Manifest next update: Sun 27 Jul 2025 09:00:44 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: ymOQLKoMGMW6M5tJkmDItlrsMUDiJkHG20dwINosOp0=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:95:f1:dc:82:ed:4c:9e:71:71:54:0d:72:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Jul 26 09:00:44 2025 GMT
Not After : Jul 27 09:00:44 2025 GMT
Subject: CN=d27607c26eeb1a1a363a1459ac437481245f7ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:27:d4:95:33:54:19:d9:ef:08:dc:e6:08:
ff:20:ba:07:ec:e5:f3:51:4c:67:4c:d0:36:ac:d7:
a2:60:a8:c4:61:76:30:01:9b:8a:aa:9f:61:0e:7c:
35:c1:e2:91:7a:08:fe:28:07:b9:45:ca:12:bb:90:
b8:fb:e9:fc:3c:e7:73:3b:af:da:29:99:eb:64:63:
77:dc:d6:06:c2:3d:36:c5:38:57:e2:1b:45:12:3d:
cd:08:0a:b0:6b:96:a9:7d:1e:25:82:c5:66:35:24:
23:b4:98:cc:1d:25:38:b9:a8:90:3d:f5:6b:9c:24:
9c:1b:dd:d3:83:a0:09:b7:24:f1:d3:58:dc:f7:81:
e9:87:d8:92:24:7b:8c:8e:3e:bb:ea:18:27:8e:06:
2a:b3:70:93:5d:9e:d4:00:c6:aa:7a:37:01:72:66:
f3:3f:68:0b:29:3b:31:73:aa:74:90:e3:17:81:49:
d3:d6:36:2d:a4:0a:6c:28:26:e9:45:b2:70:97:79:
7b:d0:37:f4:ec:e1:03:54:65:2f:c8:c6:72:6e:73:
b9:a2:c5:63:d0:1a:ee:0e:c5:66:8b:45:4a:de:82:
1d:44:7e:d5:f3:32:d4:cf:48:ae:b7:cd:3e:d6:d4:
23:75:32:4f:05:cb:64:21:42:a5:a8:b0:25:79:b6:
c9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:76:07:C2:6E:EB:1A:1A:36:3A:14:59:AC:43:74:81:24:5F:7E:C1
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0b:7f:e1:e9:86:ad:4f:e5:7b:6c:a2:6a:82:f8:7a:d0:c1:
93:c9:09:13:73:9f:75:d5:67:5c:04:1b:f4:00:b3:8b:7d:70:
bb:86:bd:29:3b:47:57:72:00:7e:e2:63:82:6d:85:64:0b:d9:
38:75:d2:eb:be:7a:40:4c:f0:79:43:45:da:7e:c2:ae:d9:0c:
f1:3b:e0:ae:60:68:3e:22:19:be:68:4e:aa:24:a0:45:90:fc:
87:53:46:e1:47:5c:41:7e:e9:bc:d6:cf:8e:03:f5:f6:b7:a3:
98:4f:d0:c1:67:dd:ab:d1:c7:31:8b:15:6a:71:9a:5c:ff:4f:
c3:9b:46:48:1a:19:4e:53:2a:36:6b:05:e3:78:c1:f6:7a:34:
b7:9e:45:4c:84:fe:95:a5:46:47:5f:52:eb:63:51:57:e3:39:
f9:7e:0d:d3:c9:7a:e0:c8:5b:70:4c:7d:54:b5:3d:af:6e:fd:
0f:33:7b:37:43:7f:e4:ae:49:47:94:36:f1:3a:33:61:49:f6:
dd:ed:e1:68:00:d9:85:e9:00:1b:1b:e4:a8:f6:3a:58:c1:f9:
b8:63:91:e5:3d:ad:3e:e9:2a:35:94:9b:15:4d:03:90:b2:e5:
0b:25:e4:4c:d1:23:e2:6a:98:b2:37:9d:49:2f:ed:a2:4c:a8:
c7:f6:d7:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9pXx3ILtTJ5xcVQNcic4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy
ZDY1MDEwHhcNMjUwNzI2MDkwMDQ0WhcNMjUwNzI3MDkwMDQ0WjAzMTEwLwYDVQQD
EyhkMjc2MDdjMjZlZWIxYTFhMzYzYTE0NTlhYzQzNzQ4MTI0NWY3ZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqron1JUzVBnZ7wjc5gj/ILoH7OXz
UUxnTNA2rNeiYKjEYXYwAZuKqp9hDnw1weKRegj+KAe5RcoSu5C4++n8POdzO6/a
KZnrZGN33NYGwj02xThX4htFEj3NCAqwa5apfR4lgsVmNSQjtJjMHSU4uaiQPfVr
nCScG93Tg6AJtyTx01jc94Hph9iSJHuMjj676hgnjgYqs3CTXZ7UAMaqejcBcmbz
P2gLKTsxc6p0kOMXgUnT1jYtpApsKCbpRbJwl3l70Df07OEDVGUvyMZybnO5osVj
0BruDsVmi0VK3oIdRH7V8zLUz0iut80+1tQjdTJPBctkIUKlqLAlebbJawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ2B8Ju6xoaNjoUWaxDdIEkX37BMB8GA1UdIwQY
MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt
OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm
LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwt/4emG
rU/le2yiaoL4etDBk8kJE3OfddVnXAQb9ACzi31wu4a9KTtHV3IAfuJjgm2FZAvZ
OHXS6756QEzweUNF2n7CrtkM8TvgrmBoPiIZvmhOqiSgRZD8h1NG4UdcQX7pvNbP
jgP19rejmE/QwWfdq9HHMYsVanGaXP9Pw5tGSBoZTlMqNmsF43jB9no0t55FTIT+
laVGR19S62NRV+M5+X4N08l64MhbcEx9VLU9r279DzN7N0N/5K5JR5Q28TozYUn2
3e3haADZhekAGxvkqPY6WMH5uGOR5T2tPukqNZSbFU0DkLLlCyXkTNEj4mqYsjed
SS/tokyox/bXAg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:17:42 2025 by rpki-client