Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: /GYS8+bw9qoRHf2jkcPfkAyhO27LAKuJPgg3LlELIEA=
Subject key identifier: DA:19:30:8A:88:FF:BF:A1:F3:07:E2:16:CB:87:1C:69:9E:26:C2:15
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 01974B1F4AC44171C2962602E3120D56B338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 16:00:31 +0000
Manifest this update: Sat 07 Jun 2025 16:00:31 +0000
Manifest next update: Sun 08 Jun 2025 16:00:31 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: p39DQ4Gt5Us9meH45bblFzyYCmT5BKmQdTL4209dYTY=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:4a:c4:41:71:c2:96:26:02:e3:12:0d:56:b3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jun 7 16:00:31 2025 GMT
Not After : Jun 8 16:00:31 2025 GMT
Subject: CN=da19308a88ffbfa1f307e216cb871c699e26c215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:3b:80:7f:f8:a6:23:5e:79:36:1d:c6:25:
ab:20:6a:8b:a0:3f:00:a0:d8:ff:bf:42:96:89:10:
d4:5f:8c:c3:aa:9c:8e:e8:b0:60:b2:7e:42:f8:e6:
f2:e9:1e:76:1f:21:33:9b:e4:af:06:f0:e6:64:83:
02:dd:77:30:15:71:68:23:bd:a8:4f:52:29:bb:b5:
75:47:a6:38:a7:9b:c1:88:64:22:72:3f:1b:dd:19:
34:0d:0a:8c:43:e1:65:e7:6b:7c:da:6d:b9:b2:94:
60:d1:89:eb:28:9a:d4:40:0b:53:99:fc:1f:08:2f:
36:72:e6:5d:16:86:cc:51:f0:85:03:a9:7d:72:2b:
49:19:c8:4c:49:62:94:b5:42:e4:30:df:88:6c:34:
c2:42:b6:c0:84:57:57:e5:77:cb:2f:6b:59:e9:d8:
cf:bf:38:d7:a6:15:35:38:66:19:eb:96:ed:6d:a4:
33:cf:26:39:9d:34:79:78:31:ad:16:f5:9a:59:2c:
69:55:9e:75:5d:dd:28:5b:4f:f3:4e:4c:da:b9:df:
d8:ca:42:3d:a8:85:40:00:79:cd:23:1a:2f:e7:b8:
f6:f8:f3:65:92:e6:d9:55:09:aa:bc:67:43:01:6f:
8b:2d:6f:4b:e2:3d:07:9d:29:42:41:ff:d4:fe:0b:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:19:30:8A:88:FF:BF:A1:F3:07:E2:16:CB:87:1C:69:9E:26:C2:15
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3b:d9:02:a1:88:1b:c4:f2:63:8f:8a:8d:19:30:c7:18:19:
4a:ff:46:9a:0d:59:ac:80:99:33:98:7d:37:9e:33:0d:d1:6f:
e7:85:52:4f:3b:3f:75:47:b1:25:9f:2c:68:79:5f:d0:69:53:
ad:8d:a3:12:9a:15:fe:9f:10:36:05:19:2b:4d:88:5c:2c:d9:
31:f5:50:61:bc:42:84:f3:9e:28:33:ea:dc:c3:fc:56:86:a8:
fe:16:b1:44:0c:5a:28:b7:4f:db:71:6a:d9:08:94:7f:5a:03:
bb:51:e4:4d:08:22:d4:1f:d1:35:6d:9a:72:21:de:25:d7:79:
03:1e:b3:14:f9:9f:6b:64:3b:1e:b1:47:86:ee:d6:b0:6b:d9:
49:ef:69:12:41:c5:32:9d:e7:f7:d9:ee:b3:d5:3c:92:dc:3d:
3f:99:bc:67:13:23:7b:bc:f2:54:d7:d9:e9:20:ab:3d:46:d6:
cf:09:e5:8f:7d:5e:d4:19:12:91:fb:e7:9a:9b:4f:fc:d8:19:
22:8e:a4:43:cc:c6:5d:da:e2:0e:3e:9e:c4:88:21:58:1b:77:
c6:11:ad:38:92:0d:41:07:9e:fa:e5:40:22:c7:2e:88:e2:74:
55:65:bb:8b:54:7d:da:90:c9:9a:eb:cc:17:e7:33:a3:f3:e0:
f3:1c:51:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH0rEQXHCliYC4xINVrM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzRiOGRlYzEyODFiYzU0MzE3YzdmZWQwZTlhY2JjN2I5
N2NhYzcwHhcNMjUwNjA3MTYwMDMxWhcNMjUwNjA4MTYwMDMxWjAzMTEwLwYDVQQD
EyhkYTE5MzA4YTg4ZmZiZmExZjMwN2UyMTZjYjg3MWM2OTllMjZjMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn247gH/4piNeeTYdxiWrIGqLoD8A
oNj/v0KWiRDUX4zDqpyO6LBgsn5C+Oby6R52HyEzm+SvBvDmZIMC3XcwFXFoI72o
T1Ipu7V1R6Y4p5vBiGQicj8b3Rk0DQqMQ+Fl52t82m25spRg0YnrKJrUQAtTmfwf
CC82cuZdFobMUfCFA6l9citJGchMSWKUtULkMN+IbDTCQrbAhFdX5XfLL2tZ6djP
vzjXphU1OGYZ65btbaQzzyY5nTR5eDGtFvWaWSxpVZ51Xd0oW0/zTkzaud/YykI9
qIVAAHnNIxov57j2+PNlkubZVQmqvGdDAW+LLW9L4j0HnSlCQf/U/gtLNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoZMIqI/7+h8wfiFsuHHGmeJsIVMB8GA1UdIwQY
MBaAFKk0uN7BKBvFQxfH/tDprLx7l8rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMt
MjdlZTQyZDkyNWFkLzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMtMjdlZTQyZDkyNWFk
LzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljvZAqGI
G8TyY4+KjRkwxxgZSv9Gmg1ZrICZM5h9N54zDdFv54VSTzs/dUexJZ8saHlf0GlT
rY2jEpoV/p8QNgUZK02IXCzZMfVQYbxChPOeKDPq3MP8Voao/haxRAxaKLdP23Fq
2QiUf1oDu1HkTQgi1B/RNW2aciHeJdd5Ax6zFPmfa2Q7HrFHhu7WsGvZSe9pEkHF
Mp3n99nus9U8ktw9P5m8ZxMje7zyVNfZ6SCrPUbWzwnlj31e1BkSkfvnmptP/NgZ
Io6kQ8zGXdriDj6exIghWBt3xhGtOJINQQee+uVAIscuiOJ0VWW7i1R92pDJmuvM
F+czo/Pg8xxRHg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:48:11 2025 by rpki-client