Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: UvSPMrN78fvr3LCJ7zW2JpYvRrPUVBqVBfGm7k4TV8c=
Subject key identifier: 40:37:3A:DA:84:5D:E2:DB:BB:B5:79:D4:61:77:39:6D:BF:E0:E8:C3
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 019921B109696DE6776CE658C28CD32B7B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0E5C
Signing time: Sun 07 Sep 2025 01:01:14 +0000
Manifest this update: Sun 07 Sep 2025 01:01:14 +0000
Manifest next update: Mon 08 Sep 2025 01:01:14 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: QKUO8HOTgUfHDzj0Q59BqpRTHVD12xa3RBTcp8pS/Yg=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:09:69:6d:e6:77:6c:e6:58:c2:8c:d3:2b:7b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Sep 7 01:01:14 2025 GMT
Not After : Sep 8 01:01:14 2025 GMT
Subject: CN=40373ada845de2dbbbb579d46177396dbfe0e8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:ec:42:e1:ed:d8:93:c9:fb:3e:67:8a:fe:
f1:f2:79:83:5a:08:50:f7:f2:7f:60:ed:f5:43:62:
98:9d:48:c5:16:ee:05:a8:96:42:f0:44:16:a2:7b:
46:38:3a:3f:92:bf:bc:cf:23:66:ef:8c:39:70:e3:
da:d4:35:43:7e:a5:ad:b9:a9:21:78:ea:0f:f8:4f:
11:68:2a:be:9c:bd:9c:37:4b:53:79:69:c4:ea:61:
2e:da:ef:2c:74:89:ce:87:7d:07:97:0d:2a:9c:6e:
20:67:08:51:b3:4e:fc:88:fc:44:07:a9:46:fa:9c:
89:65:ac:34:ae:62:cf:d1:6b:58:42:9f:0b:c3:0b:
58:b9:50:29:53:25:07:ab:49:57:39:e1:04:6d:97:
10:c1:4b:0c:af:e3:1a:0e:57:69:3d:c1:53:5b:91:
64:07:4b:fa:a5:2c:13:95:ef:fa:59:6d:85:44:55:
e5:df:62:65:22:5e:68:7e:14:88:f6:e9:28:ac:07:
d9:57:7f:7b:1f:7d:19:33:d5:ff:51:5c:1b:61:06:
f0:4c:30:97:41:0a:5b:25:09:3b:73:79:68:d6:09:
a7:86:7c:36:07:e5:d4:c1:ac:28:cf:75:ed:2e:8d:
4e:17:c6:5b:15:75:3a:ca:c9:ab:fc:19:c0:79:3d:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:37:3A:DA:84:5D:E2:DB:BB:B5:79:D4:61:77:39:6D:BF:E0:E8:C3
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d2:00:e6:12:81:37:3c:8d:d0:00:f6:6a:8f:e9:1e:50:f4:
ff:41:44:0b:64:4a:0d:e9:58:3d:36:3a:2e:81:09:bd:2b:a7:
bb:58:fc:be:93:8d:a1:11:ef:09:1f:1f:7b:bf:47:27:d4:0d:
4c:b7:3f:ee:7f:4e:38:ff:b8:a1:8e:b5:aa:f8:9e:35:af:20:
f0:aa:86:ab:66:c7:a8:f2:23:35:87:72:8e:8c:a3:8d:7e:8f:
aa:cd:cf:12:ef:84:86:4a:91:22:7d:41:ba:86:b1:e5:e1:cf:
08:1d:e3:82:14:f5:17:9d:78:0b:f6:72:d3:42:2f:1b:5a:3c:
ac:83:3c:0c:d4:a2:86:38:70:0c:a3:6b:14:f8:bf:19:82:db:
f2:a9:2b:74:a4:6a:6a:d5:f1:c3:b8:25:65:3d:a7:b4:88:fe:
87:8e:b7:a5:6a:f0:84:0d:f3:09:6f:0b:54:6b:12:41:8e:44:
f3:2e:75:cb:70:b3:8c:f9:33:b6:6a:56:26:aa:24:7c:1f:e5:
d7:df:02:42:cd:b2:19:a9:8b:c5:4e:e5:07:b0:c6:66:fe:78:
3c:b6:0d:b1:09:0a:7f:6c:21:ee:48:ed:65:c2:74:c5:83:e9:
a6:89:08:1a:c6:3c:53:76:ad:59:7b:07:cd:12:5c:13:e8:92:
9e:0f:96:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsQlpbeZ3bOZYwozTK3uFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YTRiMzVjOGUwMjU2ZWFhMmZiZjc1MWU2YzAxZTVlOTA5
YzBhMWYwHhcNMjUwOTA3MDEwMTE0WhcNMjUwOTA4MDEwMTE0WjAzMTEwLwYDVQQD
Eyg0MDM3M2FkYTg0NWRlMmRiYmJiNTc5ZDQ2MTc3Mzk2ZGJmZTBlOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuXsQuHt2JPJ+z5niv7x8nmDWghQ
9/J/YO31Q2KYnUjFFu4FqJZC8EQWontGODo/kr+8zyNm74w5cOPa1DVDfqWtuakh
eOoP+E8RaCq+nL2cN0tTeWnE6mEu2u8sdInOh30Hlw0qnG4gZwhRs078iPxEB6lG
+pyJZaw0rmLP0WtYQp8LwwtYuVApUyUHq0lXOeEEbZcQwUsMr+MaDldpPcFTW5Fk
B0v6pSwTle/6WW2FRFXl32JlIl5ofhSI9ukorAfZV397H30ZM9X/UVwbYQbwTDCX
QQpbJQk7c3lo1gmnhnw2B+XUwawoz3XtLo1OF8ZbFXU6ysmr/BnAeT2LiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEA3OtqEXeLbu7V51GF3OW2/4OjDMB8GA1UdIwQY
MBaAFEaks1yOAlbqovv3UebAHl6QnAofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmIt
MTE3ODg2ZWI3ZDY3LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmItMTE3ODg2ZWI3ZDY3
LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdIA5hKB
NzyN0AD2ao/pHlD0/0FEC2RKDelYPTY6LoEJvSunu1j8vpONoRHvCR8fe79HJ9QN
TLc/7n9OOP+4oY61qvieNa8g8KqGq2bHqPIjNYdyjoyjjX6Pqs3PEu+EhkqRIn1B
uoax5eHPCB3jghT1F514C/Zy00IvG1o8rIM8DNSihjhwDKNrFPi/GYLb8qkrdKRq
atXxw7glZT2ntIj+h463pWrwhA3zCW8LVGsSQY5E8y51y3CzjPkztmpWJqokfB/l
198CQs2yGamLxU7lB7DGZv54PLYNsQkKf2wh7kjtZcJ0xYPppokIGsY8U3atWXsH
zRJcE+iSng+W0g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:53 2025 by rpki-client