Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier: XMSxfU+6Ay+ICK+uXz7FOh5nAfLv3EetPnbWEBaKaWo=
Subject key identifier: F0:3C:AC:B8:20:69:C3:39:7E:B4:C3:1F:D3:60:8D:60:64:C0:F4:7B
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial: 0197518F73286AD4602C3CBC2A4AFDC2DC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number: 03D2
Signing time: Sun 08 Jun 2025 22:00:44 +0000
Manifest this update: Sun 08 Jun 2025 22:00:44 +0000
Manifest next update: Mon 09 Jun 2025 22:00:44 +0000
Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: +Sl6kypjb/eM1ADXve1MrNbSizBm8/o7Z1IuQFo11Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:73:28:6a:d4:60:2c:3c:bc:2a:4a:fd:c2:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
Validity
Not Before: Jun 8 22:00:44 2025 GMT
Not After : Jun 9 22:00:44 2025 GMT
Subject: CN=f03cacb82069c3397eb4c31fd3608d6064c0f47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:18:52:d8:7a:c8:22:4d:6a:45:31:80:91:
71:f5:22:bd:36:6e:69:4e:de:85:cc:c6:c3:3f:e1:
46:ce:8b:35:fc:0f:62:53:9c:92:67:d1:d6:23:03:
1d:7b:cf:13:78:77:c6:8f:4f:8a:5f:23:85:f6:4d:
c8:16:03:46:39:ae:1b:e6:04:45:d5:67:aa:6e:71:
4f:9a:e3:c6:12:2f:15:68:14:0b:ce:8f:68:e5:0c:
96:e2:c3:9d:e0:d6:b2:df:de:d6:55:b1:0f:13:4d:
40:9b:cf:a1:f9:6f:53:74:02:5a:22:78:eb:89:1d:
d5:b2:e7:9d:b8:49:a4:d9:b4:a7:19:4c:95:33:d6:
ce:bf:dd:30:a7:66:d3:63:89:87:c6:aa:75:fb:4b:
6e:06:ce:14:e7:98:02:e3:db:1a:f5:19:d0:07:bd:
c6:21:5e:65:6e:65:89:0d:f2:03:e0:58:49:22:da:
20:1e:39:6a:36:98:da:4a:96:9a:eb:f5:50:79:ec:
e8:6c:54:ec:ab:ff:31:52:f1:f5:99:7f:dc:10:48:
50:57:0a:1d:84:43:4f:2c:d5:be:e5:f9:2f:c0:af:
0e:c1:ee:d8:17:9a:91:a6:22:4e:e1:5a:b6:4b:2a:
ee:34:2f:bc:5f:71:4e:eb:86:29:04:6d:29:e0:dd:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3C:AC:B8:20:69:C3:39:7E:B4:C3:1F:D3:60:8D:60:64:C0:F4:7B
X509v3 Authority Key Identifier:
keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e8:ff:44:86:45:62:3f:8d:1a:28:13:b1:6a:31:62:a3:06:
d8:dd:3d:6e:46:f3:84:dd:af:62:7a:e8:d1:89:6f:bc:38:db:
35:f0:39:dd:b5:74:e1:22:38:e0:23:d2:25:03:62:7d:c9:39:
d3:12:5b:91:e8:5f:a2:53:ea:9d:03:8f:ca:2b:33:ec:a5:67:
81:ba:13:b3:c5:eb:53:f9:9a:c3:4d:0a:b1:74:20:06:8e:07:
b6:1c:9b:76:14:f2:ce:b0:00:b3:f6:b3:d3:8a:56:d8:22:87:
20:45:cf:91:e7:c8:15:07:6e:ba:e7:01:1d:42:93:e3:2d:3b:
db:04:d7:ed:70:b3:de:13:d0:94:06:99:42:5b:fc:f4:91:0a:
2d:ee:86:1b:3f:3e:05:8f:e8:79:0d:96:f5:77:e7:d6:4a:05:
b3:90:9f:9b:85:57:58:d5:b3:29:a3:55:85:1c:99:58:1e:23:
ae:66:a8:40:ed:cb:96:0b:f4:ce:79:35:c5:f0:49:44:31:3f:
13:2a:39:b0:92:2c:d9:fa:ef:2f:ee:52:ad:2c:c0:b5:12:f3:
49:d6:1d:c0:f7:0f:1b:25:99:ee:f1:2e:fc:9f:02:11:aa:c6:
89:af:bc:0e:53:d8:e4:24:a2:6c:07:41:f2:92:f3:6c:77:c7:
b7:09:e2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRj3MoatRgLDy8Kkr9wtwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzRlMTA2YmU1Mzg2ZWQxMDY3NWVlMGRlMzM2ZGM3N2Uy
MDBkNTkwHhcNMjUwNjA4MjIwMDQ0WhcNMjUwNjA5MjIwMDQ0WjAzMTEwLwYDVQQD
EyhmMDNjYWNiODIwNjljMzM5N2ViNGMzMWZkMzYwOGQ2MDY0YzBmNDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jsYUth6yCJNakUxgJFx9SK9Nm5p
Tt6FzMbDP+FGzos1/A9iU5ySZ9HWIwMde88TeHfGj0+KXyOF9k3IFgNGOa4b5gRF
1WeqbnFPmuPGEi8VaBQLzo9o5QyW4sOd4Nay397WVbEPE01Am8+h+W9TdAJaInjr
iR3VsueduEmk2bSnGUyVM9bOv90wp2bTY4mHxqp1+0tuBs4U55gC49sa9RnQB73G
IV5lbmWJDfID4FhJItogHjlqNpjaSpaa6/VQeezobFTsq/8xUvH1mX/cEEhQVwod
hENPLNW+5fkvwK8Owe7YF5qRpiJO4Vq2SyruNC+8X3FO64YpBG0p4N29TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA8rLggacM5frTDH9NgjWBkwPR7MB8GA1UdIwQY
MBaAFKk04Qa+U4btEGde4N4zbcd+IA1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNGRmZDktNTkxNC00ZDIwLWExNzYt
MGE2YmYyZGY5ZDYyLzEvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xNGRmZDktNTkxNC00ZDIwLWExNzYtMGE2YmYyZGY5ZDYy
LzEvcVRUaEJyNVRodTBRWjE3ZzNqTnR4MzRnRFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOj/RIZF
Yj+NGigTsWoxYqMG2N09bkbzhN2vYnro0YlvvDjbNfA53bV04SI44CPSJQNifck5
0xJbkehfolPqnQOPyisz7KVngboTs8XrU/maw00KsXQgBo4HthybdhTyzrAAs/az
04pW2CKHIEXPkefIFQduuucBHUKT4y072wTX7XCz3hPQlAaZQlv89JEKLe6GGz8+
BY/oeQ2W9Xfn1koFs5Cfm4VXWNWzKaNVhRyZWB4jrmaoQO3Llgv0znk1xfBJRDE/
Eyo5sJIs2frvL+5SrSzAtRLzSdYdwPcPGyWZ7vEu/J8CEarGia+8DlPY5CSibAdB
8pLzbHfHtwniIg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:37:23 2025 by rpki-client