Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: Om/zan9xiAp5QA0TUa8L63z8p84rPtvmqPoLp1nPNFo=
Subject key identifier: A3:8E:60:51:AB:CB:06:8C:F7:F7:5E:14:FF:56:27:DD:57:03:56:10
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 019749318A4314C2912D5E3AC27552FB9374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0C63
Signing time: Sat 07 Jun 2025 07:01:12 +0000
Manifest this update: Sat 07 Jun 2025 07:01:12 +0000
Manifest next update: Sun 08 Jun 2025 07:01:12 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: P46qrn194MV8fCQ9x0OC9W9BvtbgcSIcoWmABsdUUNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8a:43:14:c2:91:2d:5e:3a:c2:75:52:fb:93:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Jun 7 07:01:12 2025 GMT
Not After : Jun 8 07:01:12 2025 GMT
Subject: CN=a38e6051abcb068cf7f75e14ff5627dd57035610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:00:d1:79:cf:16:90:13:af:6c:02:87:9e:
3c:6f:30:9a:32:85:02:56:08:d2:4e:4a:97:9d:a2:
90:47:c9:76:0a:3b:d6:aa:91:63:18:61:91:d2:a6:
a0:d7:46:25:73:94:c7:39:4f:3d:a5:7b:b3:f7:05:
27:51:69:23:83:8d:21:34:8c:71:4d:f4:cc:0c:70:
28:f3:d5:80:5e:93:ec:b5:cc:5e:1a:a1:0f:35:66:
d5:b2:92:4c:20:1b:dc:40:71:5b:ff:48:dc:66:e8:
7b:f8:af:6b:38:6e:3b:13:3b:b5:8e:e7:e0:91:74:
c0:8a:4d:c0:e0:c7:15:c1:2d:ca:36:f1:be:35:34:
76:8a:e8:78:fd:a3:1b:41:74:58:a8:1a:17:96:c1:
55:0e:20:3c:02:cf:c5:1e:bb:cf:d0:c7:07:6d:43:
0c:00:99:2f:69:4b:c6:92:b3:06:06:78:ba:e6:a2:
bc:01:74:f0:ba:26:c4:e0:bc:91:0f:8b:ad:7d:eb:
40:e0:50:56:df:b3:a0:7a:28:51:62:19:8c:ac:10:
a0:c7:34:9e:f8:8f:b9:a7:1b:25:6e:2e:7f:5d:19:
fa:11:40:d3:11:c1:fb:bf:59:2b:cd:a1:e3:ff:b8:
64:07:36:37:91:c5:66:77:87:53:d1:68:19:27:13:
7c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:60:51:AB:CB:06:8C:F7:F7:5E:14:FF:56:27:DD:57:03:56:10
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:44:0d:c7:18:6b:43:b8:7a:8f:3a:1d:e3:ba:8b:cb:da:ef:
63:9e:ca:5a:ac:6a:f3:cc:cc:9f:cc:d7:be:b4:5b:c0:95:62:
82:51:58:51:be:1f:37:64:79:35:ba:d2:2f:1a:f4:44:4b:d4:
93:a3:6f:bb:8b:88:bd:42:9b:89:cd:fc:41:d4:a2:27:8c:0f:
5b:38:3d:d0:25:9d:21:1a:9a:5c:36:ed:bb:c8:49:17:46:19:
55:40:ed:b0:c1:ba:a2:e5:57:9a:22:d9:f1:b6:9a:82:7e:30:
1a:74:2d:11:c0:5c:5e:61:68:5e:48:10:02:6e:15:1b:59:84:
2c:7b:53:1b:34:b8:3f:b7:6f:05:b9:fe:a7:fb:e8:83:fe:0e:
cc:a7:2a:0b:95:4b:5a:1f:16:27:70:71:18:6a:03:58:9b:47:
6f:b2:8d:4e:9a:87:fe:dd:81:93:3b:d5:d2:20:83:eb:2a:ad:
55:f4:42:c8:55:8c:53:e1:ae:59:21:ca:4d:dd:6b:ab:e1:b3:
4d:c1:cb:6e:15:89:07:3c:f2:b8:70:2e:87:6c:1b:21:38:40:
4e:c1:40:c6:ad:2d:05:37:25:84:e8:f9:15:f7:a1:62:71:67:
f1:f1:7b:af:58:e5:6a:99:90:8d:68:c6:42:4a:98:d3:e0:47:
76:11:e5:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMYpDFMKRLV46wnVS+5N0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTIzOTJiNjU0OGIwOWIxOGE2NGQzZTUwODBiYmJiOTI3
OTMxMGIwHhcNMjUwNjA3MDcwMTEyWhcNMjUwNjA4MDcwMTEyWjAzMTEwLwYDVQQD
EyhhMzhlNjA1MWFiY2IwNjhjZjdmNzVlMTRmZjU2MjdkZDU3MDM1NjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz8A0XnPFpATr2wCh548bzCaMoUC
VgjSTkqXnaKQR8l2CjvWqpFjGGGR0qag10Ylc5THOU89pXuz9wUnUWkjg40hNIxx
TfTMDHAo89WAXpPstcxeGqEPNWbVspJMIBvcQHFb/0jcZuh7+K9rOG47Ezu1jufg
kXTAik3A4McVwS3KNvG+NTR2iuh4/aMbQXRYqBoXlsFVDiA8As/FHrvP0McHbUMM
AJkvaUvGkrMGBni65qK8AXTwuibE4LyRD4utfetA4FBW37OgeihRYhmMrBCgxzSe
+I+5pxslbi5/XRn6EUDTEcH7v1krzaHj/7hkBzY3kcVmd4dT0WgZJxN8ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOOYFGrywaM9/deFP9WJ91XA1YQMB8GA1UdIwQY
MBaAFEHiOStlSLCbGKZNPlCAu7uSeTELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVJNUsyVklzSnNZcGswLVVJQzd1NUo1TVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ZTQwNDUtMjI3NS00ZTUwLWI2NDEt
NWYwNGU1OGRmMWMyLzEvUWVJNUsyVklzSnNZcGswLVVJQzd1NUo1TVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ZTQwNDUtMjI3NS00ZTUwLWI2NDEtNWYwNGU1OGRmMWMy
LzEvUWVJNUsyVklzSnNZcGswLVVJQzd1NUo1TVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUQNxxhr
Q7h6jzod47qLy9rvY57KWqxq88zMn8zXvrRbwJViglFYUb4fN2R5NbrSLxr0REvU
k6Nvu4uIvUKbic38QdSiJ4wPWzg90CWdIRqaXDbtu8hJF0YZVUDtsMG6ouVXmiLZ
8baagn4wGnQtEcBcXmFoXkgQAm4VG1mELHtTGzS4P7dvBbn+p/vog/4OzKcqC5VL
Wh8WJ3BxGGoDWJtHb7KNTpqH/t2BkzvV0iCD6yqtVfRCyFWMU+GuWSHKTd1rq+Gz
TcHLbhWJBzzyuHAuh2wbIThATsFAxq0tBTclhOj5FfehYnFn8fF7r1jlapmQjWjG
QkqY0+BHdhHlAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:03 2025 by rpki-client