Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: ssSaM71KDiQcPyS81BwJ20QLgB0Vs6qQDqiWOVKKwac=
Subject key identifier: 70:1B:E1:22:D5:F3:92:D4:87:21:E2:B3:2A:30:25:A7:03:2A:CD:56
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 01974E584E99646F8A3788EECB408BC2A48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 081E
Signing time: Sun 08 Jun 2025 07:01:39 +0000
Manifest this update: Sun 08 Jun 2025 07:01:39 +0000
Manifest next update: Mon 09 Jun 2025 07:01:39 +0000
Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: hMuUSMxvGPU0xhPNIwWsX4gxTQa4d9TG9kZtjK6Fkro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:4e:99:64:6f:8a:37:88:ee:cb:40:8b:c2:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: Jun 8 07:01:39 2025 GMT
Not After : Jun 9 07:01:39 2025 GMT
Subject: CN=701be122d5f392d48721e2b32a3025a7032acd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:12:26:ea:ce:89:c6:9f:3f:25:2a:64:55:
36:d7:95:d4:46:65:0b:7c:74:82:2e:b8:1e:1b:c1:
4c:ff:04:3a:95:f1:38:40:90:72:11:1a:ab:73:01:
38:ec:d1:50:65:a3:c6:27:7d:0f:50:9a:d8:8a:00:
68:96:1c:df:3f:5f:93:97:83:b9:60:d2:a3:3a:91:
08:1b:97:23:85:a1:07:8a:18:f3:77:82:26:24:61:
83:44:ee:b8:8e:16:86:36:ce:28:7f:38:ed:0a:29:
7d:bc:8c:4c:37:61:33:53:3f:32:ab:32:5d:5e:6c:
01:66:5e:9e:42:ee:52:0f:ee:14:fb:4b:27:7b:11:
32:34:4a:f2:63:88:77:ae:95:50:b1:d5:aa:c7:c1:
c7:69:59:0a:8a:7c:fa:5f:64:81:1b:bc:b5:c5:04:
be:e8:f5:c3:ac:12:67:38:3f:ea:3c:52:a2:ff:10:
74:8a:ec:ab:d0:ff:94:c2:70:a2:22:c3:85:e5:b8:
b6:8d:3e:f6:da:75:f7:37:d4:e2:79:10:1d:ea:c9:
ce:6a:87:be:c1:fe:a0:7c:e3:ce:9e:67:7a:ac:88:
66:26:b3:43:10:0f:3b:ad:3d:64:bf:4d:e6:c1:6a:
63:a7:dc:2e:be:ce:68:be:84:f4:3b:32:44:38:8e:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1B:E1:22:D5:F3:92:D4:87:21:E2:B3:2A:30:25:A7:03:2A:CD:56
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:00:be:85:98:ee:6e:55:eb:34:06:33:fa:ec:14:5e:a2:6c:
c2:c1:fc:df:32:5f:90:ea:d3:ed:56:73:60:c8:88:6d:41:12:
55:60:a4:03:a8:5a:30:95:bd:dc:c9:17:00:52:14:5d:7b:c3:
ab:c0:ac:1f:da:69:a4:ff:d7:a5:d6:83:c8:63:25:0f:ec:4e:
94:6b:77:e9:b6:9c:40:19:95:05:ee:8a:a6:e2:2b:6f:ef:26:
9a:ea:39:75:f1:3d:9d:d3:af:c6:16:e5:98:51:ba:98:03:38:
27:e9:5c:a6:15:8f:57:a9:6e:a3:a4:7e:23:0d:4b:ed:17:89:
ba:88:6f:42:44:57:06:d8:cb:f2:8b:91:6b:a2:2b:4c:df:c0:
b4:2c:32:42:3e:9f:c6:22:0d:31:1a:4f:2f:9c:c3:df:bf:f6:
25:7b:91:d0:d4:e8:8d:26:dc:fa:82:4f:1f:86:0a:bf:7b:32:
b4:9e:c7:1e:af:aa:b6:54:e2:2d:7a:ba:61:4e:ec:66:7e:25:
ff:3c:24:6b:5f:fc:46:e1:cc:4c:34:30:0d:ab:27:d3:73:8c:
d9:8c:1f:17:85:b2:e4:86:34:4e:d4:a3:56:1e:00:32:d7:fc:
6f:d7:cf:7b:b6:3d:f4:7f:34:54:13:7a:d5:8d:66:94:12:c0:
72:90:3d:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOWE6ZZG+KN4juy0CLwqSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTdjMWEyNTM3ZmQwMzU0MDg3NTk5Nzg3Y2FhODQyZmVk
NjBiN2YwHhcNMjUwNjA4MDcwMTM5WhcNMjUwNjA5MDcwMTM5WjAzMTEwLwYDVQQD
Eyg3MDFiZTEyMmQ1ZjM5MmQ0ODcyMWUyYjMyYTMwMjVhNzAzMmFjZDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzroSJurOicafPyUqZFU215XURmUL
fHSCLrgeG8FM/wQ6lfE4QJByERqrcwE47NFQZaPGJ30PUJrYigBolhzfP1+Tl4O5
YNKjOpEIG5cjhaEHihjzd4ImJGGDRO64jhaGNs4ofzjtCil9vIxMN2EzUz8yqzJd
XmwBZl6eQu5SD+4U+0snexEyNEryY4h3rpVQsdWqx8HHaVkKinz6X2SBG7y1xQS+
6PXDrBJnOD/qPFKi/xB0iuyr0P+UwnCiIsOF5bi2jT722nX3N9TieRAd6snOaoe+
wf6gfOPOnmd6rIhmJrNDEA87rT1kv03mwWpjp9wuvs5ovoT0OzJEOI44kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAb4SLV85LUhyHisyowJacDKs1WMB8GA1UdIwQY
MBaAFKmnwaJTf9A1QIdZl4fKqEL+1gt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEt
NDhmMWU1MTA5MDQ3LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEtNDhmMWU1MTA5MDQ3
LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgC+hZju
blXrNAYz+uwUXqJswsH83zJfkOrT7VZzYMiIbUESVWCkA6haMJW93MkXAFIUXXvD
q8CsH9pppP/XpdaDyGMlD+xOlGt36bacQBmVBe6KpuIrb+8mmuo5dfE9ndOvxhbl
mFG6mAM4J+lcphWPV6luo6R+Iw1L7ReJuohvQkRXBtjL8ouRa6IrTN/AtCwyQj6f
xiINMRpPL5zD37/2JXuR0NTojSbc+oJPH4YKv3sytJ7HHq+qtlTiLXq6YU7sZn4l
/zwka1/8RuHMTDQwDasn03OM2YwfF4Wy5IY0TtSjVh4AMtf8b9fPe7Y99H80VBN6
1Y1mlBLAcpA97A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:51:58 2025 by rpki-client