Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: kLTuznqCNKH9OHXzBz+63bQoZ1bbCeoqkRiIpPLnf1k=
Subject key identifier: 72:B1:7F:9B:C9:82:76:A9:CE:7A:19:2D:E9:9A:DC:12:5A:83:46:6F
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 01975AC9B2854E1AA886C12389457B533371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 04BB
Signing time: Tue 10 Jun 2025 17:00:57 +0000
Manifest this update: Tue 10 Jun 2025 17:00:57 +0000
Manifest next update: Wed 11 Jun 2025 17:00:57 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: RcTEhgQUMiytDpnFd7ux9UjYMpooF91VMuwkL1o4xMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:b2:85:4e:1a:a8:86:c1:23:89:45:7b:53:33:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jun 10 17:00:57 2025 GMT
Not After : Jun 11 17:00:57 2025 GMT
Subject: CN=72b17f9bc98276a9ce7a192de99adc125a83466f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5e:f2:06:4b:0b:86:5f:8e:39:80:e9:c1:25:
e9:de:91:c2:05:28:7f:60:85:d1:0c:f8:c8:66:59:
c4:02:e7:90:96:7d:e4:14:99:69:7e:7f:37:92:2f:
83:cb:74:09:d1:67:20:90:e3:8d:35:da:ee:93:81:
6a:4d:44:0b:0f:06:11:2d:1d:1a:8e:58:8f:ca:be:
e5:64:24:d1:59:2d:0e:8d:00:49:59:34:0d:d0:46:
30:00:f1:e4:05:ef:69:2c:0a:eb:3f:94:a9:05:14:
85:96:bb:84:39:6c:df:00:ca:60:14:fc:dc:b4:5b:
82:ee:7a:58:ec:15:12:55:7f:a9:2c:fd:b6:9b:64:
19:1b:82:c6:c0:f6:c1:e0:16:76:d9:6f:72:8c:a3:
15:cd:7e:14:74:86:ef:06:32:4a:6e:ed:be:0a:54:
8c:90:86:4b:6e:c7:91:11:8d:10:55:9e:37:90:3e:
4e:96:e4:2a:46:e0:df:b7:c4:10:f5:28:7d:41:ce:
27:7c:2b:78:36:29:4f:0c:8d:e0:72:83:35:3f:a3:
b5:e5:b7:28:1c:0c:dc:d9:05:34:30:cc:95:1c:4e:
d0:8d:07:84:ca:95:1f:14:4b:cd:4a:99:a3:69:94:
d6:8c:14:26:a5:a3:90:47:ed:dd:d1:3c:35:27:03:
2e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B1:7F:9B:C9:82:76:A9:CE:7A:19:2D:E9:9A:DC:12:5A:83:46:6F
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:35:26:c5:70:fc:07:6d:ec:23:0e:cd:47:01:4d:70:99:14:
97:b6:5e:f6:8f:1f:06:2b:e2:12:f3:67:7a:85:5d:07:37:c3:
83:5c:9b:ba:19:ed:37:41:80:54:20:8e:f9:7f:a4:f3:f6:1d:
a9:d7:38:0e:30:eb:35:73:68:f3:f9:82:96:59:63:1d:2b:7d:
a8:09:4c:49:1c:3d:33:83:4a:8b:af:66:ef:35:67:9e:73:ad:
5e:40:db:b9:be:37:cc:3d:57:24:d5:8e:80:ea:10:87:8d:44:
1f:c6:92:63:e8:3e:10:dd:f5:f1:c9:e3:c5:d2:55:95:3d:a1:
49:64:6b:1c:85:9b:95:ea:ab:2f:ff:56:eb:16:cb:86:37:cd:
8c:fe:fd:a6:38:58:74:3a:67:57:25:17:eb:53:96:b1:94:a9:
53:0e:4f:2a:c0:3b:26:07:ac:14:53:da:37:75:bb:31:83:d8:
27:4c:fb:76:df:5c:55:c8:99:b6:30:17:33:6f:dc:85:cb:b7:
3a:a3:d2:26:80:e1:fe:43:3d:13:c0:4d:53:4c:60:d7:a3:74:
52:10:f8:bb:79:0f:f4:33:4c:68:e6:e3:c0:60:eb:62:d2:63:
65:93:a2:38:11:79:b7:c3:dd:8a:f2:df:a9:d7:86:8b:f6:92:
74:ac:62:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaybKFThqohsEjiUV7UzNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWNlZDk4MDVhM2M1ZDkzNGUyYzUyMWExN2E4YWI5NGYx
MWFlYzUwHhcNMjUwNjEwMTcwMDU3WhcNMjUwNjExMTcwMDU3WjAzMTEwLwYDVQQD
Eyg3MmIxN2Y5YmM5ODI3NmE5Y2U3YTE5MmRlOTlhZGMxMjVhODM0NjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA217yBksLhl+OOYDpwSXp3pHCBSh/
YIXRDPjIZlnEAueQln3kFJlpfn83ki+Dy3QJ0WcgkOONNdruk4FqTUQLDwYRLR0a
jliPyr7lZCTRWS0OjQBJWTQN0EYwAPHkBe9pLArrP5SpBRSFlruEOWzfAMpgFPzc
tFuC7npY7BUSVX+pLP22m2QZG4LGwPbB4BZ22W9yjKMVzX4UdIbvBjJKbu2+ClSM
kIZLbseREY0QVZ43kD5OluQqRuDft8QQ9Sh9Qc4nfCt4NilPDI3gcoM1P6O15bco
HAzc2QU0MMyVHE7QjQeEypUfFEvNSpmjaZTWjBQmpaOQR+3d0Tw1JwMuIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKxf5vJgnapznoZLema3BJag0ZvMB8GA1UdIwQY
MBaAFEOc7ZgFo8XZNOLFIaF6irlPEa7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQt
YTc3ODM0NWFlZDg4LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQtYTc3ODM0NWFlZDg4
LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzUmxXD8
B23sIw7NRwFNcJkUl7Ze9o8fBiviEvNneoVdBzfDg1ybuhntN0GAVCCO+X+k8/Yd
qdc4DjDrNXNo8/mCllljHSt9qAlMSRw9M4NKi69m7zVnnnOtXkDbub43zD1XJNWO
gOoQh41EH8aSY+g+EN318cnjxdJVlT2hSWRrHIWbleqrL/9W6xbLhjfNjP79pjhY
dDpnVyUX61OWsZSpUw5PKsA7JgesFFPaN3W7MYPYJ0z7dt9cVciZtjAXM2/chcu3
OqPSJoDh/kM9E8BNU0xg16N0UhD4u3kP9DNMaObjwGDrYtJjZZOiOBF5t8PdivLf
qdeGi/aSdKxijw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 20:12:33 2025 by rpki-client