
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json)
Hash identifier: juFmHMCJUww+1sMsHuUR4xEA+A6n6qgnl5EkTo0G0Sk=
Subject key identifier: 27:73:FE:20:22:8E:20:D2:62:9C:AE:B9:97:8B:7D:1C:A8:8C:51:94
Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Certificate serial: 01974742A73BE3A0F0DB949C173F6CA1DC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
Manifest number: 014A
Signing time: Fri 06 Jun 2025 22:00:39 +0000
Manifest this update: Fri 06 Jun 2025 22:00:39 +0000
Manifest next update: Sat 07 Jun 2025 22:00:39 +0000
Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: 3P8vtHoER6jRipBOtvdfi6PU0BQCZqwFSicRjfWy6oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:a7:3b:e3:a0:f0:db:94:9c:17:3f:6c:a1:dc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Validity
Not Before: Jun 6 22:00:39 2025 GMT
Not After : Jun 7 22:00:39 2025 GMT
Subject: CN=2773fe20228e20d2629caeb9978b7d1ca88c5194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:40:2d:17:41:bd:f3:2c:64:4d:57:78:7a:16:
7f:ef:cf:b8:03:7b:e5:66:2d:ab:1a:f6:8b:1d:6b:
8a:ec:24:52:34:58:c1:36:97:1d:01:63:d4:bc:af:
e8:dc:7f:19:fe:73:55:25:f5:c9:e7:f5:b5:9d:07:
1c:59:47:6c:a3:0f:ea:26:bf:27:6d:d3:ea:6e:53:
72:9f:17:4e:e6:9d:6b:af:da:82:86:fa:93:7c:a5:
26:d5:1c:fa:32:4b:27:09:68:07:30:c7:3e:cd:dc:
6f:34:0d:81:b5:96:59:78:60:0d:d7:00:a2:fa:74:
f8:32:30:13:48:9e:4c:36:20:64:55:09:24:51:d6:
b3:3e:76:d9:66:08:d5:05:96:99:fc:ae:90:52:1d:
e3:1a:3a:5f:6a:b0:98:7f:9d:f7:37:1c:b7:3a:88:
f8:25:f4:7b:6b:25:19:d7:e9:a4:aa:4e:df:fd:58:
0f:9e:5f:83:41:66:f3:fe:e1:23:93:f1:55:d8:bc:
95:f6:eb:bc:53:b1:df:ba:b6:da:a9:c8:c7:af:23:
ad:fc:8d:80:15:99:17:d7:91:8f:b1:07:76:70:b5:
3a:b3:55:de:21:2f:8c:ce:c9:64:4b:69:37:33:29:
dd:37:94:f0:e1:51:7d:7e:ba:40:5c:42:11:49:22:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:FE:20:22:8E:20:D2:62:9C:AE:B9:97:8B:7D:1C:A8:8C:51:94
X509v3 Authority Key Identifier:
keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:21:e1:37:a2:3e:66:95:67:5e:a1:e6:b2:b4:7d:fc:46:b9:
3d:06:c1:76:a0:40:bc:94:79:70:1b:83:15:4e:54:fd:ec:85:
4e:05:70:2d:89:c7:62:79:07:b9:bc:6a:3f:f1:82:0d:a6:d0:
ca:9b:f9:13:d2:0d:1a:28:f7:41:09:f8:aa:4f:b3:b3:bc:31:
9e:93:70:fd:90:c2:be:99:43:ad:94:df:08:d6:7d:8d:0c:32:
4c:bb:95:e6:c7:92:29:21:72:06:35:8c:d8:9b:28:d6:42:b0:
f4:5c:ee:07:ca:5a:8d:7f:1e:9f:30:4d:7a:28:b9:76:95:04:
9b:b6:41:2c:6e:2b:33:14:b5:7e:15:08:69:7b:cc:36:ef:7e:
23:b2:21:08:fc:94:0b:74:32:09:4f:31:f7:2c:b2:33:65:af:
f7:04:9e:e4:7b:10:97:fa:51:9f:c8:a4:5e:4a:e1:af:e3:47:
dc:3b:64:f8:02:98:bc:ef:3c:f3:6d:78:bd:8a:43:27:f3:90:
f8:11:2e:78:9f:99:f2:0a:09:ed:ad:6e:a1:c8:51:31:66:3e:
03:d1:6f:43:81:cb:52:95:89:47:be:69:23:1b:9d:63:2e:6e:
3b:26:84:f9:ec:50:cb:97:dc:5e:09:42:ea:fa:65:2f:d6:27:
62:8f:7f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQqc746Dw25ScFz9sodwTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjIyZjBlYzAxNGMyYWRhNTc1MzczZmE2YmQyZmVjNTBm
NjUxNDcwHhcNMjUwNjA2MjIwMDM5WhcNMjUwNjA3MjIwMDM5WjAzMTEwLwYDVQQD
EygyNzczZmUyMDIyOGUyMGQyNjI5Y2FlYjk5NzhiN2QxY2E4OGM1MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUAtF0G98yxkTVd4ehZ/78+4A3vl
Zi2rGvaLHWuK7CRSNFjBNpcdAWPUvK/o3H8Z/nNVJfXJ5/W1nQccWUdsow/qJr8n
bdPqblNynxdO5p1rr9qChvqTfKUm1Rz6MksnCWgHMMc+zdxvNA2BtZZZeGAN1wCi
+nT4MjATSJ5MNiBkVQkkUdazPnbZZgjVBZaZ/K6QUh3jGjpfarCYf533Nxy3Ooj4
JfR7ayUZ1+mkqk7f/VgPnl+DQWbz/uEjk/FV2LyV9uu8U7HfurbaqcjHryOt/I2A
FZkX15GPsQd2cLU6s1XeIS+MzslkS2k3MyndN5Tw4VF9frpAXEIRSSLeUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdz/iAijiDSYpyuuZeLfRyojFGUMB8GA1UdIwQY
MBaAFKiyLw7AFMKtpXU3P6a9L+xQ9lFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3Mjgt
ZDAxMDk5MWVlMzIzLzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3MjgtZDAxMDk5MWVlMzIz
LzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCHhN6I+
ZpVnXqHmsrR9/Ea5PQbBdqBAvJR5cBuDFU5U/eyFTgVwLYnHYnkHubxqP/GCDabQ
ypv5E9INGij3QQn4qk+zs7wxnpNw/ZDCvplDrZTfCNZ9jQwyTLuV5seSKSFyBjWM
2Jso1kKw9FzuB8pajX8enzBNeii5dpUEm7ZBLG4rMxS1fhUIaXvMNu9+I7IhCPyU
C3QyCU8x9yyyM2Wv9wSe5HsQl/pRn8ikXkrhr+NH3Dtk+AKYvO888214vYpDJ/OQ
+BEueJ+Z8goJ7a1uochRMWY+A9FvQ4HLUpWJR75pIxudYy5uOyaE+exQy5fcXglC
6vplL9YnYo9/Gg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:29 2025 by rpki-client