Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
File: 1QylITQTxwqeg7R6gqfEV53UwZY.mft (raw, json)
Hash identifier: LAl3+4N7OZ5oHomttPOCPrQEooFzxhoamqA1pmR3HtU=
Subject key identifier: A3:91:2F:60:8F:24:23:12:C4:B3:34:71:D2:FF:8D:AE:0F:CE:86:7F
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 019766970CF7B6BE1DA0842B364586CFCAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
Manifest number: 07D8
Signing time: Fri 13 Jun 2025 00:01:04 +0000
Manifest this update: Fri 13 Jun 2025 00:01:04 +0000
Manifest next update: Sat 14 Jun 2025 00:01:04 +0000
Files and hashes: 1: 1QylITQTxwqeg7R6gqfEV53UwZY.crl (hash: wTy9fbKEqUFbygB6heujsw86+9jr29vBpBjTAaagjoI=)
2: _qLxIOi7VmVEBLaS1YixdxXiwBA.roa (hash: 0p2ssxxIHIoQau1gQDFigWlgz8Te2D1iMIcwAH/P3eQ=)
3: xxT8grXnmq40HsKuG1Zwf8qr5yM.roa (hash: Q9jgD1xIS5+5fspqYSArTtS7aFho5oJiLf020/LBelY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:97:0c:f7:b6:be:1d:a0:84:2b:36:45:86:cf:ca:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Jun 13 00:01:04 2025 GMT
Not After : Jun 14 00:01:04 2025 GMT
Subject: CN=a3912f608f242312c4b33471d2ff8dae0fce867f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:35:20:c4:4f:66:c2:c1:29:d3:bc:72:32:
1a:f6:ff:5d:f4:f4:cd:b6:ac:a1:2f:e2:c7:d7:e4:
62:5f:5e:16:28:54:92:1c:67:ad:01:43:dc:32:1c:
2f:cc:0e:3a:74:e5:4e:20:c4:68:12:6d:7d:8d:3f:
54:c1:29:a1:5a:31:7b:73:29:88:12:0c:fc:05:0b:
a3:1d:2a:b9:c9:ad:15:ff:28:50:b7:ac:51:7d:50:
12:ca:ce:9e:61:d3:1a:10:bd:14:37:8d:8a:81:68:
8f:a5:fe:9a:2e:f6:38:a9:93:ec:da:16:09:48:35:
99:5a:95:f6:61:d8:ab:fd:e0:f6:a5:5e:15:2b:00:
27:e2:5c:40:2d:b9:e4:3e:10:6c:69:35:da:14:e0:
b0:39:31:f5:22:af:22:21:a3:f4:b6:fa:ff:9a:0c:
24:ba:8e:e5:90:ef:9c:63:5d:ce:ce:b0:67:e7:6f:
1a:19:79:a7:de:8a:a4:85:b3:0f:6f:60:b1:cd:b5:
7a:39:81:67:7a:8c:ad:a7:7f:e1:b5:2e:67:c3:b9:
c0:d9:37:3c:3d:21:70:97:9a:b5:9c:57:9a:88:b5:
b6:ed:b6:22:75:f5:90:83:95:d9:1c:48:29:13:d2:
e9:a6:c0:87:a9:b9:44:01:ad:7c:58:70:49:87:8c:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:2F:60:8F:24:23:12:C4:B3:34:71:D2:FF:8D:AE:0F:CE:86:7F
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:47:0b:ca:33:70:be:46:b6:36:de:1e:76:3d:27:cc:24:
35:92:c0:20:ea:7d:2e:ee:91:3b:76:c9:34:1f:49:bb:5b:08:
09:a8:3a:3a:a0:e1:dc:2b:43:09:ab:72:40:2c:70:b4:db:d3:
a7:8d:c4:71:46:31:2d:b3:41:f9:b4:25:db:eb:f1:22:29:49:
91:09:31:7f:ad:04:b5:c5:9e:e7:f8:9c:82:0b:ee:e2:77:af:
28:57:ac:af:53:4f:a4:9c:31:7f:f4:09:9a:55:39:a0:85:79:
96:bc:d2:db:7f:9a:f4:94:c0:56:68:20:79:bc:fc:fc:9a:2b:
90:84:85:f1:05:70:ef:bc:f9:d4:29:2c:2d:0a:b9:80:53:bc:
62:aa:6e:47:61:62:bf:4e:42:9c:ae:26:ee:91:09:6d:8e:1b:
fa:ce:67:ce:30:c1:60:78:1f:0d:7b:17:0e:ca:5a:a8:8c:56:
bf:a0:b1:22:28:f9:55:68:8f:5b:0d:8c:b3:2c:cc:31:65:a2:
0c:fc:21:0b:c3:55:61:34:2e:76:96:15:0c:98:04:7f:fd:65:
e9:35:19:c9:28:7a:d3:85:e5:12:61:be:b8:4b:4a:69:4d:4d:
1d:4d:99:92:da:b8:79:a9:fc:25:d4:09:0f:3a:cd:75:7e:04:
ba:2f:e9:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmlwz3tr4doIQrNkWGz8rpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MGNhNTIxMzQxM2M3MGE5ZTgzYjQ3YTgyYTdjNDU3OWRk
NGMxOTYwHhcNMjUwNjEzMDAwMTA0WhcNMjUwNjE0MDAwMTA0WjAzMTEwLwYDVQQD
EyhhMzkxMmY2MDhmMjQyMzEyYzRiMzM0NzFkMmZmOGRhZTBmY2U4NjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg41IMRPZsLBKdO8cjIa9v9d9PTN
tqyhL+LH1+RiX14WKFSSHGetAUPcMhwvzA46dOVOIMRoEm19jT9UwSmhWjF7cymI
Egz8BQujHSq5ya0V/yhQt6xRfVASys6eYdMaEL0UN42KgWiPpf6aLvY4qZPs2hYJ
SDWZWpX2Ydir/eD2pV4VKwAn4lxALbnkPhBsaTXaFOCwOTH1Iq8iIaP0tvr/mgwk
uo7lkO+cY13OzrBn528aGXmn3oqkhbMPb2CxzbV6OYFneoytp3/htS5nw7nA2Tc8
PSFwl5q1nFeaiLW27bYidfWQg5XZHEgpE9LppsCHqblEAa18WHBJh4zKlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKORL2CPJCMSxLM0cdL/ja4PzoZ/MB8GA1UdIwQY
MBaAFNUMpSE0E8cKnoO0eoKnxFed1MGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVF5bElUUVR4d3FlZzdSNmdxZkVWNTNVd1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yMmY4MGYtM2EwOC00OWM2LWI0MDUt
MzU0YjExYWYyMzNlLzEvMVF5bElUUVR4d3FlZzdSNmdxZkVWNTNVd1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8yMmY4MGYtM2EwOC00OWM2LWI0MDUtMzU0YjExYWYyMzNl
LzEvMVF5bElUUVR4d3FlZzdSNmdxZkVWNTNVd1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxVHC8oz
cL5GtjbeHnY9J8wkNZLAIOp9Lu6RO3bJNB9Ju1sICag6OqDh3CtDCatyQCxwtNvT
p43EcUYxLbNB+bQl2+vxIilJkQkxf60EtcWe5/icggvu4nevKFesr1NPpJwxf/QJ
mlU5oIV5lrzS23+a9JTAVmggebz8/JorkISF8QVw77z51CksLQq5gFO8YqpuR2Fi
v05CnK4m7pEJbY4b+s5nzjDBYHgfDXsXDspaqIxWv6CxIij5VWiPWw2MsyzMMWWi
DPwhC8NVYTQudpYVDJgEf/1l6TUZySh604XlEmG+uEtKaU1NHU2Zktq4ean8JdQJ
DzrNdX4Eui/pMQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 09:49:13 2025 by rpki-client