Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: rG8U1DhEcim1QmzoWn8gDb0YcaAIVz6s9ikrPIJ8BrY=
Subject key identifier: 2C:DE:54:DB:C8:99:2C:EC:10:FB:4C:BB:48:6F:8B:51:77:CB:55:F7
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 01974C325B9EAE5A246FEBC13B8E5AA59725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 21:00:57 +0000
Manifest this update: Sat 07 Jun 2025 21:00:57 +0000
Manifest next update: Sun 08 Jun 2025 21:00:57 +0000
Files and hashes: 1: 1OkV1FOSt0CIRzcv_xhQZDIhaCY.roa (hash: 0nS1ugbBt4Oiv/4rCAPHlWm5w4EZo3UZ1Why6gpAxu4=)
2: KmelkdSsmbJtVWU94thK7d4v5RE.roa (hash: oIEVJa5VewYKMBXTZDUCkwziB09TzVnzHNBtgzRneDA=)
3: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: YucM6CwVK8TgG8YVc9xDemKijNlBv19l/ykQ0ydq1pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:5b:9e:ae:5a:24:6f:eb:c1:3b:8e:5a:a5:97:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Jun 7 21:00:57 2025 GMT
Not After : Jun 8 21:00:57 2025 GMT
Subject: CN=2cde54dbc8992cec10fb4cbb486f8b5177cb55f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:49:0f:8c:e1:69:fc:a6:82:75:bc:7d:18:
ee:fa:0a:be:e8:49:72:2b:38:85:5e:2f:72:39:a0:
c0:09:8a:d3:ff:5f:56:c9:b5:9e:34:73:b4:18:33:
98:d8:6b:f6:ad:b6:1a:ae:b0:26:d6:97:4b:ad:eb:
78:d0:c3:9a:02:66:89:16:97:14:72:4f:14:88:b8:
87:14:c1:1a:51:3f:b6:a7:fa:a8:38:8f:22:9a:03:
12:70:01:12:3b:69:81:9b:2d:47:a4:fc:38:49:35:
2c:ce:63:d7:02:bc:7d:c2:ad:4c:47:a0:5f:15:3b:
a2:57:5d:9d:68:d4:aa:08:18:88:94:58:0d:f2:1c:
0e:fb:80:ed:6b:65:00:cd:89:24:3e:0e:54:07:f9:
93:f9:cc:ee:f7:56:5b:04:bb:4c:36:ea:be:ba:17:
96:13:f2:42:8f:f0:52:d7:02:03:fe:69:61:c1:f0:
e9:34:4f:a8:83:6d:2c:c2:91:ab:88:ee:3d:35:84:
b7:f0:e2:2d:4c:7d:f3:c9:b6:bf:e9:ad:17:f1:d6:
11:ae:d2:58:74:83:c0:7f:a5:22:4d:10:30:b9:c7:
d2:e1:8b:89:72:52:3f:93:18:11:41:c9:d0:d7:1b:
28:8b:71:00:4d:b6:c1:8c:02:1e:84:ac:7f:10:3e:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:54:DB:C8:99:2C:EC:10:FB:4C:BB:48:6F:8B:51:77:CB:55:F7
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a3:38:51:bd:91:76:e8:aa:b2:d8:c4:44:9e:36:80:cf:73:
d8:54:04:04:a0:9e:1c:31:24:b1:3d:c4:77:a1:53:c6:80:aa:
6f:f0:9c:bc:34:5a:75:de:f4:51:a9:92:77:64:34:6b:3e:66:
2a:13:46:b2:ce:0a:be:da:38:97:6d:60:93:b0:6c:85:07:d8:
ce:25:f6:5b:46:7d:28:11:21:30:c1:24:a8:6f:bc:fa:f8:f8:
1f:7c:7d:3e:5b:88:ce:7a:3b:91:f4:5c:ed:8f:12:a8:74:ae:
68:68:86:4a:5a:b7:de:28:34:98:3b:8d:b3:90:3b:f7:11:75:
a1:f8:9c:ae:3e:34:e2:b5:6f:aa:3f:ad:ef:de:5c:35:dd:8f:
74:14:53:4b:4d:98:b9:10:07:e8:2c:29:ef:88:d8:9d:df:f0:
dc:28:f2:20:a1:7a:5e:45:91:6d:a3:3d:07:85:da:7c:80:d7:
56:b7:2f:85:9e:ec:df:a0:28:13:de:ed:99:4b:f7:62:2a:28:
0b:87:a8:84:de:84:6b:48:19:13:6d:e5:93:28:3a:14:36:02:
25:45:72:fd:cb:3f:be:68:af:7e:e4:84:88:03:ac:a4:92:d4:
db:df:74:44:21:0f:91:2f:3c:55:37:88:6b:1b:10:85:b0:09:
8c:65:11:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMluerlokb+vBO45apZclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGE1NjQ4ZTFkNDZiNjYyZjRkMWRjYzA2NmQzOTQyN2M2
NWYwZDEwHhcNMjUwNjA3MjEwMDU3WhcNMjUwNjA4MjEwMDU3WjAzMTEwLwYDVQQD
EygyY2RlNTRkYmM4OTkyY2VjMTBmYjRjYmI0ODZmOGI1MTc3Y2I1NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pxJD4zhafymgnW8fRju+gq+6Ely
KziFXi9yOaDACYrT/19WybWeNHO0GDOY2Gv2rbYarrAm1pdLret40MOaAmaJFpcU
ck8UiLiHFMEaUT+2p/qoOI8imgMScAESO2mBmy1HpPw4STUszmPXArx9wq1MR6Bf
FTuiV12daNSqCBiIlFgN8hwO+4Dta2UAzYkkPg5UB/mT+czu91ZbBLtMNuq+uheW
E/JCj/BS1wID/mlhwfDpNE+og20swpGriO49NYS38OItTH3zyba/6a0X8dYRrtJY
dIPAf6UiTRAwucfS4YuJclI/kxgRQcnQ1xsoi3EATbbBjAIehKx/ED7rRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzeVNvImSzsEPtMu0hvi1F3y1X3MB8GA1UdIwQY
MBaAFEMKVkjh1GtmL00dzAZtOUJ8ZfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzct
ODkwNTIyYzYxMDViLzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzctODkwNTIyYzYxMDVi
LzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqM4Ub2R
duiqstjERJ42gM9z2FQEBKCeHDEksT3Ed6FTxoCqb/CcvDRadd70UamSd2Q0az5m
KhNGss4Kvto4l21gk7BshQfYziX2W0Z9KBEhMMEkqG+8+vj4H3x9PluIzno7kfRc
7Y8SqHSuaGiGSlq33ig0mDuNs5A79xF1oficrj404rVvqj+t795cNd2PdBRTS02Y
uRAH6Cwp74jYnd/w3CjyIKF6XkWRbaM9B4XafIDXVrcvhZ7s36AoE97tmUv3Yioo
C4eohN6Ea0gZE23lkyg6FDYCJUVy/cs/vmivfuSEiAOspJLU2990RCEPkS88VTeI
axsQhbAJjGURAA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:11 2025 by rpki-client