Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
File: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft (raw, json)
Hash identifier: 8XvbXk3vo0/A2+OhIwWhy4F+1voOE6evUfGJN455OPU=
Subject key identifier: CF:E6:A4:28:98:CF:C3:B0:5E:91:BB:57:6F:A2:55:4D:8B:B4:50:B2
Authority key identifier: 42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
Certificate issuer: /CN=424c165b6a49349541c65af9b21580163819f284
Certificate serial: 0197488C034C50AEB96E533B4706510863B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
Manifest number: 091A
Signing time: Sat 07 Jun 2025 04:00:24 +0000
Manifest this update: Sat 07 Jun 2025 04:00:24 +0000
Manifest next update: Sun 08 Jun 2025 04:00:24 +0000
Files and hashes: 1: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl (hash: rVBUpsyC2tTcCq8pUBPy6SWWRGS28fWOMMOXMC5HMbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:03:4c:50:ae:b9:6e:53:3b:47:06:51:08:63:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424c165b6a49349541c65af9b21580163819f284
Validity
Not Before: Jun 7 04:00:24 2025 GMT
Not After : Jun 8 04:00:24 2025 GMT
Subject: CN=cfe6a42898cfc3b05e91bb576fa2554d8bb450b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:f1:97:0f:72:6a:76:28:c6:11:d4:49:12:
97:f7:31:25:18:9d:12:2d:cd:b2:10:93:44:f5:74:
7f:61:eb:63:e6:a5:c6:51:87:6f:5a:a3:95:58:86:
7e:14:88:69:fe:25:29:29:2f:ed:f8:6f:61:04:5d:
3f:8b:6f:a3:86:c0:c8:e3:74:b6:e5:ac:05:7e:18:
0c:01:d9:f9:13:dc:9d:07:f8:e5:be:dd:e2:5a:a6:
16:b1:b9:e8:d5:6e:2e:8e:98:a5:d7:19:69:9d:7c:
c5:ef:44:15:4d:73:66:1c:66:10:6e:9b:19:2e:66:
61:9f:d8:5e:78:67:12:20:83:91:a1:c0:cb:96:ec:
58:ec:2d:56:e5:1a:d1:93:bd:94:54:db:34:a8:a4:
85:21:19:37:17:e7:15:df:c6:70:ea:df:d2:dc:4b:
db:39:fd:fd:f3:bc:b6:75:94:0c:69:f8:89:f7:90:
9c:f2:c8:1c:1f:68:1f:84:2a:5b:54:7f:c7:fb:11:
46:0c:82:8d:1b:28:29:c2:e2:20:cb:0c:5f:0c:48:
48:08:23:64:55:52:0b:b0:3e:28:41:d6:7c:66:e1:
0f:90:70:ec:80:ab:c5:20:28:c2:ec:1f:04:ed:50:
b3:ce:5c:42:0f:b0:f0:22:ff:18:af:aa:b6:0e:c5:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:A4:28:98:CF:C3:B0:5E:91:BB:57:6F:A2:55:4D:8B:B4:50:B2
X509v3 Authority Key Identifier:
keyid:42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e0:fa:73:45:77:c4:b1:42:03:ab:52:ba:a8:f8:0c:0c:f4:
a2:45:87:20:e4:de:12:82:22:bd:a6:db:d3:6b:81:86:9b:60:
e6:4f:cf:77:93:02:a8:2e:dd:60:e1:54:da:2d:40:b4:3b:e8:
bf:8e:f9:97:ef:2e:42:99:8e:45:f7:e5:85:58:7c:dd:ce:52:
67:82:80:08:6b:3a:ea:57:09:4a:3f:7a:ea:79:08:b8:2a:0a:
8e:d1:28:3c:6e:58:a8:49:72:07:69:4c:c5:5a:13:0c:43:41:
93:93:3b:b4:0b:0c:41:5e:ee:ef:da:6f:51:10:b1:e0:a7:af:
49:35:61:18:24:5c:cb:d6:09:ca:4a:fa:50:5e:d7:47:e9:27:
fd:ae:1f:ba:86:dd:f9:c5:81:07:1f:fb:0b:3d:87:c4:f4:02:
71:93:6c:f1:96:61:04:dc:df:58:12:a0:56:b6:8e:a6:94:fe:
68:ba:81:79:72:fb:67:92:37:26:42:51:ab:78:99:fa:e7:33:
f2:1e:48:ac:94:64:3a:58:22:8f:79:26:0b:5f:80:c9:1a:54:
1b:9a:f7:4f:1c:ac:53:11:33:2b:31:c4:d7:b1:6e:fb:11:aa:
b6:b0:4c:4e:fd:f8:11:48:24:0d:ad:11:1f:cc:6b:17:01:69:
9c:49:35:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjANMUK65blM7RwZRCGOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGMxNjViNmE0OTM0OTU0MWM2NWFmOWIyMTU4MDE2Mzgx
OWYyODQwHhcNMjUwNjA3MDQwMDI0WhcNMjUwNjA4MDQwMDI0WjAzMTEwLwYDVQQD
EyhjZmU2YTQyODk4Y2ZjM2IwNWU5MWJiNTc2ZmEyNTU0ZDhiYjQ1MGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sbxlw9yanYoxhHUSRKX9zElGJ0S
Lc2yEJNE9XR/Yetj5qXGUYdvWqOVWIZ+FIhp/iUpKS/t+G9hBF0/i2+jhsDI43S2
5awFfhgMAdn5E9ydB/jlvt3iWqYWsbno1W4ujpil1xlpnXzF70QVTXNmHGYQbpsZ
LmZhn9heeGcSIIORocDLluxY7C1W5RrRk72UVNs0qKSFIRk3F+cV38Zw6t/S3Evb
Of3987y2dZQMafiJ95Cc8sgcH2gfhCpbVH/H+xFGDIKNGygpwuIgywxfDEhICCNk
VVILsD4oQdZ8ZuEPkHDsgKvFICjC7B8E7VCzzlxCD7DwIv8Yr6q2DsX3swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/mpCiYz8OwXpG7V2+iVU2LtFCyMB8GA1UdIwQY
MBaAFEJMFltqSTSVQcZa+bIVgBY4GfKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWt3V1cycEpOSlZCeGxyNXNoV0FGamdaOG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MGM0OTgtNmIxZC00ZDkyLWE0ZTgt
ZWMzYmY0ODE2ZDM2LzEvUWt3V1cycEpOSlZCeGxyNXNoV0FGamdaOG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MGM0OTgtNmIxZC00ZDkyLWE0ZTgtZWMzYmY0ODE2ZDM2
LzEvUWt3V1cycEpOSlZCeGxyNXNoV0FGamdaOG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuD6c0V3
xLFCA6tSuqj4DAz0okWHIOTeEoIivabb02uBhptg5k/Pd5MCqC7dYOFU2i1AtDvo
v475l+8uQpmORfflhVh83c5SZ4KACGs66lcJSj966nkIuCoKjtEoPG5YqElyB2lM
xVoTDENBk5M7tAsMQV7u79pvURCx4KevSTVhGCRcy9YJykr6UF7XR+kn/a4fuobd
+cWBBx/7Cz2HxPQCcZNs8ZZhBNzfWBKgVraOppT+aLqBeXL7Z5I3JkJRq3iZ+ucz
8h5IrJRkOlgij3kmC1+AyRpUG5r3TxysUxEzKzHE17Fu+xGqtrBMTv34EUgkDa0R
H8xrFwFpnEk1TQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:28 2025 by rpki-client