Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: KA2lfMb+fahexCkMpL6Igpud8WLw1KplYLd4Wgn0yak=
Subject key identifier: AE:2C:06:FD:33:71:A6:44:89:88:49:39:9A:96:5B:28:0A:A7:FF:CF
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 01974B8DA517550D07D63B7D12305F13C32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 0271
Signing time: Sat 07 Jun 2025 18:01:03 +0000
Manifest this update: Sat 07 Jun 2025 18:01:03 +0000
Manifest next update: Sun 08 Jun 2025 18:01:03 +0000
Files and hashes: 1: B5665HYy6kSNy90OpMzSYkfYZ78.roa (hash: l3LMbVnBNYo1auwulw02upGn169zVSqtpPpAH0JkHoI=)
2: BhseQy6cfY2KxD85qSiLzXh-5UM.roa (hash: 0YvZXzvsO+BZgmZ0JpcK1I5V3fjP6y+JiPN3ak5ChGQ=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: P3/z/HX3QlLI3gmEeqespvqWLOs/56GizwnjZzjDprU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:a5:17:55:0d:07:d6:3b:7d:12:30:5f:13:c3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Jun 7 18:01:03 2025 GMT
Not After : Jun 8 18:01:03 2025 GMT
Subject: CN=ae2c06fd3371a644898849399a965b280aa7ffcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:4b:b4:ac:40:5b:5a:7f:1a:3b:da:6d:2a:
a9:47:74:c9:43:5e:0d:34:73:f7:bb:07:10:62:c6:
84:f3:4d:7a:33:3b:ce:71:9f:31:da:ee:54:ee:5c:
f1:91:c2:09:9b:a1:48:96:30:d5:43:98:7c:2e:06:
ad:e7:9e:d7:15:54:15:86:eb:97:20:a9:00:0c:f9:
2b:d8:21:00:3b:b7:07:a3:c3:79:7c:fe:ce:cf:b6:
cf:fc:46:7d:4f:7e:ca:ca:14:01:84:e7:92:60:61:
af:23:a0:60:ce:bd:be:7d:21:3b:72:bb:06:58:c8:
e6:84:98:28:cd:f3:4a:2f:8b:a3:25:4c:38:66:9d:
95:60:55:97:9b:98:ad:08:f1:94:45:a2:1d:7d:96:
9b:6c:b1:24:0e:5a:8e:a2:f9:2a:06:d1:f8:3a:65:
69:6c:33:a6:0b:81:00:b6:74:b1:cc:be:59:9d:b1:
ca:2b:4c:c0:cb:c8:ea:6f:1b:e1:bd:1f:c3:4f:0e:
4f:33:5f:72:d7:02:ac:0b:37:62:fc:90:0e:20:7e:
b4:a7:27:d1:ab:ac:a0:cd:3c:9c:30:a8:cc:b0:44:
1a:61:2c:c3:42:ba:77:e6:61:56:97:c1:64:6c:6b:
16:a5:3d:94:5d:3f:e0:28:6b:d6:58:1d:7a:65:82:
3a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2C:06:FD:33:71:A6:44:89:88:49:39:9A:96:5B:28:0A:A7:FF:CF
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:22:fb:e3:43:38:50:59:fc:b5:e4:c5:ef:70:79:a8:32:b6:
bb:fd:e9:55:ab:c8:d1:fd:23:89:b3:97:2d:6f:a8:cb:6e:aa:
29:95:f7:f9:4c:10:41:24:aa:f3:09:ec:ad:f3:e7:63:d8:8a:
3b:87:02:a5:fa:56:8d:d8:4b:92:38:a8:3d:12:ad:2e:4b:99:
0f:82:06:2f:2f:47:a2:e6:39:62:2d:84:37:bf:28:6b:0e:8b:
b5:bc:2e:c5:50:ca:0f:56:dc:ec:5a:19:ae:84:d5:13:8a:0e:
9a:4a:90:80:8c:58:db:de:ef:ee:62:74:a7:fc:f8:40:a8:cb:
bb:87:95:0c:45:a3:2c:34:9b:16:08:39:90:3b:bc:6d:9a:d2:
9e:ee:23:da:7c:a1:1e:c0:2c:67:1c:fd:7f:2a:aa:2e:62:e1:
2b:96:1d:a2:f0:ef:70:30:64:5f:96:25:4a:a5:bd:4f:7f:40:
e4:c6:64:83:33:aa:2e:4a:9f:c3:7f:9f:4b:05:3a:73:4c:03:
2a:a6:7f:b8:79:65:ff:99:9d:7a:51:42:02:f8:ff:ce:c5:a2:
e6:74:33:de:ae:63:4e:a7:ee:c0:68:79:4d:f2:3b:bd:3a:cd:
fa:70:73:de:71:28:0d:9f:7b:3b:d6:f8:78:4c:44:19:92:25:
8e:3f:c3:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjaUXVQ0H1jt9EjBfE8MqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYWViOGZmNTViZDQ2NTAwYjI3ZGI5Y2YxZGVjMjU2Mjc2
YjJiNmEwHhcNMjUwNjA3MTgwMTAzWhcNMjUwNjA4MTgwMTAzWjAzMTEwLwYDVQQD
EyhhZTJjMDZmZDMzNzFhNjQ0ODk4ODQ5Mzk5YTk2NWIyODBhYTdmZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWpLtKxAW1p/GjvabSqpR3TJQ14N
NHP3uwcQYsaE8016MzvOcZ8x2u5U7lzxkcIJm6FIljDVQ5h8Lgat557XFVQVhuuX
IKkADPkr2CEAO7cHo8N5fP7Oz7bP/EZ9T37KyhQBhOeSYGGvI6Bgzr2+fSE7crsG
WMjmhJgozfNKL4ujJUw4Zp2VYFWXm5itCPGURaIdfZabbLEkDlqOovkqBtH4OmVp
bDOmC4EAtnSxzL5ZnbHKK0zAy8jqbxvhvR/DTw5PM19y1wKsCzdi/JAOIH60pyfR
q6ygzTycMKjMsEQaYSzDQrp35mFWl8FkbGsWpT2UXT/gKGvWWB16ZYI6ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4sBv0zcaZEiYhJOZqWWygKp//PMB8GA1UdIwQY
MBaAFEOuuP9VvUZQCyfbnPHewlYnaytqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgt
MmMyZmJhZDJmMDExLzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zYjZmYjQtNTJlOC00NGUyLWFiZTgtMmMyZmJhZDJmMDEx
LzEvUTY2NF8xVzlSbEFMSjl1YzhkN0NWaWRySzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCL740M4
UFn8teTF73B5qDK2u/3pVavI0f0jibOXLW+oy26qKZX3+UwQQSSq8wnsrfPnY9iK
O4cCpfpWjdhLkjioPRKtLkuZD4IGLy9HouY5Yi2EN78oaw6LtbwuxVDKD1bc7FoZ
roTVE4oOmkqQgIxY297v7mJ0p/z4QKjLu4eVDEWjLDSbFgg5kDu8bZrSnu4j2nyh
HsAsZxz9fyqqLmLhK5YdovDvcDBkX5YlSqW9T39A5MZkgzOqLkqfw3+fSwU6c0wD
KqZ/uHll/5mdelFCAvj/zsWi5nQz3q5jTqfuwGh5TfI7vTrN+nBz3nEoDZ97O9b4
eExEGZIljj/Dxw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:52:56 2025 by rpki-client