Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File: QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier: Fqe65Jaocsfa9DDQhRlk7uDVLKbz3zpukzBj0v7FKtc=
Subject key identifier: 33:2B:34:68:E8:3B:B2:FD:05:0C:D1:B0:64:CA:9A:BB:60:8B:47:E9
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 0197470C01E86EEF01136E39638CD42AD9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number: 07E4
Signing time: Fri 06 Jun 2025 21:00:58 +0000
Manifest this update: Fri 06 Jun 2025 21:00:58 +0000
Manifest next update: Sat 07 Jun 2025 21:00:58 +0000
Files and hashes: 1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: jyVoj4kAdGXov59JOLr8r0waIM/9P2P3libz7crccME=)
2: bysUciiIqYU9vJ8UfK9pbwZkqG0.roa (hash: JZVYwqtyAp0nMHO1FDIE6qYD96KGmAzDi7aqiaMlMrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:01:e8:6e:ef:01:13:6e:39:63:8c:d4:2a:d9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: Jun 6 21:00:58 2025 GMT
Not After : Jun 7 21:00:58 2025 GMT
Subject: CN=332b3468e83bb2fd050cd1b064ca9abb608b47e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:01:b1:ee:e3:ee:5d:a5:94:2b:72:08:de:
eb:5d:1e:bb:c1:5d:b1:70:21:0d:72:a5:f5:71:6f:
e5:7d:f6:07:cb:9b:03:ac:77:4d:2a:66:16:02:89:
92:c8:2c:5c:a1:04:c9:e0:74:cd:ca:dd:5a:6a:37:
f1:d3:41:f5:cc:c6:0f:c3:93:70:78:dc:d3:0e:99:
07:d7:47:5a:61:48:f7:52:25:cf:b5:67:5c:b4:91:
21:79:51:c5:31:5e:8a:ee:7c:ed:b4:ee:7c:e1:6e:
ab:f2:5e:80:87:cf:8d:af:39:69:c0:24:5f:33:a1:
aa:f9:fa:ed:cb:bb:48:60:09:22:b6:74:3a:09:52:
82:5d:11:c0:e8:2e:f7:32:32:45:bd:b7:58:54:60:
df:49:59:db:ce:9f:0b:04:ed:e7:dd:1c:3b:27:10:
c2:2c:d3:4a:2d:eb:49:91:c6:44:17:92:30:2e:b0:
8d:aa:34:67:14:9b:e3:c4:f8:fb:47:d5:0c:de:29:
15:c7:e4:52:44:d1:b5:1c:a1:63:47:6f:e7:d9:5e:
68:51:50:8e:67:f8:69:fc:64:be:a6:40:19:5a:76:
76:06:38:e7:21:9a:8e:7a:ff:5b:01:07:87:5a:f8:
eb:68:ef:15:e4:24:fb:ea:f8:fd:67:93:8c:6e:cc:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2B:34:68:E8:3B:B2:FD:05:0C:D1:B0:64:CA:9A:BB:60:8B:47:E9
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:7b:cf:bb:0d:fa:2a:59:bd:c3:b2:dd:f0:b6:b7:13:b2:
2f:5a:71:8a:34:ef:3d:85:ff:3f:da:65:47:e8:e6:4c:be:35:
39:c7:0b:00:88:4f:cf:a8:8d:36:c7:ee:1a:ee:ff:88:89:9d:
71:ac:f1:82:00:c7:29:47:22:5c:2c:77:d5:98:6d:0e:cc:4c:
27:5f:69:3c:b1:59:cf:ce:d1:cc:a2:02:4e:02:7d:3e:63:c6:
da:db:42:39:88:55:bf:73:41:53:d2:17:0a:45:cc:a5:df:bf:
70:b4:7a:ff:47:ce:c0:99:90:90:85:8b:bd:49:ac:42:b2:d4:
f1:14:e5:7e:bf:c7:93:25:06:83:54:7c:a0:94:a3:df:08:5e:
73:de:c5:5e:cd:73:51:a3:96:ca:d4:22:e4:ec:ff:37:9f:48:
95:60:fc:6b:7c:8a:51:e9:26:87:b4:40:c5:e5:01:6d:b1:5f:
ce:a0:33:38:61:ef:b4:33:c9:b9:ab:fa:ae:b2:b4:de:a1:93:
52:4e:2a:54:18:64:bf:19:b5:4e:ef:0f:2a:3d:6f:20:d2:71:
37:75:75:0c:40:f0:2b:c1:79:b3:72:65:16:84:6e:92:4a:90:
d7:25:12:64:11:0c:6b:c9:5f:26:a1:8c:bb:b6:dd:67:8d:69:
ef:d3:a0:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDAHobu8BE245Y4zUKtnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGUwN2Q3OTlmYjM1NWM5NTIwMjVmM2QyN2IwMGU5YjRl
ZTM0ZWQwHhcNMjUwNjA2MjEwMDU4WhcNMjUwNjA3MjEwMDU4WjAzMTEwLwYDVQQD
EygzMzJiMzQ2OGU4M2JiMmZkMDUwY2QxYjA2NGNhOWFiYjYwOGI0N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi8Bse7j7l2llCtyCN7rXR67wV2x
cCENcqX1cW/lffYHy5sDrHdNKmYWAomSyCxcoQTJ4HTNyt1aajfx00H1zMYPw5Nw
eNzTDpkH10daYUj3UiXPtWdctJEheVHFMV6K7nzttO584W6r8l6Ah8+NrzlpwCRf
M6Gq+frty7tIYAkitnQ6CVKCXRHA6C73MjJFvbdYVGDfSVnbzp8LBO3n3Rw7JxDC
LNNKLetJkcZEF5IwLrCNqjRnFJvjxPj7R9UM3ikVx+RSRNG1HKFjR2/n2V5oUVCO
Z/hp/GS+pkAZWnZ2BjjnIZqOev9bAQeHWvjraO8V5CT76vj9Z5OMbszvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMrNGjoO7L9BQzRsGTKmrtgi0fpMB8GA1UdIwQY
MBaAFEAOB9eZ+zVclSAl89J7AOm07jTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAt
NDhmZTYzM2IxYjNmLzEvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAtNDhmZTYzM2IxYjNm
LzEvUUE0SDE1bjdOVnlWSUNYejBuc0E2YlR1Tk8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqB7z7sN
+ipZvcOy3fC2txOyL1pxijTvPYX/P9plR+jmTL41OccLAIhPz6iNNsfuGu7/iImd
cazxggDHKUciXCx31ZhtDsxMJ19pPLFZz87RzKICTgJ9PmPG2ttCOYhVv3NBU9IX
CkXMpd+/cLR6/0fOwJmQkIWLvUmsQrLU8RTlfr/HkyUGg1R8oJSj3whec97FXs1z
UaOWytQi5Oz/N59IlWD8a3yKUekmh7RAxeUBbbFfzqAzOGHvtDPJuav6rrK03qGT
Uk4qVBhkvxm1Tu8PKj1vINJxN3V1DEDwK8F5s3JlFoRukkqQ1yUSZBEMa8lfJqGM
u7bdZ41p79OgWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:37 2025 by rpki-client