Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: SuSlzqbZhvZSl2UaRnoez5W8UxOTj53acz3kBVYA2VY=
Subject key identifier: 11:2E:96:BF:54:E7:1D:B9:8A:B6:94:ED:12:4D:03:66:0D:E1:67:3C
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 01974D44BC6263126000E9447095F9023499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 1015
Signing time: Sun 08 Jun 2025 02:00:39 +0000
Manifest this update: Sun 08 Jun 2025 02:00:39 +0000
Manifest next update: Mon 09 Jun 2025 02:00:39 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: 8ipEct+wkVGZJ112QYNTvc0cQ6Z/q9Gq7EMZX2hMjYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:bc:62:63:12:60:00:e9:44:70:95:f9:02:34:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Jun 8 02:00:39 2025 GMT
Not After : Jun 9 02:00:39 2025 GMT
Subject: CN=112e96bf54e71db98ab694ed124d03660de1673c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:b3:f7:a2:59:9a:e9:45:fd:43:50:ba:fa:
83:a8:27:0d:08:97:2b:f2:77:c7:76:5a:6b:86:9e:
f5:33:c2:33:20:0c:b7:3b:51:ac:c7:63:b0:09:66:
ae:1b:b3:c4:3f:0f:9a:20:d4:b6:98:4f:69:54:c8:
73:62:80:b3:45:b8:d4:d5:c8:fd:33:2b:b7:84:92:
6d:0c:45:41:10:4c:0d:d2:d1:29:19:29:10:8a:d7:
3a:b9:99:0f:5a:c2:ca:d2:3a:b8:8b:f9:d6:5a:a9:
3b:8c:53:d2:f4:02:bc:88:4d:6c:01:f5:1f:ee:39:
fa:2f:6a:66:b4:4d:83:2d:33:9b:ca:5d:5b:3b:36:
57:0b:27:98:1a:4e:35:b9:fa:2b:f2:4a:e2:68:fc:
f9:ed:e8:ae:c3:86:ef:f0:3c:f9:3a:c7:fc:d1:f1:
a3:80:4f:57:5f:91:16:3d:aa:48:4d:bb:4f:83:cf:
db:04:f5:11:7a:e4:ad:f8:e9:cb:58:5f:dd:2c:e6:
1c:be:b4:cf:ee:e3:1b:5c:c3:35:68:6e:e4:95:4d:
ec:8e:a9:68:c4:1a:53:ac:87:38:86:af:ef:b8:0a:
54:2d:08:17:7a:94:5d:e7:a6:24:d1:7a:b3:79:37:
dc:61:ca:d9:40:49:5a:5a:aa:f0:8a:a4:64:a8:ae:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2E:96:BF:54:E7:1D:B9:8A:B6:94:ED:12:4D:03:66:0D:E1:67:3C
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1b:ce:9d:cd:a7:10:0a:60:0b:07:8b:40:f9:b2:2a:1f:f6:
cb:d7:60:22:2e:a9:11:22:6b:e9:b1:98:e4:0f:f9:ae:9a:8f:
59:fc:86:34:2b:1a:e0:48:bf:5f:53:08:6f:a0:6e:30:8c:ce:
2b:f3:8a:90:e5:4d:50:f3:bc:26:1d:90:fc:37:4f:f1:cc:8b:
a5:86:b5:4b:56:c4:bb:39:e2:3c:f0:42:d5:50:a0:1d:80:eb:
39:fb:79:a6:bc:b9:cb:e9:09:15:c5:55:18:c6:73:e9:e3:ee:
28:73:ee:3e:e3:04:81:41:68:89:14:60:90:36:63:ee:a0:89:
d8:5a:0c:61:1b:0b:a2:40:e6:02:e0:3c:fe:6d:0d:94:0c:66:
8f:a4:a0:d7:c4:f1:82:3c:b9:43:e9:38:55:33:d0:20:dd:84:
fe:ae:27:47:43:00:ca:1c:38:ea:9e:38:4c:a5:2f:71:e0:63:
e7:0c:d3:3f:4f:0e:dd:e5:88:bf:19:3b:60:3d:a1:62:ff:0c:
f1:e7:cb:d6:20:6b:1e:bf:8e:cb:90:bb:b5:0f:e0:f9:f7:b5:
ad:09:80:c9:af:12:95:bc:9a:b1:4d:a1:83:de:af:06:c8:b5:
51:d8:5a:fd:80:94:36:aa:ad:ce:7a:57:1f:1a:ad:a9:89:6b:
03:04:80:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRLxiYxJgAOlEcJX5AjSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMTFjY2QyYmQyMjU0NGFiZTU4NWE3Y2QzZjk0OTExZWEw
Yzk0MmEwHhcNMjUwNjA4MDIwMDM5WhcNMjUwNjA5MDIwMDM5WjAzMTEwLwYDVQQD
EygxMTJlOTZiZjU0ZTcxZGI5OGFiNjk0ZWQxMjRkMDM2NjBkZTE2NzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3qz96JZmulF/UNQuvqDqCcNCJcr
8nfHdlprhp71M8IzIAy3O1Gsx2OwCWauG7PEPw+aINS2mE9pVMhzYoCzRbjU1cj9
Myu3hJJtDEVBEEwN0tEpGSkQitc6uZkPWsLK0jq4i/nWWqk7jFPS9AK8iE1sAfUf
7jn6L2pmtE2DLTObyl1bOzZXCyeYGk41ufor8kriaPz57eiuw4bv8Dz5Osf80fGj
gE9XX5EWPapITbtPg8/bBPUReuSt+OnLWF/dLOYcvrTP7uMbXMM1aG7klU3sjqlo
xBpTrIc4hq/vuApULQgXepRd56Yk0XqzeTfcYcrZQElaWqrwiqRkqK7cwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEulr9U5x25iraU7RJNA2YN4Wc8MB8GA1UdIwQY
MBaAFEMRzNK9IlRKvlhafNP5SRHqDJQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYt
ZDM3OGJhZjZhYTkyLzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYtZDM3OGJhZjZhYTky
LzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRvOnc2n
EApgCweLQPmyKh/2y9dgIi6pESJr6bGY5A/5rpqPWfyGNCsa4Ei/X1MIb6BuMIzO
K/OKkOVNUPO8Jh2Q/DdP8cyLpYa1S1bEuzniPPBC1VCgHYDrOft5pry5y+kJFcVV
GMZz6ePuKHPuPuMEgUFoiRRgkDZj7qCJ2FoMYRsLokDmAuA8/m0NlAxmj6Sg18Tx
gjy5Q+k4VTPQIN2E/q4nR0MAyhw46p44TKUvceBj5wzTP08O3eWIvxk7YD2hYv8M
8efL1iBrHr+Oy5C7tQ/g+fe1rQmAya8SlbyasU2hg96vBsi1Udha/YCUNqqtznpX
HxqtqYlrAwSACg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:56:46 2025 by rpki-client