Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: GfpuWWiWfE2yGWbQL4kKe9XD3Xvh+7bBLACLVfoP6LE=
Subject key identifier: 30:90:3C:79:7C:7F:04:93:85:63:83:DF:C2:74:74:62:AF:66:04:1E
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 0197CDCDD58B1185E6A7717E9F5F5B4586DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: 3D
Signing time: Thu 03 Jul 2025 01:01:48 +0000
Manifest this update: Thu 03 Jul 2025 01:01:48 +0000
Manifest next update: Fri 04 Jul 2025 01:01:48 +0000
Files and hashes: 1: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: vrYvwFsVB/dlTPfBaiC7uO3vBPv/1f8LO+OBXYDb5zs=)
2: eRG91sI4OxgJ5Ftj11HHCdo0lp4.roa (hash: XcHiB6tZLyMWY77AGAaJ1ywYGGueBg3m4NiJeGQTKn0=)
3: gH5Nx8BjDuFW9EStmNz8wzpaF0c.roa (hash: 4+5mIuyJK0b0oNUWLYEpywekd9cxzAgZ3IGvlVb8A04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:d5:8b:11:85:e6:a7:71:7e:9f:5f:5b:45:86:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Jul 3 01:01:48 2025 GMT
Not After : Jul 4 01:01:48 2025 GMT
Subject: CN=30903c797c7f0493856383dfc2747462af66041e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:9c:1f:e3:1d:53:4c:17:6d:d4:6f:5d:fa:
15:68:06:c2:88:8a:f2:50:80:93:f3:06:88:f5:1a:
6b:6a:f9:19:b5:0f:c6:fb:ea:4a:ed:cd:11:fa:c6:
25:52:86:9b:93:0d:3b:5b:da:8d:96:a9:c3:b2:2c:
85:db:bf:a6:e8:00:4a:7b:f7:e7:2c:f0:fa:20:95:
d0:5f:b1:25:7b:d0:ec:d9:ca:68:d7:83:37:6f:d3:
48:42:3c:a5:f9:e5:71:a8:25:92:f7:b2:ef:62:04:
61:11:f1:ce:a5:2c:c1:3b:bf:22:eb:e4:d9:3a:c7:
f9:df:37:66:6e:a6:ef:76:e6:08:50:10:75:76:4b:
48:cc:2e:08:cb:27:dc:da:a3:a2:22:13:61:af:d9:
51:6d:00:88:c3:74:58:b9:d4:ce:ab:31:18:b1:1e:
5e:3c:3c:7b:71:e9:ec:34:6b:65:a3:5b:77:5a:17:
c5:f0:7b:66:28:29:ce:cf:7f:94:58:2b:e6:83:7f:
14:7a:bd:96:33:e5:81:68:e8:c5:d3:fc:c9:93:15:
6d:0d:db:5c:55:ca:6b:3d:07:e8:7f:48:6f:35:a8:
ce:8c:ec:5b:21:77:d2:77:a1:e6:ac:38:a0:8b:14:
1b:45:a0:24:68:53:13:d7:3c:ee:d6:73:05:29:f2:
41:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:90:3C:79:7C:7F:04:93:85:63:83:DF:C2:74:74:62:AF:66:04:1E
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:78:5d:3c:4c:2d:14:bc:2e:c9:0b:ea:2d:d1:60:d5:33:
77:da:1f:c4:48:cc:23:80:a7:4a:e9:5c:0e:95:7c:9b:79:8b:
1a:2f:9b:5b:9a:73:4f:18:cc:65:0f:08:fc:22:33:24:6d:32:
02:c1:cd:62:f6:49:a4:af:eb:35:ba:4f:69:77:34:ae:8f:ea:
84:d2:01:ac:83:76:06:3a:6d:bf:46:e7:9f:7e:b6:09:61:8f:
3b:49:6d:66:b8:56:44:11:54:03:f7:9a:fc:b9:16:3e:17:fa:
15:5d:99:67:95:1b:40:aa:9f:b1:cb:11:09:0c:f1:e7:56:55:
db:95:0e:6c:c1:f8:6d:ba:19:e4:b6:a1:d9:d3:29:c9:e1:12:
96:2b:b3:50:63:5a:86:f7:ac:2e:92:f6:a7:7b:f8:84:7b:81:
f7:18:dd:92:fb:ed:0d:70:73:07:37:8c:4e:68:2a:f1:0c:c0:
0a:14:ef:ea:46:0d:9d:4e:83:8d:7a:a1:87:61:4a:b1:ec:1e:
b2:9a:15:fc:06:e1:d7:f0:8a:2a:30:f9:f0:63:58:ff:9e:74:
35:d6:16:52:e6:56:90:f6:db:b5:76:68:b3:d6:dc:a8:12:d4:
3b:23:36:01:62:26:6d:5f:2c:7d:6e:cb:4e:b8:cc:7e:c9:7a:
30:fa:66:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfNzdWLEYXmp3F+n19bRYbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDgxOGY0ZGY0YTZiZDEyNWQ1ZjIyMTI0MTQ1YTY5ZjVi
NmEzNGMwHhcNMjUwNzAzMDEwMTQ4WhcNMjUwNzA0MDEwMTQ4WjAzMTEwLwYDVQQD
EygzMDkwM2M3OTdjN2YwNDkzODU2MzgzZGZjMjc0NzQ2MmFmNjYwNDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXGcH+MdU0wXbdRvXfoVaAbCiIry
UICT8waI9RpravkZtQ/G++pK7c0R+sYlUoabkw07W9qNlqnDsiyF27+m6ABKe/fn
LPD6IJXQX7Ele9Ds2cpo14M3b9NIQjyl+eVxqCWS97LvYgRhEfHOpSzBO78i6+TZ
Osf53zdmbqbvduYIUBB1dktIzC4Iyyfc2qOiIhNhr9lRbQCIw3RYudTOqzEYsR5e
PDx7censNGtlo1t3WhfF8HtmKCnOz3+UWCvmg38Uer2WM+WBaOjF0/zJkxVtDdtc
VcprPQfof0hvNajOjOxbIXfSd6HmrDigixQbRaAkaFMT1zzu1nMFKfJB6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCQPHl8fwSThWOD38J0dGKvZgQeMB8GA1UdIwQY
MBaAFCkIGPTfSmvRJdXyISQUWmn1tqNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lNTdlZmItODYxYi00OTMxLTg4ZDMt
ZGQ5NzNkYTQyNzIxLzEvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9lNTdlZmItODYxYi00OTMxLTg4ZDMtZGQ5NzNkYTQyNzIx
LzEvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7p4XTxM
LRS8LskL6i3RYNUzd9ofxEjMI4CnSulcDpV8m3mLGi+bW5pzTxjMZQ8I/CIzJG0y
AsHNYvZJpK/rNbpPaXc0ro/qhNIBrIN2Bjptv0bnn362CWGPO0ltZrhWRBFUA/ea
/LkWPhf6FV2ZZ5UbQKqfscsRCQzx51ZV25UObMH4bboZ5Lah2dMpyeESliuzUGNa
hvesLpL2p3v4hHuB9xjdkvvtDXBzBzeMTmgq8QzAChTv6kYNnU6DjXqhh2FKsewe
spoV/Abh1/CKKjD58GNY/550NdYWUuZWkPbbtXZos9bcqBLUOyM2AWImbV8sfW7L
TrjMfsl6MPpmvg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:34:54 2025 by rpki-client