Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: NQHHp7nXpkybMn6PfOx+WNwssusI1NifHhWWksVVRF0=
Subject key identifier: 26:02:2B:87:8B:AD:B9:BE:FB:E6:CF:F7:D0:95:6D:1D:20:07:76:04
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 01976AE11BD7846C17DE77D98D645B400C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 11E2
Signing time: Fri 13 Jun 2025 20:00:26 +0000
Manifest this update: Fri 13 Jun 2025 20:00:26 +0000
Manifest next update: Sat 14 Jun 2025 20:00:26 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: C6O1s9IDUNyQOTQOYEJHs0+yydvv/r5j+SZur7wke+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:e1:1b:d7:84:6c:17:de:77:d9:8d:64:5b:40:0c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Jun 13 20:00:26 2025 GMT
Not After : Jun 14 20:00:26 2025 GMT
Subject: CN=26022b878badb9befbe6cff7d0956d1d20077604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:4d:39:60:b6:28:1f:6f:ce:24:ee:ab:ce:
07:ee:d8:f5:7d:a9:1d:fd:23:56:02:b9:d7:a3:e7:
60:ae:6d:21:8e:8f:14:9b:f6:36:5f:2b:a4:8f:7b:
23:ee:05:11:3a:1d:a1:0e:37:d7:1b:a6:31:4d:9a:
d0:25:85:e5:86:1c:38:27:de:11:43:ae:fc:2f:25:
01:2a:ee:75:63:c8:d6:b9:16:4f:1c:40:80:d9:94:
53:e9:89:34:84:f9:24:7b:79:b9:1e:96:5c:22:32:
a4:ae:29:11:29:f0:f2:cb:63:71:da:58:ae:d0:3a:
6e:08:40:47:84:2c:bd:37:0b:9e:6e:cf:97:1f:4b:
2f:52:27:aa:5d:1d:9f:32:cb:e1:dc:17:98:86:d3:
f7:fa:e7:55:ee:e6:27:85:e6:be:4b:1b:a7:d7:7c:
3b:f8:4a:38:4c:f5:85:af:50:54:9e:64:3b:7d:1c:
25:59:fb:12:18:44:0e:f6:a7:53:5f:5e:cd:4f:23:
64:9b:9f:5f:c1:8f:5b:54:09:8b:f0:13:79:ab:be:
7c:db:c6:7e:60:b2:50:3b:ba:76:2d:20:55:2f:24:
d9:b4:67:a0:3e:2c:eb:68:e0:23:d8:a7:a5:c0:58:
50:5d:ef:c0:dd:53:1b:db:b6:e2:7c:e7:81:d8:43:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:02:2B:87:8B:AD:B9:BE:FB:E6:CF:F7:D0:95:6D:1D:20:07:76:04
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f1:af:98:e5:e8:ad:6d:9f:4d:cd:69:00:6c:76:93:c1:b2:
fd:b4:17:57:ba:e6:85:f6:f7:fe:07:67:fc:81:08:1f:f2:f2:
1e:1f:27:0a:03:33:e6:23:73:37:19:d3:30:7e:14:d7:72:a1:
d5:9b:4c:ef:0a:a6:38:95:2e:6e:2b:3e:5d:6a:2d:ff:b9:00:
6f:66:3d:38:85:b6:7b:48:54:33:fa:be:37:26:5d:4f:f7:f5:
ee:53:6c:3f:73:9d:db:06:2c:a6:55:ed:1f:e0:43:14:61:de:
70:81:98:74:55:5e:37:f1:1e:a4:1a:bd:f0:3e:9c:c4:e8:3f:
60:e4:7c:5a:53:97:4b:a2:9e:05:57:7c:3c:ce:0b:b7:7d:81:
99:72:6e:db:b4:52:1a:0e:6e:ad:bd:37:3a:15:16:e5:b1:0b:
45:ab:28:e5:f0:b5:7f:50:65:e1:c5:26:74:77:c9:c1:f7:fd:
79:f4:fe:25:96:ee:a7:80:f4:e3:0b:25:af:1f:d4:0c:ff:f2:
24:7a:49:6c:17:e6:80:d7:f5:27:99:3e:02:0d:14:97:50:a7:
04:44:6a:b8:0e:12:43:6c:10:ad:49:95:73:26:23:71:1d:dd:
db:ff:94:73:34:20:5f:bb:36:c0:8c:f5:33:f0:28:47:c7:98:
c6:3c:54:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdq4RvXhGwX3nfZjWRbQAxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZDBhNWY0ZThmN2UxM2M3Y2I1MzVjNjRmNzllMjBiM2Yw
MWQ2MjQwHhcNMjUwNjEzMjAwMDI2WhcNMjUwNjE0MjAwMDI2WjAzMTEwLwYDVQQD
EygyNjAyMmI4NzhiYWRiOWJlZmJlNmNmZjdkMDk1NmQxZDIwMDc3NjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoNNOWC2KB9vziTuq84H7tj1fakd
/SNWArnXo+dgrm0hjo8Um/Y2Xyukj3sj7gUROh2hDjfXG6YxTZrQJYXlhhw4J94R
Q678LyUBKu51Y8jWuRZPHECA2ZRT6Yk0hPkke3m5HpZcIjKkrikRKfDyy2Nx2liu
0DpuCEBHhCy9Nwuebs+XH0svUieqXR2fMsvh3BeYhtP3+udV7uYnhea+Sxun13w7
+Eo4TPWFr1BUnmQ7fRwlWfsSGEQO9qdTX17NTyNkm59fwY9bVAmL8BN5q75828Z+
YLJQO7p2LSBVLyTZtGegPizraOAj2KelwFhQXe/A3VMb27bifOeB2EPjuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYCK4eLrbm+++bP99CVbR0gB3YEMB8GA1UdIwQY
MBaAFKrQpfTo9+E8fLU1xk954gs/AdYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMt
YjdlZjA0MmM4NTdiLzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xMDFhMTUtZWYzZC00MTU1LWJmMTMtYjdlZjA0MmM4NTdi
LzEvcXRDbDlPajM0VHg4dFRYR1QzbmlDejhCMWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/GvmOXo
rW2fTc1pAGx2k8Gy/bQXV7rmhfb3/gdn/IEIH/LyHh8nCgMz5iNzNxnTMH4U13Kh
1ZtM7wqmOJUubis+XWot/7kAb2Y9OIW2e0hUM/q+NyZdT/f17lNsP3Od2wYsplXt
H+BDFGHecIGYdFVeN/EepBq98D6cxOg/YOR8WlOXS6KeBVd8PM4Lt32BmXJu27RS
Gg5urb03OhUW5bELRaso5fC1f1Bl4cUmdHfJwff9efT+JZbup4D04wslrx/UDP/y
JHpJbBfmgNf1J5k+Ag0Ul1CnBERquA4SQ2wQrUmVcyYjcR3d2/+UczQgX7s2wIz1
M/AoR8eYxjxUdQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 23:51:37 2025 by rpki-client