Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
File: QhUNRjwyZnxqkpbI0luzg89BnGE.mft (raw, json)
Hash identifier: AF9X5/TARFZanl8J6MPUQbDhdMbciJI2VCePyFp7+FQ=
Subject key identifier: 7D:DD:8B:7E:E3:AF:FE:9D:FD:20:02:5F:E5:3A:6D:F0:C0:91:A3:DE
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Certificate issuer: /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial: 019749D585E09BB303183DD32DED6C4DB938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
Manifest number: 064D
Signing time: Sat 07 Jun 2025 10:00:19 +0000
Manifest this update: Sat 07 Jun 2025 10:00:19 +0000
Manifest next update: Sun 08 Jun 2025 10:00:19 +0000
Files and hashes: 1: Bp4qLW_d2xv29JFgn3s_eUDmzmU.roa (hash: 02V3u2HhlDHRSQCBXJk0WRbtuRTj5NgREYz36Htp320=)
2: J_D_McsIAYG4K4qwpFvyYN6VTDA.roa (hash: 33+T5SyX5kOoXI4lKmyjOT5etiOFVcur6gliVhon8Wc=)
3: QhUNRjwyZnxqkpbI0luzg89BnGE.crl (hash: eTc8JS18d6XDJ1qezwbx4f6H+wRGTZU2Y/IgZOk3kuM=)
4: VnpwcypF5ODc6lvqbRhNE3ybCw4.roa (hash: drIuURHVLM+Rrj256cdJyU4lGxE6mwl5FZTlOzb2kc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:85:e0:9b:b3:03:18:3d:d3:2d:ed:6c:4d:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
Validity
Not Before: Jun 7 10:00:19 2025 GMT
Not After : Jun 8 10:00:19 2025 GMT
Subject: CN=7ddd8b7ee3affe9dfd20025fe53a6df0c091a3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:48:79:3a:42:8e:67:9f:7c:3f:8f:c8:e8:
88:c8:21:36:fd:3e:30:ce:ae:ab:5d:30:ab:0f:a9:
43:29:8e:07:81:41:1a:c3:42:8b:03:44:11:3b:be:
6e:02:2b:33:30:50:07:b3:18:fb:58:5a:e1:cf:e4:
ff:29:c0:37:96:05:db:c0:2e:1b:76:2e:8d:72:37:
1c:48:1d:b0:46:05:a5:4d:33:a6:2e:61:3e:24:e5:
17:e1:2a:f3:91:92:9a:2a:d6:09:9a:5d:3a:4e:23:
47:62:50:40:46:b7:b2:e5:96:f5:d3:6c:e6:ec:85:
04:3e:0b:84:6e:df:00:b5:3e:d5:c4:ac:96:d1:3c:
90:de:2b:df:c5:64:ce:b5:7c:41:26:41:ea:25:1e:
b6:e6:1e:6b:bf:77:4e:60:4c:13:07:52:6e:7a:1a:
d7:fd:6d:2f:02:6d:e3:27:3a:5e:3c:0b:65:58:32:
ee:dd:fd:68:8d:6d:b9:8b:54:ef:c3:8c:4d:b5:4e:
fa:f1:d7:17:a4:8d:cd:49:f8:d0:c9:a5:5b:07:cf:
df:cb:2b:92:9f:0d:19:f3:87:d4:17:3f:82:d2:73:
d0:b4:c4:2a:9a:83:72:28:26:dc:6f:74:4c:b3:55:
b6:4c:95:20:9c:d8:3e:95:c0:94:09:88:44:d0:e5:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:8B:7E:E3:AF:FE:9D:FD:20:02:5F:E5:3A:6D:F0:C0:91:A3:DE
X509v3 Authority Key Identifier:
keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:29:5e:ba:fa:ff:12:d2:64:a1:f0:09:d1:d3:30:c6:b5:35:
1d:51:09:14:b9:8b:62:6f:9c:93:60:03:7b:60:2a:a9:63:03:
8d:54:27:80:09:f5:7e:45:17:32:80:6a:6d:b0:45:0f:8b:45:
f7:75:d6:62:38:59:89:d7:16:83:a9:06:ae:da:11:c8:af:61:
12:e6:87:aa:09:1e:18:24:9d:f4:df:98:53:b9:1b:52:ba:77:
7a:b7:e6:86:b2:d4:6f:cf:6b:90:d3:27:45:39:9a:e0:27:ad:
f0:46:93:46:d4:8e:5a:d4:79:32:e1:af:c7:25:ce:78:a2:9f:
d8:df:b2:6d:cd:28:34:02:ec:1b:c0:e5:1d:dd:15:b9:a8:8e:
bd:c8:0b:67:19:2a:6a:77:51:62:49:3a:27:1c:ac:f3:4e:b8:
c6:b4:c6:ae:fc:34:f6:e9:b9:9a:4c:2b:e9:ab:5b:56:b1:13:
c1:cc:f8:51:10:4f:3b:c7:81:d1:6b:17:a1:a2:25:7f:47:d0:
b8:0f:82:f8:07:f2:07:8f:22:df:77:d2:f6:c6:24:51:0a:6c:
3c:3e:b2:84:bb:cb:f3:95:42:3a:94:10:d4:58:d4:45:43:b3:
cf:51:eb:e9:70:56:90:bb:c4:42:45:ce:64:af:5d:7c:c1:3c:
98:46:86:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1YXgm7MDGD3TLe1sTbk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTUwZDQ2M2MzMjY2N2M2YTkyOTZjOGQyNWJiMzgzY2Y0
MTljNjEwHhcNMjUwNjA3MTAwMDE5WhcNMjUwNjA4MTAwMDE5WjAzMTEwLwYDVQQD
Eyg3ZGRkOGI3ZWUzYWZmZTlkZmQyMDAyNWZlNTNhNmRmMGMwOTFhM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi9IeTpCjmeffD+PyOiIyCE2/T4w
zq6rXTCrD6lDKY4HgUEaw0KLA0QRO75uAiszMFAHsxj7WFrhz+T/KcA3lgXbwC4b
di6NcjccSB2wRgWlTTOmLmE+JOUX4SrzkZKaKtYJml06TiNHYlBARrey5Zb102zm
7IUEPguEbt8AtT7VxKyW0TyQ3ivfxWTOtXxBJkHqJR625h5rv3dOYEwTB1JuehrX
/W0vAm3jJzpePAtlWDLu3f1ojW25i1Tvw4xNtU768dcXpI3NSfjQyaVbB8/fyyuS
nw0Z84fUFz+C0nPQtMQqmoNyKCbcb3RMs1W2TJUgnNg+lcCUCYhE0OWXhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3di37jr/6d/SACX+U6bfDAkaPeMB8GA1UdIwQY
MBaAFEIVDUY8MmZ8apKWyNJbs4PPQZxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhVTlJqd3labnhxa3BiSTBsdXpnODlCbkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wNzlmNjctNThmNy00YmQ4LWI3ZGIt
YmUyNjdlNmExNmQ4LzEvUWhVTlJqd3labnhxa3BiSTBsdXpnODlCbkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wNzlmNjctNThmNy00YmQ4LWI3ZGItYmUyNjdlNmExNmQ4
LzEvUWhVTlJqd3labnhxa3BiSTBsdXpnODlCbkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyleuvr/
EtJkofAJ0dMwxrU1HVEJFLmLYm+ck2ADe2AqqWMDjVQngAn1fkUXMoBqbbBFD4tF
93XWYjhZidcWg6kGrtoRyK9hEuaHqgkeGCSd9N+YU7kbUrp3erfmhrLUb89rkNMn
RTma4Cet8EaTRtSOWtR5MuGvxyXOeKKf2N+ybc0oNALsG8DlHd0VuaiOvcgLZxkq
andRYkk6Jxys8064xrTGrvw09um5mkwr6atbVrETwcz4URBPO8eB0WsXoaIlf0fQ
uA+C+AfyB48i33fS9sYkUQpsPD6yhLvL85VCOpQQ1FjURUOzz1Hr6XBWkLvEQkXO
ZK9dfME8mEaGYw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:01 2025 by rpki-client