Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: JAHpTFpgOXcsoPaxJsSemnnKWANgj90WeeQJL6yN2jU=
Subject key identifier: FF:AF:C3:3A:5F:3D:A5:75:7D:92:1A:0D:CE:A8:C4:80:DE:71:64:21
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019747E74436D2109043DC09DA1662736758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0E7F
Signing time: Sat 07 Jun 2025 01:00:27 +0000
Manifest this update: Sat 07 Jun 2025 01:00:27 +0000
Manifest next update: Sun 08 Jun 2025 01:00:27 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: m2Bthde3no1oLHDS5gpo1G4k8kK+U5x92mXrFvoy/lI=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:44:36:d2:10:90:43:dc:09:da:16:62:73:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jun 7 01:00:27 2025 GMT
Not After : Jun 8 01:00:27 2025 GMT
Subject: CN=ffafc33a5f3da5757d921a0dcea8c480de716421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:01:28:07:3a:87:75:2f:38:bd:a0:51:c2:76:
21:f1:ae:2f:9b:7c:35:f5:02:f0:9b:ab:ca:c7:f8:
bb:02:ab:35:0e:d9:c3:7b:4d:e6:52:58:c2:b5:4e:
c5:f9:e8:d3:3b:55:3a:fb:7e:e0:b5:33:c9:3d:dd:
26:fc:cc:ac:f7:b7:c8:c1:8f:86:1a:ab:3c:47:57:
85:26:6f:0d:61:f9:91:90:e2:3c:5d:ac:04:88:1c:
25:f8:ce:2c:06:1d:50:f5:ae:e8:e8:25:9f:e2:bf:
67:63:ed:a6:e7:40:25:72:e7:60:87:1b:04:d4:2a:
32:b5:b7:0b:ed:10:8d:3d:38:0b:7b:5f:77:d8:06:
10:37:17:73:ee:10:b6:2d:3b:0b:98:29:2e:06:0d:
e8:1e:60:ec:7e:8e:d6:25:e4:90:44:32:5d:4a:7e:
65:09:30:a8:77:ca:34:ef:e3:54:65:7d:dc:75:77:
89:34:8d:0e:c9:bd:bd:78:6c:44:69:88:56:07:54:
88:fe:05:0e:79:22:2c:dd:dc:f4:57:c0:7d:c7:dc:
50:7f:d0:e0:54:74:f7:4f:05:30:74:b4:34:1d:8f:
c9:2c:10:42:10:1f:b1:5e:ab:13:74:3a:10:b5:2d:
a9:a8:0a:7a:18:ac:13:cf:6d:00:67:80:aa:2f:c0:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:C3:3A:5F:3D:A5:75:7D:92:1A:0D:CE:A8:C4:80:DE:71:64:21
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b3:47:2f:f4:da:b1:ef:25:ab:a8:92:1a:ed:70:c9:1e:8e:
43:bb:79:6b:92:d4:9a:07:eb:1d:a7:00:96:10:ae:9b:6c:7b:
2b:25:b0:46:c6:b8:6f:96:2f:ab:5c:0e:41:2f:8f:d6:58:1b:
c4:3a:be:d7:7b:97:6c:5d:4e:17:1e:2f:91:22:0c:60:c5:65:
4b:6d:6a:87:75:a7:d8:f2:91:f7:fd:b0:ac:9c:08:4f:8a:4d:
ae:78:86:64:86:c2:7e:2a:16:ca:7a:18:66:41:7b:f2:93:d0:
a9:91:6a:e6:07:4d:06:fd:75:b0:f5:de:84:68:81:2a:d3:c5:
87:ed:1f:58:92:54:dc:45:7e:ab:de:db:ed:e5:34:00:61:3d:
b8:22:18:d7:15:03:44:1d:bd:65:08:77:b6:54:b3:03:14:58:
4e:19:ca:d6:c4:5e:8d:3b:3d:69:db:e6:0c:0f:1e:00:27:ba:
e5:5f:1c:50:49:0a:39:32:e4:f5:12:b5:be:4e:5d:26:da:57:
6a:05:12:67:92:b2:27:c8:b1:ca:0d:7d:f1:55:fe:5e:50:23:
0f:11:13:56:9b:cf:6c:51:73:e4:25:76:5e:16:28:15:d2:89:
ad:58:9a:69:8a:78:79:38:4e:96:4e:61:54:18:d1:ee:06:ae:
76:95:e1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH50Q20hCQQ9wJ2hZic2dYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3
NmM1YTgwHhcNMjUwNjA3MDEwMDI3WhcNMjUwNjA4MDEwMDI3WjAzMTEwLwYDVQQD
EyhmZmFmYzMzYTVmM2RhNTc1N2Q5MjFhMGRjZWE4YzQ4MGRlNzE2NDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QEoBzqHdS84vaBRwnYh8a4vm3w1
9QLwm6vKx/i7Aqs1DtnDe03mUljCtU7F+ejTO1U6+37gtTPJPd0m/Mys97fIwY+G
Gqs8R1eFJm8NYfmRkOI8XawEiBwl+M4sBh1Q9a7o6CWf4r9nY+2m50AlcudghxsE
1CoytbcL7RCNPTgLe1932AYQNxdz7hC2LTsLmCkuBg3oHmDsfo7WJeSQRDJdSn5l
CTCod8o07+NUZX3cdXeJNI0Oyb29eGxEaYhWB1SI/gUOeSIs3dz0V8B9x9xQf9Dg
VHT3TwUwdLQ0HY/JLBBCEB+xXqsTdDoQtS2pqAp6GKwTz20AZ4CqL8A/jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+vwzpfPaV1fZIaDc6oxIDecWQhMB8GA1UdIwQY
MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt
NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4
LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbNHL/Ta
se8lq6iSGu1wyR6OQ7t5a5LUmgfrHacAlhCum2x7KyWwRsa4b5Yvq1wOQS+P1lgb
xDq+13uXbF1OFx4vkSIMYMVlS21qh3Wn2PKR9/2wrJwIT4pNrniGZIbCfioWynoY
ZkF78pPQqZFq5gdNBv11sPXehGiBKtPFh+0fWJJU3EV+q97b7eU0AGE9uCIY1xUD
RB29ZQh3tlSzAxRYThnK1sRejTs9advmDA8eACe65V8cUEkKOTLk9RK1vk5dJtpX
agUSZ5KyJ8ixyg198VX+XlAjDxETVpvPbFFz5CV2XhYoFdKJrViaaYp4eThOlk5h
VBjR7gaudpXhBw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:22:02 2025 by rpki-client