Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: 1tuigx4Ev56GmwbeUXsD09Md3NhLR5ps1/T6UmtJ/5s=
Subject key identifier: 48:D8:26:A6:35:66:AC:6F:C0:3D:59:38:1D:72:43:51:0A:72:67:A5
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 01974FD7B3D462B6FB1B0FBA1AB47005C389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 14:00:25 +0000
Manifest this update: Sun 08 Jun 2025 14:00:25 +0000
Manifest next update: Mon 09 Jun 2025 14:00:25 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: lmOIybDkNDg29pn/xp5K0WFeg8sU/8CIMJITeQfb/1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:b3:d4:62:b6:fb:1b:0f:ba:1a:b4:70:05:c3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Jun 8 14:00:25 2025 GMT
Not After : Jun 9 14:00:25 2025 GMT
Subject: CN=48d826a63566ac6fc03d59381d7243510a7267a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:ee:62:cb:b8:e7:78:dc:ff:99:a5:6a:34:
07:ee:46:cc:75:52:41:52:57:90:05:04:96:2b:5b:
3b:f7:53:92:56:9b:f1:50:fa:71:02:fb:36:52:25:
08:0a:36:67:fd:3a:4b:b5:16:5a:86:6e:9a:70:90:
d8:93:4c:f5:28:e9:fa:c1:15:b3:17:bd:c7:c5:db:
81:ec:ac:36:eb:ea:b5:5a:46:2e:63:62:dc:3b:69:
1c:95:f5:e7:ee:12:ea:6a:21:1e:9b:f8:2c:5e:a1:
99:bc:41:a5:6d:96:f3:07:6e:1a:a5:f3:76:d8:40:
48:2f:96:95:e1:c1:a7:9e:63:06:55:80:76:c1:cd:
a5:84:1d:22:d3:c5:98:e6:0a:15:ae:2b:9c:b1:03:
b1:3c:61:85:1d:66:10:99:c5:75:35:0f:58:07:48:
56:33:98:63:55:ce:2c:95:95:2c:fb:09:ee:4f:06:
b4:82:fa:46:d1:eb:25:58:11:5a:3e:d5:2d:3c:65:
69:0c:0d:c1:e4:9b:b1:da:fb:ff:98:a4:59:96:4d:
86:e0:30:8b:ea:41:3e:cd:8a:8e:a7:bf:83:7f:82:
1d:4a:07:38:48:ce:74:e7:78:56:86:93:26:ed:87:
59:50:61:a8:3f:28:a1:fd:57:07:d1:e6:97:30:84:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D8:26:A6:35:66:AC:6F:C0:3D:59:38:1D:72:43:51:0A:72:67:A5
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fc:b1:bf:65:78:4b:15:b2:bd:2a:69:c2:bf:3c:98:fd:a8:
7b:e2:2c:e9:e4:f3:d4:23:e3:df:d9:31:51:47:66:d0:21:64:
33:a6:93:7a:8e:82:6d:20:11:d4:ea:c1:fd:8f:30:00:6c:86:
7a:8c:ec:89:a9:9c:18:dc:23:6b:9d:c9:67:89:59:1d:66:48:
10:45:1c:9f:a4:6e:f8:7c:3b:3e:3f:af:1a:a1:7d:56:0e:81:
a8:f1:1b:96:6f:68:e3:b6:13:3f:c0:83:ee:72:29:06:1f:7a:
ee:34:d7:50:97:53:a1:ff:eb:fb:97:51:5a:82:7c:0f:0f:a5:
48:0d:29:54:31:e1:98:d0:9d:1f:9f:7b:c3:da:ca:ef:0e:ea:
8d:b0:38:be:b5:23:d3:fa:e0:69:38:f4:63:4e:a0:86:06:5a:
87:57:f6:c4:f4:36:20:56:56:f0:0f:ab:4f:36:51:b9:8d:cd:
c0:6d:99:da:91:5d:82:26:76:04:12:97:0a:65:52:6f:52:1b:
92:e3:75:1d:40:57:24:50:bc:7d:e0:bf:a1:a0:14:45:48:96:
a1:8b:15:c7:90:aa:38:f8:e7:5b:21:5e:51:66:ed:1d:33:b9:
cc:5c:e2:1c:c5:a8:1e:5e:99:b3:13:6c:15:8f:23:d0:4b:12:
04:7b:cc:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP17PUYrb7Gw+6GrRwBcOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhM2FlZDkxZjI5YjJjYzdkM2UwNWYyNDBkOTkxMzc1ODFk
OWI1YjMwHhcNMjUwNjA4MTQwMDI1WhcNMjUwNjA5MTQwMDI1WjAzMTEwLwYDVQQD
Eyg0OGQ4MjZhNjM1NjZhYzZmYzAzZDU5MzgxZDcyNDM1MTBhNzI2N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJHuYsu453jc/5mlajQH7kbMdVJB
UleQBQSWK1s791OSVpvxUPpxAvs2UiUICjZn/TpLtRZahm6acJDYk0z1KOn6wRWz
F73HxduB7Kw26+q1WkYuY2LcO2kclfXn7hLqaiEem/gsXqGZvEGlbZbzB24apfN2
2EBIL5aV4cGnnmMGVYB2wc2lhB0i08WY5goVriucsQOxPGGFHWYQmcV1NQ9YB0hW
M5hjVc4slZUs+wnuTwa0gvpG0eslWBFaPtUtPGVpDA3B5Jux2vv/mKRZlk2G4DCL
6kE+zYqOp7+Df4IdSgc4SM5053hWhpMm7YdZUGGoPyih/VcH0eaXMIQOCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjYJqY1ZqxvwD1ZOB1yQ1EKcmelMB8GA1UdIwQY
MBaAFKo67ZHymyzH0+BfJA2ZE3WB2bWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTBmNjMtZWY3YS00NjYyLWIwNDYt
MDRlMWViMmE5MzI4LzEvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My84ZTBmNjMtZWY3YS00NjYyLWIwNDYtMDRlMWViMmE5MzI4
LzEvcWpydGtmS2JMTWZUNEY4a0Raa1RkWUhadGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfyxv2V4
SxWyvSppwr88mP2oe+Is6eTz1CPj39kxUUdm0CFkM6aTeo6CbSAR1OrB/Y8wAGyG
eozsiamcGNwja53JZ4lZHWZIEEUcn6Ru+Hw7Pj+vGqF9Vg6BqPEblm9o47YTP8CD
7nIpBh967jTXUJdTof/r+5dRWoJ8Dw+lSA0pVDHhmNCdH597w9rK7w7qjbA4vrUj
0/rgaTj0Y06ghgZah1f2xPQ2IFZW8A+rTzZRuY3NwG2Z2pFdgiZ2BBKXCmVSb1Ib
kuN1HUBXJFC8feC/oaAURUiWoYsVx5CqOPjnWyFeUWbtHTO5zFziHMWoHl6ZsxNs
FY8j0EsSBHvMsw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:06:50 2025 by rpki-client