Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: m0XpOKya+f+iOjw9OKsjUg4+/Dzf7OvH0cInvVPqSOI=
Subject key identifier: 4F:9C:2F:1C:C5:8C:CE:5F:5B:A0:4B:1C:AA:CE:B1:92:9D:7A:8C:6E
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 0197C8DDB9815EA2410073BA66A2C7244325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 0957
Signing time: Wed 02 Jul 2025 02:01:03 +0000
Manifest this update: Wed 02 Jul 2025 02:01:03 +0000
Manifest next update: Thu 03 Jul 2025 02:01:03 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: MtJ4pJ4PDqTOEIXGXVmo8b0Hd5Lx7etHA/Z70XTRtfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:dd:b9:81:5e:a2:41:00:73:ba:66:a2:c7:24:43:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Jul 2 02:01:03 2025 GMT
Not After : Jul 3 02:01:03 2025 GMT
Subject: CN=4f9c2f1cc58cce5f5ba04b1caaceb1929d7a8c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:04:c2:61:eb:05:c2:ed:8b:63:52:12:cf:
c7:a7:ba:e6:e4:79:01:f8:60:a4:a0:29:8e:82:0d:
b3:15:2d:3b:f0:0c:dd:a3:91:3f:b5:e5:a0:a0:fb:
5e:6d:92:47:57:45:40:c9:3e:0d:45:1a:1d:0d:b9:
c2:3f:24:7e:03:35:df:10:fc:9f:7a:8e:9c:38:9d:
ac:35:b2:de:c8:bd:86:95:da:0d:ea:67:12:f6:34:
fa:0c:c8:eb:08:6f:d8:12:36:79:95:7a:98:b9:9b:
7b:db:d8:94:44:b9:0a:9d:be:92:79:a4:f7:2d:7c:
98:f1:8a:8a:0e:63:f9:d2:33:57:72:c7:e2:54:4f:
09:dd:a3:c4:f5:de:35:8b:86:20:20:b1:a4:ec:1f:
44:dd:d8:54:58:92:12:c2:ae:87:06:40:b6:4d:db:
93:f7:e1:c7:c8:b9:8c:e6:bd:ef:20:e9:88:0a:fd:
ce:45:37:97:b8:f0:af:49:5a:8e:13:ba:af:2e:21:
14:25:81:59:70:3e:cf:d5:26:0f:d8:74:72:e4:8f:
39:69:ba:3f:c2:ef:10:30:e2:bc:3d:b1:77:ed:91:
46:a6:60:57:bc:26:4a:65:0f:36:c5:55:b2:b1:cd:
26:b1:99:0e:4c:a8:ed:cd:37:4e:58:dd:55:b1:51:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:2F:1C:C5:8C:CE:5F:5B:A0:4B:1C:AA:CE:B1:92:9D:7A:8C:6E
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:82:ff:b3:55:2c:04:54:ec:b0:de:08:39:a7:30:b4:7b:
29:e7:95:f0:9e:9b:19:a3:ea:37:b7:c5:a4:b4:f8:ec:66:b7:
1d:4f:16:63:b0:a5:d6:99:aa:c2:06:ff:a3:1d:79:21:c0:40:
55:67:7d:ae:42:e5:21:3c:6c:47:bc:46:1f:20:19:9a:f9:a8:
3b:bd:09:25:52:01:83:a7:fd:be:c6:f7:80:09:2f:d5:e6:21:
0c:33:a0:86:de:af:4c:c2:ce:2c:aa:80:75:ed:68:32:85:b5:
8b:78:e9:b3:4b:10:cf:ba:f8:c5:96:6f:3a:43:21:a7:33:06:
5f:61:80:34:c5:3e:f7:35:e7:e9:e8:8d:67:21:6d:6e:2a:4a:
ba:c3:30:01:1b:1f:08:8c:e8:c7:ba:b1:fa:b6:7f:f6:af:36:
46:53:22:8f:a2:f2:10:72:62:c4:0c:12:ba:0d:80:5d:5d:33:
2e:f8:f2:29:55:f3:e1:1b:ea:9b:fb:61:11:e6:e7:48:17:c2:
eb:bc:b9:eb:7a:ec:59:81:4d:63:06:3e:7b:4c:a1:cd:39:c7:
51:98:a8:b5:a5:5a:2c:3c:23:88:f7:e3:a2:9d:08:36:6d:d2:
66:1b:0f:8e:56:d4:c4:59:c6:c0:0b:0e:19:e4:7f:6a:56:1b:
87:51:7d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfI3bmBXqJBAHO6ZqLHJEMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3
ZDliMzkwHhcNMjUwNzAyMDIwMTAzWhcNMjUwNzAzMDIwMTAzWjAzMTEwLwYDVQQD
Eyg0ZjljMmYxY2M1OGNjZTVmNWJhMDRiMWNhYWNlYjE5MjlkN2E4YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6oEwmHrBcLti2NSEs/Hp7rm5HkB
+GCkoCmOgg2zFS078Azdo5E/teWgoPtebZJHV0VAyT4NRRodDbnCPyR+AzXfEPyf
eo6cOJ2sNbLeyL2GldoN6mcS9jT6DMjrCG/YEjZ5lXqYuZt729iURLkKnb6SeaT3
LXyY8YqKDmP50jNXcsfiVE8J3aPE9d41i4YgILGk7B9E3dhUWJISwq6HBkC2TduT
9+HHyLmM5r3vIOmICv3ORTeXuPCvSVqOE7qvLiEUJYFZcD7P1SYP2HRy5I85abo/
wu8QMOK8PbF37ZFGpmBXvCZKZQ82xVWysc0msZkOTKjtzTdOWN1VsVFr+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+cLxzFjM5fW6BLHKrOsZKdeoxuMB8GA1UdIwQY
MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt
N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi
LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9uC/7NV
LARU7LDeCDmnMLR7KeeV8J6bGaPqN7fFpLT47Ga3HU8WY7Cl1pmqwgb/ox15IcBA
VWd9rkLlITxsR7xGHyAZmvmoO70JJVIBg6f9vsb3gAkv1eYhDDOght6vTMLOLKqA
de1oMoW1i3jps0sQz7r4xZZvOkMhpzMGX2GANMU+9zXn6eiNZyFtbipKusMwARsf
CIzox7qx+rZ/9q82RlMij6LyEHJixAwSug2AXV0zLvjyKVXz4Rvqm/thEebnSBfC
67y563rsWYFNYwY+e0yhzTnHUZiotaVaLDwjiPfjop0INm3SZhsPjlbUxFnGwAsO
GeR/alYbh1F9gQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:22:10 2025 by rpki-client