Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: jhAALXC3Lpmownu0KLpIGMZzWwFYNUZsJ/K71YJ9wAE=
Subject key identifier: 8E:62:F7:EF:C7:1F:8A:6A:F1:85:BA:C6:13:C9:4C:C7:4C:C3:D7:DF
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01976395F87101B569CC3E30B69939151D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1394
Signing time: Thu 12 Jun 2025 10:01:02 +0000
Manifest this update: Thu 12 Jun 2025 10:01:02 +0000
Manifest next update: Fri 13 Jun 2025 10:01:02 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: S+XKoSOulUK22YRVFv/f4Ui9E08QIpXiUjUvm40HfTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:f8:71:01:b5:69:cc:3e:30:b6:99:39:15:1d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 12 10:01:02 2025 GMT
Not After : Jun 13 10:01:02 2025 GMT
Subject: CN=8e62f7efc71f8a6af185bac613c94cc74cc3d7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:52:2e:4c:e5:59:71:55:48:4e:67:73:27:
a0:42:40:be:e4:0f:d6:1f:b8:83:20:44:d5:84:f6:
b7:a4:ba:e1:22:e2:f1:0e:fd:8f:48:bf:63:95:a9:
7e:d1:60:2f:ba:c4:78:75:2e:ab:72:2c:07:81:f0:
e6:22:79:30:29:8b:70:67:08:6c:f5:c8:00:24:ef:
b0:c9:4a:20:e5:04:74:51:23:f9:dd:44:03:d7:68:
04:8b:5b:39:61:a1:9f:f0:eb:96:ac:f7:9e:83:09:
aa:24:01:96:f5:6b:8b:52:5c:ea:98:3a:eb:73:cc:
ac:38:9b:fd:57:7c:a5:c9:19:8d:3f:2c:48:d1:8d:
31:48:a5:54:6b:f4:5e:28:44:62:be:70:3e:21:3b:
34:27:98:dd:96:f0:46:18:61:0e:df:b5:57:0a:b1:
05:2f:51:72:cd:9a:73:89:53:e8:a5:fe:34:ae:f3:
5f:5d:af:a5:06:98:bf:1b:d0:f1:75:e2:88:74:65:
ce:37:c0:ab:c2:38:7d:cf:b8:75:2c:e7:57:20:ef:
e4:b7:d3:99:ef:78:9f:33:ba:f7:e6:59:9b:68:be:
b0:2d:0c:ca:2c:a5:a1:5b:44:e8:ec:9d:3c:7e:8a:
83:d7:52:2b:29:b8:c7:ff:92:27:c1:ae:ff:47:d0:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:62:F7:EF:C7:1F:8A:6A:F1:85:BA:C6:13:C9:4C:C7:4C:C3:D7:DF
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:56:0f:27:65:8a:0e:89:01:e1:66:15:eb:26:8f:5f:d6:70:
72:c6:3a:da:03:d6:04:71:79:45:80:4c:92:0a:46:03:12:ac:
4d:7d:e7:53:09:fb:d4:7f:f7:0c:73:2b:b6:af:85:d1:90:a0:
6d:9c:f1:30:f3:d3:53:46:cb:1d:2a:c3:65:46:b0:86:23:b9:
bc:e3:ff:a2:be:99:02:17:c1:e6:99:ce:b7:4b:96:a3:35:7a:
af:49:c3:d1:40:01:a3:a2:0c:b1:1f:1c:01:d0:e9:f6:e8:f6:
19:88:68:f5:dc:2b:be:01:e2:53:90:06:27:e6:89:b4:41:c1:
7c:38:c6:cd:47:8e:6c:ab:74:8b:2c:f3:a4:d1:b7:61:12:95:
38:94:7c:fa:b6:41:4e:99:cc:68:15:ae:c4:38:e1:b5:81:6e:
81:9b:8d:07:88:b3:08:ed:1c:5d:d0:3c:3a:8a:da:32:03:60:
c0:96:eb:09:6c:dc:85:57:5a:9a:1c:6f:d1:f4:7e:28:38:ce:
28:2e:5e:46:db:e9:40:b7:1d:74:47:0e:56:37:6c:ef:43:f0:
c1:22:75:d3:2e:87:6a:63:b5:1e:1d:f5:b5:d5:12:8a:08:b8:
02:25:e3:a7:f7:52:cc:57:07:1e:b0:25:95:38:58:49:da:df:
70:b1:5c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjlfhxAbVpzD4wtpk5FR2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh
ZDQzNDIwHhcNMjUwNjEyMTAwMTAyWhcNMjUwNjEzMTAwMTAyWjAzMTEwLwYDVQQD
Eyg4ZTYyZjdlZmM3MWY4YTZhZjE4NWJhYzYxM2M5NGNjNzRjYzNkN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJdSLkzlWXFVSE5ncyegQkC+5A/W
H7iDIETVhPa3pLrhIuLxDv2PSL9jlal+0WAvusR4dS6rciwHgfDmInkwKYtwZwhs
9cgAJO+wyUog5QR0USP53UQD12gEi1s5YaGf8OuWrPeegwmqJAGW9WuLUlzqmDrr
c8ysOJv9V3ylyRmNPyxI0Y0xSKVUa/ReKERivnA+ITs0J5jdlvBGGGEO37VXCrEF
L1FyzZpziVPopf40rvNfXa+lBpi/G9DxdeKIdGXON8Crwjh9z7h1LOdXIO/kt9OZ
73ifM7r35lmbaL6wLQzKLKWhW0To7J08foqD11IrKbjH/5Inwa7/R9BEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5i9+/HH4pq8YW6xhPJTMdMw9ffMB8GA1UdIwQY
MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1YPJ2WK
DokB4WYV6yaPX9ZwcsY62gPWBHF5RYBMkgpGAxKsTX3nUwn71H/3DHMrtq+F0ZCg
bZzxMPPTU0bLHSrDZUawhiO5vOP/or6ZAhfB5pnOt0uWozV6r0nD0UABo6IMsR8c
AdDp9uj2GYho9dwrvgHiU5AGJ+aJtEHBfDjGzUeObKt0iyzzpNG3YRKVOJR8+rZB
TpnMaBWuxDjhtYFugZuNB4izCO0cXdA8OoraMgNgwJbrCWzchVdamhxv0fR+KDjO
KC5eRtvpQLcddEcOVjds70PwwSJ10y6HamO1Hh31tdUSigi4AiXjp/dSzFcHHrAl
lThYSdrfcLFcvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 14:10:10 2025 by rpki-client