Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: JdVcXYROZ+JiXssltYb0/IWMY+aq4FBq8ohyO9zRS9c=
Subject key identifier: 2E:07:35:E3:C2:6E:33:B3:7C:4B:DC:05:61:68:85:9C:29:14:89:89
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01975DCB40AB0900BB6C6BA5949C2FC531F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1391
Signing time: Wed 11 Jun 2025 07:01:30 +0000
Manifest this update: Wed 11 Jun 2025 07:01:30 +0000
Manifest next update: Thu 12 Jun 2025 07:01:30 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: CwdestuQKegUwGrR4T4pLXWKHd32Z3tt8V1dDQz6xbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:40:ab:09:00:bb:6c:6b:a5:94:9c:2f:c5:31:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Jun 11 07:01:30 2025 GMT
Not After : Jun 12 07:01:30 2025 GMT
Subject: CN=2e0735e3c26e33b37c4bdc056168859c29148989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:dd:e4:0f:33:51:b6:a1:11:b3:8b:64:c1:
0f:c7:0e:62:8a:1d:41:2d:7a:06:0b:f3:00:b5:d4:
55:10:13:24:3d:25:32:7e:20:45:0c:36:d3:f5:2f:
60:05:bb:78:46:13:4c:69:ce:cd:8c:97:f1:38:4e:
7b:55:b1:3f:a4:44:2b:00:34:f5:c4:03:4e:bc:a0:
b7:73:41:e5:7e:6d:d7:d5:dc:22:1c:fa:20:57:54:
26:d6:68:20:f9:d8:d5:0d:3c:c1:d2:94:bb:cb:11:
af:4e:30:3c:6a:0b:86:97:1a:4c:f3:05:9f:e2:b3:
ae:b7:ef:97:c8:a7:23:13:7f:df:ed:75:9d:47:b0:
ee:00:35:ae:ee:71:88:3c:58:9a:36:1c:57:81:3c:
36:30:99:ab:ca:e8:f1:6f:97:20:08:3d:5e:0e:f1:
e1:4e:8d:e0:26:71:22:74:6b:9e:87:d6:2f:92:02:
fc:05:6e:98:4a:11:cc:f6:21:51:f2:e4:ca:01:df:
d8:33:7d:da:0f:9e:14:75:5b:60:8b:52:fc:c8:ff:
94:ee:f0:ed:a4:17:4a:f6:43:11:6f:54:4d:79:33:
3c:b6:39:a5:42:48:63:96:be:54:ec:7d:a0:44:1a:
04:74:b3:76:b5:f9:42:99:7b:c2:d9:a7:1d:43:96:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:07:35:E3:C2:6E:33:B3:7C:4B:DC:05:61:68:85:9C:29:14:89:89
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:92:ca:0c:d3:34:97:e7:25:a4:30:c2:9b:3e:da:47:c8:
8a:a6:42:34:15:b1:7e:81:5c:2a:6e:07:3a:6f:0e:da:42:67:
4f:14:11:ce:3d:59:1d:d2:56:cb:74:12:f1:ea:45:11:3b:67:
65:04:7e:bf:85:a7:57:d6:cc:68:46:3f:58:d4:90:22:1e:32:
38:fb:b3:cb:2b:e3:5e:02:6f:cc:bc:8a:52:ad:59:77:2c:f2:
93:af:f4:1d:48:e8:81:74:6c:4b:ac:18:a0:0c:95:c2:e9:11:
c2:49:41:97:65:85:28:ed:58:b2:cc:aa:09:e0:14:b0:a5:b4:
49:10:58:25:33:16:1c:79:3a:54:57:6b:14:2b:f0:77:f3:cd:
ff:0e:e2:31:64:5a:f5:9b:6c:68:d6:c8:d0:39:ed:b6:d2:c8:
10:a3:99:e0:16:1e:4f:fb:12:4e:a1:a9:dc:05:11:17:f9:47:
83:88:c0:e3:e4:ff:53:5e:b3:cb:c7:1d:8e:aa:b6:d2:d7:95:
7f:55:82:14:a0:40:86:08:d6:6d:4f:2a:28:30:9c:ed:30:4a:
e1:cb:14:66:04:76:08:2a:08:18:9d:36:74:e7:e8:03:01:54:
a0:04:07:f4:6b:c5:16:d5:1c:71:78:ab:d6:59:ac:4a:4f:55:
6c:88:ab:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddy0CrCQC7bGullJwvxTH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh
ZDQzNDIwHhcNMjUwNjExMDcwMTMwWhcNMjUwNjEyMDcwMTMwWjAzMTEwLwYDVQQD
EygyZTA3MzVlM2MyNmUzM2IzN2M0YmRjMDU2MTY4ODU5YzI5MTQ4OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3bd5A8zUbahEbOLZMEPxw5iih1B
LXoGC/MAtdRVEBMkPSUyfiBFDDbT9S9gBbt4RhNMac7NjJfxOE57VbE/pEQrADT1
xANOvKC3c0Hlfm3X1dwiHPogV1Qm1mgg+djVDTzB0pS7yxGvTjA8aguGlxpM8wWf
4rOut++XyKcjE3/f7XWdR7DuADWu7nGIPFiaNhxXgTw2MJmryujxb5cgCD1eDvHh
To3gJnEidGueh9YvkgL8BW6YShHM9iFR8uTKAd/YM33aD54UdVtgi1L8yP+U7vDt
pBdK9kMRb1RNeTM8tjmlQkhjlr5U7H2gRBoEdLN2tflCmXvC2acdQ5YbmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4HNePCbjOzfEvcBWFohZwpFImJMB8GA1UdIwQY
MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3iSygzT
NJfnJaQwwps+2kfIiqZCNBWxfoFcKm4HOm8O2kJnTxQRzj1ZHdJWy3QS8epFETtn
ZQR+v4WnV9bMaEY/WNSQIh4yOPuzyyvjXgJvzLyKUq1Zdyzyk6/0HUjogXRsS6wY
oAyVwukRwklBl2WFKO1YssyqCeAUsKW0SRBYJTMWHHk6VFdrFCvwd/PN/w7iMWRa
9ZtsaNbI0DntttLIEKOZ4BYeT/sSTqGp3AURF/lHg4jA4+T/U16zy8cdjqq20teV
f1WCFKBAhgjWbU8qKDCc7TBK4csUZgR2CCoIGJ02dOfoAwFUoAQH9GvFFtUccXir
1lmsSk9VbIirHQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 14:06:18 2025 by rpki-client