Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: 19HeDlbyGhac14yHKH8GXavKfsNr4Lprf5oA5UAgMAE=
Subject key identifier: 05:D4:08:37:DD:2E:37:09:73:16:59:D4:4D:F3:D2:40:2D:5B:0A:53
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019755D9E92AD710F0A036358B5D7934478C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1545
Signing time: Mon 09 Jun 2025 18:00:33 +0000
Manifest this update: Mon 09 Jun 2025 18:00:33 +0000
Manifest next update: Tue 10 Jun 2025 18:00:33 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: iXkpOefzLdkwa8f3ZIS2UWLzGLsOdSXFJu/mKWPK32I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:d9:e9:2a:d7:10:f0:a0:36:35:8b:5d:79:34:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jun 9 18:00:33 2025 GMT
Not After : Jun 10 18:00:33 2025 GMT
Subject: CN=05d40837dd2e3709731659d44df3d2402d5b0a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:d2:d4:5b:18:54:2b:08:fc:a4:40:4f:eb:
00:33:c5:27:d2:29:94:4e:79:43:b7:0d:80:94:2e:
fe:f9:3c:36:73:eb:7d:fc:a8:2f:d1:2e:03:e4:e2:
04:97:16:95:0f:a1:e9:a5:74:d2:c5:52:8c:85:3e:
3c:28:42:86:ca:e0:fc:63:b5:93:8f:99:20:56:5f:
ab:3e:fa:d5:0c:be:03:31:59:a0:d8:74:e4:31:3d:
cd:71:86:f1:69:8f:e4:56:c4:ad:c9:6d:68:64:01:
50:fc:52:17:ad:e8:b1:a4:2e:e1:e9:b6:b2:66:f8:
91:6b:90:18:f8:56:80:59:c4:bd:17:f7:9b:17:ff:
55:66:3a:57:fa:dc:97:f9:dd:2e:58:ca:ec:e9:d1:
90:e8:17:e2:a1:ed:b9:1f:44:e6:fe:ec:28:89:9d:
bc:05:71:97:de:66:07:4f:c5:06:ee:a8:26:84:24:
11:a6:50:d7:3c:5b:a5:6e:23:97:7a:fc:ef:08:73:
5e:4b:45:df:c7:c2:04:91:c5:2f:65:e0:84:86:f1:
3f:e3:04:9d:22:9f:4f:55:e7:8d:c9:69:c1:5d:b1:
c6:cd:7b:cb:24:ab:f7:29:fd:1d:8c:11:7c:72:e9:
2d:50:b6:35:8e:c1:48:b1:63:b9:fb:98:ca:2d:16:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:08:37:DD:2E:37:09:73:16:59:D4:4D:F3:D2:40:2D:5B:0A:53
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b3:0c:cd:bf:4e:2c:d6:0b:47:2b:bf:e1:cb:6b:fb:63:40:
c5:34:d1:03:4e:42:b0:c2:f4:de:0d:ba:ca:5b:e1:f6:74:4c:
fe:5c:f0:34:a5:1a:23:ec:31:6d:32:df:96:08:04:49:b3:ee:
d6:dd:6d:2d:e4:dd:66:19:ab:fa:b2:36:fc:16:81:f4:b9:60:
7d:75:f5:ca:38:6e:34:77:d6:16:1f:e6:3f:8f:2c:62:05:7a:
0a:ab:6c:9e:27:34:80:b1:21:19:87:93:19:9b:be:4b:a9:1e:
23:b3:c6:9b:d8:85:f7:e9:1c:97:7e:da:e1:9f:55:84:14:04:
9e:9c:f6:c3:5c:cc:64:d0:c9:a4:18:2a:78:6d:5e:5f:b6:b1:
93:34:68:e0:bf:3a:29:0a:72:09:65:26:b1:5d:b3:12:d7:20:
56:94:c2:7d:7c:fa:ee:7d:d7:bb:2c:31:5c:bc:27:c9:a1:25:
44:fa:82:b2:8f:18:22:a2:65:18:d8:ab:e4:bb:e5:26:20:81:
40:7f:a1:3c:86:ac:89:cf:6f:f0:36:72:92:4a:70:18:b4:36:
c4:2a:65:c4:4e:72:69:54:10:2d:02:10:64:af:b8:7b:db:a0:
21:e5:2a:d9:1a:b5:8e:12:5b:65:f9:66:98:7b:f8:a6:5b:78:
7c:c3:92:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdV2ekq1xDwoDY1i115NEeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjUwNjA5MTgwMDMzWhcNMjUwNjEwMTgwMDMzWjAzMTEwLwYDVQQD
EygwNWQ0MDgzN2RkMmUzNzA5NzMxNjU5ZDQ0ZGYzZDI0MDJkNWIwYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58HS1FsYVCsI/KRAT+sAM8Un0imU
TnlDtw2AlC7++Tw2c+t9/Kgv0S4D5OIElxaVD6HppXTSxVKMhT48KEKGyuD8Y7WT
j5kgVl+rPvrVDL4DMVmg2HTkMT3NcYbxaY/kVsStyW1oZAFQ/FIXreixpC7h6bay
ZviRa5AY+FaAWcS9F/ebF/9VZjpX+tyX+d0uWMrs6dGQ6Bfioe25H0Tm/uwoiZ28
BXGX3mYHT8UG7qgmhCQRplDXPFulbiOXevzvCHNeS0Xfx8IEkcUvZeCEhvE/4wSd
Ip9PVeeNyWnBXbHGzXvLJKv3Kf0djBF8cuktULY1jsFIsWO5+5jKLRbWfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXUCDfdLjcJcxZZ1E3z0kAtWwpTMB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALMMzb9O
LNYLRyu/4ctr+2NAxTTRA05CsML03g26ylvh9nRM/lzwNKUaI+wxbTLflggESbPu
1t1tLeTdZhmr+rI2/BaB9LlgfXX1yjhuNHfWFh/mP48sYgV6Cqtsnic0gLEhGYeT
GZu+S6keI7PGm9iF9+kcl37a4Z9VhBQEnpz2w1zMZNDJpBgqeG1eX7axkzRo4L86
KQpyCWUmsV2zEtcgVpTCfXz67n3XuywxXLwnyaElRPqCso8YIqJlGNir5LvlJiCB
QH+hPIasic9v8DZykkpwGLQ2xCplxE5yaVQQLQIQZK+4e9ugIeUq2Rq1jhJbZflm
mHv4plt4fMOSOA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 23:45:23 2025 by rpki-client