Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: x9K8iOgUvv4mf+RugkTNAyobmVcUFB0a4b/u00Ww3Mc=
Subject key identifier: 43:DB:51:D2:A2:C5:8B:73:FE:F1:BB:81:3E:07:10:E1:88:DE:A9:40
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 01976D065EE8EC9DB79983EC2AF84B425AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1551
Signing time: Sat 14 Jun 2025 06:00:23 +0000
Manifest this update: Sat 14 Jun 2025 06:00:23 +0000
Manifest next update: Sun 15 Jun 2025 06:00:23 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: t5nna7bVVU5dRTJCRzxHvd1zMBkDCwlZG8Zuq1Coi5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:5e:e8:ec:9d:b7:99:83:ec:2a:f8:4b:42:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jun 14 06:00:23 2025 GMT
Not After : Jun 15 06:00:23 2025 GMT
Subject: CN=43db51d2a2c58b73fef1bb813e0710e188dea940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:59:c6:85:6d:05:70:8b:99:7c:66:1f:de:
2a:50:7e:2c:9a:0b:6e:ae:86:de:c4:4d:83:cb:81:
82:d8:25:e4:8e:2f:4b:bd:7d:0a:95:11:1b:f6:ec:
9b:d9:93:a0:f3:5e:0f:ea:64:c4:53:fd:4a:ed:c7:
41:8b:37:ef:d0:86:7d:d9:52:1f:52:af:31:b1:3b:
fe:79:32:6b:33:ee:35:6e:08:f7:87:d5:f6:60:9a:
b8:3a:cf:bd:a6:9c:7e:68:91:62:03:cb:ae:a9:99:
8e:33:90:45:cb:9a:ba:7e:8a:d5:e0:e9:a9:c1:0c:
c9:34:a0:48:fc:84:33:20:c3:3a:a0:58:71:75:b1:
0f:07:4a:76:73:b1:d2:a9:84:3a:72:31:c8:49:ef:
a9:0a:9a:15:c8:ea:ed:94:73:11:3a:fb:77:43:b7:
fe:c3:5c:a9:4a:f0:1a:11:b6:da:7f:13:d5:e4:4f:
7d:e2:26:d8:75:cf:fb:f6:8b:4c:42:17:97:f0:a5:
9f:c6:98:f3:a8:57:66:eb:a1:c0:aa:bc:7d:27:e2:
4a:00:18:de:2d:a6:93:01:d5:6e:e9:09:82:cb:24:
3d:23:65:c4:4e:7f:59:bb:aa:f6:6d:ab:01:24:d3:
e2:19:a5:cc:4a:f7:b5:03:c4:53:8a:6d:18:00:0f:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DB:51:D2:A2:C5:8B:73:FE:F1:BB:81:3E:07:10:E1:88:DE:A9:40
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3c:e8:91:74:0f:eb:cc:6f:1b:e5:70:37:2b:2b:8a:80:02:
1f:b6:cb:f2:4a:d8:26:0d:0b:d4:ad:1f:8d:61:a7:17:07:e1:
77:83:30:0a:84:2b:7b:26:f4:64:04:6a:f2:41:d7:ec:58:ce:
ac:7d:57:ac:23:e7:b0:52:ea:53:5d:14:6f:34:e5:b9:9a:d7:
bc:c1:21:45:2a:a6:fb:59:a8:bb:46:c9:67:5f:21:af:e7:79:
9e:59:5e:09:ae:ad:22:e0:5e:72:9b:a8:63:85:d1:37:53:d7:
8b:b6:02:c9:4d:27:4f:10:04:45:7f:b1:f8:29:a5:0b:fd:fb:
7d:3e:3a:fd:4f:6e:d5:72:95:31:4b:06:84:96:7e:e7:c3:7e:
00:e4:b4:cf:5a:72:47:3c:36:8a:b9:e8:b8:d0:a5:be:6d:0f:
5a:48:d1:48:c8:57:30:2f:b5:6e:b3:da:56:13:c2:32:3b:01:
6b:a3:e1:6a:9f:bd:27:59:e0:b0:4f:d0:33:00:43:3c:52:60:
32:db:f8:97:be:ea:76:56:4f:47:9a:65:d6:fe:37:a5:1c:f9:
dd:de:59:ad:a3:e4:c4:f5:1b:2c:55:1b:19:5f:4c:73:90:e7:
f7:e8:25:01:d3:b1:6d:32:8a:20:2f:85:ff:a8:36:34:5c:c7:
2c:81:3e:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBl7o7J23mYPsKvhLQlquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjUwNjE0MDYwMDIzWhcNMjUwNjE1MDYwMDIzWjAzMTEwLwYDVQQD
Eyg0M2RiNTFkMmEyYzU4YjczZmVmMWJiODEzZTA3MTBlMTg4ZGVhOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaZZxoVtBXCLmXxmH94qUH4smgtu
robexE2Dy4GC2CXkji9LvX0KlREb9uyb2ZOg814P6mTEU/1K7cdBizfv0IZ92VIf
Uq8xsTv+eTJrM+41bgj3h9X2YJq4Os+9ppx+aJFiA8uuqZmOM5BFy5q6forV4Omp
wQzJNKBI/IQzIMM6oFhxdbEPB0p2c7HSqYQ6cjHISe+pCpoVyOrtlHMROvt3Q7f+
w1ypSvAaEbbafxPV5E994ibYdc/79otMQheX8KWfxpjzqFdm66HAqrx9J+JKABje
LaaTAdVu6QmCyyQ9I2XETn9Zu6r2basBJNPiGaXMSve1A8RTim0YAA882wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPbUdKixYtz/vG7gT4HEOGI3qlAMB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjzokXQP
68xvG+VwNysrioACH7bL8krYJg0L1K0fjWGnFwfhd4MwCoQreyb0ZARq8kHX7FjO
rH1XrCPnsFLqU10UbzTluZrXvMEhRSqm+1mou0bJZ18hr+d5nlleCa6tIuBecpuo
Y4XRN1PXi7YCyU0nTxAERX+x+CmlC/37fT46/U9u1XKVMUsGhJZ+58N+AOS0z1py
Rzw2irnouNClvm0PWkjRSMhXMC+1brPaVhPCMjsBa6Phap+9J1ngsE/QMwBDPFJg
Mtv4l77qdlZPR5pl1v43pRz53d5ZraPkxPUbLFUbGV9Mc5Dn9+glAdOxbTKKIC+F
/6g2NFzHLIE+og==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:15 2025 by rpki-client