Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: e0z5H9K8Bza1BFIvXu/zH8Bax3Fh1JetQ+TqGwOKOaI=
Subject key identifier: 6F:75:A2:92:BF:A9:BB:E5:54:66:23:F9:53:54:56:EF:17:2C:B8:AA
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 0199277C88A1B86FC9625DEFC22ACCD00998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1636
Signing time: Mon 08 Sep 2025 04:01:36 +0000
Manifest this update: Mon 08 Sep 2025 04:01:36 +0000
Manifest next update: Tue 09 Sep 2025 04:01:36 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: QzmBMbkgwoASy5uLXGgFI64dqvkP1kNthcWAodAwpWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7c:88:a1:b8:6f:c9:62:5d:ef:c2:2a:cc:d0:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Sep 8 04:01:36 2025 GMT
Not After : Sep 9 04:01:36 2025 GMT
Subject: CN=6f75a292bfa9bbe5546623f9535456ef172cb8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:bf:ed:b9:ff:34:7a:f6:84:11:f6:7a:0b:
56:66:0c:18:78:62:30:ad:3a:46:ea:33:2e:36:a2:
6a:90:4e:46:3c:ad:f8:16:94:d2:91:e7:88:24:de:
90:1e:53:f7:24:bc:43:52:ff:a2:0c:ba:7d:17:c7:
79:d5:43:54:52:ea:b1:3f:46:35:d6:e7:b0:48:83:
fe:fe:1f:4f:3a:ea:9c:aa:a2:71:f4:5d:51:b8:4b:
c9:d5:a5:9a:3d:16:c4:97:67:8f:d0:2e:f8:68:08:
98:eb:0e:05:87:3a:c1:8e:b6:1d:f0:b9:32:8e:f7:
9e:bd:3e:9d:7e:f2:39:47:6b:e9:5a:32:df:c1:37:
96:79:3f:db:41:87:f9:ce:9e:1f:05:2a:d3:07:6f:
e5:00:d6:9c:50:4f:8b:b7:45:b1:d8:96:c0:f2:09:
16:1f:a3:8e:b2:52:bc:d8:85:f6:ee:24:fb:6f:09:
0e:5a:33:fd:eb:bb:f9:20:bb:ec:4f:2e:00:5d:91:
9f:b0:5b:d5:e9:95:60:82:73:48:77:d3:4e:e5:3f:
08:ac:62:a2:dc:26:ae:de:f5:37:df:98:cc:64:37:
8b:cd:df:b0:96:7c:85:40:6f:7d:16:02:34:e7:ca:
54:cf:6f:4d:dc:92:eb:a2:96:02:b5:67:f7:34:a4:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:A2:92:BF:A9:BB:E5:54:66:23:F9:53:54:56:EF:17:2C:B8:AA
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:14:97:94:96:4f:d4:58:91:02:ef:a0:ac:72:26:0a:20:89:
6e:0a:10:37:5a:24:d1:c2:94:fe:fa:f4:9e:96:7e:b7:63:fb:
2a:37:b2:9f:81:05:d9:24:dd:fa:5e:27:e2:35:9b:a1:cb:ee:
f4:97:a5:a2:1d:ec:a8:be:02:66:a1:7a:81:e5:be:17:af:1a:
08:67:a2:ef:69:cc:64:47:01:32:14:dd:49:0c:27:f2:38:08:
23:ba:55:dc:39:b4:47:bf:06:ad:29:eb:f6:04:83:c6:ec:e4:
83:7d:7d:a7:cc:7b:cf:45:71:bf:d4:8d:a4:58:08:21:09:73:
f8:99:03:ff:79:72:15:37:99:c3:c8:cb:6b:d2:ae:e6:f9:8c:
fa:29:64:ad:0b:c8:01:11:b6:ce:d1:10:45:2a:c7:65:0b:dd:
d7:a8:84:2d:43:1d:a6:81:ce:c1:01:86:fe:a5:8d:58:d1:d7:
99:6f:c2:c2:80:2a:9b:51:92:11:5f:f5:72:0f:09:ce:f6:9f:
53:b2:a3:38:c2:de:82:19:85:ad:f8:e1:1f:41:3d:81:43:99:
01:0e:47:9b:ae:f2:76:90:0f:c3:61:c2:f7:46:2a:d2:9a:21:
99:89:c8:d3:d6:7b:7f:0f:41:91:62:04:bd:38:54:49:c8:c9:
c4:e4:0f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknfIihuG/JYl3vwirM0AmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjUwOTA4MDQwMTM2WhcNMjUwOTA5MDQwMTM2WjAzMTEwLwYDVQQD
Eyg2Zjc1YTI5MmJmYTliYmU1NTQ2NjIzZjk1MzU0NTZlZjE3MmNiOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lG/7bn/NHr2hBH2egtWZgwYeGIw
rTpG6jMuNqJqkE5GPK34FpTSkeeIJN6QHlP3JLxDUv+iDLp9F8d51UNUUuqxP0Y1
1uewSIP+/h9POuqcqqJx9F1RuEvJ1aWaPRbEl2eP0C74aAiY6w4FhzrBjrYd8Lky
jveevT6dfvI5R2vpWjLfwTeWeT/bQYf5zp4fBSrTB2/lANacUE+Lt0Wx2JbA8gkW
H6OOslK82IX27iT7bwkOWjP967v5ILvsTy4AXZGfsFvV6ZVggnNId9NO5T8IrGKi
3Cau3vU335jMZDeLzd+wlnyFQG99FgI058pUz29N3JLropYCtWf3NKTZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG91opK/qbvlVGYj+VNUVu8XLLiqMB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhSXlJZP
1FiRAu+grHImCiCJbgoQN1ok0cKU/vr0npZ+t2P7Kjeyn4EF2STd+l4n4jWbocvu
9Jeloh3sqL4CZqF6geW+F68aCGei72nMZEcBMhTdSQwn8jgII7pV3Dm0R78GrSnr
9gSDxuzkg319p8x7z0Vxv9SNpFgIIQlz+JkD/3lyFTeZw8jLa9Ku5vmM+ilkrQvI
ARG2ztEQRSrHZQvd16iELUMdpoHOwQGG/qWNWNHXmW/CwoAqm1GSEV/1cg8Jzvaf
U7KjOMLeghmFrfjhH0E9gUOZAQ5Hm67ydpAPw2HC90Yq0pohmYnI09Z7fw9BkWIE
vThUScjJxOQPLw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 13:49:01 2025 by rpki-client