
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: axlvoDBQspX4sYMuL/os4qWkrutNbAeUqdUJ9zE4F/4=
Subject key identifier: 7E:6C:46:18:F9:E2:AA:69:A4:B8:30:0E:3D:83:82:71:45:F9:C7:7E
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 019759B6E0F743507A3FF682021CD9A46798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1547
Signing time: Tue 10 Jun 2025 12:00:46 +0000
Manifest this update: Tue 10 Jun 2025 12:00:46 +0000
Manifest next update: Wed 11 Jun 2025 12:00:46 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: upXzBDcqVF5jnAra4Z/iq6PKv+xpHD7bXDR63wYrn/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:e0:f7:43:50:7a:3f:f6:82:02:1c:d9:a4:67:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jun 10 12:00:46 2025 GMT
Not After : Jun 11 12:00:46 2025 GMT
Subject: CN=7e6c4618f9e2aa69a4b8300e3d83827145f9c77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:df:d9:77:7d:94:7d:02:5c:11:19:b9:36:
d1:99:ed:87:76:6c:fc:ec:2c:67:be:61:7b:6d:4c:
7c:ea:a3:1b:bb:a0:67:aa:53:b8:60:0e:fc:16:f6:
ed:f3:c4:f4:be:df:84:e2:3f:97:6a:c2:7b:12:40:
8d:65:76:e5:38:6d:48:a6:a0:18:0d:46:17:bd:ce:
39:72:dc:9c:55:80:c6:3f:90:d7:db:62:9c:4a:06:
99:2e:9c:8b:fa:3b:78:f5:c2:bb:9b:2d:d0:6f:a6:
86:a2:c8:25:80:a0:a6:26:fc:f3:a3:1c:79:37:25:
23:f8:24:4c:42:01:8f:35:7e:e5:02:9b:3f:95:2b:
9f:cc:67:94:83:a0:b2:f4:f4:fa:41:6b:5d:ef:14:
b5:bf:eb:87:5b:c2:0d:bd:61:7f:e4:95:c2:a0:e1:
2e:66:4b:77:14:b5:6c:3d:ce:e7:f6:f9:e7:9a:51:
ce:21:c1:34:25:d2:43:ba:27:1b:f5:8c:27:56:8b:
18:10:b1:e2:37:66:5c:4b:e3:26:0a:12:75:6f:88:
35:18:c5:03:bc:4a:ce:b4:ee:7e:a5:05:eb:c3:49:
a4:db:41:3b:a5:a6:33:df:b8:b8:9d:51:14:14:72:
85:68:70:d4:f5:af:7c:82:cf:93:f5:5e:e3:53:8a:
ea:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6C:46:18:F9:E2:AA:69:A4:B8:30:0E:3D:83:82:71:45:F9:C7:7E
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ac:f0:4c:f4:12:d1:0f:eb:15:45:68:c7:7d:94:4f:cc:00:
4b:ba:01:08:e7:15:1b:4b:42:d5:36:52:96:00:4f:b2:49:de:
f6:aa:80:6e:c3:a5:36:8d:32:79:89:61:1a:6c:fc:ac:07:30:
6d:2a:6e:33:30:45:9d:cb:fc:14:89:9a:30:56:6f:2f:45:b7:
37:f1:fc:94:e2:f1:67:d8:ac:8f:56:9d:e7:ce:a4:36:32:9a:
6d:1d:41:68:4f:90:3a:43:4a:53:1c:9f:ff:af:f1:34:ef:52:
31:b5:82:d8:ec:40:5b:f1:d9:9f:ca:19:3b:1f:1d:2e:69:e2:
da:5b:a1:f2:f5:27:f0:85:2c:c0:7a:97:49:c7:0a:22:17:29:
4f:b9:bd:61:a6:37:27:8b:3d:f3:34:5a:3d:6f:c6:f5:de:7d:
ed:92:6b:9f:72:54:62:b9:ba:ad:eb:a0:50:27:29:9c:b1:a9:
84:9d:44:a5:51:04:37:03:30:8e:dc:35:15:7b:3a:bc:59:84:
5c:43:43:99:fb:5d:76:ea:d9:48:ee:57:16:c7:73:be:f1:7c:
da:7c:9e:a6:f3:fe:ec:51:a9:4f:a8:d3:35:43:bd:4e:99:53:
43:b5:2b:88:e2:d7:c0:52:db:37:19:68:2e:1a:1c:e8:22:4d:
1c:20:d3:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZtuD3Q1B6P/aCAhzZpGeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjUwNjEwMTIwMDQ2WhcNMjUwNjExMTIwMDQ2WjAzMTEwLwYDVQQD
Eyg3ZTZjNDYxOGY5ZTJhYTY5YTRiODMwMGUzZDgzODI3MTQ1ZjljNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPbf2Xd9lH0CXBEZuTbRme2Hdmz8
7CxnvmF7bUx86qMbu6BnqlO4YA78Fvbt88T0vt+E4j+XasJ7EkCNZXblOG1IpqAY
DUYXvc45ctycVYDGP5DX22KcSgaZLpyL+jt49cK7my3Qb6aGosglgKCmJvzzoxx5
NyUj+CRMQgGPNX7lAps/lSufzGeUg6Cy9PT6QWtd7xS1v+uHW8INvWF/5JXCoOEu
Zkt3FLVsPc7n9vnnmlHOIcE0JdJDuicb9YwnVosYELHiN2ZcS+MmChJ1b4g1GMUD
vErOtO5+pQXrw0mk20E7paYz37i4nVEUFHKFaHDU9a98gs+T9V7jU4rqGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5sRhj54qpppLgwDj2DgnFF+cd+MB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKzwTPQS
0Q/rFUVox32UT8wAS7oBCOcVG0tC1TZSlgBPskne9qqAbsOlNo0yeYlhGmz8rAcw
bSpuMzBFncv8FImaMFZvL0W3N/H8lOLxZ9isj1ad586kNjKabR1BaE+QOkNKUxyf
/6/xNO9SMbWC2OxAW/HZn8oZOx8dLmni2luh8vUn8IUswHqXSccKIhcpT7m9YaY3
J4s98zRaPW/G9d597ZJrn3JUYrm6reugUCcpnLGphJ1EpVEENwMwjtw1FXs6vFmE
XENDmftddurZSO5XFsdzvvF82nyepvP+7FGpT6jTNUO9TplTQ7UriOLXwFLbNxlo
Lhoc6CJNHCDTaQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:16:02 2025 by rpki-client