Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: O6na9/CSyXHu0a04eZApgiX4XSI4RMxGTa0Tc0sXewI=
Subject key identifier: F7:4E:90:BA:80:F6:DC:3A:12:F8:D2:77:39:54:98:F7:92:C6:89:52
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 019882426F9312AE0D1025AAA9B98587A95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 02:00:48 +0000
Manifest this update: Thu 07 Aug 2025 02:00:48 +0000
Manifest next update: Fri 08 Aug 2025 02:00:48 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: 1Wsr6RiaiNmAHktIHCsNcZk9GuVzD4Kfs/6ry8lDYy0=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:42:6f:93:12:ae:0d:10:25:aa:a9:b9:85:87:a9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Aug 7 02:00:48 2025 GMT
Not After : Aug 8 02:00:48 2025 GMT
Subject: CN=f74e90ba80f6dc3a12f8d277395498f792c68952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:c5:54:94:b9:03:76:d5:c5:33:5f:0a:88:
5a:2c:bf:99:64:1f:a3:d6:af:7e:51:1f:2c:d8:bf:
27:a3:9e:d5:0c:67:b3:b8:9f:e8:8a:f9:d5:e2:8b:
bd:31:11:a8:3a:d2:dc:45:40:3a:f4:27:19:b0:4b:
67:78:7d:66:5c:35:33:de:55:68:93:6b:ca:7f:06:
85:ca:a0:94:1b:3c:66:c1:13:c6:d7:e5:7b:bf:36:
60:7b:fc:dc:79:7b:39:7d:74:fd:bd:e7:53:1e:b6:
5d:a6:26:ad:35:c4:06:f6:04:1d:c9:6c:79:58:ab:
89:8c:6f:6a:b8:97:cf:f0:70:00:ba:db:03:5f:71:
0e:16:b4:4e:d1:20:8c:ca:91:bc:f8:7e:95:3e:38:
2e:7f:74:bb:24:64:82:1a:f3:7d:7a:67:29:f3:68:
0f:22:71:00:09:2f:f4:28:07:2a:d3:9e:3d:31:43:
9c:4a:1f:7a:1d:17:99:b7:53:8c:30:6c:b7:d0:15:
e4:6a:e4:a4:f5:0e:dd:91:ac:ea:33:3c:2d:83:19:
e8:0d:be:3d:69:a4:ee:d3:fd:c8:33:c6:24:48:31:
aa:07:00:20:80:6e:8b:fe:30:db:8e:33:af:85:61:
3f:b4:3d:16:6b:10:ac:0d:0a:dc:81:6b:45:aa:1d:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4E:90:BA:80:F6:DC:3A:12:F8:D2:77:39:54:98:F7:92:C6:89:52
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b5:88:0e:40:61:54:2b:57:ec:a9:d8:09:24:c2:fe:f1:90:
39:cb:86:0c:75:8d:05:1f:6d:14:7b:bc:9b:1f:45:05:9b:24:
c5:a5:01:e4:2a:85:8f:5f:90:db:98:08:ca:54:55:a1:25:05:
68:f9:51:d7:f8:b1:6f:67:1e:48:7e:0c:7d:fa:45:e1:86:2e:
76:a7:86:9b:52:96:73:37:d6:c0:8a:33:18:3b:5d:c6:09:fa:
34:e7:82:7e:07:87:a0:49:ab:08:b8:f3:23:ff:08:d5:30:d6:
4d:4f:c8:0f:ad:33:17:c4:9d:96:dc:ec:f3:49:92:7e:9f:4e:
3f:f6:6b:ed:66:29:d6:0c:8b:97:29:e2:75:c3:b1:97:b3:11:
00:eb:66:a2:94:3f:d1:82:6d:82:68:32:4f:b1:48:30:46:c3:
6a:54:18:44:0f:0f:38:af:ab:28:79:1f:e7:21:b2:5f:be:4d:
58:f1:bd:a6:0e:13:08:0d:b3:c6:1d:21:ec:82:ec:db:50:07:
8c:95:d7:fb:67:f2:fa:d2:b3:d3:ba:49:22:84:1c:12:bb:a7:
9c:9b:54:c5:7a:82:95:a8:e4:d3:44:2e:55:8c:54:da:50:da:
90:99:c1:96:b9:2b:b2:22:ba:62:72:5a:46:44:d8:b7:5a:4e:
22:f6:ff:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCQm+TEq4NECWqqbmFh6leMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjdkZmI4ODJhZTdkOGU1NWQyNTg2NTE3NDJmNGU2Y2U0
MzcwMTkwHhcNMjUwODA3MDIwMDQ4WhcNMjUwODA4MDIwMDQ4WjAzMTEwLwYDVQQD
EyhmNzRlOTBiYTgwZjZkYzNhMTJmOGQyNzczOTU0OThmNzkyYzY4OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRfFVJS5A3bVxTNfCohaLL+ZZB+j
1q9+UR8s2L8no57VDGezuJ/oivnV4ou9MRGoOtLcRUA69CcZsEtneH1mXDUz3lVo
k2vKfwaFyqCUGzxmwRPG1+V7vzZge/zceXs5fXT9vedTHrZdpiatNcQG9gQdyWx5
WKuJjG9quJfP8HAAutsDX3EOFrRO0SCMypG8+H6VPjguf3S7JGSCGvN9emcp82gP
InEACS/0KAcq0549MUOcSh96HReZt1OMMGy30BXkauSk9Q7dkazqMzwtgxnoDb49
aaTu0/3IM8YkSDGqBwAggG6L/jDbjjOvhWE/tD0WaxCsDQrcgWtFqh0IDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdOkLqA9tw6EvjSdzlUmPeSxolSMB8GA1UdIwQY
MBaAFKpn37iCrn2OVdJYZRdC9ObOQ3AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgt
ZTFmZjg2Mzg2MzRiLzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgtZTFmZjg2Mzg2MzRi
LzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7WIDkBh
VCtX7KnYCSTC/vGQOcuGDHWNBR9tFHu8mx9FBZskxaUB5CqFj1+Q25gIylRVoSUF
aPlR1/ixb2ceSH4MffpF4YYudqeGm1KWczfWwIozGDtdxgn6NOeCfgeHoEmrCLjz
I/8I1TDWTU/ID60zF8Sdltzs80mSfp9OP/Zr7WYp1gyLlynidcOxl7MRAOtmopQ/
0YJtgmgyT7FIMEbDalQYRA8POK+rKHkf5yGyX75NWPG9pg4TCA2zxh0h7ILs21AH
jJXX+2fy+tKz07pJIoQcErunnJtUxXqClajk00QuVYxU2lDakJnBlrkrsiK6YnJa
RkTYt1pOIvb/CA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:58:51 2025 by rpki-client