Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: Tj4oEl42o84sY2KjVd2HgLYbKwKSGR+ySX0OhTodwbw=
Subject key identifier: EF:C9:D0:3D:57:4F:15:DE:7B:0D:A0:E6:04:08:01:C8:75:A4:4B:95
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 01976C61FA4F3AFFD0A63EC7D4E6620E8AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 1054
Signing time: Sat 14 Jun 2025 03:00:49 +0000
Manifest this update: Sat 14 Jun 2025 03:00:49 +0000
Manifest next update: Sun 15 Jun 2025 03:00:49 +0000
Files and hashes: 1: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
2: jGJqFQVdzPNIuq__x_RJveRfPgI.roa (hash: l/kSncaCyGC+QqprUZGRI2OdInXO3OkPgy+W2EUBUIg=)
3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: ndgoUCPjkQ9Sfsea8yeyNuQHzA9ZtbjUMu5GZaRF7c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:fa:4f:3a:ff:d0:a6:3e:c7:d4:e6:62:0e:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Jun 14 03:00:49 2025 GMT
Not After : Jun 15 03:00:49 2025 GMT
Subject: CN=efc9d03d574f15de7b0da0e6040801c875a44b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:10:a1:a6:b4:2e:c2:3c:ff:a6:e2:0c:e4:
db:ce:30:dc:04:a4:6a:c6:94:aa:5d:6b:c0:9d:e6:
7c:77:88:44:21:bf:53:b2:a8:82:4a:4d:db:39:7e:
f9:a3:b0:fa:30:87:1b:47:d6:44:06:50:1c:c1:6c:
15:85:68:80:3b:ed:b2:86:01:1a:6f:48:26:a8:7d:
bc:fe:da:7a:5a:72:a2:ee:3e:23:47:71:69:4c:13:
df:f3:b9:be:ef:74:fe:df:47:39:5f:32:15:c4:17:
23:94:dc:84:75:81:b0:ac:ef:c8:60:98:e5:27:ab:
15:71:90:d4:a5:4a:a1:01:d5:c4:03:37:e0:0c:96:
6b:fe:7c:cf:c1:2a:41:53:eb:f6:ea:5e:4b:5e:d8:
03:d9:4f:d3:ac:7a:16:43:24:26:aa:3c:1b:4c:0b:
aa:ca:00:48:4f:2b:f3:65:01:a6:48:75:ee:3f:63:
07:84:3b:00:3d:43:7b:1b:bc:e5:2e:02:2c:05:fa:
3a:62:a1:97:36:be:7b:68:09:1c:5a:5b:06:6a:14:
0e:8e:90:fe:3b:dd:d6:63:5f:9f:4c:ba:6e:2e:ef:
e0:79:66:43:66:cf:12:e7:c7:85:e7:da:0b:ef:4c:
e3:68:43:50:56:e8:80:f0:2d:80:0f:9c:67:26:cc:
a8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C9:D0:3D:57:4F:15:DE:7B:0D:A0:E6:04:08:01:C8:75:A4:4B:95
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7c:07:9a:b6:4f:fc:3a:84:3b:5a:e6:95:1d:87:a4:b9:9d:
02:37:6f:dc:c0:01:c2:e9:e0:ab:97:99:d5:89:3d:2f:a5:81:
5f:e3:f6:d2:6b:52:1c:d4:bc:d4:a6:ab:94:9f:61:49:0f:ce:
90:3b:53:6e:76:7a:bc:9e:ee:9d:5c:c0:d8:de:b6:62:bc:71:
88:ff:65:99:45:ad:61:ef:8e:a6:ae:0a:63:d5:7e:3f:a9:c7:
bb:99:96:df:3d:f3:cd:0e:db:35:60:e2:3d:ed:5d:fa:86:43:
a6:64:13:24:34:cd:7b:fd:c1:4f:66:b2:f0:f2:16:88:d3:10:
b6:77:da:07:c1:a4:1e:e7:e1:c4:90:82:5e:29:8f:1e:cc:2e:
ea:38:4b:a4:04:ce:bd:d5:d8:27:74:24:25:be:e0:e8:60:f7:
1a:1e:e7:0e:2b:3f:fe:2e:33:be:bf:41:c5:fe:65:4d:d6:28:
91:8f:af:32:ed:f7:2f:54:f1:65:d1:27:9c:cd:19:32:e8:cf:
ee:7c:ca:18:6b:58:82:0a:3c:f5:94:fa:c5:de:a5:d2:cd:14:
87:86:6c:90:19:12:9d:04:db:3f:bd:f4:89:3f:1a:6d:57:28:
3c:ed:8d:64:66:8e:fd:1d:38:7f:e5:f3:ac:89:b6:1d:15:b4:
c8:0c:7e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYfpPOv/Qpj7H1OZiDoqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzA5MjFkMjhjNzhlZGU4MTg0MmY3MTJlNmNmNzJiZGU1
YTYwODAwHhcNMjUwNjE0MDMwMDQ5WhcNMjUwNjE1MDMwMDQ5WjAzMTEwLwYDVQQD
EyhlZmM5ZDAzZDU3NGYxNWRlN2IwZGEwZTYwNDA4MDFjODc1YTQ0Yjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDQQoaa0LsI8/6biDOTbzjDcBKRq
xpSqXWvAneZ8d4hEIb9TsqiCSk3bOX75o7D6MIcbR9ZEBlAcwWwVhWiAO+2yhgEa
b0gmqH28/tp6WnKi7j4jR3FpTBPf87m+73T+30c5XzIVxBcjlNyEdYGwrO/IYJjl
J6sVcZDUpUqhAdXEAzfgDJZr/nzPwSpBU+v26l5LXtgD2U/TrHoWQyQmqjwbTAuq
ygBITyvzZQGmSHXuP2MHhDsAPUN7G7zlLgIsBfo6YqGXNr57aAkcWlsGahQOjpD+
O93WY1+fTLpuLu/geWZDZs8S58eF59oL70zjaENQVuiA8C2AD5xnJsyoQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/J0D1XTxXeew2g5gQIAch1pEuVMB8GA1UdIwQY
MBaAFKswkh0ox47egYQvcS5s9yveWmCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2Et
MzU0Mzk5NzI0YjFlLzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2EtMzU0Mzk5NzI0YjFl
LzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnwHmrZP
/DqEO1rmlR2HpLmdAjdv3MABwungq5eZ1Yk9L6WBX+P20mtSHNS81KarlJ9hSQ/O
kDtTbnZ6vJ7unVzA2N62YrxxiP9lmUWtYe+Opq4KY9V+P6nHu5mW3z3zzQ7bNWDi
Pe1d+oZDpmQTJDTNe/3BT2ay8PIWiNMQtnfaB8GkHufhxJCCXimPHswu6jhLpATO
vdXYJ3QkJb7g6GD3Gh7nDis//i4zvr9Bxf5lTdYokY+vMu33L1TxZdEnnM0ZMujP
7nzKGGtYggo89ZT6xd6l0s0Uh4ZskBkSnQTbP730iT8abVcoPO2NZGaO/R04f+Xz
rIm2HRW0yAx+bA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:43:20 2025 by rpki-client