Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: 1xBYj2ndo/xbM32uZWmBt+R2gtatGsLYAtMMdQMbyUo=
Subject key identifier: 79:03:54:6C:2A:DE:22:92:66:F8:11:CF:F9:92:46:BF:67:5A:AA:E7
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 01977187ED8B2B6F79735CF76753B92E7264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 0494
Signing time: Sun 15 Jun 2025 03:00:22 +0000
Manifest this update: Sun 15 Jun 2025 03:00:22 +0000
Manifest next update: Mon 16 Jun 2025 03:00:22 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: aZE+dNJsJaPgiOm22sfQlE4MnD6NtoIS7AiWZAebjCc=)
3: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
4: w7D3frL9E_kqNSgsBRGXDLacRBo.roa (hash: bAa/9UjCK1wH6h3VxI4XwwbcVqAdTwwv/HQNN/v8Ugg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:ed:8b:2b:6f:79:73:5c:f7:67:53:b9:2e:72:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jun 15 03:00:22 2025 GMT
Not After : Jun 16 03:00:22 2025 GMT
Subject: CN=7903546c2ade229266f811cff99246bf675aaae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:91:f2:d1:f7:d2:00:7b:bf:24:77:f1:f2:
06:c4:bc:ee:b6:5a:1e:02:97:f7:71:c2:3c:17:65:
3e:a6:e1:27:93:30:4c:27:c3:82:a5:d2:ac:30:25:
8f:df:07:7e:d7:d7:c5:9b:e4:b1:ad:ef:ea:d5:b6:
18:53:b1:3b:a1:aa:49:ac:e5:93:f9:6d:4b:0c:45:
f2:18:0a:d5:4a:3a:2b:66:96:40:b6:fa:b3:96:56:
bc:78:f1:74:38:7e:fc:7e:e8:db:7f:31:dd:80:95:
ed:f9:ce:0d:1b:d1:2b:95:3c:81:f6:b1:b1:ff:a0:
fd:a9:71:db:74:bb:01:73:cb:a1:ec:21:b4:2b:e6:
3f:ec:ac:0f:94:60:2e:cf:d9:80:26:66:07:4d:b1:
04:42:c8:31:3b:6c:2d:f9:6f:9d:c9:ef:79:8e:ba:
d2:3c:91:98:75:c9:af:f4:44:3e:1b:ad:b7:a4:e8:
57:24:e4:f5:8f:08:69:d7:3e:5b:9f:d9:3e:40:78:
34:15:2f:1f:c9:74:d5:85:70:04:db:64:b9:74:88:
6a:4d:12:13:21:71:55:b8:ce:80:f5:f9:8e:41:4c:
56:27:0a:16:8a:80:89:42:53:49:38:37:2d:19:7c:
51:86:d4:88:c6:c4:df:1d:50:b6:a7:2f:79:ea:a3:
16:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:54:6C:2A:DE:22:92:66:F8:11:CF:F9:92:46:BF:67:5A:AA:E7
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a5:39:48:9f:51:7f:4e:5d:74:0e:a3:7f:27:2c:fb:da:0f:
35:e0:a6:1b:e4:03:81:e0:b7:6d:0c:4e:a1:8d:e4:40:1a:1e:
e4:e7:33:56:97:e9:e8:bf:a1:2d:9a:a6:28:65:a4:6e:38:0d:
f4:4e:79:8d:fc:23:2c:87:b8:02:3b:7e:6d:0f:af:ba:67:7b:
b4:63:a8:53:34:27:3e:af:db:db:45:f6:37:7f:5c:e2:78:82:
e9:78:7a:97:c0:e5:75:b5:b7:ed:c1:5f:19:c3:dd:59:47:87:
e9:ba:9e:2b:98:1d:43:42:cb:57:44:84:b4:20:79:35:de:3f:
fa:86:c3:3a:8e:a3:dd:aa:86:c9:3c:98:af:90:f4:3c:24:f6:
19:4e:ce:e2:c3:2c:bf:1e:80:23:02:cb:86:b6:12:ae:54:ce:
59:0f:01:ae:d6:84:7d:40:f1:22:91:a6:71:c2:65:66:a9:ae:
77:09:8c:46:84:19:07:47:2c:51:6e:13:b6:67:ec:ec:ce:0f:
b8:5f:9b:98:9d:93:05:e5:6a:19:f4:09:30:03:72:2a:10:8f:
57:91:ed:8a:c5:dd:b7:73:57:f4:a8:d6:b0:80:e6:5e:8a:37:
11:63:b3:d7:d2:a4:24:95:5d:72:bf:ac:c0:40:ca:14:b3:c4:
f9:55:47:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxh+2LK295c1z3Z1O5LnJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw
MzBjOWQwHhcNMjUwNjE1MDMwMDIyWhcNMjUwNjE2MDMwMDIyWjAzMTEwLwYDVQQD
Eyg3OTAzNTQ2YzJhZGUyMjkyNjZmODExY2ZmOTkyNDZiZjY3NWFhYWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3GR8tH30gB7vyR38fIGxLzutloe
Apf3ccI8F2U+puEnkzBMJ8OCpdKsMCWP3wd+19fFm+Sxre/q1bYYU7E7oapJrOWT
+W1LDEXyGArVSjorZpZAtvqzlla8ePF0OH78fujbfzHdgJXt+c4NG9ErlTyB9rGx
/6D9qXHbdLsBc8uh7CG0K+Y/7KwPlGAuz9mAJmYHTbEEQsgxO2wt+W+dye95jrrS
PJGYdcmv9EQ+G623pOhXJOT1jwhp1z5bn9k+QHg0FS8fyXTVhXAE22S5dIhqTRIT
IXFVuM6A9fmOQUxWJwoWioCJQlNJODctGXxRhtSIxsTfHVC2py956qMWAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkDVGwq3iKSZvgRz/mSRr9nWqrnMB8GA1UdIwQY
MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt
MjJkZDBmMzkyOGQ1LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1
LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqU5SJ9R
f05ddA6jfycs+9oPNeCmG+QDgeC3bQxOoY3kQBoe5OczVpfp6L+hLZqmKGWkbjgN
9E55jfwjLIe4Ajt+bQ+vumd7tGOoUzQnPq/b20X2N39c4niC6Xh6l8DldbW37cFf
GcPdWUeH6bqeK5gdQ0LLV0SEtCB5Nd4/+obDOo6j3aqGyTyYr5D0PCT2GU7O4sMs
vx6AIwLLhrYSrlTOWQ8BrtaEfUDxIpGmccJlZqmudwmMRoQZB0csUW4Ttmfs7M4P
uF+bmJ2TBeVqGfQJMANyKhCPV5HtisXdt3NX9KjWsIDmXoo3EWOz19KkJJVdcr+s
wEDKFLPE+VVH7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:36 2025 by rpki-client