Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: hOKM0EiJKvzyqSO8JcnU+i5aPU6yFdc0J/PbDmaoMS0=
Subject key identifier: 8D:21:02:FC:19:92:17:B4:B6:FF:7E:21:48:69:3B:B1:EC:E1:EB:D2
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 01988EEBDF8C3F9F02C3189B5E94A68E944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 15E7
Signing time: Sat 09 Aug 2025 13:01:19 +0000
Manifest this update: Sat 09 Aug 2025 13:01:19 +0000
Manifest next update: Sun 10 Aug 2025 13:01:19 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: UaukgQ+qaIAhQ49tlorT0Im8aDg0SzHjAtlDAakRkRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:df:8c:3f:9f:02:c3:18:9b:5e:94:a6:8e:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Aug 9 13:01:19 2025 GMT
Not After : Aug 10 13:01:19 2025 GMT
Subject: CN=8d2102fc199217b4b6ff7e2148693bb1ece1ebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:ad:71:30:d8:7b:17:01:94:e5:a8:ed:4d:
c8:da:04:81:c0:df:7f:51:40:b8:50:da:a6:57:a8:
a6:21:cf:c3:54:99:50:22:44:22:b2:96:e3:37:8c:
ff:7f:33:10:33:76:c6:e7:f1:e5:91:c8:7f:ac:e4:
f5:87:b0:9a:f1:b9:01:2c:aa:cc:fd:61:15:f7:4a:
5d:1c:ca:e9:65:37:b3:b8:fa:de:cd:81:c3:b3:9b:
87:81:c6:07:4f:20:ff:5f:a2:01:2b:fa:14:ac:2e:
d4:3e:8b:8a:db:d7:04:b1:1b:97:e9:ab:99:61:8e:
24:ba:31:2d:83:46:84:8d:29:47:66:8e:45:63:be:
c5:9e:55:20:0e:a2:74:d1:0d:08:00:c4:04:06:14:
80:12:a2:b9:5d:b3:35:74:6b:16:c2:20:1f:fd:6d:
04:24:04:f5:6c:46:fc:59:a5:02:75:9a:5a:b8:7f:
e6:57:b0:d2:21:70:d3:3e:ed:3c:0c:05:86:90:5f:
dd:14:7d:46:2d:24:cf:d5:b6:0b:b2:14:6b:ac:12:
29:6b:9c:15:03:95:c9:e0:6b:ee:1d:ce:0d:bc:5b:
48:80:a5:6f:43:4d:de:33:5f:a3:35:97:06:df:0a:
04:e8:36:04:57:03:c0:a6:7f:04:43:d3:91:05:7c:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:21:02:FC:19:92:17:B4:B6:FF:7E:21:48:69:3B:B1:EC:E1:EB:D2
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1b:df:80:08:dd:96:86:81:90:a7:ef:bc:16:14:16:00:8e:
ff:57:99:f3:34:2e:9f:b0:4d:61:19:b5:cd:1e:94:b2:01:ea:
a5:59:9d:fe:3d:5d:eb:7d:4a:02:b0:76:a1:02:68:4f:f1:ac:
b3:dc:a3:71:e5:97:1b:c1:05:f4:6f:29:62:c1:12:a4:eb:34:
93:38:5b:74:55:e2:bf:c0:60:ff:76:6f:6c:74:11:a3:28:48:
3b:82:ba:96:99:de:91:43:83:35:f1:c9:c0:45:bf:40:03:b6:
fe:06:16:f9:24:d1:cb:09:0d:e4:63:b5:bc:8e:9f:50:3c:e0:
65:c5:60:a8:dd:b0:22:70:27:c9:48:5f:5b:dc:8c:9e:0f:a2:
d0:b0:9f:5c:f7:18:ed:c5:eb:3e:aa:90:9f:99:6e:0a:e2:81:
aa:40:dc:a0:3d:74:ae:66:fb:91:ec:e9:98:e1:fa:fe:23:e1:
c2:12:e1:b2:27:75:01:3a:dc:79:f5:49:80:13:77:07:17:08:
1d:2f:ff:d2:6e:3e:e4:c1:09:76:49:20:01:6d:0a:1c:64:82:
07:0b:d7:0c:5e:af:6f:de:97:c4:fa:e6:b2:a1:30:8b:49:fc:
27:7c:4e:1b:24:92:dd:8e:68:5f:ba:cd:71:e8:13:fa:97:13:
b1:71:27:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO69+MP58CwxibXpSmjpRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjUwODA5MTMwMTE5WhcNMjUwODEwMTMwMTE5WjAzMTEwLwYDVQQD
Eyg4ZDIxMDJmYzE5OTIxN2I0YjZmZjdlMjE0ODY5M2JiMWVjZTFlYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSStcTDYexcBlOWo7U3I2gSBwN9/
UUC4UNqmV6imIc/DVJlQIkQispbjN4z/fzMQM3bG5/Hlkch/rOT1h7Ca8bkBLKrM
/WEV90pdHMrpZTezuPrezYHDs5uHgcYHTyD/X6IBK/oUrC7UPouK29cEsRuX6auZ
YY4kujEtg0aEjSlHZo5FY77FnlUgDqJ00Q0IAMQEBhSAEqK5XbM1dGsWwiAf/W0E
JAT1bEb8WaUCdZpauH/mV7DSIXDTPu08DAWGkF/dFH1GLSTP1bYLshRrrBIpa5wV
A5XJ4GvuHc4NvFtIgKVvQ03eM1+jNZcG3woE6DYEVwPApn8EQ9ORBXwvZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0hAvwZkhe0tv9+IUhpO7Hs4evSMB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBvfgAjd
loaBkKfvvBYUFgCO/1eZ8zQun7BNYRm1zR6UsgHqpVmd/j1d631KArB2oQJoT/Gs
s9yjceWXG8EF9G8pYsESpOs0kzhbdFXiv8Bg/3ZvbHQRoyhIO4K6lpnekUODNfHJ
wEW/QAO2/gYW+STRywkN5GO1vI6fUDzgZcVgqN2wInAnyUhfW9yMng+i0LCfXPcY
7cXrPqqQn5luCuKBqkDcoD10rmb7kezpmOH6/iPhwhLhsid1ATrcefVJgBN3BxcI
HS//0m4+5MEJdkkgAW0KHGSCBwvXDF6vb96XxPrmsqEwi0n8J3xOGySS3Y5oX7rN
cegT+pcTsXEndQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:17:21 2025 by rpki-client