Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: GQV1yF2mTptLsQiLCDwnLauy5gNRgpGbDEKi1NDwSRw=
Subject key identifier: 28:AB:80:E3:88:AA:03:B3:17:09:E8:87:70:F8:07:47:1D:EE:58:13
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 01978C24DF825FC66A977A4B11762CA33D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 1561
Signing time: Fri 20 Jun 2025 07:01:56 +0000
Manifest this update: Fri 20 Jun 2025 07:01:56 +0000
Manifest next update: Sat 21 Jun 2025 07:01:56 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: zwbjWIB9mKdGYEKZCMvRfdldff3lILEuz4w6PmQDM20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:24:df:82:5f:c6:6a:97:7a:4b:11:76:2c:a3:3d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jun 20 07:01:56 2025 GMT
Not After : Jun 21 07:01:56 2025 GMT
Subject: CN=28ab80e388aa03b31709e88770f807471dee5813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:2c:d8:a1:2a:ac:3a:1e:31:26:db:07:30:
32:6f:36:45:a3:ca:d8:01:da:e0:b7:ec:25:84:ae:
9e:cd:e2:95:6b:71:b2:da:62:ec:44:78:8f:44:6a:
45:66:96:72:0e:c0:bd:ae:0b:a1:81:a9:c1:9a:c8:
5a:66:1c:28:ee:6a:ab:f5:40:29:33:98:c1:c6:cf:
9d:6e:44:e1:a7:00:2c:34:01:53:37:70:13:1e:53:
28:d6:09:54:c9:9e:ca:c5:1e:e7:c1:58:ef:ff:5c:
d0:4e:63:55:29:46:9b:7d:74:c1:6c:84:89:06:49:
5e:5d:31:3b:f2:33:59:9b:0d:fa:59:a4:79:c8:f3:
93:b2:87:31:25:45:91:d5:0d:ea:56:ce:9f:b4:08:
69:f5:2b:c5:89:63:2d:e5:a4:90:50:60:80:11:7b:
ef:dd:db:1c:8c:91:e6:22:b1:b3:3a:e9:56:a0:92:
d6:8f:88:1d:d9:09:f8:a2:b6:79:e9:ee:dc:e3:ea:
44:7e:9e:69:72:a0:b7:32:eb:0f:83:f5:a8:0f:a9:
5e:ed:99:6a:3c:5d:e4:01:8c:ff:ab:6f:03:36:db:
b4:19:93:ec:7c:e8:06:a2:81:96:2c:e6:a3:af:63:
5b:d3:46:34:46:b0:01:ff:02:5d:07:c9:d9:34:14:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:80:E3:88:AA:03:B3:17:09:E8:87:70:F8:07:47:1D:EE:58:13
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:eb:16:48:22:c8:13:f5:70:54:c9:30:96:d9:3f:56:5f:e8:
25:16:04:cf:aa:c1:ba:e0:bf:1a:2c:1a:26:1b:f8:12:66:dc:
bc:b4:a2:2e:15:b3:19:b0:11:aa:76:24:25:bd:a6:9f:c2:92:
a4:25:70:66:19:4f:cb:be:47:b6:35:36:67:1c:6c:86:09:b8:
e2:24:d6:b9:ac:ce:b1:87:29:9f:dc:c7:58:b5:89:ad:b4:3b:
84:26:2a:3a:87:b3:4f:c5:63:93:22:0e:b3:55:86:d3:fa:2e:
9f:06:2c:47:12:7c:11:92:e0:58:28:07:8b:c1:87:75:b4:3a:
53:37:18:b5:02:43:0b:79:d0:e4:a9:e8:b9:62:ab:23:e2:e7:
f7:53:e5:24:6a:74:f0:62:2e:f3:b8:cd:c1:01:30:2e:11:56:
73:82:80:84:8a:84:c1:19:fb:fc:22:a8:99:fe:65:29:58:5c:
53:e7:81:eb:2e:13:a1:04:c3:59:1c:15:36:07:8f:df:dc:ec:
db:5e:be:30:27:8d:3d:df:13:1d:bb:a8:d3:16:9c:36:fa:54:
9b:c7:19:64:98:12:ae:06:63:8a:ce:a2:ab:f2:50:16:bf:8e:
be:04:44:80:3a:d4:b0:2d:19:ea:fb:b7:96:f0:9e:7c:10:0f:
d2:49:39:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeMJN+CX8Zql3pLEXYsoz1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc5NTg5YzFjNDg4OTdkMDliMmQ0ZmVkN2E2NjA0NGE4
NzZlYTMwHhcNMjUwNjIwMDcwMTU2WhcNMjUwNjIxMDcwMTU2WjAzMTEwLwYDVQQD
EygyOGFiODBlMzg4YWEwM2IzMTcwOWU4ODc3MGY4MDc0NzFkZWU1ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVAs2KEqrDoeMSbbBzAybzZFo8rY
Adrgt+wlhK6ezeKVa3Gy2mLsRHiPRGpFZpZyDsC9rguhganBmshaZhwo7mqr9UAp
M5jBxs+dbkThpwAsNAFTN3ATHlMo1glUyZ7KxR7nwVjv/1zQTmNVKUabfXTBbISJ
BkleXTE78jNZmw36WaR5yPOTsocxJUWR1Q3qVs6ftAhp9SvFiWMt5aSQUGCAEXvv
3dscjJHmIrGzOulWoJLWj4gd2Qn4orZ56e7c4+pEfp5pcqC3MusPg/WoD6le7Zlq
PF3kAYz/q28DNtu0GZPsfOgGooGWLOajr2Nb00Y0RrAB/wJdB8nZNBRWJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCirgOOIqgOzFwnoh3D4B0cd7lgTMB8GA1UdIwQY
MBaAFKpnlYnBxIiX0JstT+16ZgRKh26jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMt
MTRiNzZiNzZmMmJiLzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wMDhmOTEtYWVlMy00NDA4LTgzOTMtMTRiNzZiNzZmMmJi
LzEvcW1lVmljSEVpSmZRbXkxUDdYcG1CRXFIYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+sWSCLI
E/VwVMkwltk/Vl/oJRYEz6rBuuC/GiwaJhv4EmbcvLSiLhWzGbARqnYkJb2mn8KS
pCVwZhlPy75HtjU2Zxxshgm44iTWuazOsYcpn9zHWLWJrbQ7hCYqOoezT8VjkyIO
s1WG0/ounwYsRxJ8EZLgWCgHi8GHdbQ6UzcYtQJDC3nQ5KnouWKrI+Ln91PlJGp0
8GIu87jNwQEwLhFWc4KAhIqEwRn7/CKomf5lKVhcU+eB6y4ToQTDWRwVNgeP39zs
216+MCeNPd8THbuo0xacNvpUm8cZZJgSrgZjis6iq/JQFr+OvgREgDrUsC0Z6vu3
lvCefBAP0kk5hw==
-----END CERTIFICATE-----
Generated at Fri Jun 20 10:40:53 2025 by rpki-client