Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: cXZMQj9Inzmoh4hyxLVO0IgQpckuxPIdEFvxrCAFYLc=
Subject key identifier: CE:88:80:29:29:EF:FF:3D:04:CC:05:3C:05:3B:58:0A:B5:86:A0:64
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 0198745079AE1F8EBAAE394EE1FF59E55D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 0F34
Signing time: Mon 04 Aug 2025 09:01:27 +0000
Manifest this update: Mon 04 Aug 2025 09:01:27 +0000
Manifest next update: Tue 05 Aug 2025 09:01:27 +0000
Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: kSZqHC62XFK/YHYJz5r5U4rvwbxfR62vo+7Xg4vB/UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:79:ae:1f:8e:ba:ae:39:4e:e1:ff:59:e5:5d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Aug 4 09:01:27 2025 GMT
Not After : Aug 5 09:01:27 2025 GMT
Subject: CN=ce88802929efff3d04cc053c053b580ab586a064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:97:54:0c:dc:82:88:82:2b:5e:b3:2b:c8:57:
12:c9:8e:21:ca:b4:24:53:45:d5:a3:6a:d5:fa:6a:
4e:47:3c:27:24:6d:19:ee:1e:b5:04:e5:2b:9a:d5:
60:06:3f:23:99:f1:87:7d:fa:8c:fb:4e:4e:0f:fd:
51:1e:57:0d:75:20:c7:3a:dc:6c:4e:73:0e:93:ce:
d8:d7:1a:77:0b:f7:95:dd:a0:8b:4e:cc:0c:7d:c0:
e2:c9:9d:03:56:7b:c2:f6:0f:e7:17:16:96:03:26:
06:ec:07:d8:1f:e3:8e:15:b5:f9:e2:17:83:a0:2d:
2f:5f:15:7d:e1:91:84:bb:27:31:46:11:66:9a:7e:
6b:c4:7b:ff:96:9b:f3:09:0a:cb:4f:28:31:bb:13:
46:2d:6e:0f:3c:37:78:98:f0:90:74:d4:13:30:b6:
f0:92:28:45:c7:a6:08:59:c4:64:56:b9:d6:98:bc:
d6:f2:8a:66:db:88:fa:31:98:61:5c:4f:d5:d3:b3:
ad:f0:15:c2:c0:ab:eb:bf:1d:f1:50:fd:b2:ed:f2:
23:70:9a:17:17:2c:a4:40:da:76:4d:0c:ae:28:39:
fb:bf:68:88:3c:83:bc:e7:2d:b0:dc:73:56:96:62:
8f:45:5f:8b:90:71:c1:c2:19:c0:8f:f3:a9:de:e6:
9e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:88:80:29:29:EF:FF:3D:04:CC:05:3C:05:3B:58:0A:B5:86:A0:64
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1b:82:c9:38:12:d7:46:28:f4:d3:9d:83:f0:50:67:d2:65:
ec:fc:35:d8:cd:3d:d1:cc:5c:7e:e0:76:51:10:23:b8:8f:dc:
2e:52:84:24:b9:f8:8f:f9:24:e7:5f:d4:79:fd:77:bf:b4:59:
d5:49:0e:99:7c:cd:06:84:1c:db:e3:bc:09:a2:fe:0f:5d:6a:
30:3e:55:09:1d:d1:7d:2a:74:14:4d:02:c1:a2:03:6e:87:1d:
2a:0b:a2:de:33:22:32:34:a2:41:2c:ad:49:f2:4a:08:f4:49:
2d:10:45:5e:8b:17:df:fc:f2:6a:55:60:13:84:26:a6:04:f8:
e7:a7:37:8f:1d:7f:74:e9:50:52:5d:c7:ea:0c:7b:1d:4e:47:
91:10:e2:aa:1c:32:e7:28:b9:99:d7:23:70:0e:60:11:93:e7:
19:62:fd:85:60:e9:96:2d:35:c2:be:7d:9b:60:3a:e5:9b:f0:
be:55:80:91:6d:ba:2b:14:e4:4a:07:79:b8:dc:e0:74:85:73:
ee:e3:af:59:f4:2b:e3:6a:7a:41:6f:dc:8f:eb:d0:5d:97:cd:
47:56:f8:bd:79:ee:ae:61:61:5a:dd:2f:8a:e2:41:01:1a:e3:
a0:fe:64:24:db:67:6b:60:53:7f:1c:3a:67:08:1b:30:6a:5d:
80:38:7a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UHmuH466rjlO4f9Z5V1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm
ZDI4MjcwHhcNMjUwODA0MDkwMTI3WhcNMjUwODA1MDkwMTI3WjAzMTEwLwYDVQQD
EyhjZTg4ODAyOTI5ZWZmZjNkMDRjYzA1M2MwNTNiNTgwYWI1ODZhMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipdUDNyCiIIrXrMryFcSyY4hyrQk
U0XVo2rV+mpORzwnJG0Z7h61BOUrmtVgBj8jmfGHffqM+05OD/1RHlcNdSDHOtxs
TnMOk87Y1xp3C/eV3aCLTswMfcDiyZ0DVnvC9g/nFxaWAyYG7AfYH+OOFbX54heD
oC0vXxV94ZGEuycxRhFmmn5rxHv/lpvzCQrLTygxuxNGLW4PPDd4mPCQdNQTMLbw
kihFx6YIWcRkVrnWmLzW8opm24j6MZhhXE/V07Ot8BXCwKvrvx3xUP2y7fIjcJoX
FyykQNp2TQyuKDn7v2iIPIO85y2w3HNWlmKPRV+LkHHBwhnAj/Op3uaekQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6IgCkp7/89BMwFPAU7WAq1hqBkMB8GA1UdIwQY
MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt
YjA2MTk0ZDEzYzZiLzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi
LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBuCyTgS
10Yo9NOdg/BQZ9Jl7Pw12M090cxcfuB2URAjuI/cLlKEJLn4j/kk51/Uef13v7RZ
1UkOmXzNBoQc2+O8CaL+D11qMD5VCR3RfSp0FE0CwaIDbocdKgui3jMiMjSiQSyt
SfJKCPRJLRBFXosX3/zyalVgE4QmpgT456c3jx1/dOlQUl3H6gx7HU5HkRDiqhwy
5yi5mdcjcA5gEZPnGWL9hWDpli01wr59m2A65ZvwvlWAkW26KxTkSgd5uNzgdIVz
7uOvWfQr42p6QW/cj+vQXZfNR1b4vXnurmFhWt0viuJBARrjoP5kJNtna2BTfxw6
ZwgbMGpdgDh6gA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:40 2025 by rpki-client