Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: aQ0j5dIKx/hnbsRV5lEDtwjd5vjRUrDbuAE6es8sTvM=
Subject key identifier: 1B:C2:EB:AD:1C:89:01:B2:F7:FF:29:87:BF:03:B9:D0:B7:30:20:D9
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 0197B7B2FBE29EA3F307229BFFEB545385D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 55
Signing time: Sat 28 Jun 2025 18:00:49 +0000
Manifest this update: Sat 28 Jun 2025 18:00:49 +0000
Manifest next update: Sun 29 Jun 2025 18:00:49 +0000
Files and hashes: 1: du9Q9bL5BOWedJK9qhvdrfuTC6E.roa (hash: yMHVcCfWCQ3tfd7XRi0bmpwcyLFeWTkztgI3BA0HK6Y=)
2: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: MiVCvIelvexgIiv8SmhDNB9i1Ll2WhN95lYyetFdi2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:fb:e2:9e:a3:f3:07:22:9b:ff:eb:54:53:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Jun 28 18:00:49 2025 GMT
Not After : Jun 29 18:00:49 2025 GMT
Subject: CN=1bc2ebad1c8901b2f7ff2987bf03b9d0b73020d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2c:a1:00:56:7a:10:57:29:ac:49:f5:fd:dd:
18:c4:98:c5:8c:7d:2e:6b:1e:c0:b1:91:03:75:e1:
16:f3:98:23:e1:12:a7:ff:bc:d5:13:3a:59:c8:57:
54:be:94:d3:79:da:d7:10:c5:53:b3:07:df:ff:cd:
03:82:a1:41:1c:0d:6b:77:75:75:1e:96:70:37:d4:
8f:17:37:9d:8f:78:ea:f7:89:1f:e5:8d:11:d6:dc:
8b:4e:d2:ab:65:e4:95:e8:86:3e:36:78:8f:da:05:
fd:ad:00:a5:6e:d1:50:76:b6:0e:da:bf:04:a5:e8:
95:c2:d1:5a:2e:71:57:b3:fe:e5:3e:b4:8a:a3:17:
ef:ea:04:53:bb:0d:b0:b3:9c:ea:ed:ed:43:94:cd:
b2:ea:58:d8:df:6d:a3:50:73:71:5d:70:91:ed:a1:
ff:68:20:37:3e:fd:fb:e0:79:7c:1a:f1:95:78:b9:
f9:a3:47:60:81:e4:f2:bb:30:db:27:93:cb:2b:1d:
62:37:d8:ac:e0:a1:68:60:63:5d:e4:21:3e:2d:27:
5c:bc:ad:0f:85:5d:bf:98:e9:0f:d0:30:79:66:62:
13:bb:e6:c6:40:57:e4:37:c6:6f:2d:c2:f4:d4:b9:
8a:39:84:ec:87:d0:d1:4e:09:1c:34:89:b9:1d:d9:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:EB:AD:1C:89:01:B2:F7:FF:29:87:BF:03:B9:D0:B7:30:20:D9
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:4c:01:c0:f0:8d:7a:e2:88:80:61:a5:f9:dc:97:a5:34:
2d:03:1a:82:b1:57:6c:c2:a1:f5:7f:ec:7b:bc:a0:4d:ce:b8:
a8:43:15:73:81:cc:93:93:0d:e3:91:12:be:2c:19:b9:37:a7:
aa:ca:3d:4c:7d:87:34:b6:62:db:67:0e:5e:de:ce:08:50:87:
89:57:9c:0b:d3:11:e1:b4:1b:39:5c:62:72:76:59:89:a8:2a:
43:a0:2a:78:f9:14:ab:46:bb:a3:f5:ae:6e:0e:ef:32:59:c0:
68:f8:8d:ab:a9:d3:b0:18:5c:d6:15:27:a5:e9:25:2e:7a:d8:
46:91:6d:06:d3:15:f8:84:27:fa:99:67:f1:3a:64:55:86:73:
6d:18:78:27:d1:f9:cf:64:37:0b:96:ae:67:a9:43:4a:83:bb:
01:8f:40:bd:0f:79:5e:85:5b:d7:e3:4a:b0:b8:c1:c6:27:fb:
22:08:ba:fd:f0:88:c4:7d:56:12:0a:39:ee:03:91:25:8c:d7:
52:ca:b1:34:17:05:81:7b:98:ed:eb:14:ca:2b:f7:36:df:58:
c0:34:3a:91:e0:c8:51:ab:86:71:38:3b:84:e4:19:63:ab:bd:
ae:f6:30:db:ba:26:1d:55:30:97:9e:55:ad:eb:1c:f8:1b:16:
d3:77:db:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3svvinqPzByKb/+tUU4XVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2JmZDQyMGRiNWNhZWJhZGExYTIwNTVkODdiYzdkYTJi
MDljMDcwHhcNMjUwNjI4MTgwMDQ5WhcNMjUwNjI5MTgwMDQ5WjAzMTEwLwYDVQQD
EygxYmMyZWJhZDFjODkwMWIyZjdmZjI5ODdiZjAzYjlkMGI3MzAyMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iyhAFZ6EFcprEn1/d0YxJjFjH0u
ax7AsZEDdeEW85gj4RKn/7zVEzpZyFdUvpTTedrXEMVTswff/80DgqFBHA1rd3V1
HpZwN9SPFzedj3jq94kf5Y0R1tyLTtKrZeSV6IY+NniP2gX9rQClbtFQdrYO2r8E
peiVwtFaLnFXs/7lPrSKoxfv6gRTuw2ws5zq7e1DlM2y6ljY322jUHNxXXCR7aH/
aCA3Pv374Hl8GvGVeLn5o0dggeTyuzDbJ5PLKx1iN9is4KFoYGNd5CE+LSdcvK0P
hV2/mOkP0DB5ZmITu+bGQFfkN8ZvLcL01LmKOYTsh9DRTgkcNIm5Hdl2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvC660ciQGy9/8ph78DudC3MCDZMB8GA1UdIwQY
MBaAFKp7/UINtcrrraGiBV2HvH2isJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2Mt
NzliNDA5YzFiZDM4LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2MtNzliNDA5YzFiZDM4
LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu5MAcDw
jXriiIBhpfncl6U0LQMagrFXbMKh9X/se7ygTc64qEMVc4HMk5MN45ESviwZuTen
qso9TH2HNLZi22cOXt7OCFCHiVecC9MR4bQbOVxicnZZiagqQ6AqePkUq0a7o/Wu
bg7vMlnAaPiNq6nTsBhc1hUnpeklLnrYRpFtBtMV+IQn+pln8TpkVYZzbRh4J9H5
z2Q3C5auZ6lDSoO7AY9AvQ95XoVb1+NKsLjBxif7Igi6/fCIxH1WEgo57gORJYzX
UsqxNBcFgXuY7esUyiv3Nt9YwDQ6keDIUauGcTg7hOQZY6u9rvYw27omHVUwl55V
resc+BsW03fbzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:05 2025 by rpki-client