Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: /r7SXa7GQQ3zDgROIP0WTRe/KdAtQEhH9xIo1o2RRYE=
Subject key identifier: 28:94:6D:DF:1D:BF:AC:2D:89:1B:4E:93:A0:1C:B0:01:ED:D9:8E:A7
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 0197B88FF3BFF3EB2332430E25FFE894CA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 0410
Signing time: Sat 28 Jun 2025 22:02:11 +0000
Manifest this update: Sat 28 Jun 2025 22:02:11 +0000
Manifest next update: Sun 29 Jun 2025 22:02:11 +0000
Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: bCyh5wIQebHPNAeZA5PpfTrs8FMPuxV64EDJ8rwq7bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f3:bf:f3:eb:23:32:43:0e:25:ff:e8:94:ca:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Jun 28 22:02:11 2025 GMT
Not After : Jun 29 22:02:11 2025 GMT
Subject: CN=28946ddf1dbfac2d891b4e93a01cb001edd98ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:7d:e7:42:6f:2a:39:50:2c:08:d5:06:8d:
de:6f:7e:ed:9e:44:e5:6b:17:c6:3c:f7:01:d3:44:
79:dc:99:6b:a2:e8:29:b2:21:94:cc:d0:20:ad:d1:
9b:b9:63:8a:21:d4:89:84:ba:cb:98:63:ed:4a:5c:
51:e5:81:40:19:c0:d8:2d:b7:8a:81:bf:ff:ec:58:
f5:51:50:c8:a0:17:2c:df:47:ba:d9:cb:a8:61:43:
d8:d2:ff:e5:0c:e3:cb:6d:b7:21:32:4e:50:73:e6:
fe:67:25:d5:67:38:c4:9f:37:e9:a0:21:61:a8:cc:
5b:e8:0b:ed:35:73:48:9a:49:1a:72:01:ea:69:14:
13:8f:ee:15:b1:23:45:1a:d9:52:a0:e8:d3:a1:31:
10:df:01:ed:33:7b:60:61:da:17:0f:92:44:87:8f:
d3:39:93:82:48:f8:23:1d:3d:80:9c:52:e6:66:e5:
c3:3e:07:0b:d3:e6:ed:35:40:0c:f5:d1:bc:41:26:
b2:dd:68:ba:0e:b9:43:64:3d:dc:98:d1:ea:8e:eb:
de:a0:e5:d7:f9:d2:6e:c1:ec:e7:92:d8:f7:aa:2a:
84:90:92:f0:25:7d:36:a5:3a:13:9d:01:07:bb:41:
af:c9:39:ed:49:a6:29:2d:96:f1:1c:be:a7:ce:d7:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:6D:DF:1D:BF:AC:2D:89:1B:4E:93:A0:1C:B0:01:ED:D9:8E:A7
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1a:48:70:f8:22:7b:18:b8:00:5b:6c:25:0c:37:19:0e:60:
ad:21:fc:8f:ad:60:a4:67:5d:0f:48:e0:5b:fb:b9:4f:d4:5f:
92:6c:59:04:52:14:3e:ac:3c:e5:b2:f7:e3:2a:9d:a8:39:12:
b5:22:1f:b3:55:33:4c:cd:bf:6b:fa:30:ee:92:cd:3c:85:bc:
77:92:b1:65:7a:d4:46:dc:6b:29:d0:c6:ec:3a:6b:46:20:b2:
82:b1:09:ed:6d:cc:73:3d:94:35:fc:f8:29:48:45:d8:a0:2d:
d2:83:7c:80:79:73:0a:48:5d:15:90:40:83:40:a1:6c:af:9a:
17:67:ab:ee:b8:43:a1:c0:7e:f3:64:c2:28:ea:c2:cc:e7:d2:
f8:c2:a1:50:a8:ee:13:e1:ed:95:59:f1:e4:44:18:03:3c:aa:
04:1b:07:dd:1f:37:c2:2e:0a:5b:8d:fe:b6:0b:2c:28:8f:59:
94:9c:86:cb:87:d8:10:2b:41:12:c0:3a:8b:4e:e8:9b:7f:79:
c7:6a:e0:ca:12:46:49:6a:04:22:0d:e4:f4:9b:dd:82:2d:f0:
77:d8:a9:c6:69:75:e3:c7:89:91:ed:51:41:3e:62:7e:24:69:
86:77:b5:94:ef:1e:f2:aa:25:b7:6f:f0:4c:28:e9:4c:0c:1b:
51:6e:ed:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j/O/8+sjMkMOJf/olMpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZThlOWI0ZDhkYjk0NmJiMjBjY2Y1MTI3OTcwNzVjOGFm
ZDgzY2QwHhcNMjUwNjI4MjIwMjExWhcNMjUwNjI5MjIwMjExWjAzMTEwLwYDVQQD
EygyODk0NmRkZjFkYmZhYzJkODkxYjRlOTNhMDFjYjAwMWVkZDk4ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/1950JvKjlQLAjVBo3eb37tnkTl
axfGPPcB00R53JlrougpsiGUzNAgrdGbuWOKIdSJhLrLmGPtSlxR5YFAGcDYLbeK
gb//7Fj1UVDIoBcs30e62cuoYUPY0v/lDOPLbbchMk5Qc+b+ZyXVZzjEnzfpoCFh
qMxb6AvtNXNImkkacgHqaRQTj+4VsSNFGtlSoOjToTEQ3wHtM3tgYdoXD5JEh4/T
OZOCSPgjHT2AnFLmZuXDPgcL0+btNUAM9dG8QSay3Wi6DrlDZD3cmNHqjuveoOXX
+dJuweznktj3qiqEkJLwJX02pToTnQEHu0GvyTntSaYpLZbxHL6nztca0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiUbd8dv6wtiRtOk6AcsAHt2Y6nMB8GA1UdIwQY
MBaAFKro6bTY25RrsgzPUSeXB1yK/YPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgt
Zjg5MDU2NzJlNTlkLzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgtZjg5MDU2NzJlNTlk
LzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhpIcPgi
exi4AFtsJQw3GQ5grSH8j61gpGddD0jgW/u5T9RfkmxZBFIUPqw85bL34yqdqDkS
tSIfs1UzTM2/a/ow7pLNPIW8d5KxZXrURtxrKdDG7DprRiCygrEJ7W3Mcz2UNfz4
KUhF2KAt0oN8gHlzCkhdFZBAg0ChbK+aF2er7rhDocB+82TCKOrCzOfS+MKhUKju
E+HtlVnx5EQYAzyqBBsH3R83wi4KW43+tgssKI9ZlJyGy4fYECtBEsA6i07om395
x2rgyhJGSWoEIg3k9Jvdgi3wd9ipxml148eJke1RQT5ifiRphne1lO8e8qolt2/w
TCjpTAwbUW7tVw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:28:16 2025 by rpki-client