Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: mP4E1T//YDnB78g62jrHUaql5eNTJcp+/toukH3I3co=
Subject key identifier: 3D:4B:50:0D:2C:D6:76:5A:0E:C1:B1:76:1C:18:E3:17:12:73:D3:6F
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019868F0B84A042E1CEFAFCAE587895FE771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1612
Signing time: Sat 02 Aug 2025 04:01:02 +0000
Manifest this update: Sat 02 Aug 2025 04:01:02 +0000
Manifest next update: Sun 03 Aug 2025 04:01:02 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: xZaVDCPAHO6V+p27vo9qFEiuXQKii30R143wFNQujLo=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 Aug 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:f0:b8:4a:04:2e:1c:ef:af:ca:e5:87:89:5f:e7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Aug 2 04:01:02 2025 GMT
Not After : Aug 3 04:01:02 2025 GMT
Subject: CN=3d4b500d2cd6765a0ec1b1761c18e3171273d36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:14:b4:0a:42:4a:53:d3:bb:4b:bc:cf:c8:
b8:0c:3e:47:10:b8:23:b7:88:8c:c2:93:a2:20:d6:
c4:b3:cd:bd:81:62:6a:8b:27:b4:52:d4:4b:57:60:
32:59:ac:e7:9d:f2:9f:bc:d9:83:87:c4:58:59:3f:
62:02:78:35:87:da:62:89:e9:cf:7f:cd:11:35:b1:
4e:a0:73:aa:68:6c:ee:47:d8:af:fa:ce:e0:dc:1c:
53:85:26:b0:b0:71:d5:81:a2:66:7d:b6:98:85:3a:
a5:82:28:94:80:69:71:26:ab:7c:94:5c:35:3b:2a:
49:04:bc:a7:0b:25:ab:d5:53:81:f3:7d:8f:a2:b0:
99:7f:58:6d:a3:40:0a:20:22:73:38:55:67:6e:b4:
d8:21:a5:16:2d:2a:36:34:1f:81:95:f8:37:ad:92:
0d:8d:63:bd:55:af:5c:ff:78:b4:87:8e:ef:1d:1a:
21:b8:93:13:14:3f:0c:db:40:99:29:e3:aa:61:f8:
9f:53:77:6e:c5:15:ca:99:89:9f:d8:70:b4:70:45:
89:bd:54:08:5e:fb:dc:e3:b3:47:9c:6a:81:7c:ea:
a4:1f:2d:7e:c3:79:4b:e0:b4:f1:61:2c:2a:a3:18:
05:f9:98:e5:72:31:c9:e3:04:4f:63:74:63:7a:e4:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:50:0D:2C:D6:76:5A:0E:C1:B1:76:1C:18:E3:17:12:73:D3:6F
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:15:b3:65:59:75:09:e2:54:74:13:77:e3:9b:b4:36:9d:81:
11:6c:bf:9a:61:f2:06:60:b7:38:00:be:76:38:ec:8f:ac:56:
b4:36:f7:4e:98:fd:de:99:67:0f:70:fb:dc:3c:f6:e3:df:38:
dd:67:30:47:d4:ae:73:30:3b:62:aa:e3:eb:de:92:a9:47:66:
cd:f6:15:8c:09:a0:13:7f:53:68:ee:b1:ff:e1:e3:8d:66:f2:
43:99:cf:1b:d9:ab:d2:13:0c:b2:e9:a5:f1:ec:3e:7d:79:ad:
08:b7:35:2d:c8:c9:bd:3d:13:e4:a2:1d:ad:8e:47:07:8e:95:
8d:ed:c1:e6:74:aa:65:33:04:b2:92:ad:c1:86:73:1d:25:0c:
45:ec:6d:3a:29:a3:de:e0:e3:e1:25:40:76:14:57:d5:e8:28:
ea:4a:0c:fc:d7:b7:d6:c2:57:55:a2:22:3d:e1:db:12:8f:24:
80:c9:b1:82:2a:cc:91:49:40:e5:51:d3:33:a2:45:ae:96:ca:
e8:8a:2b:30:52:74:84:bc:3f:9b:e5:9d:92:77:54:f7:4d:ad:
fe:1f:91:2e:d4:34:5a:36:73:5d:4f:b4:0f:9b:f6:24:ab:7f:
e8:f1:f6:94:1e:cb:1b:2d:92:9f:5a:65:4e:85:56:9e:6b:61:
5a:18:22:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZho8LhKBC4c76/K5YeJX+dxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2
NzllZTEwHhcNMjUwODAyMDQwMTAyWhcNMjUwODAzMDQwMTAyWjAzMTEwLwYDVQQD
EygzZDRiNTAwZDJjZDY3NjVhMGVjMWIxNzYxYzE4ZTMxNzEyNzNkMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvIUtApCSlPTu0u8z8i4DD5HELgj
t4iMwpOiINbEs829gWJqiye0UtRLV2AyWaznnfKfvNmDh8RYWT9iAng1h9piienP
f80RNbFOoHOqaGzuR9iv+s7g3BxThSawsHHVgaJmfbaYhTqlgiiUgGlxJqt8lFw1
OypJBLynCyWr1VOB832PorCZf1hto0AKICJzOFVnbrTYIaUWLSo2NB+Blfg3rZIN
jWO9Va9c/3i0h47vHRohuJMTFD8M20CZKeOqYfifU3duxRXKmYmf2HC0cEWJvVQI
Xvvc47NHnGqBfOqkHy1+w3lL4LTxYSwqoxgF+ZjlcjHJ4wRPY3RjeuTDBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1LUA0s1nZaDsGxdhwY4xcSc9NvMB8GA1UdIwQY
MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt
ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz
LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhWzZVl1
CeJUdBN345u0Np2BEWy/mmHyBmC3OAC+djjsj6xWtDb3Tpj93plnD3D73Dz24984
3WcwR9SuczA7Yqrj696SqUdmzfYVjAmgE39TaO6x/+HjjWbyQ5nPG9mr0hMMsuml
8ew+fXmtCLc1LcjJvT0T5KIdrY5HB46Vje3B5nSqZTMEspKtwYZzHSUMRextOimj
3uDj4SVAdhRX1ego6koM/Ne31sJXVaIiPeHbEo8kgMmxgirMkUlA5VHTM6JFrpbK
6IorMFJ0hLw/m+WdkndU902t/h+RLtQ0WjZzXU+0D5v2JKt/6PH2lB7LGy2Sn1pl
ToVWnmthWhginA==
-----END CERTIFICATE-----
Generated at Sat Aug 2 14:14:40 2025 by rpki-client