Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: 0gCWrtV58c9jLbG4ZBz5+LNc2tt4F5DhG5A8eJJRdyQ=
Subject key identifier: A9:3F:15:88:FB:05:74:1D:50:22:C2:56:30:02:EC:EF:64:96:0D:65
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 0198537B1540CBFCB0A626F08D716856E862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 0F99
Signing time: Tue 29 Jul 2025 00:00:31 +0000
Manifest this update: Tue 29 Jul 2025 00:00:31 +0000
Manifest next update: Wed 30 Jul 2025 00:00:31 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: o570a/npG+ao2GOEJjpatQk8/89nria0dKtThWjFf18=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:15:40:cb:fc:b0:a6:26:f0:8d:71:68:56:e8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Jul 29 00:00:31 2025 GMT
Not After : Jul 30 00:00:31 2025 GMT
Subject: CN=a93f1588fb05741d5022c2563002ecef64960d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:09:ab:1f:8f:72:14:24:fa:0a:ba:3c:dd:
cb:70:fd:d7:4b:c3:53:a3:20:83:e8:a2:99:cb:9b:
2a:48:bc:ec:0c:37:8e:9d:f0:b2:ef:2c:3f:b5:b8:
a4:3d:cf:14:93:39:1c:7b:8c:17:5c:07:a1:31:2e:
8b:bf:80:09:cd:17:8e:2f:d1:ba:a7:37:d1:44:c9:
bf:2a:30:d5:c5:8a:fd:4b:32:fb:5c:0b:d9:a0:6e:
8e:77:0e:d2:62:1a:0d:82:50:77:16:19:a9:2d:e8:
34:3d:84:91:47:8d:dd:8a:e9:b0:77:22:a9:cb:a0:
56:d4:ec:c9:26:3a:7e:a7:97:6b:1d:c0:a9:64:d0:
dc:5a:cd:43:4c:ee:1a:f8:cc:34:e8:53:44:d6:c4:
3d:9b:26:ea:56:b3:b7:07:39:12:2f:52:ea:8c:1a:
e5:6e:ce:46:61:4b:e9:13:e7:ac:1e:da:a0:13:fa:
cf:7a:69:d1:2e:26:67:fb:d8:28:28:02:9d:55:96:
79:6e:7a:e7:27:c2:8f:02:9f:08:00:fa:9b:e1:d1:
63:f3:dc:7e:a3:a8:af:55:5d:d6:ba:d8:b9:f8:e2:
ba:dd:df:43:1d:fb:ab:a5:d2:94:94:78:e8:ab:c7:
a3:ba:54:5d:3f:3f:fc:13:16:fb:d1:bf:82:86:e8:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3F:15:88:FB:05:74:1D:50:22:C2:56:30:02:EC:EF:64:96:0D:65
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4a:c3:f9:ee:5d:c4:2c:95:81:19:ff:7e:5b:24:0f:02:9b:
ae:28:06:74:a6:9d:04:9f:4c:6a:6d:cf:22:5c:f1:71:b0:06:
38:41:f0:73:32:bd:7f:2d:8f:f4:41:cc:75:af:b9:09:8b:1c:
f9:10:72:26:a3:5e:8f:e4:4e:2e:34:2f:dd:4a:d0:e2:d2:52:
bb:48:8d:fb:52:7c:01:1e:6c:9e:60:f0:0b:e6:11:9c:68:0f:
cd:06:6a:ec:15:00:f3:10:35:3a:10:f3:35:a3:00:54:bd:3a:
a0:7b:2c:05:6d:19:fa:b5:b1:ed:5d:bf:32:70:0a:58:2c:9b:
dc:bd:9e:de:e7:b8:cc:0a:d0:c9:dc:e1:5f:08:82:b6:cf:d0:
7f:4c:69:32:a2:21:78:d4:5a:16:12:30:3f:ea:43:49:75:0b:
f1:dc:d8:cc:23:4f:4f:e1:6c:b6:2e:c2:ce:ac:d0:7b:6b:7c:
ea:30:56:cc:f8:99:16:aa:88:a1:b5:a6:0f:14:49:fc:43:13:
2c:4f:ec:ae:10:7a:6f:b0:75:8e:90:20:22:d1:cf:2d:39:65:
a0:bb:5b:84:a0:63:7b:a7:1e:2d:d5:d9:b6:b3:05:da:d4:d1:
e7:ac:58:72:52:b7:5b:20:ef:81:e0:15:e9:5e:cc:d1:ad:70:
5e:f3:ea:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTexVAy/ywpibwjXFoVuhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZWY0YjA2MGE4Yjc5YjI4OTNkMzMwOWFkNTBkMWNjY2Iy
YjllMzEwHhcNMjUwNzI5MDAwMDMxWhcNMjUwNzMwMDAwMDMxWjAzMTEwLwYDVQQD
EyhhOTNmMTU4OGZiMDU3NDFkNTAyMmMyNTYzMDAyZWNlZjY0OTYwZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0AJqx+PchQk+gq6PN3LcP3XS8NT
oyCD6KKZy5sqSLzsDDeOnfCy7yw/tbikPc8Ukzkce4wXXAehMS6Lv4AJzReOL9G6
pzfRRMm/KjDVxYr9SzL7XAvZoG6Odw7SYhoNglB3FhmpLeg0PYSRR43diumwdyKp
y6BW1OzJJjp+p5drHcCpZNDcWs1DTO4a+Mw06FNE1sQ9mybqVrO3BzkSL1LqjBrl
bs5GYUvpE+esHtqgE/rPemnRLiZn+9goKAKdVZZ5bnrnJ8KPAp8IAPqb4dFj89x+
o6ivVV3Wuti5+OK63d9DHfurpdKUlHjoq8ejulRdPz/8Exb70b+Chuj0wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKk/FYj7BXQdUCLCVjAC7O9klg1lMB8GA1UdIwQY
MBaAFEHvSwYKi3myiT0zCa1Q0czLK54xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEt
YmY4ZTVkODI2NWEyLzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xMTFiODEtYWE2Yy00MGRhLWJlZDEtYmY4ZTVkODI2NWEy
LzEvUWU5TEJncUxlYktKUFRNSnJWRFJ6TXNybmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0rD+e5d
xCyVgRn/flskDwKbrigGdKadBJ9Mam3PIlzxcbAGOEHwczK9fy2P9EHMda+5CYsc
+RByJqNej+ROLjQv3UrQ4tJSu0iN+1J8AR5snmDwC+YRnGgPzQZq7BUA8xA1OhDz
NaMAVL06oHssBW0Z+rWx7V2/MnAKWCyb3L2e3ue4zArQydzhXwiCts/Qf0xpMqIh
eNRaFhIwP+pDSXUL8dzYzCNPT+Fsti7CzqzQe2t86jBWzPiZFqqIobWmDxRJ/EMT
LE/srhB6b7B1jpAgItHPLTlloLtbhKBje6ceLdXZtrMF2tTR56xYclK3WyDvgeAV
6V7M0a1wXvPqAQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:03:04 2025 by rpki-client