Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: tQahiVzJreK114R9EC84eMBDi6DyBdrffaidcMEj8p8=
Subject key identifier: 54:79:CB:2F:38:3E:67:6D:69:82:3E:ED:DC:24:5B:97:95:46:AF:EE
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 01984A41215CBAFA5227821A71A22A7FBF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 10DB
Signing time: Sun 27 Jul 2025 05:00:39 +0000
Manifest this update: Sun 27 Jul 2025 05:00:39 +0000
Manifest next update: Mon 28 Jul 2025 05:00:39 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: /zUYCuDFPaKqsgFJ7/CC1F2s/BEN1FsNI7ViWYSEavc=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:21:5c:ba:fa:52:27:82:1a:71:a2:2a:7f:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Jul 27 05:00:39 2025 GMT
Not After : Jul 28 05:00:39 2025 GMT
Subject: CN=5479cb2f383e676d69823eeddc245b979546afee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:bf:66:08:a4:8f:d8:bf:42:71:68:08:74:
3b:7c:08:1f:04:86:12:01:ba:33:02:8c:7b:f4:23:
ad:5d:b3:e4:2b:e1:47:bc:e0:6b:da:4d:67:1b:a8:
55:ec:56:5b:fb:bf:0a:23:5b:d6:5f:fe:9f:b7:b7:
aa:8b:3e:e4:2b:c6:25:6f:9a:fb:43:b5:68:b7:06:
43:95:e9:65:89:b2:c9:12:7b:fd:c8:86:25:12:4c:
65:19:cc:d9:5f:75:ac:78:3a:0b:ac:88:d5:5b:3d:
e3:2e:a1:47:f4:5e:ce:cd:89:61:9c:4e:33:5d:ab:
cf:02:1b:45:53:52:ec:16:75:f6:41:ad:ac:6a:a7:
e5:a8:34:04:58:95:d5:74:20:78:05:75:00:54:05:
25:b8:77:00:f5:8f:05:3b:62:ca:11:8f:1f:18:3a:
8a:0e:5f:41:e0:a0:c9:5d:da:2d:19:9d:86:b5:83:
fc:bc:33:b0:62:4b:2a:6a:32:b5:62:e5:d0:d3:c4:
16:01:1d:7b:19:26:33:31:53:5a:1f:9d:bd:35:d0:
ab:97:4f:84:05:5e:02:d7:6c:ac:86:18:b9:36:4f:
59:6a:ce:cb:f2:ee:74:a5:16:c1:a5:21:1c:13:f5:
a6:e8:4d:e9:ae:85:8d:d8:e7:5c:7d:d5:0d:28:81:
80:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:79:CB:2F:38:3E:67:6D:69:82:3E:ED:DC:24:5B:97:95:46:AF:EE
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:89:b8:f4:a0:d8:4e:d7:33:25:b0:78:3c:4e:34:3f:a4:9b:
89:21:7e:f8:29:54:ed:db:9d:64:a0:5f:de:bd:6a:e9:19:f4:
a6:27:6f:39:e4:0a:81:15:0e:1e:94:a7:2e:87:b9:ad:87:b6:
31:27:28:7e:9b:03:7f:a1:f3:61:85:5d:8e:05:05:97:6d:de:
6c:b5:d1:c0:25:d5:ee:e0:fb:7b:38:92:9d:c3:e8:fd:f6:bf:
23:bf:9d:7e:7a:28:4e:19:79:77:64:a7:ea:ef:cb:21:bb:02:
31:23:b8:17:9d:ed:e5:dd:30:ca:7e:76:d8:b7:08:52:f2:6f:
31:d9:e9:17:b7:ce:fe:c2:f4:f0:54:78:f2:18:6a:a1:d9:df:
3a:7a:d4:ef:92:20:c1:ea:50:c1:fa:4c:e7:00:1c:9d:43:66:
6a:ab:99:58:29:71:b0:69:c5:5e:2f:85:ba:11:c7:12:b4:8d:
a3:a5:b2:74:9a:0a:c4:8e:07:8d:a1:98:1c:b4:84:4d:7b:7d:
65:56:59:bd:5b:c7:be:79:98:6f:68:af:26:ab:72:4a:68:8c:
f2:0a:ad:3b:9b:21:3f:76:57:8b:5c:c5:cd:c2:67:56:ae:12:
f1:cd:c3:97:57:a3:88:c7:b7:1f:3d:b9:c7:c9:0b:e2:1c:52:
88:47:cc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQSFcuvpSJ4IacaIqf78PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi
MjRhYmQwHhcNMjUwNzI3MDUwMDM5WhcNMjUwNzI4MDUwMDM5WjAzMTEwLwYDVQQD
Eyg1NDc5Y2IyZjM4M2U2NzZkNjk4MjNlZWRkYzI0NWI5Nzk1NDZhZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyu/Zgikj9i/QnFoCHQ7fAgfBIYS
AbozAox79COtXbPkK+FHvOBr2k1nG6hV7FZb+78KI1vWX/6ft7eqiz7kK8Ylb5r7
Q7VotwZDlellibLJEnv9yIYlEkxlGczZX3WseDoLrIjVWz3jLqFH9F7OzYlhnE4z
XavPAhtFU1LsFnX2Qa2saqflqDQEWJXVdCB4BXUAVAUluHcA9Y8FO2LKEY8fGDqK
Dl9B4KDJXdotGZ2GtYP8vDOwYksqajK1YuXQ08QWAR17GSYzMVNaH529NdCrl0+E
BV4C12yshhi5Nk9Zas7L8u50pRbBpSEcE/Wm6E3proWN2OdcfdUNKIGAkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR5yy84PmdtaYI+7dwkW5eVRq/uMB8GA1UdIwQY
MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt
NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz
LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4m49KDY
TtczJbB4PE40P6SbiSF++ClU7dudZKBf3r1q6Rn0pidvOeQKgRUOHpSnLoe5rYe2
MScofpsDf6HzYYVdjgUFl23ebLXRwCXV7uD7eziSncPo/fa/I7+dfnooThl5d2Sn
6u/LIbsCMSO4F53t5d0wyn522LcIUvJvMdnpF7fO/sL08FR48hhqodnfOnrU75Ig
wepQwfpM5wAcnUNmaquZWClxsGnFXi+FuhHHErSNo6WydJoKxI4HjaGYHLSETXt9
ZVZZvVvHvnmYb2ivJqtySmiM8gqtO5shP3ZXi1zFzcJnVq4S8c3Dl1ejiMe3Hz25
x8kL4hxSiEfMoA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:41 2025 by rpki-client