Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier: Feu0Eb9YhjgtyCeWpUhWISsNRqQ37IQJZpclrr36X4M=
Subject key identifier: D4:6E:76:38:1A:2C:76:A3:4F:93:06:73:92:CC:B2:D1:33:A8:A8:BE
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer: /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial: 019857C693EBFA7F779E20BACC7AE69F1067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number: 04A8
Signing time: Tue 29 Jul 2025 20:01:28 +0000
Manifest this update: Tue 29 Jul 2025 20:01:28 +0000
Manifest next update: Wed 30 Jul 2025 20:01:28 +0000
Files and hashes: 1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: UXE8UGR9haOoMdd6zx3VqC1h3xIpuIN1i6x54TSnkKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:c6:93:eb:fa:7f:77:9e:20:ba:cc:7a:e6:9f:10:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Validity
Not Before: Jul 29 20:01:28 2025 GMT
Not After : Jul 30 20:01:28 2025 GMT
Subject: CN=d46e76381a2c76a34f93067392ccb2d133a8a8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:9f:8b:4e:3d:89:5e:1a:02:89:d7:78:fa:
2c:86:90:51:52:e5:63:f7:b2:35:ea:43:11:16:96:
36:83:16:7d:ce:ce:44:e4:13:83:b8:b3:d7:90:51:
b1:8c:35:e0:2c:5a:46:69:18:bc:d2:f1:bc:bb:95:
c6:3d:2b:80:96:a7:f5:04:dc:25:37:57:59:df:c6:
b8:ab:3c:77:4f:24:25:53:af:91:34:82:84:4b:9c:
f0:32:e5:12:77:0e:c6:6d:de:af:ad:9c:41:4d:ed:
bc:71:46:c1:2a:02:15:47:f7:10:4b:52:01:d1:de:
9e:ce:f8:ae:98:83:21:95:a6:d9:18:47:a4:28:c6:
39:d2:d5:32:b7:c8:4c:cd:0b:1d:b5:34:b0:76:a7:
29:3b:10:40:80:41:e4:4e:b9:4f:2e:ed:eb:0f:c8:
27:67:9c:e6:87:b2:ed:b6:49:e9:d5:08:41:a3:e9:
8d:f3:08:e3:c6:0e:0a:c4:38:5d:18:b1:00:44:d0:
30:77:eb:b2:e2:31:5c:5c:7d:80:ec:0f:f3:e7:e5:
0f:da:48:e9:23:52:1f:7b:94:ba:aa:94:ee:f1:fc:
c7:59:9c:ae:ba:0d:36:9f:f6:c7:71:9a:4a:70:16:
d3:1e:5f:a4:2d:36:1f:b4:c6:5b:e2:6f:3e:68:3a:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:76:38:1A:2C:76:A3:4F:93:06:73:92:CC:B2:D1:33:A8:A8:BE
X509v3 Authority Key Identifier:
keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:17:23:be:94:42:8f:80:45:79:a1:a8:4d:05:7c:b9:0f:41:
fd:fc:f6:55:27:0f:92:7d:9c:c0:f2:b5:6c:03:6b:cc:4a:e4:
28:75:33:25:65:68:b1:48:63:5a:1e:d6:71:e1:b2:be:58:cf:
f0:21:25:ff:36:40:b1:8f:5d:d0:9e:ca:68:ad:e5:f7:17:79:
7b:58:50:7c:fd:26:8e:92:be:dd:3a:6b:80:3d:73:81:70:d6:
68:98:1a:86:95:97:01:f4:fe:6d:ad:42:e9:24:75:d4:64:40:
f4:9d:08:1a:fd:c5:32:0e:21:a1:f0:f9:89:33:de:ba:f5:e6:
73:ba:72:d6:b5:10:48:5e:57:14:aa:de:48:1b:95:be:ea:e1:
00:ce:26:8b:d4:8e:c0:50:4b:62:56:e7:a4:51:a7:bb:2b:c5:
34:11:2e:c6:6f:db:d0:32:c7:e5:4d:3a:f7:3a:77:1c:db:d3:
62:ca:35:ac:12:ff:a7:bc:d4:26:25:c7:bc:60:ef:06:20:2b:
7f:a9:f0:fe:37:df:ab:2d:f7:53:1e:0e:df:6d:cb:99:87:2b:
fe:6d:8d:0a:ab:aa:ce:30:73:f0:1a:f7:bd:64:4b:0e:fe:bb:
1d:ee:fd:ce:7d:5b:02:5e:ef:03:a6:99:41:ef:cf:16:24:9c:
7d:5a:e7:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXxpPr+n93niC6zHrmnxBnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWJmY2IwNTU4Yzg2ZjgxM2QwMTEwNDVmZDE3ZDE2YWUy
ZWJlOGUwHhcNMjUwNzI5MjAwMTI4WhcNMjUwNzMwMjAwMTI4WjAzMTEwLwYDVQQD
EyhkNDZlNzYzODFhMmM3NmEzNGY5MzA2NzM5MmNjYjJkMTMzYThhOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvefi049iV4aAonXePoshpBRUuVj
97I16kMRFpY2gxZ9zs5E5BODuLPXkFGxjDXgLFpGaRi80vG8u5XGPSuAlqf1BNwl
N1dZ38a4qzx3TyQlU6+RNIKES5zwMuUSdw7Gbd6vrZxBTe28cUbBKgIVR/cQS1IB
0d6ezviumIMhlabZGEekKMY50tUyt8hMzQsdtTSwdqcpOxBAgEHkTrlPLu3rD8gn
Z5zmh7Lttknp1QhBo+mN8wjjxg4KxDhdGLEARNAwd+uy4jFcXH2A7A/z5+UP2kjp
I1Ife5S6qpTu8fzHWZyuug02n/bHcZpKcBbTHl+kLTYftMZb4m8+aDpohQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRudjgaLHajT5MGc5LMstEzqKi+MB8GA1UdIwQY
MBaAFEFb/LBVjIb4E9ARBF/RfRauLr6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEt
ODcxZWRlOTAxNGU0LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEtODcxZWRlOTAxNGU0
LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxcjvpRC
j4BFeaGoTQV8uQ9B/fz2VScPkn2cwPK1bANrzErkKHUzJWVosUhjWh7WceGyvljP
8CEl/zZAsY9d0J7KaK3l9xd5e1hQfP0mjpK+3TprgD1zgXDWaJgahpWXAfT+ba1C
6SR11GRA9J0IGv3FMg4hofD5iTPeuvXmc7py1rUQSF5XFKreSBuVvurhAM4mi9SO
wFBLYlbnpFGnuyvFNBEuxm/b0DLH5U069zp3HNvTYso1rBL/p7zUJiXHvGDvBiAr
f6nw/jffqy33Ux4O323LmYcr/m2NCquqzjBz8Br3vWRLDv67He79zn1bAl7vA6aZ
Qe/PFiScfVrnOA==
-----END CERTIFICATE-----
Generated at Wed Jul 30 05:17:00 2025 by rpki-client