Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
File: QAnHa7ftKz0UTNhVpewajrfU3pk.mft (raw, json)
Hash identifier: vkaPq3ts610hE/V6vZJMhLZ08ufyuCTlh4Lxu/c0HG0=
Subject key identifier: CD:12:B4:62:75:17:CB:6F:9E:BD:FD:F5:98:24:28:54:05:B8:D7:B4
Authority key identifier: 40:09:C7:6B:B7:ED:2B:3D:14:4C:D8:55:A5:EC:1A:8E:B7:D4:DE:99
Certificate issuer: /CN=4009c76bb7ed2b3d144cd855a5ec1a8eb7d4de99
Certificate serial: 019848C0E46300359DF41AD5523DB341B25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAnHa7ftKz0UTNhVpewajrfU3pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
Manifest number: 14A5
Signing time: Sat 26 Jul 2025 22:00:57 +0000
Manifest this update: Sat 26 Jul 2025 22:00:57 +0000
Manifest next update: Sun 27 Jul 2025 22:00:57 +0000
Files and hashes: 1: QAnHa7ftKz0UTNhVpewajrfU3pk.crl (hash: q0l+8FbIzbaqi/rqwpVPg00zxhtPdzTa2pQkS7+CKR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAnHa7ftKz0UTNhVpewajrfU3pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:e4:63:00:35:9d:f4:1a:d5:52:3d:b3:41:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4009c76bb7ed2b3d144cd855a5ec1a8eb7d4de99
Validity
Not Before: Jul 26 22:00:57 2025 GMT
Not After : Jul 27 22:00:57 2025 GMT
Subject: CN=cd12b4627517cb6f9ebdfdf59824285405b8d7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e7:12:72:40:b2:e3:4d:b9:33:f6:0b:2a:12:
07:67:f4:9b:68:40:b2:6f:61:8d:fd:e8:13:47:5a:
12:eb:96:3c:7f:8b:c3:eb:7a:17:66:8a:9a:73:e1:
a5:d2:4a:bb:24:4b:ff:6a:99:0c:3c:74:88:64:e7:
76:8b:4d:2b:cb:4e:3c:81:59:e5:d7:8c:8c:ed:b7:
ab:7e:21:75:e0:d3:3d:ed:ff:a5:a3:ab:bf:be:b6:
6b:24:4b:f9:6f:db:9b:74:1e:08:53:84:08:f1:93:
36:a0:0f:70:b8:a0:1b:92:1a:5b:ce:f1:be:a6:71:
93:6c:35:f3:c3:03:77:c2:43:a0:55:7d:c6:63:f9:
21:ac:a0:fb:11:d9:48:43:0d:d8:3d:62:92:65:86:
b1:53:7f:d2:06:f6:a4:81:d2:e7:51:12:f8:2b:b6:
e7:2e:4c:0b:d3:c6:42:8a:51:76:6f:fa:a5:87:29:
b1:be:a9:37:56:a2:4f:98:39:ca:63:1e:d9:ac:5c:
52:82:81:59:07:d8:0b:c3:77:8a:a4:1b:59:00:3b:
8d:83:c3:ee:ba:68:74:74:a4:29:2a:89:f8:c5:0b:
e5:2f:34:38:a9:74:fd:23:6b:f0:51:4c:9a:bd:af:
13:a5:d7:b2:a3:cf:b6:ad:d3:d7:f2:d9:bc:30:5b:
d6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:12:B4:62:75:17:CB:6F:9E:BD:FD:F5:98:24:28:54:05:B8:D7:B4
X509v3 Authority Key Identifier:
keyid:40:09:C7:6B:B7:ED:2B:3D:14:4C:D8:55:A5:EC:1A:8E:B7:D4:DE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAnHa7ftKz0UTNhVpewajrfU3pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:de:97:23:be:2b:f6:7e:ae:c9:3f:b4:f6:9b:25:e1:69:2f:
ae:ed:50:40:33:4d:3a:c5:31:d1:6f:f3:e9:14:98:e0:2f:5e:
cb:f8:f6:fb:33:a3:1c:d4:d1:13:0d:59:8b:13:4c:cc:e2:31:
ca:e8:73:fe:27:ed:db:a1:67:46:d1:26:bd:27:a9:e5:44:56:
1b:8d:e1:0a:99:f9:e3:db:d6:d7:d0:5b:9f:f2:95:55:0b:5a:
15:2f:ac:b3:71:9d:84:32:71:87:27:9e:ac:c4:ba:28:8d:79:
95:e7:0a:56:48:5e:cd:28:69:81:85:5d:8c:4d:a2:bb:1c:35:
2b:5e:94:47:0f:54:be:e0:f6:57:d0:39:03:5e:9b:95:5c:a5:
c7:11:30:7b:92:ad:e1:0c:7a:76:ee:a3:80:f7:74:a0:55:f9:
f1:26:8d:e2:85:b3:99:a9:0b:fe:0c:4c:f2:cc:fa:b6:d0:41:
b2:f4:f6:48:49:5a:47:83:88:1c:cd:01:81:0a:c9:60:e5:6e:
bc:70:31:3c:19:17:01:ec:af:21:d6:dd:b8:a9:9e:a9:6a:2c:
4d:d3:b6:17:4c:f8:41:dc:9e:5d:a6:bc:7a:b1:80:6a:b4:2c:
0f:42:eb:e0:b8:87:db:13:0d:08:0c:24:0d:b8:d3:79:ff:69:
e5:14:04:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwORjADWd9BrVUj2zQbJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDljNzZiYjdlZDJiM2QxNDRjZDg1NWE1ZWMxYThlYjdk
NGRlOTkwHhcNMjUwNzI2MjIwMDU3WhcNMjUwNzI3MjIwMDU3WjAzMTEwLwYDVQQD
EyhjZDEyYjQ2Mjc1MTdjYjZmOWViZGZkZjU5ODI0Mjg1NDA1YjhkN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ecSckCy4025M/YLKhIHZ/SbaECy
b2GN/egTR1oS65Y8f4vD63oXZoqac+Gl0kq7JEv/apkMPHSIZOd2i00ry048gVnl
14yM7berfiF14NM97f+lo6u/vrZrJEv5b9ubdB4IU4QI8ZM2oA9wuKAbkhpbzvG+
pnGTbDXzwwN3wkOgVX3GY/khrKD7EdlIQw3YPWKSZYaxU3/SBvakgdLnURL4K7bn
LkwL08ZCilF2b/qlhymxvqk3VqJPmDnKYx7ZrFxSgoFZB9gLw3eKpBtZADuNg8Pu
umh0dKQpKon4xQvlLzQ4qXT9I2vwUUyava8Tpdeyo8+2rdPX8tm8MFvWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0StGJ1F8tvnr399ZgkKFQFuNe0MB8GA1UdIwQY
MBaAFEAJx2u37Ss9FEzYVaXsGo631N6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFuSGE3ZnRLejBVVE5oVnBld2FqcmZVM3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNjBlYjYtM2JiMi00NWMwLTlkYWYt
OWY1NWI0YWU5MGNjLzEvUUFuSGE3ZnRLejBVVE5oVnBld2FqcmZVM3BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNjBlYjYtM2JiMi00NWMwLTlkYWYtOWY1NWI0YWU5MGNj
LzEvUUFuSGE3ZnRLejBVVE5oVnBld2FqcmZVM3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwN6XI74r
9n6uyT+09psl4Wkvru1QQDNNOsUx0W/z6RSY4C9ey/j2+zOjHNTREw1ZixNMzOIx
yuhz/ift26FnRtEmvSep5URWG43hCpn549vW19Bbn/KVVQtaFS+ss3GdhDJxhyee
rMS6KI15lecKVkhezShpgYVdjE2iuxw1K16URw9UvuD2V9A5A16blVylxxEwe5Kt
4Qx6du6jgPd0oFX58SaN4oWzmakL/gxM8sz6ttBBsvT2SElaR4OIHM0BgQrJYOVu
vHAxPBkXAeyvIdbduKmeqWosTdO2F0z4QdyeXaa8erGAarQsD0Lr4LiH2xMNCAwk
DbjTef9p5RQE5w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:11:50 2025 by rpki-client