Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File: QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier: NuILHsAw7Em9MOhpUx+tKHbmyw/TnoPuOL1rtapppyg=
Subject key identifier: 5D:47:BB:5E:87:56:13:09:0E:49:11:1A:59:62:95:8D:CB:20:EA:A3
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer: /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial: 019853B2001CB6C49783010316971EE58A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number: 049B
Signing time: Tue 29 Jul 2025 01:00:31 +0000
Manifest this update: Tue 29 Jul 2025 01:00:31 +0000
Manifest next update: Wed 30 Jul 2025 01:00:31 +0000
Files and hashes: 1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: tlSgjBpX5AMjcEaeMA5s6luCCQyD5Z7jatYchNmQ0y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:00:1c:b6:c4:97:83:01:03:16:97:1e:e5:8a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Validity
Not Before: Jul 29 01:00:31 2025 GMT
Not After : Jul 30 01:00:31 2025 GMT
Subject: CN=5d47bb5e875613090e49111a5962958dcb20eaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:fe:d2:19:b9:d0:21:2d:22:f4:1f:ff:a3:
8c:2f:a2:1b:1a:07:3a:ea:d4:91:44:b7:1f:dd:ca:
b0:6a:0c:02:a3:f8:e6:b5:31:58:bb:3a:9d:14:de:
11:14:1c:09:9b:15:d8:7a:4b:da:3d:69:9a:f7:09:
d3:eb:ba:08:45:83:35:7f:2b:ee:2c:e3:20:b2:9e:
7c:24:b1:fd:54:e7:de:8c:5f:7a:a5:8d:af:ac:ce:
07:24:5e:c7:dd:2a:f2:79:fe:6a:bc:78:a8:cb:36:
06:29:01:c7:c2:2d:f9:46:a6:0f:ad:9a:f7:dc:62:
a3:26:3c:57:55:40:87:28:c7:84:16:ce:64:76:e7:
95:2d:15:b7:a8:ff:7d:4d:e0:cc:2f:06:d6:81:03:
f0:30:64:f9:43:40:6d:51:f2:ee:60:95:9f:89:e3:
5d:c1:2f:6d:42:36:68:8d:96:f5:0c:b6:7c:61:3d:
2d:e0:61:43:8f:d9:2f:88:00:34:b9:cd:89:bf:9e:
3e:7c:a4:6a:b7:31:98:ba:9c:27:7e:7d:a0:23:8b:
1a:9c:00:20:f1:e4:f5:2f:b1:1a:dd:ee:de:33:ad:
fa:b1:ce:7b:c2:d0:b0:88:a6:0e:bb:7c:c3:0d:a7:
35:d8:14:26:57:fb:8a:6a:46:2c:c6:51:96:24:14:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:47:BB:5E:87:56:13:09:0E:49:11:1A:59:62:95:8D:CB:20:EA:A3
X509v3 Authority Key Identifier:
keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:67:52:02:dd:2f:9d:2f:0d:7b:59:ed:48:37:f8:d9:ee:f8:
1f:8c:09:11:11:08:fc:4c:a3:0f:e9:dd:38:43:90:f1:9b:73:
10:93:96:ca:fd:33:21:c6:f3:6f:ce:5c:31:a1:b5:23:3d:1f:
94:e5:70:f6:9f:f4:9c:aa:04:86:3d:4f:1f:17:a9:e0:d2:8b:
f2:8f:54:b1:cf:42:f2:63:c5:bb:f2:bd:22:b9:0b:a6:38:d3:
13:67:f1:db:a2:36:d2:e9:60:88:17:64:14:ad:cb:5f:ca:73:
46:d3:9e:92:08:c4:da:fb:76:be:90:b6:45:30:36:af:a6:7a:
12:ea:c4:42:52:33:11:e7:ce:72:4a:0b:36:2e:1d:e9:c7:6a:
10:db:df:c7:a9:c3:ab:ab:92:af:49:7c:0f:46:a8:d4:60:22:
f0:45:75:56:36:95:a9:34:27:08:95:ed:41:b8:e5:97:ca:a7:
46:2e:f8:ed:fb:31:a6:ae:78:aa:33:45:44:a0:9b:cb:28:54:
98:80:20:7e:ef:07:96:85:be:04:c1:58:0b:10:93:4a:e7:8d:
16:69:bf:7a:24:db:e3:57:ce:f3:83:a0:4f:7f:0c:0d:7e:27:
03:a0:24:12:84:1c:42:c5:ae:41:3e:c5:be:a6:50:bb:88:58:
da:87:ad:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTsgActsSXgwEDFpce5YqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTA1NmMzMzhkMTZjOTJjZGZkYTFlNTVkMDkzNjgyMmJj
NTBjZDIwHhcNMjUwNzI5MDEwMDMxWhcNMjUwNzMwMDEwMDMxWjAzMTEwLwYDVQQD
Eyg1ZDQ3YmI1ZTg3NTYxMzA5MGU0OTExMWE1OTYyOTU4ZGNiMjBlYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvP+0hm50CEtIvQf/6OML6IbGgc6
6tSRRLcf3cqwagwCo/jmtTFYuzqdFN4RFBwJmxXYekvaPWma9wnT67oIRYM1fyvu
LOMgsp58JLH9VOfejF96pY2vrM4HJF7H3Sryef5qvHioyzYGKQHHwi35RqYPrZr3
3GKjJjxXVUCHKMeEFs5kdueVLRW3qP99TeDMLwbWgQPwMGT5Q0BtUfLuYJWfieNd
wS9tQjZojZb1DLZ8YT0t4GFDj9kviAA0uc2Jv54+fKRqtzGYupwnfn2gI4sanAAg
8eT1L7Ea3e7eM636sc57wtCwiKYOu3zDDac12BQmV/uKakYsxlGWJBRq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1Hu16HVhMJDkkRGllilY3LIOqjMB8GA1UdIwQY
MBaAFEKQVsM40WySzf2h5V0JNoIrxQzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBCV3d6alJiSkxOX2FIbFhRazJnaXZGRE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81MTNiNzctOWUzYi00YTZjLTllZDUt
N2YyMWQ5YmVmYzJjLzEvUXBCV3d6alJiSkxOX2FIbFhRazJnaXZGRE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81MTNiNzctOWUzYi00YTZjLTllZDUtN2YyMWQ5YmVmYzJj
LzEvUXBCV3d6alJiSkxOX2FIbFhRazJnaXZGRE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGdSAt0v
nS8Ne1ntSDf42e74H4wJEREI/EyjD+ndOEOQ8ZtzEJOWyv0zIcbzb85cMaG1Iz0f
lOVw9p/0nKoEhj1PHxep4NKL8o9Usc9C8mPFu/K9IrkLpjjTE2fx26I20ulgiBdk
FK3LX8pzRtOekgjE2vt2vpC2RTA2r6Z6EurEQlIzEefOckoLNi4d6cdqENvfx6nD
q6uSr0l8D0ao1GAi8EV1VjaVqTQnCJXtQbjll8qnRi747fsxpq54qjNFRKCbyyhU
mIAgfu8HloW+BMFYCxCTSueNFmm/eiTb41fO84OgT38MDX4nA6AkEoQcQsWuQT7F
vqZQu4hY2oetSA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:25:50 2025 by rpki-client