Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: YM5S7HeMBh1/IM1Xalj6PvgywSc6C1gs0FoWiLRPw/A=
Subject key identifier: 88:32:72:A1:78:FE:82:AE:24:C8:62:68:0F:2D:B1:58:79:DD:9D:17
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 01984A77A9F9B7F471182FD5A5212E3EABCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:12 +0000
Manifest this update: Sun 27 Jul 2025 06:00:12 +0000
Manifest next update: Mon 28 Jul 2025 06:00:12 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: p9cfPgTztZ2ch+4eYCwManPsk/UP1Fug4c08XQNLbUw=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:a9:f9:b7:f4:71:18:2f:d5:a5:21:2e:3e:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Jul 27 06:00:12 2025 GMT
Not After : Jul 28 06:00:12 2025 GMT
Subject: CN=883272a178fe82ae24c862680f2db15879dd9d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:a1:8b:de:6f:dd:36:23:a1:95:da:1d:99:
55:cc:d0:90:4a:78:e3:8d:60:19:b7:a6:d3:86:b0:
11:28:5b:02:90:6a:51:37:f7:ce:c1:cd:bb:63:7a:
09:fc:f8:16:7f:fa:77:e3:da:db:f4:7b:fb:d6:20:
5c:08:f9:e1:6c:5f:87:eb:09:fc:04:30:23:08:6f:
b3:23:f7:c4:1f:bb:9c:27:70:86:de:c0:a3:7a:e7:
ed:06:fb:9f:ee:1a:f0:87:2a:48:5a:20:52:97:1f:
fc:e8:ae:cc:a7:28:47:e9:70:36:ad:b6:45:7b:ca:
f0:23:cf:fa:d8:d5:4b:bc:e1:e4:23:9f:f1:76:93:
e9:8b:11:1c:65:fe:7f:95:a3:8f:42:2b:72:38:82:
14:ef:f5:5a:8e:34:b5:7d:bc:31:45:f5:dc:bb:45:
81:77:b6:21:05:88:7a:9d:2d:82:bd:90:37:49:ca:
ad:01:a8:98:b4:88:1d:9d:33:6f:22:4a:e3:19:aa:
2b:82:46:eb:8c:95:51:8a:52:b8:f2:a4:1b:34:ad:
27:79:da:46:90:61:64:a7:8a:c2:0a:3e:cc:11:ae:
53:cb:16:bf:29:ef:c1:d9:57:e3:07:39:32:96:3a:
f1:bf:b7:b6:6d:f8:97:13:f9:be:79:9d:9a:21:4c:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:72:A1:78:FE:82:AE:24:C8:62:68:0F:2D:B1:58:79:DD:9D:17
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:18:26:6c:5a:c0:03:6c:8d:ca:43:4a:2f:a0:c7:65:b3:4a:
aa:32:ce:78:c0:b9:c0:bc:f6:d0:30:52:a8:12:e8:0c:4b:c2:
81:d9:b4:cd:ff:6f:a7:15:19:55:95:06:43:0c:aa:5b:b3:38:
85:97:18:66:22:09:22:cb:0f:85:12:85:ea:4d:b4:fa:5e:e4:
2c:c7:ec:6a:67:45:c6:e4:54:42:84:1b:35:ae:6b:51:54:20:
c9:65:6d:79:04:ec:ab:c0:a7:be:44:3f:a5:34:bd:76:79:99:
2d:d4:08:61:ef:5a:a3:e2:9c:70:3b:4a:c8:1e:f7:5a:9f:96:
39:c8:9b:ec:2a:96:85:08:25:d8:0e:4e:8d:28:03:2a:0d:ad:
20:fd:92:36:e9:ad:fb:2d:1c:f8:78:be:52:74:fb:71:bc:02:
51:76:1c:c1:ff:6d:ae:af:71:f3:1a:62:4f:1f:ca:f6:2a:49:
36:c5:39:c1:c9:90:f6:41:1b:55:58:07:4f:f6:b6:ba:2e:a4:
cb:5a:9c:bd:95:3f:b9:91:5b:c2:14:d9:67:c9:7b:90:bc:e2:
f2:4e:e2:97:06:f8:71:74:dd:3c:af:9c:aa:9e:34:19:64:e3:
57:48:ac:bb:2f:c6:3a:95:a5:b4:9f:2e:81:25:b7:60:7c:c7:
60:8d:26:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd6n5t/RxGC/VpSEuPqvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTYyZmZjOTlmMjk0MTAyZGNjZTIzNWRjMWEzYzEzZGFi
Y2Q2OWEwHhcNMjUwNzI3MDYwMDEyWhcNMjUwNzI4MDYwMDEyWjAzMTEwLwYDVQQD
Eyg4ODMyNzJhMTc4ZmU4MmFlMjRjODYyNjgwZjJkYjE1ODc5ZGQ5ZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk66hi95v3TYjoZXaHZlVzNCQSnjj
jWAZt6bThrARKFsCkGpRN/fOwc27Y3oJ/PgWf/p349rb9Hv71iBcCPnhbF+H6wn8
BDAjCG+zI/fEH7ucJ3CG3sCjeuftBvuf7hrwhypIWiBSlx/86K7MpyhH6XA2rbZF
e8rwI8/62NVLvOHkI5/xdpPpixEcZf5/laOPQityOIIU7/VajjS1fbwxRfXcu0WB
d7YhBYh6nS2CvZA3ScqtAaiYtIgdnTNvIkrjGaorgkbrjJVRilK48qQbNK0nedpG
kGFkp4rCCj7MEa5Tyxa/Ke/B2VfjBzkyljrxv7e2bfiXE/m+eZ2aIUwnxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgycqF4/oKuJMhiaA8tsVh53Z0XMB8GA1UdIwQY
MBaAFEKmL/yZ8pQQLcziNdwaPBPavNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQt
MWMyMmRhNDRhMjJkLzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQtMWMyMmRhNDRhMjJk
LzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURgmbFrA
A2yNykNKL6DHZbNKqjLOeMC5wLz20DBSqBLoDEvCgdm0zf9vpxUZVZUGQwyqW7M4
hZcYZiIJIssPhRKF6k20+l7kLMfsamdFxuRUQoQbNa5rUVQgyWVteQTsq8CnvkQ/
pTS9dnmZLdQIYe9ao+KccDtKyB73Wp+WOcib7CqWhQgl2A5OjSgDKg2tIP2SNumt
+y0c+Hi+UnT7cbwCUXYcwf9trq9x8xpiTx/K9ipJNsU5wcmQ9kEbVVgHT/a2ui6k
y1qcvZU/uZFbwhTZZ8l7kLzi8k7ilwb4cXTdPK+cqp40GWTjV0isuy/GOpWltJ8u
gSW3YHzHYI0mag==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:12:23 2025 by rpki-client