Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: I+6TDJj16YESbeITMAWGjdYeafcjSJY+bmMrEUyzqgM=
Subject key identifier: 2E:FA:03:70:5E:BD:2D:2A:E1:F6:D2:40:78:07:7C:29:F4:32:1C:80
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 019834956B029274295F83A432681AB71BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 06BC
Signing time: Wed 23 Jul 2025 00:01:04 +0000
Manifest this update: Wed 23 Jul 2025 00:01:04 +0000
Manifest next update: Thu 24 Jul 2025 00:01:04 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: zN8ufdsveADK3GtH+NfNq7Jmzsl4Pl58/9vPxyjxR3s=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:6b:02:92:74:29:5f:83:a4:32:68:1a:b7:1b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Jul 23 00:01:04 2025 GMT
Not After : Jul 24 00:01:04 2025 GMT
Subject: CN=2efa03705ebd2d2ae1f6d24078077c29f4321c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:88:3f:5f:a3:ea:e7:15:bd:95:bf:24:23:
dc:80:26:db:da:f2:b7:83:15:5c:1e:5b:d5:1d:b4:
34:31:9b:49:7d:38:de:c5:c3:ec:c4:11:e1:bf:a4:
c0:76:34:30:b0:ff:fe:22:eb:70:96:ac:35:d4:fe:
ab:43:9e:23:f5:bf:f5:e0:4d:b3:1f:56:36:ff:7f:
d4:6c:4a:c0:52:5d:20:a0:9f:cb:5e:48:70:f8:f4:
73:90:07:c2:50:74:bf:e6:b6:3c:bd:73:44:45:00:
26:78:a2:c6:e9:47:ff:c3:f0:6f:7f:25:78:6b:27:
d3:18:05:21:30:b0:7b:79:90:5c:4a:39:6c:b0:48:
f8:42:26:52:08:ae:21:b0:79:7f:c7:f7:c0:0a:9a:
1f:fa:da:76:b9:18:f1:81:9a:46:fc:1b:71:53:94:
5a:df:7f:f0:93:0e:38:d7:b1:b4:ed:6f:a3:ef:5c:
06:a8:f4:c4:b4:91:62:57:41:5e:1d:09:e1:4b:81:
b7:83:10:2b:f4:c8:af:83:c5:07:85:88:81:17:47:
9e:f1:d3:04:84:65:29:ba:a1:f8:d9:72:d9:7e:7e:
ce:c4:96:f6:e0:fb:12:44:6a:d2:48:5b:63:64:67:
bf:dc:2e:20:84:ef:dc:01:88:60:48:bc:c2:00:b3:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FA:03:70:5E:BD:2D:2A:E1:F6:D2:40:78:07:7C:29:F4:32:1C:80
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:72:71:3d:7d:7a:7e:bc:09:8a:f7:5c:bc:28:eb:1d:a2:b0:
12:bd:42:95:23:63:e4:fe:07:6b:e0:76:6c:0d:8a:7c:9c:07:
2b:2d:55:25:ca:b4:42:6f:1c:39:65:04:7e:bf:7c:5c:24:d6:
28:e6:83:8d:b8:14:72:6b:8b:1d:82:37:9a:32:5c:e7:df:bc:
63:3b:54:fd:fe:3c:73:cf:76:a4:af:ff:e9:28:7b:3f:88:3d:
5f:97:6a:15:7f:b7:88:d5:d9:09:af:66:0b:be:81:f0:58:52:
03:7f:f9:69:ec:fc:69:ee:99:9d:8f:41:58:d7:87:eb:ab:7f:
42:4c:6e:f8:3f:54:e8:9a:e3:b1:7b:ca:ec:5b:87:33:5d:01:
84:2f:27:7d:64:3a:c0:e6:32:03:03:dd:9a:e0:54:f5:87:47:
6b:4b:6c:7f:16:3a:97:db:f6:f0:09:20:d8:aa:ce:1f:c4:c5:
99:cf:f5:52:c3:ec:a0:b6:ef:4a:5d:1f:28:d1:a5:db:e0:3f:
d7:98:f2:ae:dd:c2:b1:44:7b:ec:cd:9d:60:6e:27:93:39:fd:
4d:d4:e5:77:05:78:4b:33:8a:f8:f8:ee:d6:b0:1c:af:b7:f7:
14:f7:fb:7c:2f:b7:93:21:46:fc:d5:f9:76:be:c3:93:b0:23:
16:de:87:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg0lWsCknQpX4OkMmgatxumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjUxYWVhZjc3NGI2MzNhNDdmOTYwYTcwODliMTViMzVi
MWE0Y2IwHhcNMjUwNzIzMDAwMTA0WhcNMjUwNzI0MDAwMTA0WjAzMTEwLwYDVQQD
EygyZWZhMDM3MDVlYmQyZDJhZTFmNmQyNDA3ODA3N2MyOWY0MzIxYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/aIP1+j6ucVvZW/JCPcgCbb2vK3
gxVcHlvVHbQ0MZtJfTjexcPsxBHhv6TAdjQwsP/+Iutwlqw11P6rQ54j9b/14E2z
H1Y2/3/UbErAUl0goJ/LXkhw+PRzkAfCUHS/5rY8vXNERQAmeKLG6Uf/w/BvfyV4
ayfTGAUhMLB7eZBcSjlssEj4QiZSCK4hsHl/x/fACpof+tp2uRjxgZpG/BtxU5Ra
33/wkw4417G07W+j71wGqPTEtJFiV0FeHQnhS4G3gxAr9Mivg8UHhYiBF0ee8dME
hGUpuqH42XLZfn7OxJb24PsSRGrSSFtjZGe/3C4ghO/cAYhgSLzCALNSmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC76A3BevS0q4fbSQHgHfCn0MhyAMB8GA1UdIwQY
MBaAFEL1Gur3dLYzpH+WCnCJsVs1saTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUt
MWJhNjUxNzRiZDFkLzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUtMWJhNjUxNzRiZDFk
LzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHJxPX16
frwJivdcvCjrHaKwEr1ClSNj5P4Ha+B2bA2KfJwHKy1VJcq0Qm8cOWUEfr98XCTW
KOaDjbgUcmuLHYI3mjJc59+8YztU/f48c892pK//6Sh7P4g9X5dqFX+3iNXZCa9m
C76B8FhSA3/5aez8ae6ZnY9BWNeH66t/Qkxu+D9U6JrjsXvK7FuHM10BhC8nfWQ6
wOYyAwPdmuBU9YdHa0tsfxY6l9v28Akg2KrOH8TFmc/1UsPsoLbvSl0fKNGl2+A/
15jyrt3CsUR77M2dYG4nkzn9TdTldwV4SzOK+Pju1rAcr7f3FPf7fC+3kyFG/NX5
dr7Dk7AjFt6H4w==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:03:09 2025 by rpki-client