
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: 2Wxi8UV/T1h+t+SqoilkS8zBg2pMI3YnhYCdAHNqxEs=
Subject key identifier: 61:0C:D7:DE:2A:95:90:2C:C6:82:5E:FC:56:78:8A:11:AB:46:A5:CD
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 019848531F6E0F5F75014FBC7FFA5963D24C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 20:01:03 +0000
Manifest this update: Sat 26 Jul 2025 20:01:03 +0000
Manifest next update: Sun 27 Jul 2025 20:01:03 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: RwlJjNVMWvOsjT1teXdv+rkw8YBykDKSJdtE7uGvUXo=)
2: ymSnyZ91fxVC39LRAlSHciRZ46Y.roa (hash: 9upse4LtnCnU7pMyWCgkPTtYXe3IQqerCyozn8qome0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:1f:6e:0f:5f:75:01:4f:bc:7f:fa:59:63:d2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Jul 26 20:01:03 2025 GMT
Not After : Jul 27 20:01:03 2025 GMT
Subject: CN=610cd7de2a95902cc6825efc56788a11ab46a5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:13:42:83:80:0b:7c:78:a9:a8:b0:73:e7:
7d:55:ac:2d:4a:ab:b6:6c:f1:03:90:cc:55:7a:0e:
a3:2f:88:fc:c1:26:90:e3:43:75:3a:5b:b8:be:98:
f2:7d:4f:ee:eb:be:7d:d6:43:6f:da:e4:ac:ac:61:
11:a3:d1:9a:81:b7:b8:c2:27:40:4a:02:61:f3:48:
1f:e2:d6:2c:8d:dc:d3:07:5c:e0:c7:db:ae:ae:e6:
13:58:aa:9f:27:81:92:1a:0f:08:6a:67:fb:03:bc:
af:70:81:62:7c:9a:11:ce:da:d0:48:9e:f8:d7:1f:
f4:84:5b:ec:98:8b:97:94:d6:30:bd:0c:d3:01:2a:
54:58:48:7d:95:85:e0:8f:91:74:a6:ec:33:b3:dd:
d1:17:92:03:1e:84:da:67:13:e8:53:6c:97:63:da:
71:61:8f:5e:d2:03:d3:61:51:f8:c8:6a:c6:8d:e4:
0f:87:8b:7b:c5:5f:4f:e8:b3:25:7d:74:19:44:45:
eb:4c:90:6d:8c:ff:f7:55:8e:48:f3:83:97:49:65:
4b:b8:ee:10:88:a5:0a:72:c5:58:2f:f2:2b:cd:67:
65:e2:ce:03:c7:c3:49:1f:97:7a:f6:b1:82:57:96:
52:f1:79:03:75:52:e9:c8:83:0a:f7:c6:8e:89:a0:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0C:D7:DE:2A:95:90:2C:C6:82:5E:FC:56:78:8A:11:AB:46:A5:CD
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b5:24:a7:cc:94:b0:39:51:7c:cb:35:92:18:84:cb:52:01:
fb:2b:b6:53:da:46:72:0c:8a:0f:b6:ab:4a:fe:64:d1:f8:66:
ff:80:ab:c6:04:9a:39:d8:a9:aa:c6:27:b1:ce:cc:da:ee:ae:
f0:74:d4:1f:da:a0:92:07:9f:e6:c8:2d:49:4d:84:7f:84:a3:
68:05:e3:7c:f2:35:33:16:ad:44:75:15:8b:39:38:67:02:5f:
27:0c:82:c4:d3:2d:82:23:fd:93:2f:59:e7:13:1a:c6:76:1b:
cc:23:02:f4:9d:f6:a8:f4:d9:42:22:93:c0:09:33:0a:b1:a7:
34:9d:db:4a:ee:19:26:8f:f8:83:2d:5c:2c:14:40:ad:f2:a7:
ba:86:cc:23:a9:01:49:1a:6c:4e:1c:39:8a:c7:37:10:35:bb:
e9:ad:99:83:4a:c0:0f:52:f3:52:a0:a2:9e:ac:f5:c0:b7:e8:
bb:4c:51:5c:53:61:fe:9c:30:cd:24:c7:bc:c2:df:ad:75:05:
e6:12:91:4b:de:94:c3:21:5d:5a:39:8f:1d:dc:24:2f:f0:02:
35:30:96:b6:fb:75:88:a6:5f:dc:ea:e2:fb:fd:02:d9:bd:30:
41:a9:b3:92:dd:c7:b2:b0:08:86:37:1f:75:97:fe:b5:56:0b:
33:3d:80:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUx9uD191AU+8f/pZY9JMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTBhMzY0MTMxODQxMDU2ZDQ4YjJkNzg4ZWEwMGNhNGI5
MWRiNTYwHhcNMjUwNzI2MjAwMTAzWhcNMjUwNzI3MjAwMTAzWjAzMTEwLwYDVQQD
Eyg2MTBjZDdkZTJhOTU5MDJjYzY4MjVlZmM1Njc4OGExMWFiNDZhNWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYATQoOAC3x4qaiwc+d9VawtSqu2
bPEDkMxVeg6jL4j8wSaQ40N1Olu4vpjyfU/u67591kNv2uSsrGERo9Gagbe4widA
SgJh80gf4tYsjdzTB1zgx9uuruYTWKqfJ4GSGg8Iamf7A7yvcIFifJoRztrQSJ74
1x/0hFvsmIuXlNYwvQzTASpUWEh9lYXgj5F0puwzs93RF5IDHoTaZxPoU2yXY9px
YY9e0gPTYVH4yGrGjeQPh4t7xV9P6LMlfXQZREXrTJBtjP/3VY5I84OXSWVLuO4Q
iKUKcsVYL/IrzWdl4s4Dx8NJH5d69rGCV5ZS8XkDdVLpyIMK98aOiaAgFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEM194qlZAsxoJe/FZ4ihGrRqXNMB8GA1UdIwQY
MBaAFEPgo2QTGEEFbUiy14jqAMpLkdtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgt
NGIwODFjYzJiMzlhLzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgtNGIwODFjYzJiMzlh
LzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrUkp8yU
sDlRfMs1khiEy1IB+yu2U9pGcgyKD7arSv5k0fhm/4CrxgSaOdipqsYnsc7M2u6u
8HTUH9qgkgef5sgtSU2Ef4SjaAXjfPI1MxatRHUVizk4ZwJfJwyCxNMtgiP9ky9Z
5xMaxnYbzCMC9J32qPTZQiKTwAkzCrGnNJ3bSu4ZJo/4gy1cLBRArfKnuobMI6kB
SRpsThw5isc3EDW76a2Zg0rAD1LzUqCinqz1wLfou0xRXFNh/pwwzSTHvMLfrXUF
5hKRS96UwyFdWjmPHdwkL/ACNTCWtvt1iKZf3Ori+/0C2b0wQamzkt3HsrAIhjcf
dZf+tVYLMz2AEg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:02:12 2025 by rpki-client