Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: PMOvrW3reR4w+KRRUjrf6BRfqzbnofvhe3peNnFTSlM=
Subject key identifier: F4:74:E6:BD:43:80:D3:AB:59:74:B7:94:C4:7A:AD:5A:4A:8B:05:E3
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 0198496627D49C6599E5AAD4A5E5D395D2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0A0E
Signing time: Sun 27 Jul 2025 01:01:28 +0000
Manifest this update: Sun 27 Jul 2025 01:01:28 +0000
Manifest next update: Mon 28 Jul 2025 01:01:28 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: imZspvKlicEEtyWZ3rAUP5DYkEOy3LeCdQXbfSBSsPE=)
2: dmWwMKmVtBjrQ943YS9mH5Wi3ME.roa (hash: prLT1d+yXEMIyzM51qGGgQHR5qaRcSsmNt9aZioq8kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:27:d4:9c:65:99:e5:aa:d4:a5:e5:d3:95:d2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: Jul 27 01:01:28 2025 GMT
Not After : Jul 28 01:01:28 2025 GMT
Subject: CN=f474e6bd4380d3ab5974b794c47aad5a4a8b05e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:70:bb:ae:75:2a:dc:ce:74:2c:29:f9:ff:
39:46:60:85:cc:3e:33:7f:68:79:b5:79:86:e9:a3:
e5:0e:c2:91:5c:17:c1:d9:03:b2:79:1b:e7:ae:69:
07:e9:c0:6c:cc:7d:37:11:d2:4b:47:02:ca:5d:fa:
2d:b2:dc:1b:4d:bb:82:b6:6b:ec:e4:12:df:c7:f8:
7f:d5:f3:0a:e6:58:28:c6:86:c7:ce:a8:1a:c9:50:
e0:b8:35:ff:0b:05:0e:36:9a:26:22:02:5d:8f:62:
4b:5e:87:a1:00:92:f6:f3:e2:42:21:d7:d5:73:ef:
bb:a1:82:89:bd:b6:12:40:13:81:65:eb:f7:3d:16:
b2:9b:d2:3b:4f:08:9f:9f:5f:3e:a4:6e:75:88:8a:
13:f7:52:43:6b:6c:5f:56:98:c1:18:f7:c0:f2:00:
c2:b5:82:93:e3:8c:53:bd:95:25:53:67:61:e1:67:
16:b9:bb:77:1e:27:9d:0f:6a:f0:75:92:71:6f:85:
3f:02:b8:3a:1d:44:0b:b3:04:f7:37:57:88:f3:98:
5e:e4:11:66:33:56:22:be:80:64:28:9f:70:d0:53:
8b:2d:20:39:d6:30:e2:72:4f:f9:82:35:b3:7e:4e:
9c:8e:69:52:1f:9b:24:61:f3:3d:55:46:84:e6:3a:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:E6:BD:43:80:D3:AB:59:74:B7:94:C4:7A:AD:5A:4A:8B:05:E3
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f8:71:7f:b1:ff:c2:76:63:2f:ba:c7:40:15:1b:02:25:31:
74:9e:d1:85:ff:30:a9:1e:5c:f6:94:0f:4a:da:76:c5:15:8a:
1e:1d:d1:86:57:5e:47:9e:1d:9c:ea:8c:c7:55:bc:d7:30:af:
31:d5:54:f2:67:82:d1:46:81:b9:7a:16:15:b3:36:c4:ee:33:
b3:bd:0b:a2:67:2f:4e:d7:13:c0:42:53:a4:7a:7e:9a:bb:cc:
66:52:e6:1a:15:e5:a4:72:b9:97:f7:69:b0:ac:78:ec:57:12:
af:4d:be:aa:2d:e1:58:30:40:b3:04:6f:ca:6e:62:cd:5f:c6:
40:54:b3:5f:8e:89:fd:2c:1f:50:c9:ab:44:ad:43:76:ee:27:
a2:b5:f4:c9:e6:fb:41:1a:69:d4:7f:18:6e:22:92:92:54:eb:
8a:fa:1d:c4:a8:67:40:8e:b9:96:1e:51:8f:6f:ae:ad:50:78:
28:71:34:df:59:28:2d:4f:e2:18:ab:ac:a5:7d:f2:49:75:7e:
7e:44:00:e7:27:5b:ba:53:a5:89:2a:08:50:af:f9:f3:d1:43:
e3:8c:c9:86:eb:e4:d8:67:91:23:4f:1e:82:03:ed:e8:c1:2f:
fb:5b:54:50:a6:4f:e1:9b:ca:ca:14:2b:d3:9c:a1:24:d9:e4:
76:07:36:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZifUnGWZ5arUpeXTldKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1OTFhNzViZDY5M2U5ZDNiNzY2ODM0YmYwNzRmN2Ix
ZWVlM2EwHhcNMjUwNzI3MDEwMTI4WhcNMjUwNzI4MDEwMTI4WjAzMTEwLwYDVQQD
EyhmNDc0ZTZiZDQzODBkM2FiNTk3NGI3OTRjNDdhYWQ1YTRhOGIwNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgRwu651KtzOdCwp+f85RmCFzD4z
f2h5tXmG6aPlDsKRXBfB2QOyeRvnrmkH6cBszH03EdJLRwLKXfotstwbTbuCtmvs
5BLfx/h/1fMK5lgoxobHzqgayVDguDX/CwUONpomIgJdj2JLXoehAJL28+JCIdfV
c++7oYKJvbYSQBOBZev3PRaym9I7Twifn18+pG51iIoT91JDa2xfVpjBGPfA8gDC
tYKT44xTvZUlU2dh4WcWubt3HiedD2rwdZJxb4U/Arg6HUQLswT3N1eI85he5BFm
M1YivoBkKJ9w0FOLLSA51jDick/5gjWzfk6cjmlSH5skYfM9VUaE5jqUmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR05r1DgNOrWXS3lMR6rVpKiwXjMB8GA1UdIwQY
MBaAFEDVWRp1vWk+nTt2aDS/B097Hu46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85YzlmMjgtNGY0MS00NzJkLWE2M2Ut
YTEwYTNhNDk2M2ZiLzEvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85YzlmMjgtNGY0MS00NzJkLWE2M2UtYTEwYTNhNDk2M2Zi
LzEvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPhxf7H/
wnZjL7rHQBUbAiUxdJ7Rhf8wqR5c9pQPStp2xRWKHh3RhldeR54dnOqMx1W81zCv
MdVU8meC0UaBuXoWFbM2xO4zs70LomcvTtcTwEJTpHp+mrvMZlLmGhXlpHK5l/dp
sKx47FcSr02+qi3hWDBAswRvym5izV/GQFSzX46J/SwfUMmrRK1Ddu4norX0yeb7
QRpp1H8YbiKSklTrivodxKhnQI65lh5Rj2+urVB4KHE031koLU/iGKuspX3ySXV+
fkQA5ydbulOliSoIUK/589FD44zJhuvk2GeRI08eggPt6MEv+1tUUKZP4ZvKyhQr
05yhJNnkdgc2mg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:08 2025 by rpki-client