Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: obN/gD0wa9r0ARt5e5uDu9G0XNe0RjJX7ZcaLBlA0CA=
Subject key identifier: 7C:D1:DC:27:13:CB:3F:A4:F7:94:29:30:B9:C2:51:4D:75:C8:44:5D
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 01983CE7DD9397D1C7D5C43D73485E66CBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 1628
Signing time: Thu 24 Jul 2025 14:48:05 +0000
Manifest this update: Thu 24 Jul 2025 14:48:05 +0000
Manifest next update: Fri 25 Jul 2025 14:48:05 +0000
Files and hashes: 1: 1HdPbbp2ON9jlXjCNvcwdVOS4l8.roa (hash: Go8nz4UdWLEFOEpTAtQD2sB7T0peVkkimD6UE/yKI0U=)
2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: 6db/5dNaCSS8NMCE9dlQjrqTyAojmFnpOVrj6DY3erY=)
3: oEno-CthzwQU-VjSao4UO7jaNkg.roa (hash: 3Rl3OLIGDkVrE/zgQbmmmkc8mI0JYDpAiiICVuTcrXY=)
4: sCdlsG1cruiYSbq9X2qHUdjqRJI.roa (hash: 7NmKdlMqMegEFLesT3fkU3MNPbTf0HqKF9bgPWyuVXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:e7:dd:93:97:d1:c7:d5:c4:3d:73:48:5e:66:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jul 24 14:48:05 2025 GMT
Not After : Jul 25 14:48:05 2025 GMT
Subject: CN=7cd1dc2713cb3fa4f7942930b9c2514d75c8445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:2d:5f:8e:9c:70:56:84:14:16:2c:0e:49:
a4:f2:48:07:80:f6:f5:57:26:c7:22:49:da:6e:a3:
af:0b:11:a8:fc:ae:b1:99:b1:44:d5:90:c5:3b:87:
16:ee:62:0c:37:3e:8e:01:53:46:54:26:a6:b7:f4:
35:cb:08:18:73:59:11:ff:30:70:53:e1:59:99:2c:
bd:3f:97:5e:eb:09:e5:cb:00:d6:ae:26:e5:96:bd:
75:e6:2b:09:ec:c9:b1:b7:05:dc:96:d2:cc:d6:a7:
14:4f:7b:b4:a7:c3:28:e0:7b:d5:4b:36:b1:4c:41:
8d:d6:87:e6:35:92:6d:d5:7f:17:fa:f1:f9:79:59:
c5:ed:af:38:98:48:8f:6e:fe:e5:e0:fd:4c:3f:b4:
30:b8:df:03:bc:fc:93:87:89:1d:d0:93:76:a5:6c:
7b:a6:e9:97:85:55:1f:e7:57:1b:fe:9c:89:bf:62:
6b:1a:32:70:09:9f:12:da:9e:ad:fc:0c:52:f2:c4:
0a:51:92:b7:ab:a8:50:e8:2c:68:1a:05:0d:24:ab:
7f:41:04:ba:7b:46:0d:e7:f9:f3:ac:fd:0c:96:46:
75:16:65:d9:e0:2d:51:8c:55:24:f7:d8:fc:6c:8a:
af:ca:50:f0:7d:94:8f:0e:d8:dc:f4:fd:46:2f:e2:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:DC:27:13:CB:3F:A4:F7:94:29:30:B9:C2:51:4D:75:C8:44:5D
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:33:2d:a9:39:a8:59:13:04:82:52:79:f6:34:28:6e:37:b9:
3f:ce:05:98:56:13:e1:fd:d0:ea:dd:68:90:82:3d:4d:ec:3e:
40:f5:61:50:ff:23:1f:bb:4c:27:56:78:0f:f4:99:ec:26:df:
ff:9a:b7:a1:99:c7:9e:c7:3d:31:57:90:81:36:c0:71:37:ac:
5d:64:cc:e8:72:8d:6e:5f:57:f1:d2:3d:b3:ca:17:60:79:0a:
37:e2:e7:ac:c8:0e:2e:b0:4f:37:b5:b7:8c:99:6b:6c:76:5d:
29:ba:5e:44:52:03:27:7a:b9:f6:95:23:14:b8:48:4f:01:22:
89:31:84:b2:b4:e9:56:d4:71:1b:49:f2:a0:fd:a4:99:03:85:
41:1b:4f:cf:e6:62:72:a7:2e:7d:f7:87:28:b0:90:53:bc:6d:
2c:ec:63:53:6c:cb:09:57:39:07:22:86:62:93:b8:5f:3e:a8:
81:d1:a0:e1:bf:1f:c4:a8:58:50:71:a6:f5:9f:f0:8e:98:12:
37:8a:ca:8a:d4:4d:ec:39:f3:b4:fc:3f:3c:23:24:19:78:8f:
34:96:68:b7:96:77:4f:07:89:f7:57:db:4a:e8:50:3c:d7:21:
32:30:59:78:95:c8:ee:b5:64:e2:89:57:d5:5b:7c:59:59:34:
ca:b2:c8:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg8592Tl9HH1cQ9c0heZsvYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjUwNzI0MTQ0ODA1WhcNMjUwNzI1MTQ0ODA1WjAzMTEwLwYDVQQD
Eyg3Y2QxZGMyNzEzY2IzZmE0Zjc5NDI5MzBiOWMyNTE0ZDc1Yzg0NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTAtX46ccFaEFBYsDkmk8kgHgPb1
VybHIknabqOvCxGo/K6xmbFE1ZDFO4cW7mIMNz6OAVNGVCamt/Q1ywgYc1kR/zBw
U+FZmSy9P5de6wnlywDWribllr115isJ7MmxtwXcltLM1qcUT3u0p8Mo4HvVSzax
TEGN1ofmNZJt1X8X+vH5eVnF7a84mEiPbv7l4P1MP7QwuN8DvPyTh4kd0JN2pWx7
pumXhVUf51cb/pyJv2JrGjJwCZ8S2p6t/AxS8sQKUZK3q6hQ6CxoGgUNJKt/QQS6
e0YN5/nzrP0MlkZ1FmXZ4C1RjFUk99j8bIqvylDwfZSPDtjc9P1GL+KoswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzR3CcTyz+k95QpMLnCUU11yERdMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk
LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjMtqTmo
WRMEglJ59jQobje5P84FmFYT4f3Q6t1okII9Tew+QPVhUP8jH7tMJ1Z4D/SZ7Cbf
/5q3oZnHnsc9MVeQgTbAcTesXWTM6HKNbl9X8dI9s8oXYHkKN+LnrMgOLrBPN7W3
jJlrbHZdKbpeRFIDJ3q59pUjFLhITwEiiTGEsrTpVtRxG0nyoP2kmQOFQRtPz+Zi
cqcuffeHKLCQU7xtLOxjU2zLCVc5ByKGYpO4Xz6ogdGg4b8fxKhYUHGm9Z/wjpgS
N4rKitRN7DnztPw/PCMkGXiPNJZot5Z3TweJ91fbSuhQPNchMjBZeJXI7rVk4olX
1Vt8WVk0yrLI6Q==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:01:16 2025 by rpki-client