Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: fnJSZVMDR2BjM9ipsWdbsEmQnNH6gtQZ+byShOH/fS8=
Subject key identifier: F9:66:A5:81:F6:F4:01:CE:DE:A6:B1:99:5B:A1:1A:E4:C3:97:13:35
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 019848C04D2EA3448DED20428E8A73720CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 13D3
Signing time: Sat 26 Jul 2025 22:00:18 +0000
Manifest this update: Sat 26 Jul 2025 22:00:18 +0000
Manifest next update: Sun 27 Jul 2025 22:00:18 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: 42jYtdJPjvPIi4GtzkeJRHcQKJnACCjbJlXmpWdxji4=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:4d:2e:a3:44:8d:ed:20:42:8e:8a:73:72:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Jul 26 22:00:18 2025 GMT
Not After : Jul 27 22:00:18 2025 GMT
Subject: CN=f966a581f6f401cedea6b1995ba11ae4c3971335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:bf:51:5b:8c:a0:67:c0:3c:8b:62:6f:c0:
37:61:67:91:a5:85:83:d6:87:7c:98:42:76:55:af:
0f:9b:da:dc:b0:fb:15:c9:6d:de:96:07:97:20:4c:
b8:49:e2:72:db:6b:01:cf:d3:da:1d:59:82:23:69:
9d:1a:11:88:b0:1a:14:39:d3:53:68:6a:e5:a8:fc:
0e:a2:4c:c5:63:5e:ac:9d:a2:31:9e:78:e6:59:66:
08:4c:6c:1a:4d:b3:b5:e7:34:df:da:a6:af:4f:06:
3a:1b:b2:4b:b0:e8:3c:31:04:e4:52:40:58:ac:8e:
c7:ef:63:f4:24:d2:d6:ec:b9:32:e3:06:92:05:b9:
3e:4e:a9:00:ff:f9:95:aa:22:0b:4e:5f:9a:63:1a:
24:10:41:f9:95:b4:6e:fb:33:cd:25:31:d3:33:f0:
17:46:db:03:e8:3d:1d:66:1a:47:62:7a:d2:7d:d5:
20:8f:90:07:2e:18:cc:ac:6d:2a:70:d2:5c:78:f2:
eb:3d:28:b0:42:36:ff:fd:b8:ae:d1:72:26:a3:6c:
33:f7:62:bc:af:af:f9:7d:0a:8f:b7:03:97:20:bd:
f6:58:ff:bf:35:be:c6:f5:14:1c:75:c0:61:99:56:
4d:70:e3:1c:d7:6a:90:19:62:b3:18:a7:2b:31:01:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:A5:81:F6:F4:01:CE:DE:A6:B1:99:5B:A1:1A:E4:C3:97:13:35
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:73:33:26:58:52:42:3a:fe:d9:b3:6b:82:07:66:40:16:1f:
f4:b1:0d:18:66:f9:d5:d3:0b:9a:8f:31:8c:56:50:6b:b3:d9:
54:93:fe:c6:19:6f:5e:dd:da:d5:73:d9:20:05:4c:b7:b6:b0:
7f:02:59:b0:8b:41:09:ee:d3:6b:6f:e4:b5:a0:6f:7c:fb:e6:
b7:f9:0a:c6:21:a9:6e:ac:84:1e:5d:01:b7:b0:82:0d:95:fb:
71:6d:71:66:09:4a:10:fe:b5:cf:9a:72:6f:f0:85:9c:bf:29:
c8:f8:de:5f:15:e1:12:36:38:d1:59:bc:d4:91:7a:79:11:27:
f8:77:1f:98:5c:58:64:c7:c1:7e:03:28:1f:c4:58:df:2e:aa:
96:04:4a:85:5f:c3:1c:3a:4e:e9:83:ff:07:7c:6c:80:e5:cd:
12:72:a7:b7:68:9f:b8:04:7b:d6:fc:6a:8c:d3:9d:38:bf:92:
56:31:b9:92:6c:1c:f5:3f:be:42:a0:69:2d:80:fc:c3:d7:fd:
16:6f:2b:99:e2:04:fa:82:45:50:da:ae:61:4f:2e:39:93:11:
71:f0:f4:8b:78:f2:4f:ae:a6:2f:14:fd:78:ae:50:e8:fc:89:
23:91:f5:fb:96:17:fc:5b:e7:aa:aa:31:31:31:c0:03:9c:83:
8f:27:ac:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwE0uo0SN7SBCjopzcgywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjU0ZDRhNzY3YWQwOTk2MDZlNDQyZTA5MmY5MTI0MWEz
NjM2NzAwHhcNMjUwNzI2MjIwMDE4WhcNMjUwNzI3MjIwMDE4WjAzMTEwLwYDVQQD
EyhmOTY2YTU4MWY2ZjQwMWNlZGVhNmIxOTk1YmExMWFlNGMzOTcxMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLe/UVuMoGfAPItib8A3YWeRpYWD
1od8mEJ2Va8Pm9rcsPsVyW3elgeXIEy4SeJy22sBz9PaHVmCI2mdGhGIsBoUOdNT
aGrlqPwOokzFY16snaIxnnjmWWYITGwaTbO15zTf2qavTwY6G7JLsOg8MQTkUkBY
rI7H72P0JNLW7Lky4waSBbk+TqkA//mVqiILTl+aYxokEEH5lbRu+zPNJTHTM/AX
RtsD6D0dZhpHYnrSfdUgj5AHLhjMrG0qcNJcePLrPSiwQjb//biu0XImo2wz92K8
r6/5fQqPtwOXIL32WP+/Nb7G9RQcdcBhmVZNcOMc12qQGWKzGKcrMQFPeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlmpYH29AHO3qaxmVuhGuTDlxM1MB8GA1UdIwQY
MBaAFEAlTUp2etCZYG5ELgkvkSQaNjZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2Ut
YmJlOTEyZWVjNzNlLzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2UtYmJlOTEyZWVjNzNl
LzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3MzJlhS
Qjr+2bNrggdmQBYf9LENGGb51dMLmo8xjFZQa7PZVJP+xhlvXt3a1XPZIAVMt7aw
fwJZsItBCe7Ta2/ktaBvfPvmt/kKxiGpbqyEHl0Bt7CCDZX7cW1xZglKEP61z5py
b/CFnL8pyPjeXxXhEjY40Vm81JF6eREn+HcfmFxYZMfBfgMoH8RY3y6qlgRKhV/D
HDpO6YP/B3xsgOXNEnKnt2ifuAR71vxqjNOdOL+SVjG5kmwc9T++QqBpLYD8w9f9
Fm8rmeIE+oJFUNquYU8uOZMRcfD0i3jyT66mLxT9eK5Q6PyJI5H1+5YX/Fvnqqox
MTHAA5yDjyesMg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:40 2025 by rpki-client