Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: UqMBLe2pD8BlnMPqNgFwRcQqEEUZmeQ1hHYqoSYCPA8=
Subject key identifier: 58:43:1A:45:8C:52:A2:16:A8:A3:86:CE:4F:02:0C:1B:73:C2:98:65
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01983DCEC0DA4C235908C354EEA5762E8D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 15FD
Signing time: Thu 24 Jul 2025 19:00:16 +0000
Manifest this update: Thu 24 Jul 2025 19:00:16 +0000
Manifest next update: Fri 25 Jul 2025 19:00:16 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: Xoafstz7hUqRDQEzsWxZhhqHF27ko1jSqlA6UGtCtjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:ce:c0:da:4c:23:59:08:c3:54:ee:a5:76:2e:8d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Jul 24 19:00:16 2025 GMT
Not After : Jul 25 19:00:16 2025 GMT
Subject: CN=58431a458c52a216a8a386ce4f020c1b73c29865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0a:3b:bd:1d:ef:36:52:c4:b4:84:03:4b:97:
62:0d:c5:c6:3e:f3:84:38:3a:e6:08:fb:57:09:f7:
d3:4c:dc:80:7d:23:66:e9:97:13:e2:b2:bb:1e:ab:
24:b9:4a:b6:e6:5a:14:fb:bc:b7:ac:12:f2:5d:07:
fd:24:1a:4e:c5:53:c4:bb:62:1d:96:c7:7e:b4:da:
b1:f1:ea:3b:8e:bb:c4:b2:3c:59:36:63:00:93:ca:
6e:ff:fb:f5:58:f8:fe:81:fe:26:e6:a5:c8:22:16:
c2:5d:24:a5:fb:79:de:2e:9f:d1:8b:7b:9a:52:79:
49:9b:b6:aa:a6:11:1e:5c:c5:eb:b3:9c:62:65:2f:
76:ee:bc:ad:63:e3:76:98:ab:e9:c7:9f:9c:95:42:
73:76:e1:d1:28:7d:f5:9c:d5:c4:2c:15:09:8a:9c:
97:22:1c:9a:a9:06:07:b5:7f:1c:dc:34:c4:84:b6:
f5:10:1b:b0:f0:c5:ab:34:05:09:8c:f9:58:87:b2:
00:5a:58:2d:90:9f:a2:c8:8d:ef:65:3e:3b:15:23:
13:d7:7d:9d:36:45:e8:5d:c1:44:0a:2f:bd:b3:3c:
15:d9:5d:b5:62:e3:d4:ab:b7:b9:2f:c3:4a:76:c0:
7a:c8:4b:12:2a:63:2f:af:4d:4e:8e:9b:e9:81:86:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:1A:45:8C:52:A2:16:A8:A3:86:CE:4F:02:0C:1B:73:C2:98:65
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:be:37:bd:9c:be:53:75:c4:d0:8a:03:34:30:61:dc:8f:
9e:b4:e5:a1:f6:28:f3:aa:b3:9f:43:27:ff:dd:2a:80:91:b2:
54:36:fe:12:4a:a7:8b:ee:68:95:04:f1:3f:e7:b5:69:01:dc:
fe:bf:14:6c:c3:b9:06:2b:c0:87:f3:e2:38:d7:24:87:12:9b:
63:d5:7f:c9:9b:71:6b:ea:e2:aa:26:71:26:1d:88:12:33:1a:
88:0d:85:9a:7e:a4:47:26:fb:64:7c:3a:e6:a1:70:c8:cd:aa:
31:c0:4d:b0:27:ee:48:67:d9:8b:0d:39:51:94:ce:d2:7d:a8:
2e:10:f3:d1:e8:2b:70:ec:80:d3:7b:d1:26:cc:11:11:5c:88:
ee:cf:2f:e1:1a:3d:82:81:d4:20:df:67:f6:b9:86:07:b4:f0:
04:16:e7:54:a9:4d:b5:05:04:52:b9:62:c6:c3:ec:4d:18:f4:
20:c1:eb:66:ba:31:56:9b:9c:37:59:10:3b:aa:a2:37:c3:53:
48:fa:ce:18:2d:ed:0b:22:0b:13:ce:3f:9c:1e:d2:08:43:52:
87:52:d0:ee:3a:c3:f2:2d:dd:f0:55:5e:6f:b1:62:5f:8e:a9:
da:02:e1:d3:cd:91:78:2f:8e:62:c5:0b:4f:cb:a7:4c:82:da:
25:71:b4:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9zsDaTCNZCMNU7qV2Lo1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl
ZGJkMjEwHhcNMjUwNzI0MTkwMDE2WhcNMjUwNzI1MTkwMDE2WjAzMTEwLwYDVQQD
Eyg1ODQzMWE0NThjNTJhMjE2YThhMzg2Y2U0ZjAyMGMxYjczYzI5ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wo7vR3vNlLEtIQDS5diDcXGPvOE
ODrmCPtXCffTTNyAfSNm6ZcT4rK7HqskuUq25loU+7y3rBLyXQf9JBpOxVPEu2Id
lsd+tNqx8eo7jrvEsjxZNmMAk8pu//v1WPj+gf4m5qXIIhbCXSSl+3neLp/Ri3ua
UnlJm7aqphEeXMXrs5xiZS927rytY+N2mKvpx5+clUJzduHRKH31nNXELBUJipyX
IhyaqQYHtX8c3DTEhLb1EBuw8MWrNAUJjPlYh7IAWlgtkJ+iyI3vZT47FSMT132d
NkXoXcFECi+9szwV2V21YuPUq7e5L8NKdsB6yEsSKmMvr01OjpvpgYYMZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhDGkWMUqIWqKOGzk8CDBtzwphlMB8GA1UdIwQY
MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt
YzM5OWJlMDMxYjRhLzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh
LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXC+N72c
vlN1xNCKAzQwYdyPnrTlofYo86qzn0Mn/90qgJGyVDb+Ekqni+5olQTxP+e1aQHc
/r8UbMO5BivAh/PiONckhxKbY9V/yZtxa+riqiZxJh2IEjMaiA2Fmn6kRyb7ZHw6
5qFwyM2qMcBNsCfuSGfZiw05UZTO0n2oLhDz0egrcOyA03vRJswREVyI7s8v4Ro9
goHUIN9n9rmGB7TwBBbnVKlNtQUEUrlixsPsTRj0IMHrZroxVpucN1kQO6qiN8NT
SPrOGC3tCyILE84/nB7SCENSh1LQ7jrD8i3d8FVeb7FiX46p2gLh082ReC+OYsUL
T8unTILaJXG0qw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:26:21 2025 by rpki-client