Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: bDaVoE35ouqhnr0/qhD7JmGqA4zKl9D6oszPqnYLTWU=
Subject key identifier: F9:11:B6:D3:84:8D:74:C7:61:86:6E:B3:B2:B6:AE:0E:AC:58:84:40
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 01983427EC45DF760DB65C3136D737290FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 15F6
Signing time: Tue 22 Jul 2025 22:01:28 +0000
Manifest this update: Tue 22 Jul 2025 22:01:28 +0000
Manifest next update: Wed 23 Jul 2025 22:01:28 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: eTOfi6ua8aqge+pgzIXJR4ujlUalXz1QIqyxAbm55CA=)
2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:27:ec:45:df:76:0d:b6:5c:31:36:d7:37:29:0f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Jul 22 22:01:28 2025 GMT
Not After : Jul 23 22:01:28 2025 GMT
Subject: CN=f911b6d3848d74c761866eb3b2b6ae0eac588440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:2d:6c:0c:58:c9:85:85:a4:2f:1d:0b:b5:
17:3d:1f:45:ce:8e:89:62:a5:8b:d9:be:79:ff:37:
3c:cf:5b:de:db:c2:c6:2e:ff:e3:27:f2:e0:cf:6e:
ae:f5:ae:a7:98:53:b3:83:56:0f:08:67:19:ca:1d:
1b:6d:91:93:54:0d:f0:ad:00:52:ee:2b:d9:f6:29:
75:b2:6a:34:1c:75:a2:b4:2b:6a:76:7d:5f:5f:90:
af:5c:41:e5:46:b1:f0:44:ff:c9:81:8a:8a:1a:41:
6f:78:7e:5e:21:22:a6:e7:4f:49:58:79:b2:b8:89:
68:36:ac:f2:cb:83:94:29:37:be:6e:c3:c2:a7:bb:
12:3b:49:25:a0:3b:44:c9:47:0d:67:a6:60:b4:62:
b1:91:cf:8b:4b:e1:73:12:2b:6b:c5:92:86:44:89:
02:07:f0:bf:51:ed:93:2b:d7:e9:dd:d1:91:5b:75:
f5:78:90:dc:a0:23:c0:7d:ba:f1:ad:80:e7:d5:38:
c9:81:fc:a3:f9:8f:86:3e:c3:83:c4:0d:1c:4b:35:
80:31:78:32:44:2e:7f:2c:05:70:34:f6:c5:26:db:
ec:73:c3:fe:0b:34:b8:d9:44:12:34:a2:5b:d7:e9:
e7:09:4a:9d:f3:5e:0e:34:b1:81:0b:34:23:25:37:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:11:B6:D3:84:8D:74:C7:61:86:6E:B3:B2:B6:AE:0E:AC:58:84:40
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:67:3a:cd:72:57:50:1e:c2:3c:2c:d7:ec:b0:ee:de:8a:
0f:56:78:5a:55:92:66:52:b4:4f:71:32:30:5b:78:24:6e:7e:
0d:86:2f:87:29:a4:d9:37:3e:d2:1e:d6:3f:67:b5:d6:9a:bd:
6a:af:9f:eb:3b:02:f7:9a:eb:6a:1b:54:3a:2f:26:96:77:8e:
fd:3b:ca:5f:82:5f:e1:8d:9b:4a:d0:0b:de:17:5f:6c:b3:db:
e5:1e:a5:1b:bd:69:c6:c9:2f:c5:c9:ea:ab:09:cd:60:76:7e:
da:40:ed:60:61:16:d9:1c:e1:6d:bf:5d:e4:8f:6f:1b:12:59:
bb:96:15:3f:6a:00:3f:26:e8:9c:d4:74:54:31:85:a0:cc:d2:
3c:b2:50:b7:31:ef:74:4d:94:e6:f4:fe:84:d5:cc:a9:a6:1c:
59:5c:33:42:34:67:2a:48:cf:d7:d9:40:30:a5:42:ff:a1:ab:
8d:68:f6:21:d4:2a:25:a5:d9:a4:4a:3d:e7:94:79:0c:6e:88:
25:e2:9e:23:41:51:bd:f2:6a:12:d1:a5:61:43:3e:7d:f9:26:
5f:10:22:2f:3d:d8:35:99:eb:2b:4c:30:0e:32:d9:6a:70:c3:
4f:c8:db:ca:4b:d6:ea:1d:24:be:24:0a:14:ca:39:96:6d:d0:
b4:af:17:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg0J+xF33YNtlwxNtc3KQ/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2ZkM2E0OWJjNzFlNzRhMGQwYmY3ZTM0NmNhODliMjk1
OTdhMTIwHhcNMjUwNzIyMjIwMTI4WhcNMjUwNzIzMjIwMTI4WjAzMTEwLwYDVQQD
EyhmOTExYjZkMzg0OGQ3NGM3NjE4NjZlYjNiMmI2YWUwZWFjNTg4NDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlItbAxYyYWFpC8dC7UXPR9Fzo6J
YqWL2b55/zc8z1ve28LGLv/jJ/Lgz26u9a6nmFOzg1YPCGcZyh0bbZGTVA3wrQBS
7ivZ9il1smo0HHWitCtqdn1fX5CvXEHlRrHwRP/JgYqKGkFveH5eISKm509JWHmy
uIloNqzyy4OUKTe+bsPCp7sSO0kloDtEyUcNZ6ZgtGKxkc+LS+FzEitrxZKGRIkC
B/C/Ue2TK9fp3dGRW3X1eJDcoCPAfbrxrYDn1TjJgfyj+Y+GPsODxA0cSzWAMXgy
RC5/LAVwNPbFJtvsc8P+CzS42UQSNKJb1+nnCUqd814ONLGBCzQjJTe6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkRttOEjXTHYYZus7K2rg6sWIRAMB8GA1UdIwQY
MBaAFEDP06Sbxx50oNC/fjRsqJspWXoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt
NjBiNmViYmI3ZTZmLzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm
LzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhednOs1y
V1Aewjws1+yw7t6KD1Z4WlWSZlK0T3EyMFt4JG5+DYYvhymk2Tc+0h7WP2e11pq9
aq+f6zsC95rrahtUOi8mlneO/TvKX4Jf4Y2bStAL3hdfbLPb5R6lG71pxskvxcnq
qwnNYHZ+2kDtYGEW2Rzhbb9d5I9vGxJZu5YVP2oAPybonNR0VDGFoMzSPLJQtzHv
dE2U5vT+hNXMqaYcWVwzQjRnKkjP19lAMKVC/6GrjWj2IdQqJaXZpEo955R5DG6I
JeKeI0FRvfJqEtGlYUM+ffkmXxAiLz3YNZnrK0wwDjLZanDDT8jbykvW6h0kviQK
FMo5lm3QtK8XfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:03:10 2025 by rpki-client