Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: oMXVQi5qaJkZPyjSPXr3jr0D+n4ndkA2larn0M1yvTI=
Subject key identifier: E6:C2:6B:CC:0C:CC:A8:11:81:14:FC:AB:4F:1D:32:F5:E3:8A:00:A9
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01992DB55B0526E8BBE7C9FF7A405BF65A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 167F
Signing time: Tue 09 Sep 2025 09:01:23 +0000
Manifest this update: Tue 09 Sep 2025 09:01:23 +0000
Manifest next update: Wed 10 Sep 2025 09:01:23 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: epL0k5fijLZjX+aooFHjewg2XY2odNjCXvZ+jLXE358=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:b5:5b:05:26:e8:bb:e7:c9:ff:7a:40:5b:f6:5a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Sep 9 09:01:23 2025 GMT
Not After : Sep 10 09:01:23 2025 GMT
Subject: CN=e6c26bcc0ccca8118114fcab4f1d32f5e38a00a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:5f:57:17:79:0b:b6:20:32:e9:04:96:ad:
05:99:20:fa:80:05:00:40:5c:b4:9f:96:44:f6:9c:
51:14:01:66:7d:22:23:9d:9d:f8:4c:78:4b:8a:15:
ee:1c:c4:fc:1b:5d:b7:1a:fd:38:aa:55:0f:bb:7a:
7a:0b:e1:d2:30:c5:1c:d8:a4:a2:36:c9:ed:46:d7:
b8:b4:7d:a9:d2:f2:fd:ea:ae:fa:29:70:62:67:e2:
92:89:eb:a5:e9:02:c4:79:5c:61:26:b7:c5:c5:ff:
28:dc:cf:8a:84:4a:8c:05:4d:8b:74:76:78:57:83:
a6:2f:51:ea:de:5f:56:bf:9e:0d:41:b1:50:47:69:
d4:7e:94:94:55:0a:97:f9:45:56:ec:0b:9e:ee:65:
39:ff:15:08:db:f5:0c:8d:f8:64:eb:1d:52:f5:48:
b5:76:8c:a1:08:78:9c:2c:5e:fb:3e:2f:3f:37:05:
97:e6:c9:8a:32:64:4a:be:f0:0c:c1:dc:63:e9:cf:
e7:63:2d:ca:e7:fd:ac:cb:d8:8f:f8:b5:50:a9:c5:
0b:f5:e5:67:64:fe:54:47:94:f0:7f:bd:0a:8a:61:
f8:db:93:4f:af:81:6c:7c:9e:d8:e3:d7:3f:eb:51:
3c:e8:92:3f:87:08:b8:43:2e:f2:b9:21:cf:7c:a2:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:6B:CC:0C:CC:A8:11:81:14:FC:AB:4F:1D:32:F5:E3:8A:00:A9
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9a:ea:9d:a9:2e:b6:34:9a:fb:f8:fb:f4:96:fb:f9:f0:49:
6a:b3:c2:40:0a:df:92:f0:9f:7a:f3:46:de:c4:e4:9d:25:27:
fc:e3:02:3b:b4:69:bd:e1:0a:f2:05:77:97:64:14:c5:d1:11:
91:88:4d:17:17:b3:93:79:b8:2c:4e:99:9d:5c:15:7d:37:33:
72:bd:3c:d1:ef:44:c6:35:81:26:03:1d:83:95:87:95:31:94:
0b:a1:d7:64:20:43:66:c8:ef:75:76:3b:37:57:52:25:1e:e4:
eb:6c:87:8d:4b:3a:66:38:74:4c:c7:64:f0:92:a9:df:42:91:
63:3c:26:c5:75:ca:3f:16:88:e9:95:aa:08:3b:b6:78:75:e5:
74:93:ff:80:ce:ac:46:6e:85:93:9e:a2:20:f8:34:ea:8b:45:
c2:c1:9d:51:b1:db:ad:19:b7:10:e8:67:04:c1:20:1f:f5:0d:
cb:23:7d:0d:ed:7b:d5:e4:05:88:b6:03:31:cc:74:78:dc:a3:
94:17:ab:88:95:55:76:bb:2a:55:ca:d4:02:7c:5a:2e:9c:dc:
da:7a:05:15:63:74:fc:04:ec:73:bd:69:77:98:3d:90:70:7a:
c4:76:ff:55:3e:f0:65:f9:1c:02:65:05:a0:7b:b2:e9:e7:73:
4a:08:d5:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkttVsFJui758n/ekBb9lp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2RlMzY1ZDdkMmI1ODUwNmU0ZDRhYmYwYzJlZjdjZDVl
M2I0NjIwHhcNMjUwOTA5MDkwMTIzWhcNMjUwOTEwMDkwMTIzWjAzMTEwLwYDVQQD
EyhlNmMyNmJjYzBjY2NhODExODExNGZjYWI0ZjFkMzJmNWUzOGEwMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWZfVxd5C7YgMukElq0FmSD6gAUA
QFy0n5ZE9pxRFAFmfSIjnZ34THhLihXuHMT8G123Gv04qlUPu3p6C+HSMMUc2KSi
NsntRte4tH2p0vL96q76KXBiZ+KSieul6QLEeVxhJrfFxf8o3M+KhEqMBU2LdHZ4
V4OmL1Hq3l9Wv54NQbFQR2nUfpSUVQqX+UVW7Aue7mU5/xUI2/UMjfhk6x1S9Ui1
doyhCHicLF77Pi8/NwWX5smKMmRKvvAMwdxj6c/nYy3K5/2sy9iP+LVQqcUL9eVn
ZP5UR5Twf70KimH425NPr4FsfJ7Y49c/61E86JI/hwi4Qy7yuSHPfKI4JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObCa8wMzKgRgRT8q08dMvXjigCpMB8GA1UdIwQY
MBaAFELN42XX0rWFBuTUq/DC73zV47RiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEt
MDJlMWJkNjA1MGU1LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NDAxOGMtMDFlOC00MTdmLTg1NmEtMDJlMWJkNjA1MGU1
LzEvUXMzalpkZlN0WVVHNU5TcjhNTHZmTlhqdEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZrqnaku
tjSa+/j79Jb7+fBJarPCQArfkvCfevNG3sTknSUn/OMCO7RpveEK8gV3l2QUxdER
kYhNFxezk3m4LE6ZnVwVfTczcr080e9ExjWBJgMdg5WHlTGUC6HXZCBDZsjvdXY7
N1dSJR7k62yHjUs6Zjh0TMdk8JKp30KRYzwmxXXKPxaI6ZWqCDu2eHXldJP/gM6s
Rm6Fk56iIPg06otFwsGdUbHbrRm3EOhnBMEgH/UNyyN9De171eQFiLYDMcx0eNyj
lBeriJVVdrsqVcrUAnxaLpzc2noFFWN0/ATsc71pd5g9kHB6xHb/VT7wZfkcAmUF
oHuy6edzSgjVzg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:48:46 2025 by rpki-client