Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: +apk5epNx2z166iHkQ2wuQIGn/DSvlSL0+PBEt2hg4k=
Subject key identifier: 74:8B:73:03:05:E0:88:E7:19:0F:8B:0E:9A:64:F9:17:0A:2E:01:A2
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01993424C71B9644A3945CCBEED0B3B87103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 12CA
Signing time: Wed 10 Sep 2025 15:00:49 +0000
Manifest this update: Wed 10 Sep 2025 15:00:49 +0000
Manifest next update: Thu 11 Sep 2025 15:00:49 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: taoMwNi0gv3/5AK0FZTkWrUi4VDWc9FS2LDTN0FOYJQ=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:c7:1b:96:44:a3:94:5c:cb:ee:d0:b3:b8:71:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Sep 10 15:00:49 2025 GMT
Not After : Sep 11 15:00:49 2025 GMT
Subject: CN=748b730305e088e7190f8b0e9a64f9170a2e01a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:c2:51:12:47:3f:14:ac:cd:9a:0c:92:59:
89:b3:30:91:4c:c9:1e:6c:d6:59:57:f7:56:8e:17:
57:b9:48:9d:97:0b:26:37:ea:6f:34:ff:5c:67:2a:
ae:a3:88:5e:88:7c:72:99:c7:cc:00:b3:16:51:93:
b9:01:f1:62:53:9c:ec:99:f6:36:fa:7f:27:a9:7d:
3b:a6:62:4a:10:15:f9:0b:3d:80:08:e0:f7:fc:e1:
35:fe:ba:9a:e8:d3:3f:8f:0a:ee:c5:fa:8e:c5:03:
32:cb:da:2e:42:36:87:96:17:ad:b2:0d:d5:26:c0:
c9:ad:9a:c5:d9:2c:c9:e1:69:e2:40:7c:21:ea:5a:
de:2d:06:df:0e:12:ac:ba:23:3a:7b:af:ac:20:d0:
5f:96:8c:0b:35:c0:7e:e3:3a:42:7e:d1:32:89:a8:
93:2f:c2:7a:09:5a:7f:62:e4:7c:cc:17:e8:c4:3d:
4b:d9:f2:0d:14:79:7b:40:75:3f:2b:aa:5a:f9:b8:
6b:bb:e9:bc:9f:74:16:9f:2c:0a:66:2c:f5:5b:c4:
0a:a0:dd:d5:60:7d:02:c7:9f:1e:96:d4:91:f1:76:
11:de:34:7d:5b:81:3d:85:3f:b2:35:02:a1:5e:51:
47:45:16:ee:86:46:65:7b:d4:9c:83:26:95:90:6b:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8B:73:03:05:E0:88:E7:19:0F:8B:0E:9A:64:F9:17:0A:2E:01:A2
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:01:7d:73:e8:60:91:60:ea:d3:3a:2a:6d:be:8e:92:46:1e:
15:88:77:34:21:72:eb:70:7f:62:91:a2:23:56:7c:b1:87:2a:
47:d9:31:ea:0f:c6:59:06:d0:c4:a3:87:56:74:41:dd:e2:e9:
50:67:72:d6:fd:0f:6f:2a:90:8e:3a:b5:5a:5c:f9:06:ac:d1:
52:10:1b:d0:de:27:25:10:1a:8c:66:87:ad:69:7d:27:39:38:
c2:96:a9:56:0d:ca:87:b2:32:18:52:cd:8c:1b:51:28:89:24:
60:d6:dd:bb:f6:7a:d1:b7:46:8f:54:2f:7f:a7:3b:5c:17:c1:
8a:e9:83:a9:64:6b:da:ef:bd:c2:a4:8e:32:4f:a0:57:04:14:
d7:db:1b:7d:21:ad:f0:13:19:11:f2:66:ad:dc:1f:c7:c8:ee:
e4:98:78:b3:cc:f1:da:ad:7c:c6:7d:90:dd:20:6a:2c:24:c6:
6d:a4:40:db:9c:a9:09:f3:3c:a4:db:f5:3a:82:73:81:42:a5:
d4:c0:fe:85:75:85:df:00:45:a1:e0:28:57:f8:d2:47:43:a4:
75:a6:ab:ef:0b:80:f2:9a:87:be:33:4c:1b:83:5c:30:15:cd:
88:3c:14:f6:66:2e:1b:2f:53:04:c6:bc:cb:fd:fa:55:05:57:
fe:e8:c0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk0JMcblkSjlFzL7tCzuHEDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1
OGIzZTcwHhcNMjUwOTEwMTUwMDQ5WhcNMjUwOTExMTUwMDQ5WjAzMTEwLwYDVQQD
Eyg3NDhiNzMwMzA1ZTA4OGU3MTkwZjhiMGU5YTY0ZjkxNzBhMmUwMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LTCURJHPxSszZoMklmJszCRTMke
bNZZV/dWjhdXuUidlwsmN+pvNP9cZyquo4heiHxymcfMALMWUZO5AfFiU5zsmfY2
+n8nqX07pmJKEBX5Cz2ACOD3/OE1/rqa6NM/jwruxfqOxQMyy9ouQjaHlhetsg3V
JsDJrZrF2SzJ4WniQHwh6lreLQbfDhKsuiM6e6+sINBflowLNcB+4zpCftEyiaiT
L8J6CVp/YuR8zBfoxD1L2fINFHl7QHU/K6pa+bhru+m8n3QWnywKZiz1W8QKoN3V
YH0Cx58eltSR8XYR3jR9W4E9hT+yNQKhXlFHRRbuhkZle9ScgyaVkGu0BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSLcwMF4IjnGQ+LDppk+RcKLgGiMB8GA1UdIwQY
MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt
ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz
LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgF9c+hg
kWDq0zoqbb6OkkYeFYh3NCFy63B/YpGiI1Z8sYcqR9kx6g/GWQbQxKOHVnRB3eLp
UGdy1v0PbyqQjjq1Wlz5BqzRUhAb0N4nJRAajGaHrWl9Jzk4wpapVg3Kh7IyGFLN
jBtRKIkkYNbdu/Z60bdGj1Qvf6c7XBfBiumDqWRr2u+9wqSOMk+gVwQU19sbfSGt
8BMZEfJmrdwfx8ju5Jh4s8zx2q18xn2Q3SBqLCTGbaRA25ypCfM8pNv1OoJzgUKl
1MD+hXWF3wBFoeAoV/jSR0Okdaar7wuA8pqHvjNMG4NcMBXNiDwU9mYuGy9TBMa8
y/36VQVX/ujA9A==
-----END CERTIFICATE-----
Generated at Thu Sep 11 00:13:26 2025 by rpki-client