Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: VO3E5qpPAM51N2Hyj9FxvYw+bHhTKApfb1sF2Mh5TOI=
Subject key identifier: 3A:45:50:52:73:54:E2:EC:98:05:39:AF:F2:00:4F:21:42:CD:E5:D3
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 019916884B369909AF46C98D6B0419846F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 123B
Signing time: Thu 04 Sep 2025 21:00:54 +0000
Manifest this update: Thu 04 Sep 2025 21:00:54 +0000
Manifest next update: Fri 05 Sep 2025 21:00:54 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: QDeMsYT3aLS3jVNcAWbzCdjSYi4OvFtFY4asxyG7+tQ=)
2: o7v3w6s-TtM4FqHNx2KIzrdDfyg.roa (hash: E/bv9FlRfrfb8DUNG3s4m8ELhpH6SWFAZyVqbfxptQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:4b:36:99:09:af:46:c9:8d:6b:04:19:84:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Sep 4 21:00:54 2025 GMT
Not After : Sep 5 21:00:54 2025 GMT
Subject: CN=3a4550527354e2ec980539aff2004f2142cde5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:d4:5e:ae:a3:1f:38:19:09:04:42:83:25:
3e:95:e0:e8:12:a4:4e:61:7e:04:9a:dd:52:a2:9e:
47:92:53:d8:6f:85:2a:9c:eb:91:cd:ff:5d:e9:54:
0f:bf:ee:d7:51:bb:82:c6:4a:f6:41:56:cc:7f:4e:
1b:cd:30:cc:4b:2b:fe:d3:22:a8:b4:28:53:f8:6a:
27:70:ce:77:65:11:f5:a5:60:cb:c4:12:62:e3:56:
d7:1e:b1:94:27:fe:d8:63:89:e1:07:26:17:cd:5e:
31:93:26:c5:15:51:3b:ba:7a:21:44:50:af:2e:5a:
75:08:28:d8:e3:10:98:01:c8:43:6e:72:71:a7:1b:
5c:e7:43:47:b4:fb:98:74:4a:e7:7f:6f:59:ab:2f:
42:8a:cb:ca:8e:44:45:39:88:44:17:12:15:56:93:
69:8d:0b:77:1c:a2:01:56:45:84:c6:95:a5:db:48:
8d:e7:0c:a2:57:7f:2a:db:41:fa:aa:96:4d:d7:a5:
6e:d7:33:8e:f4:1b:81:69:08:c0:50:9e:d9:36:bc:
34:f2:b7:06:6b:81:fa:df:70:42:bd:f4:ec:96:26:
1f:d7:cf:a3:c9:4c:5b:16:cf:d5:c0:40:87:72:8f:
2c:6e:1a:b5:02:53:44:83:14:c4:70:56:14:b8:fc:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:45:50:52:73:54:E2:EC:98:05:39:AF:F2:00:4F:21:42:CD:E5:D3
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:29:6b:19:24:b1:45:3b:20:70:15:52:d6:e2:02:d0:90:6b:
d6:c8:d6:5c:37:ca:05:68:f2:3e:b4:2b:44:47:ea:70:3e:e4:
c9:0d:c5:5a:54:30:bb:6a:bb:fb:95:87:1d:88:b4:2b:af:69:
7d:98:f6:c3:22:d9:e3:39:80:72:2e:1a:52:1d:18:85:27:ad:
79:e4:c6:2a:cc:cf:7e:c7:62:1f:bf:4e:6d:b7:d9:8d:f5:12:
9d:a2:ab:c8:8f:55:00:03:3f:80:0c:88:e3:46:46:57:f4:ea:
96:25:85:31:6d:e1:a2:9d:f5:60:59:c9:f4:10:df:24:eb:04:
fa:71:d9:c7:32:90:21:48:9f:7b:ec:3d:84:b1:6a:a3:7a:ed:
78:33:44:64:53:74:3f:d5:e5:48:23:bf:68:90:d4:15:7e:51:
bc:30:70:45:78:0c:b8:a2:24:e7:db:6f:a3:bc:f3:b7:3f:07:
cf:a0:f6:55:49:57:92:a4:48:04:1f:25:5b:41:43:31:8e:62:
1d:11:a5:b9:20:b5:0a:28:15:d8:9a:53:5f:c8:53:eb:8f:1d:
18:8e:c8:29:64:d7:dc:fd:4a:8a:f9:f2:77:90:b6:6b:d6:e6:
0b:70:c9:c1:d2:d5:eb:c1:69:8f:21:20:4f:32:33:aa:7a:c4:
2f:8b:81:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkWiEs2mQmvRsmNawQZhG9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGM5NmI5MmI2YzY5OGZkMzRmYWM3ZDU4MWQ0YzA5MDhk
Y2NlOTkwHhcNMjUwOTA0MjEwMDU0WhcNMjUwOTA1MjEwMDU0WjAzMTEwLwYDVQQD
EygzYTQ1NTA1MjczNTRlMmVjOTgwNTM5YWZmMjAwNGYyMTQyY2RlNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmLUXq6jHzgZCQRCgyU+leDoEqRO
YX4Emt1Sop5HklPYb4UqnOuRzf9d6VQPv+7XUbuCxkr2QVbMf04bzTDMSyv+0yKo
tChT+GoncM53ZRH1pWDLxBJi41bXHrGUJ/7YY4nhByYXzV4xkybFFVE7unohRFCv
Llp1CCjY4xCYAchDbnJxpxtc50NHtPuYdErnf29Zqy9CisvKjkRFOYhEFxIVVpNp
jQt3HKIBVkWExpWl20iN5wyiV38q20H6qpZN16Vu1zOO9BuBaQjAUJ7ZNrw08rcG
a4H633BCvfTsliYf18+jyUxbFs/VwECHco8sbhq1AlNEgxTEcFYUuPyzpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpFUFJzVOLsmAU5r/IATyFCzeXTMB8GA1UdIwQY
MBaAFECMlrkrbGmP00+sfVgdTAkI3M6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzct
NTZiYmYwYmVhZjQ3LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzctNTZiYmYwYmVhZjQ3
LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABilrGSSx
RTsgcBVS1uIC0JBr1sjWXDfKBWjyPrQrREfqcD7kyQ3FWlQwu2q7+5WHHYi0K69p
fZj2wyLZ4zmAci4aUh0YhSeteeTGKszPfsdiH79ObbfZjfUSnaKryI9VAAM/gAyI
40ZGV/TqliWFMW3hop31YFnJ9BDfJOsE+nHZxzKQIUife+w9hLFqo3rteDNEZFN0
P9XlSCO/aJDUFX5RvDBwRXgMuKIk59tvo7zztz8Hz6D2VUlXkqRIBB8lW0FDMY5i
HRGluSC1CigV2JpTX8hT648dGI7IKWTX3P1Kivnyd5C2a9bmC3DJwdLV68FpjyEg
TzIzqnrEL4uBUQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:42 2025 by rpki-client