Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: MW2DSxuAjBpIo1gtfX0GnBwPA0Rfds4UIxh37c9bXgU=
Subject key identifier: A3:5C:3A:74:77:1D:2F:6F:1D:91:10:1F:D5:60:8A:C1:D8:05:25:DE
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019922FA3A480CE671FB75D580893986FE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 035E
Signing time: Sun 07 Sep 2025 07:00:48 +0000
Manifest this update: Sun 07 Sep 2025 07:00:48 +0000
Manifest next update: Mon 08 Sep 2025 07:00:48 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: YWlh1d+0NIggCySqESAT7I2MSqFMU3lqNrSpJGdQaFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:3a:48:0c:e6:71:fb:75:d5:80:89:39:86:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Sep 7 07:00:48 2025 GMT
Not After : Sep 8 07:00:48 2025 GMT
Subject: CN=a35c3a74771d2f6f1d91101fd5608ac1d80525de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:fd:35:86:12:af:6b:fa:22:63:c5:7a:a3:
44:0a:3c:96:aa:44:f0:9c:ef:a0:07:9e:58:61:2b:
7d:8c:5e:1a:b0:bd:b3:f1:64:fe:91:2b:50:fe:e0:
e8:d9:fb:ce:2f:45:3a:46:dd:3d:56:8e:f5:2a:81:
f2:22:f6:2b:32:b5:ad:5e:23:e4:0f:33:59:35:a5:
44:19:1b:30:13:df:67:da:57:6f:04:24:c4:af:8e:
e6:64:44:64:c2:39:f5:1a:c8:ed:f5:32:c8:c3:33:
7b:aa:a6:0f:ec:83:07:ca:b8:4f:a9:a8:ae:da:10:
ea:af:f7:c1:85:ff:a5:c3:06:65:96:4b:97:ca:81:
e8:ca:f0:ab:45:57:67:1d:8e:2d:93:6a:ba:71:74:
9c:7c:ac:e2:8c:79:59:8c:cd:03:b8:55:70:db:65:
60:7a:8e:78:84:00:ee:70:59:6d:2e:60:7a:1a:ff:
ac:86:1d:5a:5e:e7:ce:15:25:fe:66:e3:85:d0:55:
1c:21:9f:2e:c9:d5:96:d5:c7:08:31:c2:7b:8e:84:
f8:77:1a:a1:9b:1f:e5:ad:4c:fe:66:5b:b3:20:f2:
a8:cd:72:dc:62:7e:fa:b3:aa:9a:58:a5:8f:00:36:
0a:d1:b2:8a:a4:8d:db:01:b4:8d:c4:7d:de:40:64:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5C:3A:74:77:1D:2F:6F:1D:91:10:1F:D5:60:8A:C1:D8:05:25:DE
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:80:30:2c:49:e2:7c:17:20:b6:95:62:03:ec:3e:c0:c0:3a:
88:4b:c2:c2:1a:79:94:94:e5:cd:94:32:6e:e4:69:f0:38:a6:
3d:dc:ae:1f:99:77:5d:7b:c7:21:9e:1e:74:df:90:2a:3e:e2:
15:0d:54:3e:5f:8f:ae:ef:b8:6d:56:a1:02:cd:06:e4:86:e6:
b8:fa:37:c7:bb:d1:b3:d1:83:18:8e:e7:38:3e:ca:a4:39:f7:
f3:5e:55:ff:33:5b:af:34:b6:45:fa:bd:e6:82:26:32:38:fd:
3a:57:18:72:ac:10:21:8d:8c:79:aa:20:5f:f8:ed:8a:6d:f1:
1e:ae:56:df:a6:6c:9b:c0:47:d6:59:9b:80:f5:77:b2:7c:22:
9a:45:59:e1:f3:21:96:a5:f7:cb:bf:10:7d:de:7e:ab:ee:b3:
53:8a:af:d7:bc:c4:c7:75:96:92:d3:5d:76:72:e0:3c:a3:e9:
0e:04:57:18:4e:9d:2c:f2:6f:94:77:c5:b6:89:ef:5e:c0:86:
e9:9f:fc:99:1c:72:fc:36:cc:27:a1:7a:84:6c:6a:07:1e:e2:
75:ea:07:c0:d7:a1:a7:d1:1c:7f:23:97:47:35:3b:54:8b:42:
09:cb:39:e9:ef:2a:5b:53:f6:45:cc:c4:9e:17:2e:19:ea:9a:
69:98:d0:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+jpIDOZx+3XVgIk5hv6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmE2YzA1MDUwYjUwYzcwYjlhMzVkMzQyMzBiN2FjMzA5
ZDRkOWEwHhcNMjUwOTA3MDcwMDQ4WhcNMjUwOTA4MDcwMDQ4WjAzMTEwLwYDVQQD
EyhhMzVjM2E3NDc3MWQyZjZmMWQ5MTEwMWZkNTYwOGFjMWQ4MDUyNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK/9NYYSr2v6ImPFeqNECjyWqkTw
nO+gB55YYSt9jF4asL2z8WT+kStQ/uDo2fvOL0U6Rt09Vo71KoHyIvYrMrWtXiPk
DzNZNaVEGRswE99n2ldvBCTEr47mZERkwjn1Gsjt9TLIwzN7qqYP7IMHyrhPqaiu
2hDqr/fBhf+lwwZllkuXyoHoyvCrRVdnHY4tk2q6cXScfKzijHlZjM0DuFVw22Vg
eo54hADucFltLmB6Gv+shh1aXufOFSX+ZuOF0FUcIZ8uydWW1ccIMcJ7joT4dxqh
mx/lrUz+ZluzIPKozXLcYn76s6qaWKWPADYK0bKKpI3bAbSNxH3eQGTZEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNcOnR3HS9vHZEQH9VgisHYBSXeMB8GA1UdIwQY
MBaAFEG6bAUFC1DHC5o100Iwt6wwnU2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgt
YjBiODU4YzBmYmE0LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgtYjBiODU4YzBmYmE0
LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoAwLEni
fBcgtpViA+w+wMA6iEvCwhp5lJTlzZQybuRp8DimPdyuH5l3XXvHIZ4edN+QKj7i
FQ1UPl+Pru+4bVahAs0G5IbmuPo3x7vRs9GDGI7nOD7KpDn3815V/zNbrzS2Rfq9
5oImMjj9OlcYcqwQIY2MeaogX/jtim3xHq5W36Zsm8BH1lmbgPV3snwimkVZ4fMh
lqX3y78Qfd5+q+6zU4qv17zEx3WWktNddnLgPKPpDgRXGE6dLPJvlHfFtonvXsCG
6Z/8mRxy/DbMJ6F6hGxqBx7ideoHwNehp9EcfyOXRzU7VItCCcs56e8qW1P2RczE
nhcuGeqaaZjQAA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:58 2025 by rpki-client