Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: +IsVkB2RZmpO8hhqNaABvva2juAN0/PDfbe8PBDzwUg=
Subject key identifier: 5B:4E:8B:A4:2A:5C:6C:C0:4D:51:30:D2:F0:FF:06:CF:B1:A6:49:24
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 019921B0D246778E1BB664E616A4069EC90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 05F0
Signing time: Sun 07 Sep 2025 01:01:00 +0000
Manifest this update: Sun 07 Sep 2025 01:01:00 +0000
Manifest next update: Mon 08 Sep 2025 01:01:00 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: YZ84IpKf+YLpW6W1TdYlKgV4miGXHMOZaXmK752Ta40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:d2:46:77:8e:1b:b6:64:e6:16:a4:06:9e:c9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Sep 7 01:01:00 2025 GMT
Not After : Sep 8 01:01:00 2025 GMT
Subject: CN=5b4e8ba42a5c6cc04d5130d2f0ff06cfb1a64924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:bf:58:fc:b7:53:52:9d:84:92:92:b2:cd:
18:cf:4f:b3:b6:01:9f:5a:6b:de:30:cb:d6:17:03:
05:99:33:ca:09:83:07:e7:18:bf:f9:de:f9:f6:9a:
75:07:9b:51:6f:8f:2c:1e:c3:9c:0f:f0:71:a9:53:
d5:e5:d3:69:42:2b:b4:42:03:30:29:7d:d3:9c:d4:
e9:93:fe:a3:5c:f9:62:c3:b3:9e:35:6a:f3:f2:7a:
48:06:da:bf:03:eb:8d:5d:b4:b8:20:8e:db:07:12:
d6:4f:a2:36:40:f6:d5:05:f2:e8:d9:a7:1c:da:3f:
f7:6c:47:06:74:f2:4a:6f:11:fb:8e:04:f4:a6:27:
03:fa:0c:ae:13:c7:9f:64:f9:a9:70:aa:da:1e:11:
07:9a:09:3a:f2:64:79:cb:22:31:46:0c:15:63:2a:
c4:c8:77:e4:c5:08:14:7f:a5:52:79:51:a8:b5:c0:
7f:c0:bb:89:05:ee:8a:26:a7:7a:b4:9f:a7:e0:92:
e8:7c:88:9a:32:90:3a:98:f7:ec:0a:b2:77:76:b7:
8b:67:ea:30:6f:1e:f3:ed:ea:c1:77:45:e2:34:ae:
b0:05:d6:12:c0:ac:52:1b:00:87:67:d2:c8:18:b3:
1d:ee:32:b8:8d:91:4a:ff:d6:99:74:e7:74:87:2f:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4E:8B:A4:2A:5C:6C:C0:4D:51:30:D2:F0:FF:06:CF:B1:A6:49:24
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f0:b8:fe:99:2a:0d:7f:0a:18:61:7d:61:d5:54:f4:e1:89:
61:c9:32:65:7f:e0:b4:74:64:3e:59:8d:83:b9:52:a0:9b:9e:
a2:cb:2d:86:ef:90:95:3d:19:db:a3:e3:e0:2d:6b:93:f3:5f:
4b:62:10:73:01:c2:1c:39:8d:cc:26:9a:61:84:47:db:68:a8:
c6:3e:ea:ca:d0:72:4f:12:78:77:db:71:db:3b:c0:69:42:8b:
6c:5a:73:b6:2e:e6:91:cc:28:19:98:03:60:86:72:cd:03:cf:
df:2a:8d:13:6d:fd:b5:25:5f:2d:02:a1:9b:cc:96:65:5a:cb:
c1:9a:0a:7a:3f:79:2e:41:2b:98:8a:0e:6b:7f:2f:0a:b0:4a:
9c:80:79:c1:a7:f2:c1:64:68:8d:f6:31:24:e1:84:6d:36:0f:
01:59:76:8f:52:13:36:81:05:61:b9:7b:fd:e9:38:f3:b3:09:
34:56:78:33:67:60:16:d8:d5:72:c9:f4:91:f3:22:24:4a:7e:
27:a4:ae:07:e0:4c:5e:fb:4d:f3:80:68:c5:a3:4c:dd:ac:56:
fe:0b:fa:dd:b0:df:6e:1d:15:f8:a9:ab:e8:00:fa:25:18:9e:
a9:1a:dc:93:4a:f1:2b:39:ff:77:cf:20:d7:42:3f:3b:5a:15:
e0:65:46:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsNJGd44btmTmFqQGnskNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWM3MDA1NmE3OGRmNWY4ZmM3MGZmMDAzZDEyZjYwZDE1
MWQ3OTEwHhcNMjUwOTA3MDEwMTAwWhcNMjUwOTA4MDEwMTAwWjAzMTEwLwYDVQQD
Eyg1YjRlOGJhNDJhNWM2Y2MwNGQ1MTMwZDJmMGZmMDZjZmIxYTY0OTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotG/WPy3U1KdhJKSss0Yz0+ztgGf
WmveMMvWFwMFmTPKCYMH5xi/+d759pp1B5tRb48sHsOcD/BxqVPV5dNpQiu0QgMw
KX3TnNTpk/6jXPliw7OeNWrz8npIBtq/A+uNXbS4II7bBxLWT6I2QPbVBfLo2acc
2j/3bEcGdPJKbxH7jgT0picD+gyuE8efZPmpcKraHhEHmgk68mR5yyIxRgwVYyrE
yHfkxQgUf6VSeVGotcB/wLuJBe6KJqd6tJ+n4JLofIiaMpA6mPfsCrJ3dreLZ+ow
bx7z7erBd0XiNK6wBdYSwKxSGwCHZ9LIGLMd7jK4jZFK/9aZdOd0hy+2kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtOi6QqXGzATVEw0vD/Bs+xpkkkMB8GA1UdIwQY
MBaAFECccAVqeN9fj8cP8APRL2DRUdeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMt
MDc3ZTdkYmVkNjk4LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMtMDc3ZTdkYmVkNjk4
LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPC4/pkq
DX8KGGF9YdVU9OGJYckyZX/gtHRkPlmNg7lSoJueossthu+QlT0Z26Pj4C1rk/Nf
S2IQcwHCHDmNzCaaYYRH22ioxj7qytByTxJ4d9tx2zvAaUKLbFpzti7mkcwoGZgD
YIZyzQPP3yqNE239tSVfLQKhm8yWZVrLwZoKej95LkErmIoOa38vCrBKnIB5wafy
wWRojfYxJOGEbTYPAVl2j1ITNoEFYbl7/ek487MJNFZ4M2dgFtjVcsn0kfMiJEp+
J6SuB+BMXvtN84BoxaNM3axW/gv63bDfbh0V+Kmr6AD6JRieqRrck0rxKzn/d88g
10I/O1oV4GVGMA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:24 2025 by rpki-client