Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: rYW6fovNL6t3AuzlegwRveX0zcECA1NyG2UBtoZmUbM=
Subject key identifier: F5:F9:F0:10:1D:3C:C0:36:4A:17:B0:EB:AB:0F:2E:37:7D:DD:5D:04
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 0199225588E7D3FAC6DCED2DD2830112FB50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 15FF
Signing time: Sun 07 Sep 2025 04:00:54 +0000
Manifest this update: Sun 07 Sep 2025 04:00:54 +0000
Manifest next update: Mon 08 Sep 2025 04:00:54 +0000
Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: rsLVWdykCtk7zyzf3v+5SITyPNbnomkFAiaH7Ze4iI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:88:e7:d3:fa:c6:dc:ed:2d:d2:83:01:12:fb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Sep 7 04:00:54 2025 GMT
Not After : Sep 8 04:00:54 2025 GMT
Subject: CN=f5f9f0101d3cc0364a17b0ebab0f2e377ddd5d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:83:d0:33:30:7a:b2:a2:6d:93:50:b8:0e:
a1:4b:69:89:dd:51:e3:7b:c5:b6:50:85:ac:1c:ee:
d8:f1:c4:52:5b:c2:22:73:81:2f:86:d6:0b:5c:34:
82:93:9a:f1:d5:cb:16:d9:d4:88:b8:3e:9f:79:67:
92:a8:d8:d3:f6:cd:fa:3a:ff:ac:21:b4:18:24:6e:
31:da:5e:37:3c:b0:b4:e3:ee:29:65:8c:ad:c2:b3:
d8:2b:3c:82:71:b4:28:3c:b2:a3:a0:e4:96:f4:ed:
6b:5c:a4:5e:86:c8:84:f3:b1:1c:3d:7c:68:99:a0:
11:03:61:c0:c1:8e:3f:51:38:7d:25:da:8c:10:c3:
e6:12:7a:e6:1f:95:cb:05:73:46:22:89:73:68:77:
dd:ff:70:e1:31:43:2c:9c:99:a3:3e:b8:03:68:c7:
4d:66:d7:43:cc:d3:d5:23:c3:21:d4:b8:6e:b0:4f:
07:58:e5:31:bd:1e:aa:02:ae:06:9b:48:92:a6:5b:
ba:99:6b:eb:35:51:97:a7:2f:66:51:82:6b:3f:e2:
a8:0b:96:ad:80:d9:38:88:89:a4:0a:6c:f2:0c:40:
ce:90:2e:9e:8f:ae:ae:a2:2d:88:de:6e:13:ff:99:
1a:42:09:c0:81:11:d2:bd:33:10:ce:18:04:75:cd:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:F0:10:1D:3C:C0:36:4A:17:B0:EB:AB:0F:2E:37:7D:DD:5D:04
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:59:74:8b:74:8a:c0:4d:41:7d:6a:a9:b4:9d:fb:e5:c2:72:
6a:88:7c:ab:9d:9c:7b:81:dc:b8:f6:1d:de:69:7b:8c:04:4a:
fd:bd:f3:67:c8:6b:68:34:1e:5c:17:96:fb:14:e5:52:bd:bc:
b0:4b:a7:00:af:0f:60:d0:23:f8:53:28:49:7b:1a:cb:82:96:
d4:11:03:23:7e:25:92:2d:d4:49:b3:85:08:1d:db:3a:a8:76:
8e:a4:36:c6:7e:01:01:42:37:7f:fc:47:b0:29:11:dc:c2:86:
c9:60:53:02:83:97:19:25:5c:d9:bd:41:a1:6c:33:55:55:f6:
c1:36:d9:4f:a6:dc:03:7e:a1:1a:91:da:8e:e1:cb:b8:91:c1:
88:68:6b:a0:de:48:45:2c:1b:e0:b6:f1:48:cb:92:f4:52:60:
c8:7d:da:af:24:ce:10:a1:8b:c3:ff:cc:d6:64:37:86:63:49:
e5:fe:45:3f:6c:0a:5c:9b:34:b9:f0:9e:cf:c8:6d:69:36:76:
00:e7:d0:e5:76:a8:94:98:e9:8e:cf:16:ae:28:e8:cf:7b:71:
99:64:91:da:a2:ed:42:70:12:45:2e:86:13:6f:7b:15:56:b9:
0d:1b:aa:c3:6e:46:71:ce:8b:23:5f:00:d3:d7:c5:f6:95:9c:
75:22:6b:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVYjn0/rG3O0t0oMBEvtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzczZTVmMWQ2OWRlYTBjMDFmMzEzOTc5NjJlN2Q3NGI0
M2Q3YmEwHhcNMjUwOTA3MDQwMDU0WhcNMjUwOTA4MDQwMDU0WjAzMTEwLwYDVQQD
EyhmNWY5ZjAxMDFkM2NjMDM2NGExN2IwZWJhYjBmMmUzNzdkZGQ1ZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9mD0DMwerKibZNQuA6hS2mJ3VHj
e8W2UIWsHO7Y8cRSW8Iic4EvhtYLXDSCk5rx1csW2dSIuD6feWeSqNjT9s36Ov+s
IbQYJG4x2l43PLC04+4pZYytwrPYKzyCcbQoPLKjoOSW9O1rXKRehsiE87EcPXxo
maARA2HAwY4/UTh9JdqMEMPmEnrmH5XLBXNGIolzaHfd/3DhMUMsnJmjPrgDaMdN
ZtdDzNPVI8Mh1LhusE8HWOUxvR6qAq4Gm0iSplu6mWvrNVGXpy9mUYJrP+KoC5at
gNk4iImkCmzyDEDOkC6ej66uoi2I3m4T/5kaQgnAgRHSvTMQzhgEdc1LXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX58BAdPMA2Shew66sPLjd93V0EMB8GA1UdIwQY
MBaAFEF3Pl8dad6gwB8xOXli59dLQ9e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjIt
MWJmNmM1MDlkMGM1LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjItMWJmNmM1MDlkMGM1
LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVl0i3SK
wE1BfWqptJ375cJyaoh8q52ce4HcuPYd3ml7jARK/b3zZ8hraDQeXBeW+xTlUr28
sEunAK8PYNAj+FMoSXsay4KW1BEDI34lki3USbOFCB3bOqh2jqQ2xn4BAUI3f/xH
sCkR3MKGyWBTAoOXGSVc2b1BoWwzVVX2wTbZT6bcA36hGpHajuHLuJHBiGhroN5I
RSwb4LbxSMuS9FJgyH3aryTOEKGLw//M1mQ3hmNJ5f5FP2wKXJs0ufCez8htaTZ2
AOfQ5XaolJjpjs8Wrijoz3txmWSR2qLtQnASRS6GE297FVa5DRuqw25Gcc6LI18A
09fF9pWcdSJraA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:56 2025 by rpki-client