Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: +csX9OUTS/9MCxNRJincIGbWi4ev5x9MFpgXIcZzaq8=
Subject key identifier: FC:31:62:B2:87:8F:3E:89:59:59:EB:45:38:D5:67:73:A9:C2:84:5E
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 01975C1373529A6D0EE3AE001CE29E35158E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1261
Signing time: Tue 10 Jun 2025 23:01:07 +0000
Manifest this update: Tue 10 Jun 2025 23:01:07 +0000
Manifest next update: Wed 11 Jun 2025 23:01:07 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: pJ7Dgy8oTJn7MLccG1T/HVLv4d70bYUBXRlpvbDZGbk=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:73:52:9a:6d:0e:e3:ae:00:1c:e2:9e:35:15:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Jun 10 23:01:07 2025 GMT
Not After : Jun 11 23:01:07 2025 GMT
Subject: CN=fc3162b2878f3e895959eb4538d56773a9c2845e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:42:a4:91:be:45:0e:11:07:fd:78:9b:42:
dd:2d:c0:2b:8b:70:f6:41:3c:ad:2e:06:22:5f:af:
02:cb:7d:8a:da:d2:79:6c:53:4f:81:bb:97:ac:1d:
be:a6:d6:f9:84:eb:e2:24:6f:e0:9b:ca:c5:9d:9a:
f6:80:ff:e2:6f:29:a5:6b:87:40:c4:21:b7:bd:f8:
9b:1c:29:00:2e:cd:c8:3b:18:97:a9:a0:55:3c:c7:
b1:b7:de:92:d6:3a:f6:fb:04:2d:6d:96:7d:f2:48:
9e:ca:2c:7e:16:62:f2:7b:07:71:d5:a5:83:e2:c9:
fc:4e:86:f6:48:56:f8:12:af:82:43:c3:2f:50:ad:
8a:44:0c:44:56:9e:1b:37:6a:13:30:fe:bb:26:49:
ea:af:f5:00:d8:88:cc:5c:3c:6f:82:08:92:e0:d0:
16:75:d4:40:c9:a6:9e:ad:fa:3b:17:4d:7d:15:54:
55:15:03:d2:5d:4b:20:a9:e2:b7:85:ea:b9:eb:05:
47:fd:3a:3a:3c:7c:5f:f4:1f:67:57:80:14:59:f0:
00:90:35:d0:3d:15:b8:50:b6:a2:9d:5f:fc:74:57:
2e:42:6e:79:96:b7:93:11:b8:7f:9a:ed:ae:0c:44:
5f:7a:b4:bb:b9:39:08:f7:75:68:ce:11:a8:fa:75:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:31:62:B2:87:8F:3E:89:59:59:EB:45:38:D5:67:73:A9:C2:84:5E
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:52:95:b4:09:21:d0:f4:47:44:a9:37:15:23:cd:cb:3a:cd:
58:8b:0f:3d:89:24:8f:d9:82:19:07:d0:0a:ac:74:d8:f6:51:
3c:00:5d:5c:c1:30:a3:ce:2c:39:c0:1e:9b:9e:18:ce:bb:d0:
63:ee:9b:2c:4c:ee:70:27:1c:0a:6f:2e:cb:93:26:8d:cc:94:
88:be:ea:b1:55:b7:30:23:d5:7f:05:71:d2:35:c9:81:bf:c4:
9a:32:c5:86:ff:c5:14:ad:cd:78:6b:c7:05:32:c0:60:72:d9:
1e:02:7b:f6:ce:ea:9e:c6:56:d2:c9:96:a8:66:6b:e5:47:54:
96:90:d2:6b:f1:78:ec:20:e2:34:28:27:db:45:b5:81:a7:52:
22:7d:a9:60:ee:d8:9f:36:e2:e7:02:35:07:6c:1f:fa:73:cf:
60:3a:17:9d:3f:d3:a6:a3:fc:0a:26:40:7a:41:d6:87:42:f9:
d2:13:37:d8:73:40:5c:3c:fb:db:81:1a:03:b0:df:d6:c3:f6:
fa:1a:75:04:7c:ff:7a:b0:be:19:b9:88:52:0a:1d:ef:f1:33:
e4:51:9d:86:0e:b4:1b:2f:3a:e7:37:d6:46:8d:fe:48:50:72:
1a:7e:91:bb:fe:8a:c3:0b:f1:29:d5:96:19:37:72:15:ca:2e:
6d:d8:f9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcE3NSmm0O464AHOKeNRWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwN2JjMWRjMmUxMWQ0OTFiOWI4NWUwOGQwMWMyMjJmOTc3
NmMzY2MwHhcNMjUwNjEwMjMwMTA3WhcNMjUwNjExMjMwMTA3WjAzMTEwLwYDVQQD
EyhmYzMxNjJiMjg3OGYzZTg5NTk1OWViNDUzOGQ1Njc3M2E5YzI4NDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E5CpJG+RQ4RB/14m0LdLcAri3D2
QTytLgYiX68Cy32K2tJ5bFNPgbuXrB2+ptb5hOviJG/gm8rFnZr2gP/ibymla4dA
xCG3vfibHCkALs3IOxiXqaBVPMext96S1jr2+wQtbZZ98kieyix+FmLyewdx1aWD
4sn8Tob2SFb4Eq+CQ8MvUK2KRAxEVp4bN2oTMP67Jknqr/UA2IjMXDxvggiS4NAW
ddRAyaaerfo7F019FVRVFQPSXUsgqeK3heq56wVH/To6PHxf9B9nV4AUWfAAkDXQ
PRW4ULainV/8dFcuQm55lreTEbh/mu2uDERferS7uTkI93VozhGo+nVtFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwxYrKHjz6JWVnrRTjVZ3OpwoReMB8GA1UdIwQY
MBaAFEB7wdwuEdSRubheCNAcIi+XdsPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2It
N2FmMGExNWY0MGI1LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mMTBiYzctN2M5ZS00ZDk4LThkN2ItN2FmMGExNWY0MGI1
LzEvUUh2QjNDNFIxSkc1dUY0STBCd2lMNWQydzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1KVtAkh
0PRHRKk3FSPNyzrNWIsPPYkkj9mCGQfQCqx02PZRPABdXMEwo84sOcAem54YzrvQ
Y+6bLEzucCccCm8uy5MmjcyUiL7qsVW3MCPVfwVx0jXJgb/EmjLFhv/FFK3NeGvH
BTLAYHLZHgJ79s7qnsZW0smWqGZr5UdUlpDSa/F47CDiNCgn20W1gadSIn2pYO7Y
nzbi5wI1B2wf+nPPYDoXnT/TpqP8CiZAekHWh0L50hM32HNAXDz724EaA7Df1sP2
+hp1BHz/erC+GbmIUgod7/Ez5FGdhg60Gy865zfWRo3+SFByGn6Ru/6KwwvxKdWW
GTdyFcoubdj5cg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:18:39 2025 by rpki-client