Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: mMNHR+5UOLzwWOKGehDP4IdjBXWbD8uBu6ZaVCHVy08=
Subject key identifier: A7:73:E7:AE:B1:D2:35:E6:05:82:77:26:10:D7:A3:D5:6A:07:12:CA
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 0199225597308F860F36A319501F79F21BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 13FD
Signing time: Sun 07 Sep 2025 04:00:58 +0000
Manifest this update: Sun 07 Sep 2025 04:00:58 +0000
Manifest next update: Mon 08 Sep 2025 04:00:58 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: JmH95jznS3jvx1jC/HuUHIo8gMKl/Kk6UlHHsnIAqZQ=)
2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:97:30:8f:86:0f:36:a3:19:50:1f:79:f2:1b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Sep 7 04:00:58 2025 GMT
Not After : Sep 8 04:00:58 2025 GMT
Subject: CN=a773e7aeb1d235e60582772610d7a3d56a0712ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:e0:66:a7:96:81:0f:44:a9:4e:68:96:ac:
97:29:f1:d1:d7:bb:af:a4:13:40:58:f1:1c:d2:f1:
a9:37:fc:c5:83:53:21:e9:0e:cd:8a:5f:97:d0:26:
7d:29:df:ba:61:cc:12:2e:20:60:23:56:88:39:f9:
83:76:54:e3:3e:b7:f2:96:1f:ff:2a:77:9a:8d:83:
29:ba:51:c9:13:a2:18:ee:fa:11:e6:7b:75:7f:07:
3d:42:6b:86:69:9a:49:2e:26:e0:4a:d0:05:11:91:
c8:d6:23:b0:0e:2f:3f:42:8e:72:9a:00:6e:8b:81:
57:46:b2:4e:67:ca:b1:07:48:3a:8b:64:b7:10:02:
f1:b4:9c:c2:b9:72:ba:50:a7:3c:c8:ca:fe:cd:e0:
87:d2:e9:66:ef:6e:d7:e0:cf:5b:c9:6a:ee:3b:7d:
87:b5:58:f8:d0:2d:fe:49:9e:36:7c:cb:de:4c:7e:
9e:7d:f4:db:89:3b:85:35:bb:22:8f:80:0f:b3:aa:
e4:44:9e:07:4e:f6:b4:3e:b9:1d:65:ed:c3:7f:37:
10:a8:13:3e:66:81:27:54:b0:46:99:ed:5d:f0:0a:
cf:1d:31:aa:24:08:8d:d8:97:1f:c0:42:b8:fd:05:
f2:9a:56:83:b6:6f:30:c8:28:46:e9:0c:a2:1e:1f:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:73:E7:AE:B1:D2:35:E6:05:82:77:26:10:D7:A3:D5:6A:07:12:CA
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:aa:45:a8:ed:ef:fd:13:83:0f:b5:24:00:17:91:97:40:56:
72:43:1a:da:f4:21:08:9c:db:b5:6a:a5:d4:27:04:92:34:ac:
fe:9b:0d:2a:59:74:4f:f8:14:9d:6b:b6:6b:97:ee:02:c9:88:
71:58:30:86:50:58:ab:ab:28:22:f3:64:fd:f7:f3:2d:c1:2c:
8e:d9:32:90:72:b2:7f:1f:71:c0:26:14:5f:c3:e8:0b:2f:70:
61:ba:be:30:c5:47:59:c1:01:0c:a5:93:8e:f6:8c:04:ec:a6:
3c:ee:82:18:89:82:73:e2:2d:71:f3:d2:fc:4c:18:3b:48:c1:
21:95:3e:90:d1:72:84:aa:22:b1:42:da:a8:63:d7:b7:c0:aa:
6f:e8:17:69:f5:4a:dd:a6:e3:8d:a9:4b:fb:d2:19:37:d7:d3:
78:47:ce:20:26:e6:bd:01:55:32:6f:72:2e:1f:42:07:b9:4f:
36:ad:51:1a:1b:e0:4a:86:a4:6b:ac:28:ae:00:ac:e3:f8:29:
70:fa:5b:3c:99:1e:e6:a4:10:b2:ce:a0:0c:69:70:5a:08:09:
2c:d5:0a:2e:2e:0b:22:69:e9:e2:65:b6:55:a3:5f:16:93:3c:
7a:d3:08:da:3b:b4:f0:f6:ea:e6:df:a9:cf:2f:8b:48:b7:ab:
f2:3a:2f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVZcwj4YPNqMZUB958huhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTYwZmMxY2Y2Yjk3NDY2NzM3YzMwMjcxMjNmYTEyMGIx
OTU0ZDUwHhcNMjUwOTA3MDQwMDU4WhcNMjUwOTA4MDQwMDU4WjAzMTEwLwYDVQQD
EyhhNzczZTdhZWIxZDIzNWU2MDU4Mjc3MjYxMGQ3YTNkNTZhMDcxMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwDgZqeWgQ9EqU5olqyXKfHR17uv
pBNAWPEc0vGpN/zFg1Mh6Q7Nil+X0CZ9Kd+6YcwSLiBgI1aIOfmDdlTjPrfylh//
KneajYMpulHJE6IY7voR5nt1fwc9QmuGaZpJLibgStAFEZHI1iOwDi8/Qo5ymgBu
i4FXRrJOZ8qxB0g6i2S3EALxtJzCuXK6UKc8yMr+zeCH0ulm727X4M9byWruO32H
tVj40C3+SZ42fMveTH6effTbiTuFNbsij4APs6rkRJ4HTva0PrkdZe3DfzcQqBM+
ZoEnVLBGme1d8ArPHTGqJAiN2JcfwEK4/QXymlaDtm8wyChG6QyiHh8kGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdz566x0jXmBYJ3JhDXo9VqBxLKMB8GA1UdIwQY
MBaAFEJWD8HPa5dGZzfDAnEj+hILGVTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYt
MmMyMDc5ZDkxNmFkLzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYtMmMyMDc5ZDkxNmFk
LzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASapFqO3v
/RODD7UkABeRl0BWckMa2vQhCJzbtWql1CcEkjSs/psNKll0T/gUnWu2a5fuAsmI
cVgwhlBYq6soIvNk/ffzLcEsjtkykHKyfx9xwCYUX8PoCy9wYbq+MMVHWcEBDKWT
jvaMBOymPO6CGImCc+ItcfPS/EwYO0jBIZU+kNFyhKoisULaqGPXt8Cqb+gXafVK
3abjjalL+9IZN9fTeEfOICbmvQFVMm9yLh9CB7lPNq1RGhvgSoaka6worgCs4/gp
cPpbPJke5qQQss6gDGlwWggJLNUKLi4LImnp4mW2VaNfFpM8etMI2ju08Pbq5t+p
zy+LSLer8jovnw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:24 2025 by rpki-client