Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File: qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier: KkubjkPy2ANb6Bsciq5FQgFyOHeA5D12n8DXwm2SeOs=
Subject key identifier: 7C:1F:F5:5D:7B:4A:A1:24:85:39:69:E4:A8:C0:61:10:AE:F7:64:7F
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 01993380DAB6FCB61D25B315BA4E8280546A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number: 0466
Signing time: Wed 10 Sep 2025 12:01:46 +0000
Manifest this update: Wed 10 Sep 2025 12:01:46 +0000
Manifest next update: Thu 11 Sep 2025 12:01:46 +0000
Files and hashes: 1: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (hash: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=)
2: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: O2j8NbgIpSsXQtkTbapxWsjVsXr9JZgnIcHEPVMqh2c=)
3: tSdceX3_WKYPOSqNpQt9_4TBFn8.roa (hash: zZjSigYgJ8knWkj4u0ar/HI7QTSKBL8PUuzQf8DJQWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:da:b6:fc:b6:1d:25:b3:15:ba:4e:82:80:54:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: Sep 10 12:01:46 2025 GMT
Not After : Sep 11 12:01:46 2025 GMT
Subject: CN=7c1ff55d7b4aa124853969e4a8c06110aef7647f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:57:e2:f4:4f:92:13:36:f2:ae:f9:73:24:
81:42:d1:32:fe:28:c2:83:85:73:aa:3a:02:ac:83:
09:1c:8f:1c:98:36:96:42:2c:c3:55:23:cf:ed:d1:
02:d1:6e:15:3b:e1:ef:67:bb:72:80:2a:a5:cc:88:
00:96:1a:1e:f8:52:f0:dd:32:21:2a:bb:ee:12:d4:
e6:4e:0f:02:0c:ff:20:77:e7:33:f9:94:8f:dd:30:
17:e2:ea:45:21:16:16:22:6d:8b:17:14:6b:a1:99:
e9:3e:d4:9d:ce:ae:99:b0:fa:16:5f:6f:ae:4d:e8:
ee:5d:88:bd:04:ee:cf:0d:67:92:cd:b5:85:21:4f:
0d:7f:aa:9b:d7:6a:a0:6c:63:96:3c:44:80:12:c1:
c6:36:f2:df:f1:f8:9b:30:21:ee:eb:19:3a:4f:34:
3f:d1:45:17:ec:82:2a:14:b4:51:94:ed:5a:e2:1b:
d1:7c:bf:0c:3d:c5:36:74:bf:52:33:47:61:ef:a6:
10:99:14:76:c9:e5:bc:8f:a8:81:05:60:d7:e0:1b:
c8:63:8c:29:2f:96:3f:14:97:b9:ef:8b:07:0d:e4:
36:47:05:ce:c2:b1:41:de:12:2a:b0:c3:fe:49:ae:
cd:49:8e:23:8a:99:32:e9:53:27:6a:35:52:a8:6a:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:F5:5D:7B:4A:A1:24:85:39:69:E4:A8:C0:61:10:AE:F7:64:7F
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8d:b0:e7:59:de:c1:94:17:c4:b4:7d:86:8d:21:95:8f:c9:
bf:fd:57:6a:45:dd:e9:f6:ca:4e:1c:92:26:38:a9:22:89:b2:
37:a0:b9:0e:36:2f:01:66:b2:cd:a9:40:f3:c5:48:d3:ef:dc:
5e:d6:a4:1c:8b:de:54:9b:b5:31:75:e8:0b:a2:1e:a8:02:11:
c0:ab:8b:2e:d1:7b:1c:bf:a6:1f:c6:90:c7:c2:cb:f6:3f:53:
ff:28:36:66:1f:f8:1f:da:d1:16:96:ae:f3:9c:24:61:77:a9:
ef:fe:a7:6c:91:ce:13:9c:cd:66:0c:8a:72:08:43:db:94:24:
05:99:5a:86:68:1e:b9:87:e9:66:f1:c5:81:97:02:f1:37:3b:
aa:61:db:73:bf:e0:7c:b4:b0:1d:5f:33:52:34:39:5f:53:7f:
9d:d1:18:7c:80:0d:6a:ca:22:66:2c:68:10:a7:50:84:25:d2:
fd:ea:9e:89:02:62:19:48:82:5e:43:a1:dc:47:0f:49:77:54:
2c:e1:95:19:8d:3e:5a:6c:4c:54:6c:61:b2:e8:8d:c0:8e:47:
1d:84:10:21:20:dd:66:c3:f2:04:0f:a5:23:6d:78:08:b0:12:
85:59:67:46:7d:be:d5:cf:2a:d4:38:f2:ee:5d:14:c2:7c:f4:
a2:7c:a3:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzgNq2/LYdJbMVuk6CgFRqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzQ0YjMyZjU4YjU2NGM4OTdhMWZmYTY5NjcwODkxOThm
MmM4MjIwHhcNMjUwOTEwMTIwMTQ2WhcNMjUwOTExMTIwMTQ2WjAzMTEwLwYDVQQD
Eyg3YzFmZjU1ZDdiNGFhMTI0ODUzOTY5ZTRhOGMwNjExMGFlZjc2NDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cFX4vRPkhM28q75cySBQtEy/ijC
g4VzqjoCrIMJHI8cmDaWQizDVSPP7dEC0W4VO+HvZ7tygCqlzIgAlhoe+FLw3TIh
KrvuEtTmTg8CDP8gd+cz+ZSP3TAX4upFIRYWIm2LFxRroZnpPtSdzq6ZsPoWX2+u
TejuXYi9BO7PDWeSzbWFIU8Nf6qb12qgbGOWPESAEsHGNvLf8fibMCHu6xk6TzQ/
0UUX7IIqFLRRlO1a4hvRfL8MPcU2dL9SM0dh76YQmRR2yeW8j6iBBWDX4BvIY4wp
L5Y/FJe574sHDeQ2RwXOwrFB3hIqsMP+Sa7NSY4jipky6VMnajVSqGpNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwf9V17SqEkhTlp5KjAYRCu92R/MB8GA1UdIwQY
MBaAFKs0SzL1i1ZMiXof+mlnCJGY8sgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEt
MDFhZWM5MjBjNzJlLzEvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEtMDFhZWM5MjBjNzJl
LzEvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdY2w51ne
wZQXxLR9ho0hlY/Jv/1XakXd6fbKThySJjipIomyN6C5DjYvAWayzalA88VI0+/c
XtakHIveVJu1MXXoC6IeqAIRwKuLLtF7HL+mH8aQx8LL9j9T/yg2Zh/4H9rRFpau
85wkYXep7/6nbJHOE5zNZgyKcghD25QkBZlahmgeuYfpZvHFgZcC8Tc7qmHbc7/g
fLSwHV8zUjQ5X1N/ndEYfIANasoiZixoEKdQhCXS/eqeiQJiGUiCXkOh3EcPSXdU
LOGVGY0+WmxMVGxhsuiNwI5HHYQQISDdZsPyBA+lI214CLAShVlnRn2+1c8q1Djy
7l0Uwnz0onyj/Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:35:09 2025 by rpki-client