Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
File: Qlivk-QTnPOem0pw4UpamyqOth4.mft (raw, json)
Hash identifier: /rxlF+inp0y4vbV0o+sDAV5gzYG+nmPWA7mNmlDhotU=
Subject key identifier: AA:83:A4:22:BD:97:08:AC:48:4D:BB:A3:FA:F1:4A:14:16:C9:A3:2F
Authority key identifier: 42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
Certificate issuer: /CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Certificate serial: 0199239FC2F7A285D1F8826B7F9DB33B41B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:01:36 +0000
Manifest this update: Sun 07 Sep 2025 10:01:36 +0000
Manifest next update: Mon 08 Sep 2025 10:01:36 +0000
Files and hashes: 1: Qlivk-QTnPOem0pw4UpamyqOth4.crl (hash: ZjgGDBEaZZUYGcU78UpDjd/L/dM9QYfEGPf6AN5vHXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:c2:f7:a2:85:d1:f8:82:6b:7f:9d:b3:3b:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4258af93e4139cf39e9b4a70e14a5a9b2a8eb61e
Validity
Not Before: Sep 7 10:01:36 2025 GMT
Not After : Sep 8 10:01:36 2025 GMT
Subject: CN=aa83a422bd9708ac484dbba3faf14a1416c9a32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:79:aa:69:c2:8b:e9:12:ab:30:ec:d9:28:
39:11:f3:d4:c7:e5:ed:90:06:87:3e:78:65:99:71:
a1:dd:7e:89:d5:82:59:52:16:06:39:c4:62:af:bc:
b8:87:c4:78:53:69:35:0b:eb:2b:92:a1:e6:0c:bf:
a2:8e:c8:5e:e5:3c:2c:ed:d0:8b:df:6c:2e:bb:e5:
42:25:0b:15:90:d7:6d:71:56:26:f8:96:1a:27:0e:
46:8d:b9:ea:21:73:32:53:1c:47:16:aa:45:91:a4:
d8:47:8d:11:c9:21:1c:28:6a:3f:08:12:e1:de:77:
00:53:c6:b6:3a:1a:07:76:b3:c2:54:43:f4:f6:2c:
8d:3e:1a:c3:32:d3:cb:d7:92:4d:19:c0:ad:ef:b2:
5b:58:3e:be:ff:ec:91:ed:09:da:15:a3:04:ba:27:
cd:d0:91:7b:87:11:5e:53:ce:e7:6b:dd:47:f1:68:
6e:8c:5b:ca:d1:41:52:8e:b6:64:5c:99:f1:e6:bb:
bf:a9:24:50:c8:19:4d:c6:51:00:00:43:2f:b2:bd:
fa:57:36:d3:f1:e4:3f:ac:a4:32:12:83:30:10:4b:
eb:7a:21:6e:39:0a:71:45:f2:41:c7:0b:a0:91:71:
dc:f5:d6:a4:c4:7f:0c:0e:9b:b0:92:ac:b6:77:20:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:A4:22:BD:97:08:AC:48:4D:BB:A3:FA:F1:4A:14:16:C9:A3:2F
X509v3 Authority Key Identifier:
keyid:42:58:AF:93:E4:13:9C:F3:9E:9B:4A:70:E1:4A:5A:9B:2A:8E:B6:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlivk-QTnPOem0pw4UpamyqOth4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/592ada-9fb5-4111-b7af-ae1f3e490c69/1/Qlivk-QTnPOem0pw4UpamyqOth4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f5:15:75:df:07:16:35:86:b3:ad:cc:ef:a4:ae:06:96:9c:
ea:ef:a0:e9:6d:3c:93:fe:03:4f:7e:0d:6c:98:54:0f:4c:07:
b1:e8:55:ed:e5:6c:9b:db:e7:b3:0e:aa:a6:ea:ab:5f:09:c7:
6d:07:b7:4d:5e:59:7f:5b:38:82:73:c0:7a:eb:c1:f3:e7:29:
ee:e6:53:f7:fc:46:aa:af:c6:f4:03:77:2c:b4:62:99:ca:c7:
43:c7:42:31:80:f3:ca:e2:87:dd:60:07:b4:34:09:3c:f0:6c:
62:d7:4c:f3:9c:a7:8e:4f:07:fe:28:a9:36:ee:cf:6c:6b:76:
bb:6b:fe:18:47:35:72:95:06:f3:4e:68:8e:ab:9d:85:e9:74:
ba:66:98:06:a7:ec:a8:88:fd:a7:4f:cf:0b:8f:19:a9:2c:0c:
54:34:d7:50:67:ee:89:dd:9a:31:30:64:53:7f:43:12:b6:52:
ed:7d:dc:67:74:b3:13:8f:9e:fa:4d:8e:92:52:08:8a:b2:95:
9f:89:3d:e6:16:c2:17:c7:8f:8a:c5:7a:0f:58:3f:a0:3c:5c:
f4:f3:08:c1:1d:a6:29:63:a0:01:87:3d:8d:5d:e0:e4:19:50:
33:62:71:30:36:2e:5a:08:11:e7:ad:34:76:cf:6a:be:a6:04:
78:5d:e5:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn8L3ooXR+IJrf52zO0G5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNThhZjkzZTQxMzljZjM5ZTliNGE3MGUxNGE1YTliMmE4
ZWI2MWUwHhcNMjUwOTA3MTAwMTM2WhcNMjUwOTA4MTAwMTM2WjAzMTEwLwYDVQQD
EyhhYTgzYTQyMmJkOTcwOGFjNDg0ZGJiYTNmYWYxNGExNDE2YzlhMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MJ5qmnCi+kSqzDs2Sg5EfPUx+Xt
kAaHPnhlmXGh3X6J1YJZUhYGOcRir7y4h8R4U2k1C+srkqHmDL+ijshe5Tws7dCL
32wuu+VCJQsVkNdtcVYm+JYaJw5GjbnqIXMyUxxHFqpFkaTYR40RySEcKGo/CBLh
3ncAU8a2OhoHdrPCVEP09iyNPhrDMtPL15JNGcCt77JbWD6+/+yR7QnaFaMEuifN
0JF7hxFeU87na91H8WhujFvK0UFSjrZkXJnx5ru/qSRQyBlNxlEAAEMvsr36VzbT
8eQ/rKQyEoMwEEvreiFuOQpxRfJBxwugkXHc9dakxH8MDpuwkqy2dyAAFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqDpCK9lwisSE27o/rxShQWyaMvMB8GA1UdIwQY
MBaAFEJYr5PkE5zznptKcOFKWpsqjrYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYt
YWUxZjNlNDkwYzY5LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81OTJhZGEtOWZiNS00MTExLWI3YWYtYWUxZjNlNDkwYzY5
LzEvUWxpdmstUVRuUE9lbTBwdzRVcGFteXFPdGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfUVdd8H
FjWGs63M76SuBpac6u+g6W08k/4DT34NbJhUD0wHsehV7eVsm9vnsw6qpuqrXwnH
bQe3TV5Zf1s4gnPAeuvB8+cp7uZT9/xGqq/G9AN3LLRimcrHQ8dCMYDzyuKH3WAH
tDQJPPBsYtdM85ynjk8H/iipNu7PbGt2u2v+GEc1cpUG805ojqudhel0umaYBqfs
qIj9p0/PC48ZqSwMVDTXUGfuid2aMTBkU39DErZS7X3cZ3SzE4+e+k2OklIIirKV
n4k95hbCF8ePisV6D1g/oDxc9PMIwR2mKWOgAYc9jV3g5BlQM2JxMDYuWggR5600
ds9qvqYEeF3lwg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:57 2025 by rpki-client