Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: GbSh2fo7CqVVMq4xaF2NYL9dtyCAHIBhbYda6j7XA+U=
Subject key identifier: 4C:B2:28:B6:BE:F8:B1:4D:DB:3C:53:66:B4:4C:35:68:4B:6C:0E:20
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 019933EDB90B2B25EF0477456D1CD25893B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 1680
Signing time: Wed 10 Sep 2025 14:00:41 +0000
Manifest this update: Wed 10 Sep 2025 14:00:41 +0000
Manifest next update: Thu 11 Sep 2025 14:00:41 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: CDbvRAk4B6kV1x6W4Vo/zw+ebM1A4GBCdwe5YX3lIR4=)
2: ymSnyZ91fxVC39LRAlSHciRZ46Y.roa (hash: 9upse4LtnCnU7pMyWCgkPTtYXe3IQqerCyozn8qome0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ed:b9:0b:2b:25:ef:04:77:45:6d:1c:d2:58:93:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Sep 10 14:00:41 2025 GMT
Not After : Sep 11 14:00:41 2025 GMT
Subject: CN=4cb228b6bef8b14ddb3c5366b44c35684b6c0e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:1f:bc:ab:10:86:33:1b:df:96:03:89:59:
7a:2b:87:58:e2:fd:71:e3:fa:6b:5a:65:fd:b4:f3:
0e:59:c1:59:f9:85:fa:76:86:c5:14:75:5c:01:f8:
34:d8:e0:9f:78:2e:85:82:0b:61:26:c3:be:aa:ac:
75:3c:14:a1:79:a2:fd:9f:14:25:c8:6a:3c:57:81:
8f:e7:24:9e:25:47:5e:8b:0b:a7:dc:e6:d2:c6:a3:
fb:a4:14:07:c2:9a:49:13:eb:72:53:26:80:47:29:
0c:b7:bc:f5:aa:ce:c9:bb:b4:c6:02:c4:0e:63:38:
30:29:21:b4:85:af:88:d3:4b:75:b4:55:a3:ee:5f:
a4:d5:47:60:ca:a9:62:29:e8:ea:d3:6a:b9:06:9c:
be:c3:e2:85:8b:54:74:bf:7a:5d:d0:1b:04:55:fe:
a2:ea:61:2a:af:de:65:2d:35:85:4a:e5:dc:98:78:
24:e9:1f:ee:6f:73:f3:9f:d2:b0:d7:7e:bf:0f:c1:
3e:b3:24:d4:4d:b1:b1:1e:f7:6b:00:71:55:1d:85:
9d:cb:e7:9c:8f:dd:38:4e:c5:8c:0c:03:89:1f:f0:
8e:cd:13:9a:7a:58:1b:d7:6b:92:3c:0e:bb:e9:a5:
be:67:4f:5b:06:7f:75:2e:95:18:75:50:54:9e:7b:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B2:28:B6:BE:F8:B1:4D:DB:3C:53:66:B4:4C:35:68:4B:6C:0E:20
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:af:da:49:01:a2:49:38:3b:58:fc:da:d9:d2:ea:bd:6a:40:
a5:73:8d:1c:ec:ab:ae:16:fa:49:b8:63:52:68:b5:d1:fd:89:
2d:a1:4f:ea:d4:35:bd:a4:c6:75:5c:44:ea:90:86:94:f4:3e:
16:81:17:ad:58:55:3e:ac:d9:17:cb:70:1d:ea:c9:88:18:90:
d3:85:65:3b:80:29:ed:1f:df:1d:87:57:30:2e:2d:8b:2b:cd:
6c:be:f9:73:a4:44:85:4b:4c:7a:65:78:e3:b7:ab:29:28:bc:
d4:44:8c:e0:82:90:75:28:7f:22:e4:66:21:6d:0d:4a:fd:bf:
8a:d0:b1:5a:72:1e:23:d5:16:90:fc:97:5e:49:31:b1:b7:d7:
80:aa:b2:c0:f3:bf:4d:2e:1c:0a:8f:ba:59:7e:f5:6c:8a:6a:
6f:db:4d:a7:b0:9f:76:5f:da:a1:84:e4:b9:46:eb:c8:5f:61:
8a:68:cf:78:ae:fa:e8:fd:7f:b9:30:3d:8d:19:95:6c:c4:15:
fb:89:c2:4c:75:63:fe:55:45:ba:29:0d:56:02:19:0f:71:b5:
d3:f2:12:d6:3a:20:5f:0e:3b:b7:93:46:a0:14:5f:f6:33:7d:
53:3b:b5:15:39:d6:f6:33:4c:91:98:20:3f:89:e0:6e:a8:a2:
64:93:66:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkz7bkLKyXvBHdFbRzSWJO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTBhMzY0MTMxODQxMDU2ZDQ4YjJkNzg4ZWEwMGNhNGI5
MWRiNTYwHhcNMjUwOTEwMTQwMDQxWhcNMjUwOTExMTQwMDQxWjAzMTEwLwYDVQQD
Eyg0Y2IyMjhiNmJlZjhiMTRkZGIzYzUzNjZiNDRjMzU2ODRiNmMwZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fYfvKsQhjMb35YDiVl6K4dY4v1x
4/prWmX9tPMOWcFZ+YX6dobFFHVcAfg02OCfeC6FggthJsO+qqx1PBSheaL9nxQl
yGo8V4GP5ySeJUdeiwun3ObSxqP7pBQHwppJE+tyUyaARykMt7z1qs7Ju7TGAsQO
YzgwKSG0ha+I00t1tFWj7l+k1UdgyqliKejq02q5Bpy+w+KFi1R0v3pd0BsEVf6i
6mEqr95lLTWFSuXcmHgk6R/ub3Pzn9Kw136/D8E+syTUTbGxHvdrAHFVHYWdy+ec
j904TsWMDAOJH/COzROaelgb12uSPA676aW+Z09bBn91LpUYdVBUnnuh7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyyKLa++LFN2zxTZrRMNWhLbA4gMB8GA1UdIwQY
MBaAFEPgo2QTGEEFbUiy14jqAMpLkdtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgt
NGIwODFjYzJiMzlhLzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgtNGIwODFjYzJiMzlh
LzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6/aSQGi
STg7WPza2dLqvWpApXONHOyrrhb6SbhjUmi10f2JLaFP6tQ1vaTGdVxE6pCGlPQ+
FoEXrVhVPqzZF8twHerJiBiQ04VlO4Ap7R/fHYdXMC4tiyvNbL75c6REhUtMemV4
47erKSi81ESM4IKQdSh/IuRmIW0NSv2/itCxWnIeI9UWkPyXXkkxsbfXgKqywPO/
TS4cCo+6WX71bIpqb9tNp7Cfdl/aoYTkuUbryF9himjPeK766P1/uTA9jRmVbMQV
+4nCTHVj/lVFuikNVgIZD3G10/IS1jogXw47t5NGoBRf9jN9Uzu1FTnW9jNMkZgg
P4ngbqiiZJNm1A==
-----END CERTIFICATE-----
Generated at Wed Sep 10 16:41:13 2025 by rpki-client