Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
File: qif1ErChAmXfKzRvFDpkXDgnQr4.mft (raw, json)
Hash identifier: yzPU74hpb+p9UA+Y1+CRr5zxwa/SP9MXD7CQL6HBJEI=
Subject key identifier: 6E:DD:FA:AA:2C:82:97:6E:D0:AE:39:37:36:B4:22:7D:94:DE:83:E7
Authority key identifier: AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
Certificate issuer: /CN=aa27f512b0a10265df2b346f143a645c382742be
Certificate serial: 019921B1F4652F7968A19AEF24EC2C2167D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
Manifest number: 0682
Signing time: Sun 07 Sep 2025 01:02:14 +0000
Manifest this update: Sun 07 Sep 2025 01:02:14 +0000
Manifest next update: Mon 08 Sep 2025 01:02:14 +0000
Files and hashes: 1: qif1ErChAmXfKzRvFDpkXDgnQr4.crl (hash: s/WMizXvkwfkrxQyrP6KQfLOCuywsC3y45x/1ttLpeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:f4:65:2f:79:68:a1:9a:ef:24:ec:2c:21:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa27f512b0a10265df2b346f143a645c382742be
Validity
Not Before: Sep 7 01:02:14 2025 GMT
Not After : Sep 8 01:02:14 2025 GMT
Subject: CN=6eddfaaa2c82976ed0ae393736b4227d94de83e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:42:a0:c4:6a:63:b7:40:05:d1:6a:59:3b:
86:c2:09:d0:17:10:eb:82:5b:87:1e:8f:71:4c:71:
bf:2d:d8:8b:06:35:35:34:88:db:c5:c2:79:95:8b:
2f:8d:ff:20:f1:09:91:36:fb:96:ae:e7:ae:3f:d8:
ca:38:52:4f:9d:45:e4:9c:78:d2:b1:5b:52:0e:e8:
ab:ea:86:79:1e:fe:75:84:88:48:93:bb:f9:2b:76:
7f:db:e1:af:dd:e3:f9:85:f0:37:cb:c4:33:82:c7:
6d:b4:83:df:75:86:90:d1:b2:ff:a2:63:6d:3b:67:
d6:ce:df:64:49:68:f3:1f:2a:67:2e:bb:95:5c:af:
33:30:57:50:10:0f:65:52:8c:26:c6:d2:ff:d5:bb:
6a:a5:cc:70:64:ce:93:03:d9:58:57:83:e6:bd:06:
63:33:fd:3a:ba:ef:a7:3c:15:c0:95:90:ab:71:31:
04:f8:f5:2f:63:85:ea:8c:67:d2:e5:77:87:8b:99:
15:6b:e6:ab:b0:d2:50:c5:a6:3c:80:ee:c8:5a:60:
eb:5e:79:75:e8:0f:54:fc:c3:1d:e4:0b:16:04:43:
ca:65:41:93:f7:8d:a8:a0:17:7b:80:75:70:b4:dd:
bb:e9:e3:e5:dc:85:6e:45:dc:6f:19:06:e6:ed:c7:
87:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DD:FA:AA:2C:82:97:6E:D0:AE:39:37:36:B4:22:7D:94:DE:83:E7
X509v3 Authority Key Identifier:
keyid:AA:27:F5:12:B0:A1:02:65:DF:2B:34:6F:14:3A:64:5C:38:27:42:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qif1ErChAmXfKzRvFDpkXDgnQr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d8345d-426e-49c3-b0b0-fb7fbb1c58fe/1/qif1ErChAmXfKzRvFDpkXDgnQr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:98:81:1e:62:95:99:a0:10:82:2c:81:6a:b5:ec:02:15:91:
c0:5e:5e:83:cc:30:6f:39:52:e0:5c:d7:5a:0f:f8:25:de:ab:
ae:05:52:14:d2:2a:57:0b:74:8b:10:77:5e:75:e2:f7:26:d6:
cd:41:92:f7:a8:46:45:56:40:a9:f6:6b:08:4c:b3:94:62:80:
e4:45:05:12:10:14:2a:f3:97:97:12:17:8e:42:46:09:69:14:
e9:21:7d:bb:fb:3f:59:08:dd:bf:d3:59:96:0a:fe:a8:06:b8:
01:a2:d7:4c:3c:43:d0:ea:37:6e:e9:f4:74:dc:4a:05:c2:f2:
26:05:45:ec:65:ee:85:1b:c4:1b:40:8a:89:8d:23:73:a4:5d:
e3:a8:53:c6:78:38:99:29:c3:c2:48:ce:61:72:49:a2:ef:20:
6b:43:e4:70:e6:2e:8a:c8:20:80:e1:26:f5:ba:78:f2:05:62:
41:cc:5d:72:64:05:b3:20:97:c2:4b:c9:1d:51:bc:24:d8:bb:
91:33:7b:38:a1:40:f6:ba:5a:d0:d6:92:30:99:0c:50:91:47:
db:62:66:fc:e8:45:f8:b1:be:c5:cd:30:77:c1:fc:b5:70:7c:
d9:ee:c3:6e:e7:9d:40:35:da:eb:bd:dc:ad:80:dd:e1:09:c6:
e8:08:ed:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsfRlL3looZrvJOwsIWfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMjdmNTEyYjBhMTAyNjVkZjJiMzQ2ZjE0M2E2NDVjMzgy
NzQyYmUwHhcNMjUwOTA3MDEwMjE0WhcNMjUwOTA4MDEwMjE0WjAzMTEwLwYDVQQD
Eyg2ZWRkZmFhYTJjODI5NzZlZDBhZTM5MzczNmI0MjI3ZDk0ZGU4M2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV1CoMRqY7dABdFqWTuGwgnQFxDr
gluHHo9xTHG/LdiLBjU1NIjbxcJ5lYsvjf8g8QmRNvuWrueuP9jKOFJPnUXknHjS
sVtSDuir6oZ5Hv51hIhIk7v5K3Z/2+Gv3eP5hfA3y8QzgsdttIPfdYaQ0bL/omNt
O2fWzt9kSWjzHypnLruVXK8zMFdQEA9lUowmxtL/1btqpcxwZM6TA9lYV4PmvQZj
M/06uu+nPBXAlZCrcTEE+PUvY4XqjGfS5XeHi5kVa+arsNJQxaY8gO7IWmDrXnl1
6A9U/MMd5AsWBEPKZUGT942ooBd7gHVwtN276ePl3IVuRdxvGQbm7ceHtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7d+qosgpdu0K45Nza0In2U3oPnMB8GA1UdIwQY
MBaAFKon9RKwoQJl3ys0bxQ6ZFw4J0K+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kODM0NWQtNDI2ZS00OWMzLWIwYjAt
ZmI3ZmJiMWM1OGZlLzEvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kODM0NWQtNDI2ZS00OWMzLWIwYjAtZmI3ZmJiMWM1OGZl
LzEvcWlmMUVyQ2hBbVhmS3pSdkZEcGtYRGduUXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZiBHmKV
maAQgiyBarXsAhWRwF5eg8wwbzlS4FzXWg/4Jd6rrgVSFNIqVwt0ixB3XnXi9ybW
zUGS96hGRVZAqfZrCEyzlGKA5EUFEhAUKvOXlxIXjkJGCWkU6SF9u/s/WQjdv9NZ
lgr+qAa4AaLXTDxD0Oo3bun0dNxKBcLyJgVF7GXuhRvEG0CKiY0jc6Rd46hTxng4
mSnDwkjOYXJJou8ga0PkcOYuisgggOEm9bp48gViQcxdcmQFsyCXwkvJHVG8JNi7
kTN7OKFA9rpa0NaSMJkMUJFH22Jm/OhF+LG+xc0wd8H8tXB82e7DbuedQDXa673c
rYDd4QnG6Ajtkw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:18 2025 by rpki-client