Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: jR5KXmunIhA6TaFQE/cqR8y/oD8LlyCS9zy8LbRo7rs=
Subject key identifier: 00:0D:68:BF:80:D9:0C:8D:2B:35:B3:7E:54:6F:B2:62:78:7F:80:0D
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 0199326D774FF1F1D5DF8BF3ED9F818F218C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 0668
Signing time: Wed 10 Sep 2025 07:00:58 +0000
Manifest this update: Wed 10 Sep 2025 07:00:58 +0000
Manifest next update: Thu 11 Sep 2025 07:00:58 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: MLk0CduFr1PJ56kB4Bq9Xah3fc4ESD2nbshBSJWQm9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:77:4f:f1:f1:d5:df:8b:f3:ed:9f:81:8f:21:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Sep 10 07:00:58 2025 GMT
Not After : Sep 11 07:00:58 2025 GMT
Subject: CN=000d68bf80d90c8d2b35b37e546fb262787f800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:12:63:85:51:60:0b:6f:66:5c:ff:a2:6a:
87:a0:12:d8:c5:df:b5:f3:bc:90:1d:5b:80:ae:dd:
95:37:a3:94:a3:46:37:a8:cf:dc:53:df:04:06:ee:
34:bd:23:77:3d:a2:df:de:ca:d8:3f:9e:30:db:16:
bc:59:6a:be:3f:fa:6e:fc:e7:b9:e0:ac:a3:8d:8e:
17:7d:8d:48:a5:34:6f:9c:87:7d:59:ab:52:2f:9d:
a1:35:31:6d:7a:ad:a2:30:0d:d4:4f:09:ce:64:f2:
bf:7f:70:5c:88:05:ac:05:59:dd:e6:d3:e4:56:10:
87:b2:7d:6d:1b:09:f8:8f:cd:22:a3:7b:1e:b9:b8:
03:e5:04:7f:76:43:b5:91:bc:fe:db:3c:ac:b6:fe:
0e:70:83:c6:b4:4e:32:23:05:e9:fb:f1:8d:96:0d:
53:22:4f:02:ce:b6:6f:2f:00:ed:d6:d1:63:b8:cd:
c2:a5:9d:6e:f5:76:6c:36:b1:7b:f8:df:79:3a:eb:
d0:b3:c9:c2:a4:82:bd:6f:d8:28:57:6e:79:ab:4f:
c8:ac:49:f6:35:08:41:40:58:7e:42:0a:54:a3:2f:
f4:ce:44:d5:69:5f:31:c2:8c:fa:aa:44:d1:6b:2c:
d8:51:04:c2:bf:92:ba:05:9f:c0:d1:78:0d:f5:d7:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0D:68:BF:80:D9:0C:8D:2B:35:B3:7E:54:6F:B2:62:78:7F:80:0D
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ad:0a:77:c7:40:10:dd:f2:3a:08:bd:a7:40:b3:14:49:e9:
9a:f6:b1:65:51:39:18:23:27:88:78:e7:38:69:6e:b1:fc:f0:
13:b8:66:ec:a3:15:99:a1:d2:8f:28:99:3f:27:b6:8e:f4:12:
80:c9:71:57:2b:e0:c9:b3:a5:9f:9a:95:10:7f:f6:97:35:e8:
ea:20:7b:f5:c0:f5:c6:e4:75:4e:c4:77:a4:fc:a4:eb:05:b6:
01:54:3a:f2:d9:f7:ee:54:1b:fa:4f:71:2b:9b:d8:e7:82:81:
8a:c1:53:ab:70:3b:dd:41:2a:a2:1a:bd:ce:cd:3f:fa:e2:bc:
d2:fe:f3:37:6d:1b:cb:29:5d:75:0f:f0:ac:70:9a:3c:77:6a:
bf:13:0b:88:e7:8a:83:cc:f0:db:2f:1d:f8:8d:ab:36:f4:ce:
78:78:c7:ae:4c:ed:71:8e:6e:78:a6:d3:61:f9:40:c4:c1:eb:
d4:4e:8a:66:74:27:bb:be:9f:c6:c4:a4:76:f6:74:14:81:87:
8d:19:39:e9:7a:b3:53:24:f3:ab:1b:0d:8c:73:27:51:52:c2:
d9:59:d3:31:3b:97:ab:3d:a4:31:3f:10:66:62:7d:dd:5a:fb:
60:65:b5:bb:d1:7c:a3:9a:3e:cf:b8:14:97:74:c3:6d:a8:6f:
07:50:66:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkybXdP8fHV34vz7Z+BjyGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODRiYjAxYWE1OGFlOTRiMTMyMGZkNGJlNDIxM2Y5MzE0
ZTkwNTYwHhcNMjUwOTEwMDcwMDU4WhcNMjUwOTExMDcwMDU4WjAzMTEwLwYDVQQD
EygwMDBkNjhiZjgwZDkwYzhkMmIzNWIzN2U1NDZmYjI2Mjc4N2Y4MDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54USY4VRYAtvZlz/omqHoBLYxd+1
87yQHVuArt2VN6OUo0Y3qM/cU98EBu40vSN3PaLf3srYP54w2xa8WWq+P/pu/Oe5
4KyjjY4XfY1IpTRvnId9WatSL52hNTFteq2iMA3UTwnOZPK/f3BciAWsBVnd5tPk
VhCHsn1tGwn4j80io3seubgD5QR/dkO1kbz+2zystv4OcIPGtE4yIwXp+/GNlg1T
Ik8CzrZvLwDt1tFjuM3CpZ1u9XZsNrF7+N95OuvQs8nCpIK9b9goV255q0/IrEn2
NQhBQFh+QgpUoy/0zkTVaV8xwoz6qkTRayzYUQTCv5K6BZ/A0XgN9ddqoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAANaL+A2QyNKzWzflRvsmJ4f4ANMB8GA1UdIwQY
MBaAFECEuwGqWK6UsTIP1L5CE/kxTpBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlTN0FhcFlycFN4TWdfVXZrSVQtVEZPa0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81ZjE3OWEtN2I4Ni00Yzc5LTkzMzkt
ZDFiNjQ4YTRmZDBlLzEvUUlTN0FhcFlycFN4TWdfVXZrSVQtVEZPa0ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81ZjE3OWEtN2I4Ni00Yzc5LTkzMzktZDFiNjQ4YTRmZDBl
LzEvUUlTN0FhcFlycFN4TWdfVXZrSVQtVEZPa0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZK0Kd8dA
EN3yOgi9p0CzFEnpmvaxZVE5GCMniHjnOGlusfzwE7hm7KMVmaHSjyiZPye2jvQS
gMlxVyvgybOln5qVEH/2lzXo6iB79cD1xuR1TsR3pPyk6wW2AVQ68tn37lQb+k9x
K5vY54KBisFTq3A73UEqohq9zs0/+uK80v7zN20byylddQ/wrHCaPHdqvxMLiOeK
g8zw2y8d+I2rNvTOeHjHrkztcY5ueKbTYflAxMHr1E6KZnQnu76fxsSkdvZ0FIGH
jRk56XqzUyTzqxsNjHMnUVLC2VnTMTuXqz2kMT8QZmJ93Vr7YGW1u9F8o5o+z7gU
l3TDbahvB1Bm/w==
-----END CERTIFICATE-----
Generated at Wed Sep 10 12:56:16 2025 by rpki-client