Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: CLy9i7tHOB8oFWV3OSOAcOosFSX/tgp1CliV3MKWNkw=
Subject key identifier: F8:CD:24:41:28:F8:5D:BE:22:35:C0:8E:F5:54:BA:99:0A:E0:F7:EF
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 01992331846FCB8C7761A46AE114769924ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 09FB
Signing time: Sun 07 Sep 2025 08:01:11 +0000
Manifest this update: Sun 07 Sep 2025 08:01:11 +0000
Manifest next update: Mon 08 Sep 2025 08:01:11 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: Jj+kCJyCQILRG+96SFcVUgz8tZjZ6+PnlykWoc2gwP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:84:6f:cb:8c:77:61:a4:6a:e1:14:76:99:24:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Sep 7 08:01:11 2025 GMT
Not After : Sep 8 08:01:11 2025 GMT
Subject: CN=f8cd244128f85dbe2235c08ef554ba990ae0f7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:b1:73:26:66:d4:15:d3:88:2b:9b:8f:fa:
d1:3a:f3:23:d8:b7:bf:f4:ed:58:b2:5a:0a:3f:30:
bd:10:63:a3:e3:2b:27:ba:9c:e6:b2:7f:bd:7b:cd:
fc:2b:0b:16:ef:c8:89:ae:e2:4e:e4:6d:50:e3:b1:
12:e4:f5:f8:76:e5:f5:c2:98:1b:9f:f9:d0:2c:01:
41:f9:a6:d1:3f:ac:ca:aa:be:1c:36:04:5f:cf:04:
7b:bc:d1:98:31:62:46:30:38:17:c1:f4:81:c7:36:
e7:20:b1:ae:e9:d3:f7:2e:b2:98:0d:e2:e1:b9:e8:
3f:b0:8b:87:18:68:e0:92:fe:8c:9e:68:01:ed:7b:
82:23:67:d3:ca:2f:2c:ac:a5:41:dc:95:7d:3c:21:
41:75:3d:6f:f8:05:46:d0:2c:18:21:a8:61:32:d0:
9e:1d:9c:de:a4:08:ba:c3:44:c7:68:0d:29:71:63:
3e:f7:4e:2e:ee:79:02:3f:99:39:02:95:73:b8:e4:
17:c5:eb:89:ae:f6:82:61:43:51:7e:31:90:ea:89:
17:7b:4f:8f:72:70:b9:d8:b6:0d:f6:c2:3f:19:e9:
b4:0a:e7:14:99:01:91:58:e0:09:e2:1c:1a:bb:5b:
cd:d5:5f:8f:cd:6e:16:08:4c:1c:43:e6:92:82:5d:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:24:41:28:F8:5D:BE:22:35:C0:8E:F5:54:BA:99:0A:E0:F7:EF
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1a:da:da:48:b7:dd:4a:70:6a:2a:ff:66:cf:77:bf:dc:f0:
2f:9c:f7:24:f9:f1:78:4c:cb:f4:f8:ad:73:30:93:fd:32:c8:
2a:11:64:1d:37:23:bd:22:00:db:f4:0a:1f:16:30:0a:01:72:
74:8f:10:d1:26:5f:fb:f2:53:99:3a:b1:74:b7:bc:97:53:0d:
d0:27:9a:7e:25:6c:3b:9e:94:ef:80:12:51:e9:2a:36:53:a7:
fe:84:38:3c:11:dd:a8:16:fe:08:33:3d:8a:34:78:4d:55:e9:
7c:3e:8b:a3:f4:b8:20:90:f3:77:7a:46:a5:70:3d:6d:64:df:
88:47:b3:6a:3b:ea:0d:8c:ee:1d:90:04:5d:4d:80:f3:91:ca:
bd:6a:27:e0:d1:8f:78:ec:aa:7a:53:fe:14:c5:a0:f2:65:76:
a4:b3:c0:b2:93:37:50:68:49:7b:55:89:07:c7:37:3f:ce:30:
77:c4:c6:4f:a5:3f:dd:b1:20:03:42:a4:17:3c:63:21:91:c6:
7b:1b:e9:02:4b:10:b3:02:3a:c0:3b:f4:05:a9:49:dc:95:42:
3c:1c:e8:0e:fa:38:13:fc:57:97:6e:05:66:24:d7:36:36:6d:
ce:0c:b2:97:78:b4:da:a4:ab:2e:bd:de:34:9f:da:23:a3:ec:
9a:5c:de:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMYRvy4x3YaRq4RR2mSTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjE3YTJkNTEzYTlmYjBmY2UxYTFjZmMyYjNjMDVjMDE4
YmQ4YzEwHhcNMjUwOTA3MDgwMTExWhcNMjUwOTA4MDgwMTExWjAzMTEwLwYDVQQD
EyhmOGNkMjQ0MTI4Zjg1ZGJlMjIzNWMwOGVmNTU0YmE5OTBhZTBmN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrKxcyZm1BXTiCubj/rROvMj2Le/
9O1YsloKPzC9EGOj4ysnupzmsn+9e838KwsW78iJruJO5G1Q47ES5PX4duX1wpgb
n/nQLAFB+abRP6zKqr4cNgRfzwR7vNGYMWJGMDgXwfSBxzbnILGu6dP3LrKYDeLh
ueg/sIuHGGjgkv6MnmgB7XuCI2fTyi8srKVB3JV9PCFBdT1v+AVG0CwYIahhMtCe
HZzepAi6w0THaA0pcWM+904u7nkCP5k5ApVzuOQXxeuJrvaCYUNRfjGQ6okXe0+P
cnC52LYN9sI/Gem0CucUmQGRWOAJ4hwau1vN1V+PzW4WCEwcQ+aSgl2ZFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjNJEEo+F2+IjXAjvVUupkK4PfvMB8GA1UdIwQY
MBaAFEIhei1ROp+w/OGhz8KzwFwBi9jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYt
ZjQxZDZjMGM4NGI2LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mMTI1NTEtMjBjYy00MjE4LWE0MjYtZjQxZDZjMGM4NGI2
LzEvUWlGNkxWRTZuN0Q4NGFIUHdyUEFYQUdMMk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxra2ki3
3Upwair/Zs93v9zwL5z3JPnxeEzL9PitczCT/TLIKhFkHTcjvSIA2/QKHxYwCgFy
dI8Q0SZf+/JTmTqxdLe8l1MN0CeafiVsO56U74ASUekqNlOn/oQ4PBHdqBb+CDM9
ijR4TVXpfD6Lo/S4IJDzd3pGpXA9bWTfiEezajvqDYzuHZAEXU2A85HKvWon4NGP
eOyqelP+FMWg8mV2pLPAspM3UGhJe1WJB8c3P84wd8TGT6U/3bEgA0KkFzxjIZHG
exvpAksQswI6wDv0BalJ3JVCPBzoDvo4E/xXl24FZiTXNjZtzgyyl3i02qSrLr3e
NJ/aI6PsmlzeCA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:47 2025 by rpki-client