Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: x1X1WpoM5W23IrUnidDQ+hT62zD7Qrt/OUdxynl3Fj4=
Subject key identifier: 62:AF:F4:CE:B4:15:F5:C1:A4:07:1D:9C:62:04:9E:B7:26:0E:E5:6C
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 0199228D303D318DB5363D2E81042DAE2D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:42 +0000
Manifest this update: Sun 07 Sep 2025 05:01:42 +0000
Manifest next update: Mon 08 Sep 2025 05:01:42 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: dqnclj1N4BxV0ZtDL5eY+FvOVmE0YKxY5lqHcV2QsKU=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:30:3d:31:8d:b5:36:3d:2e:81:04:2d:ae:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Sep 7 05:01:42 2025 GMT
Not After : Sep 8 05:01:42 2025 GMT
Subject: CN=62aff4ceb415f5c1a4071d9c62049eb7260ee56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:44:9b:ba:67:36:ee:49:30:66:60:f0:a4:
94:e7:26:72:37:5f:c6:30:5b:d5:19:1b:a5:b0:8f:
7b:c4:e1:97:2b:f1:d2:76:f0:35:51:27:11:a0:83:
16:32:85:fc:f4:21:6c:59:6c:b1:53:9b:c6:37:af:
fe:62:98:85:06:79:2f:51:67:b0:1d:68:5b:89:c1:
e0:e4:58:a9:64:96:24:9b:5e:ce:d6:b9:f4:d2:56:
1b:72:57:7b:70:66:64:27:f2:cd:aa:86:1d:98:fb:
39:7e:b7:be:ec:c7:6f:53:7e:4c:d2:bb:92:c3:20:
fe:fb:fd:d0:8d:78:c4:06:4e:35:a6:f9:07:11:1d:
7b:d0:68:59:83:45:8a:8f:39:08:d5:50:53:df:9e:
0a:8d:e2:24:c7:74:45:05:35:b7:57:db:e1:69:08:
da:6e:af:a3:50:5c:65:4c:5f:e7:85:35:94:32:46:
a1:3a:92:6c:bd:6f:75:f5:f3:32:a4:50:1e:34:f6:
d7:fb:50:48:39:29:9c:98:34:aa:6d:bb:70:08:fa:
32:64:0e:7c:61:69:a4:89:54:cc:aa:cd:fd:fd:2b:
bd:ad:73:48:cf:dc:0a:15:fc:7c:c1:19:f4:41:5f:
a7:58:48:2a:08:d8:05:2e:35:92:b1:7a:24:1d:f8:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:F4:CE:B4:15:F5:C1:A4:07:1D:9C:62:04:9E:B7:26:0E:E5:6C
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:34:d1:13:23:17:9c:11:21:ad:d7:ba:b4:b4:77:27:f1:1f:
34:03:b2:68:e7:2a:1b:3b:cb:7f:91:56:93:e6:27:b1:5f:99:
0a:2e:1b:a5:f2:8c:0a:fd:92:55:ed:ee:01:6e:93:9b:3c:1c:
91:bd:43:e1:d7:66:7d:b1:7e:c6:27:9e:1d:46:46:a0:db:eb:
ab:36:95:ff:cc:cf:fd:c0:b9:41:c3:0a:14:33:ef:95:34:e2:
be:9d:81:94:c0:70:24:07:83:e5:5d:97:47:3f:98:1f:c2:17:
1f:ff:26:47:17:ba:bd:52:b0:c4:cf:21:53:74:0a:04:5f:7f:
8a:d1:12:fa:61:38:5d:ac:32:88:c0:af:0d:1c:7e:10:a3:8f:
a8:e4:66:b4:fd:86:63:dd:6a:be:60:ac:e6:ad:05:eb:49:58:
75:12:c0:37:9b:77:7b:36:ce:dd:22:21:ff:10:15:66:e3:58:
a3:8e:a5:d6:ae:6a:3c:28:fb:55:9e:37:d4:d9:e0:5b:ea:f3:
57:2c:6e:4e:b3:4f:20:eb:01:ae:a3:0e:1a:b6:5c:05:3d:9e:
09:94:d8:c7:8c:ea:48:a1:a1:90:0f:c0:8a:50:39:bb:44:b9:
34:72:08:bd:c1:7a:ed:19:fc:93:3e:c3:ee:5b:8a:e3:d5:d7:
22:6c:89:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijTA9MY21Nj0ugQQtri1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTJlNjkzZThlN2ZiOGIzMWFhODU1M2IzMGQ5NWJlZjA0
ODM3MjkwHhcNMjUwOTA3MDUwMTQyWhcNMjUwOTA4MDUwMTQyWjAzMTEwLwYDVQQD
Eyg2MmFmZjRjZWI0MTVmNWMxYTQwNzFkOWM2MjA0OWViNzI2MGVlNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1dEm7pnNu5JMGZg8KSU5yZyN1/G
MFvVGRulsI97xOGXK/HSdvA1UScRoIMWMoX89CFsWWyxU5vGN6/+YpiFBnkvUWew
HWhbicHg5FipZJYkm17O1rn00lYbcld7cGZkJ/LNqoYdmPs5fre+7MdvU35M0ruS
wyD++/3QjXjEBk41pvkHER170GhZg0WKjzkI1VBT354KjeIkx3RFBTW3V9vhaQja
bq+jUFxlTF/nhTWUMkahOpJsvW919fMypFAeNPbX+1BIOSmcmDSqbbtwCPoyZA58
YWmkiVTMqs39/Su9rXNIz9wKFfx8wRn0QV+nWEgqCNgFLjWSsXokHfg6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKv9M60FfXBpAcdnGIEnrcmDuVsMB8GA1UdIwQY
MBaAFEIS5pPo5/uLMaqFU7MNlb7wSDcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2Mt
NzVhNTU1YzhmYjQxLzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lMjEzMjUtOTkxMC00N2U4LTk5Y2MtNzVhNTU1YzhmYjQx
LzEvUWhMbWstam4tNHN4cW9WVHN3MlZ2dkJJTnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjTREyMX
nBEhrde6tLR3J/EfNAOyaOcqGzvLf5FWk+YnsV+ZCi4bpfKMCv2SVe3uAW6Tmzwc
kb1D4ddmfbF+xieeHUZGoNvrqzaV/8zP/cC5QcMKFDPvlTTivp2BlMBwJAeD5V2X
Rz+YH8IXH/8mRxe6vVKwxM8hU3QKBF9/itES+mE4XawyiMCvDRx+EKOPqORmtP2G
Y91qvmCs5q0F60lYdRLAN5t3ezbO3SIh/xAVZuNYo46l1q5qPCj7VZ431NngW+rz
VyxuTrNPIOsBrqMOGrZcBT2eCZTYx4zqSKGhkA/AilA5u0S5NHIIvcF67Rn8kz7D
7luK49XXImyJdA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:15 2025 by rpki-client