Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
File: QCzcwN4_54S70vviah2BZWpGfSI.mft (raw, json)
Hash identifier: DFiUxjCBc7zPz1H95uo73t5U7+sj0kczeUEekJ6JQx4=
Subject key identifier: 44:EB:1F:22:69:FD:3B:58:1D:16:A9:68:6F:D4:77:DD:C5:2B:CB:46
Authority key identifier: 40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
Certificate issuer: /CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Certificate serial: 01974E57F4D6D6A3B6492434FFE014DEDE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
Manifest number: 07F1
Signing time: Sun 08 Jun 2025 07:01:16 +0000
Manifest this update: Sun 08 Jun 2025 07:01:16 +0000
Manifest next update: Mon 09 Jun 2025 07:01:16 +0000
Files and hashes: 1: QCzcwN4_54S70vviah2BZWpGfSI.crl (hash: tlP6vp3zkBM1w73nxKIARJO33hcOV/HEtqfbE6Fbans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:f4:d6:d6:a3:b6:49:24:34:ff:e0:14:de:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Validity
Not Before: Jun 8 07:01:16 2025 GMT
Not After : Jun 9 07:01:16 2025 GMT
Subject: CN=44eb1f2269fd3b581d16a9686fd477ddc52bcb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:c3:45:94:b6:96:d9:ae:7d:19:5a:06:92:
05:dd:7f:0d:c6:0f:e3:5f:6e:b4:ba:a9:1b:e2:3d:
28:b0:22:45:59:89:c4:c3:cb:45:87:44:21:c6:6e:
a4:96:66:ca:72:3a:94:49:6d:9a:fa:d5:4a:eb:34:
42:e0:0d:3b:77:e9:5e:28:7c:72:da:2c:55:95:92:
88:29:70:e3:56:10:f7:51:27:78:4b:99:35:82:96:
0c:18:35:24:87:82:d9:c1:f1:68:40:ef:bc:0d:f0:
4e:1d:42:a2:36:5c:ef:7c:b2:6a:b5:af:91:97:6a:
b3:52:29:df:f1:eb:50:69:d5:05:ea:47:c2:f3:2a:
0e:01:6c:17:42:2b:ed:4f:ed:9a:e6:7d:53:98:b9:
d8:0b:64:8d:70:31:33:b3:8b:10:4a:7d:77:8f:97:
15:20:bf:a7:94:43:97:ca:8c:8d:41:69:38:1e:4c:
1c:55:cb:d1:c4:fc:83:91:02:8d:44:33:a2:6b:ac:
78:ce:47:b1:23:f9:70:2b:f6:46:93:18:8a:e3:1c:
47:a8:b8:8a:38:c2:28:6e:5d:ff:f9:a7:ae:e9:27:
71:b2:d2:9d:a1:38:a0:27:d3:38:e7:4a:3d:93:3d:
d9:83:a1:aa:47:1f:0e:e7:c9:e4:fb:6a:e0:ec:7d:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:1F:22:69:FD:3B:58:1D:16:A9:68:6F:D4:77:DD:C5:2B:CB:46
X509v3 Authority Key Identifier:
keyid:40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9a:84:25:19:d8:2a:9d:79:d8:c9:16:26:84:eb:20:f3:fc:
16:fb:6e:f2:13:9a:0a:5e:b7:21:e3:29:0d:2b:2e:07:46:54:
8c:57:9b:35:bf:ad:f3:ee:d8:74:01:08:1d:13:7d:ae:15:1d:
0a:c1:23:c1:c2:6e:ff:f7:b7:dd:60:bc:05:10:ca:1c:da:4b:
aa:b6:cc:dc:ec:a0:96:86:33:bd:d4:9a:fd:27:a5:5c:1c:3f:
22:d2:ae:39:de:0b:b5:0a:ae:74:8b:86:7b:d3:05:34:26:a2:
36:79:f1:25:13:8f:44:24:f1:da:76:a9:5b:33:6d:86:9b:38:
f3:77:47:b5:fd:13:9e:89:9e:ab:52:5a:da:00:e9:dd:ae:70:
cf:fe:8d:49:09:45:e8:48:6e:e2:e2:45:48:38:97:10:8f:0a:
1b:46:93:44:59:8d:ed:66:ed:11:13:b5:d4:f7:e6:5b:91:ae:
3c:64:d6:f0:34:11:7d:77:bf:00:ed:90:50:88:69:5a:9e:da:
cf:0e:79:1d:25:84:9e:b9:af:3c:aa:e9:6a:45:32:6e:cb:99:
bc:e3:3a:03:c4:19:7f:77:6a:56:71:e1:39:ef:7f:f9:31:7a:
c4:9c:8f:b2:3c:12:cb:5f:9c:a7:e4:f1:b7:b9:ad:55:12:31:
f6:68:cb:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV/TW1qO2SSQ0/+AU3t5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMmNkY2MwZGUzZmU3ODRiYmQyZmJlMjZhMWQ4MTY1NmE0
NjdkMjIwHhcNMjUwNjA4MDcwMTE2WhcNMjUwNjA5MDcwMTE2WjAzMTEwLwYDVQQD
Eyg0NGViMWYyMjY5ZmQzYjU4MWQxNmE5Njg2ZmQ0NzdkZGM1MmJjYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQXDRZS2ltmufRlaBpIF3X8Nxg/j
X260uqkb4j0osCJFWYnEw8tFh0Qhxm6klmbKcjqUSW2a+tVK6zRC4A07d+leKHxy
2ixVlZKIKXDjVhD3USd4S5k1gpYMGDUkh4LZwfFoQO+8DfBOHUKiNlzvfLJqta+R
l2qzUinf8etQadUF6kfC8yoOAWwXQivtT+2a5n1TmLnYC2SNcDEzs4sQSn13j5cV
IL+nlEOXyoyNQWk4HkwcVcvRxPyDkQKNRDOia6x4zkexI/lwK/ZGkxiK4xxHqLiK
OMIobl3/+aeu6SdxstKdoTigJ9M450o9kz3Zg6GqRx8O58nk+2rg7H1xWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETrHyJp/TtYHRapaG/Ud93FK8tGMB8GA1UdIwQY
MBaAFEAs3MDeP+eEu9L74modgWVqRn0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMDVkMGQtYzFkOC00N2E2LTlkMWUt
ODY0ZGFjYTZjZmRmLzEvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMDVkMGQtYzFkOC00N2E2LTlkMWUtODY0ZGFjYTZjZmRm
LzEvUUN6Y3dONF81NFM3MHZ2aWFoMkJaV3BHZlNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5qEJRnY
Kp152MkWJoTrIPP8Fvtu8hOaCl63IeMpDSsuB0ZUjFebNb+t8+7YdAEIHRN9rhUd
CsEjwcJu//e33WC8BRDKHNpLqrbM3OygloYzvdSa/SelXBw/ItKuOd4LtQqudIuG
e9MFNCaiNnnxJROPRCTx2napWzNthps483dHtf0Tnomeq1Ja2gDp3a5wz/6NSQlF
6Ehu4uJFSDiXEI8KG0aTRFmN7WbtERO11PfmW5GuPGTW8DQRfXe/AO2QUIhpWp7a
zw55HSWEnrmvPKrpakUybsuZvOM6A8QZf3dqVnHhOe9/+TF6xJyPsjwSy1+cp+Tx
t7mtVRIx9mjLaA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:00:26 2025 by rpki-client