Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: zMVqsqSXCX08nJrU9c2wDc3a0Wjf36dYpXUqonrRdfU=
Subject key identifier: A6:D7:4F:18:91:4B:7F:82:86:90:68:24:74:05:42:ED:15:09:74:21
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 01974BC3E67D422810E20884F4D5927D3B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 1350
Signing time: Sat 07 Jun 2025 19:00:18 +0000
Manifest this update: Sat 07 Jun 2025 19:00:18 +0000
Manifest next update: Sun 08 Jun 2025 19:00:18 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: +6QShPl5cw6GdWTaybSIWuSRwsSwSZYFXXx1fY69KvQ=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:e6:7d:42:28:10:e2:08:84:f4:d5:92:7d:3b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Jun 7 19:00:18 2025 GMT
Not After : Jun 8 19:00:18 2025 GMT
Subject: CN=a6d74f18914b7f8286906824740542ed15097421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:61:e1:81:b4:6e:5e:37:f0:48:b6:ac:be:
4c:4b:5e:77:66:7b:e0:94:6d:c1:bd:72:6a:39:3e:
da:1e:42:34:a2:51:21:5f:74:eb:f3:e4:a9:86:14:
fd:47:a9:30:54:a8:06:80:99:47:77:a6:e3:bf:96:
f7:a5:df:99:f9:df:2f:ea:b8:9f:62:56:61:37:74:
c8:c2:e2:00:0c:ab:98:30:34:db:f6:5f:b4:ca:0c:
12:9a:6e:a5:72:eb:04:f5:f5:c9:fa:f8:33:0f:8b:
ef:94:23:4f:40:27:82:6a:25:dc:8e:19:16:89:c2:
ae:65:46:2c:e7:95:b6:af:1e:1c:ea:7c:52:31:1b:
17:ae:17:73:f2:a1:db:25:87:a2:6b:40:e7:cc:6d:
36:b2:32:d6:af:65:0c:69:26:99:fa:3c:7f:08:8b:
59:fa:9c:41:7c:12:27:00:48:4d:5c:ff:11:85:32:
35:dc:59:3e:90:78:eb:f0:69:1b:84:26:75:c0:8c:
8e:56:76:17:a7:d9:50:fd:3f:33:46:c8:58:a7:c3:
0b:77:4f:3d:21:f7:5b:23:bc:d0:b7:87:2a:05:b5:
a0:78:e8:4d:a5:94:ec:44:df:eb:a7:36:5a:8a:42:
c5:13:73:48:4d:43:d1:72:86:c4:c8:eb:1d:0d:00:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:4F:18:91:4B:7F:82:86:90:68:24:74:05:42:ED:15:09:74:21
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ba:dc:1e:c2:72:d8:2b:28:98:05:a9:47:0d:ef:c9:30:d8:
34:05:f5:3d:ed:ab:37:13:18:6f:59:9b:b7:13:c0:5d:88:91:
9e:7e:16:36:b7:ea:a8:5b:62:3d:07:ae:27:ab:e7:c1:35:bc:
20:3f:8c:27:ed:be:1d:e6:14:77:3f:af:86:ab:84:e0:e6:5d:
ec:38:09:fd:ca:0d:85:15:62:a9:06:f1:3e:6a:5b:76:54:04:
58:08:f1:de:49:ec:24:02:f1:06:cd:81:14:59:31:33:fc:67:
72:45:62:d3:b3:e6:b8:76:48:d3:3c:04:f1:fa:38:20:7c:b5:
05:35:b8:8e:1f:6d:62:12:e0:71:8c:fd:3a:51:e7:4e:b8:73:
ad:e2:f7:5a:ad:61:81:08:ea:d2:cd:c1:d5:ee:ae:11:9d:eb:
ef:8f:94:a7:56:e9:2b:4a:15:51:24:98:33:99:a5:df:e3:c7:
ca:9c:c9:6e:8a:15:8b:52:11:00:d2:26:83:08:39:9b:5a:ce:
56:a9:47:90:c9:1a:71:18:2b:cc:e5:b3:bd:98:ae:0d:d1:83:
e0:fa:e2:8c:ad:77:60:38:20:34:ef:26:79:c9:bb:7b:70:cd:
33:c6:67:06:7c:d0:ed:07:1c:14:99:a7:5d:77:5d:94:09:31:
64:85:c2:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLw+Z9QigQ4giE9NWSfTswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjU0ZDRhNzY3YWQwOTk2MDZlNDQyZTA5MmY5MTI0MWEz
NjM2NzAwHhcNMjUwNjA3MTkwMDE4WhcNMjUwNjA4MTkwMDE4WjAzMTEwLwYDVQQD
EyhhNmQ3NGYxODkxNGI3ZjgyODY5MDY4MjQ3NDA1NDJlZDE1MDk3NDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW1h4YG0bl438Ei2rL5MS153Znvg
lG3BvXJqOT7aHkI0olEhX3Tr8+SphhT9R6kwVKgGgJlHd6bjv5b3pd+Z+d8v6rif
YlZhN3TIwuIADKuYMDTb9l+0ygwSmm6lcusE9fXJ+vgzD4vvlCNPQCeCaiXcjhkW
icKuZUYs55W2rx4c6nxSMRsXrhdz8qHbJYeia0DnzG02sjLWr2UMaSaZ+jx/CItZ
+pxBfBInAEhNXP8RhTI13Fk+kHjr8GkbhCZ1wIyOVnYXp9lQ/T8zRshYp8MLd089
IfdbI7zQt4cqBbWgeOhNpZTsRN/rpzZaikLFE3NITUPRcobEyOsdDQBx1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbXTxiRS3+ChpBoJHQFQu0VCXQhMB8GA1UdIwQY
MBaAFEAlTUp2etCZYG5ELgkvkSQaNjZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2Ut
YmJlOTEyZWVjNzNlLzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lZjZjOGUtM2YwNy00YjNmLWE4N2UtYmJlOTEyZWVjNzNl
LzEvUUNWTlNuWjYwSmxnYmtRdUNTLVJKQm8yTm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLrcHsJy
2CsomAWpRw3vyTDYNAX1Pe2rNxMYb1mbtxPAXYiRnn4WNrfqqFtiPQeuJ6vnwTW8
ID+MJ+2+HeYUdz+vhquE4OZd7DgJ/coNhRViqQbxPmpbdlQEWAjx3knsJALxBs2B
FFkxM/xnckVi07PmuHZI0zwE8fo4IHy1BTW4jh9tYhLgcYz9OlHnTrhzreL3Wq1h
gQjq0s3B1e6uEZ3r74+Up1bpK0oVUSSYM5ml3+PHypzJbooVi1IRANImgwg5m1rO
VqlHkMkacRgrzOWzvZiuDdGD4PrijK13YDggNO8mecm7e3DNM8ZnBnzQ7QccFJmn
XXddlAkxZIXCxg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:15:23 2025 by rpki-client