Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: JK/nN5OFsuvcsNmcUoUD/khNgIauq+3OAlZmwU7FFXg=
Subject key identifier: AE:96:A2:E3:A7:D7:A2:40:A1:1F:10:0B:38:28:0B:DA:14:CD:79:55
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019931913FDE18B30249B22BB355A5196297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 0444
Signing time: Wed 10 Sep 2025 03:00:26 +0000
Manifest this update: Wed 10 Sep 2025 03:00:26 +0000
Manifest next update: Thu 11 Sep 2025 03:00:26 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: CUtnm0jKR7v37bM6V3APfWr/e3eU2Tr2tWz2chKpkMQ=)
3: kwFJhE8jwEHJybQlTEKHmXErsEs.roa (hash: alWNviEQV6Ni9Uyx0rYA0Shsy6KWc4y7zd5M53FLUU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:3f:de:18:b3:02:49:b2:2b:b3:55:a5:19:62:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Sep 10 03:00:26 2025 GMT
Not After : Sep 11 03:00:26 2025 GMT
Subject: CN=ae96a2e3a7d7a240a11f100b38280bda14cd7955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:58:dd:aa:ea:9f:a4:99:d9:44:15:d5:03:
5a:c8:fe:c7:81:03:11:05:70:6e:95:79:56:ba:48:
35:75:fb:5b:35:b1:aa:10:10:aa:9e:dc:b9:a1:80:
e1:c7:c4:3f:44:59:4b:a2:fe:ef:c7:78:e1:52:82:
54:4f:c4:3e:c5:ba:ad:3e:69:e8:89:43:db:ce:85:
3c:6e:17:69:a3:2b:4f:c0:5b:b9:8b:cc:89:22:09:
b9:55:cc:62:84:22:d6:e1:95:15:91:f5:4e:75:c6:
eb:ef:bb:e4:70:70:53:2a:5b:9e:72:e9:fc:99:3d:
e1:58:97:59:90:68:86:75:f6:bd:b1:21:98:f7:af:
5e:f2:5d:38:20:bd:19:73:b1:a5:f4:0e:78:62:34:
1e:e6:ad:78:e8:09:91:75:3c:f7:4d:36:e9:37:d1:
4e:90:0f:45:41:d2:89:07:3a:e6:e3:b0:6f:03:8a:
a5:bb:d1:cb:9e:f1:ab:ac:f5:f1:29:73:70:f1:2c:
a4:4f:be:bf:95:22:5a:3e:98:b3:c9:cd:86:8c:a3:
65:e6:ed:0e:29:fd:fa:2d:48:fe:74:36:24:27:a6:
a3:f5:0a:fe:9a:8d:d9:5e:2b:3f:c6:15:a8:c8:72:
82:f5:0d:ad:0a:29:0f:30:81:bf:ed:f8:d1:2e:30:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:A2:E3:A7:D7:A2:40:A1:1F:10:0B:38:28:0B:DA:14:CD:79:55
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:45:55:38:17:07:8e:c5:1f:5e:1e:29:6f:0a:09:18:d6:8e:
a0:3c:4a:a3:89:27:51:18:dc:a2:65:6f:76:18:b2:4e:fc:dc:
6f:38:28:c3:8f:ff:19:8d:aa:c9:ba:9d:4c:f7:0d:c0:8d:a8:
d2:74:c3:17:e3:55:b6:02:61:4b:e2:52:f6:e6:8f:ab:73:68:
9c:e8:be:2b:50:eb:1e:2a:51:13:6b:2b:8f:29:f4:fe:a7:56:
67:40:e3:f3:07:6c:bf:6b:be:fc:e0:f9:22:8c:d2:cf:81:6d:
22:95:98:58:80:18:6e:e4:23:ad:41:70:d5:7d:1a:7e:af:09:
9b:a8:62:aa:72:e6:a2:dd:4c:eb:7c:0b:1e:b4:91:94:fd:86:
75:e0:1e:7b:a4:27:29:67:4a:ae:9c:c6:f4:22:87:eb:1f:fb:
6f:15:ca:11:67:40:db:8e:93:49:52:d0:d2:6f:00:23:84:40:
ca:67:74:eb:37:8e:f4:8b:61:2c:1f:b8:e1:12:8d:f9:03:b1:
14:9b:fb:fc:d7:e3:01:59:4e:db:fa:60:a1:07:22:b3:f8:04:
4b:1b:e6:91:cd:c4:91:7e:17:30:6e:36:4f:a0:21:2b:84:83:
26:4f:c5:6a:c3:12:1c:a8:63:b0:a6:3f:e7:5f:f8:ff:ae:5d:
01:49:26:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxkT/eGLMCSbIrs1WlGWKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDA5ODIyODRhMDUwZDk0MWRiZWJiZDA0YjVkMGM5MTRm
NjM1YjcwHhcNMjUwOTEwMDMwMDI2WhcNMjUwOTExMDMwMDI2WjAzMTEwLwYDVQQD
EyhhZTk2YTJlM2E3ZDdhMjQwYTExZjEwMGIzODI4MGJkYTE0Y2Q3OTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e1Y3arqn6SZ2UQV1QNayP7HgQMR
BXBulXlWukg1dftbNbGqEBCqnty5oYDhx8Q/RFlLov7vx3jhUoJUT8Q+xbqtPmno
iUPbzoU8bhdpoytPwFu5i8yJIgm5VcxihCLW4ZUVkfVOdcbr77vkcHBTKluecun8
mT3hWJdZkGiGdfa9sSGY969e8l04IL0Zc7Gl9A54YjQe5q146AmRdTz3TTbpN9FO
kA9FQdKJBzrm47BvA4qlu9HLnvGrrPXxKXNw8SykT76/lSJaPpizyc2GjKNl5u0O
Kf36LUj+dDYkJ6aj9Qr+mo3ZXis/xhWoyHKC9Q2tCikPMIG/7fjRLjDHVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6WouOn16JAoR8QCzgoC9oUzXlVMB8GA1UdIwQY
MBaAFEIAmCKEoFDZQdvrvQS10MkU9jW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAt
NTFkYzJiMDk2ZGVmLzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNjg4MTktMmY5ZS00NGNlLTg4MTAtNTFkYzJiMDk2ZGVm
LzEvUWdDWUlvU2dVTmxCMi11OUJMWFF5UlQyTmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0VVOBcH
jsUfXh4pbwoJGNaOoDxKo4knURjcomVvdhiyTvzcbzgow4//GY2qybqdTPcNwI2o
0nTDF+NVtgJhS+JS9uaPq3NonOi+K1DrHipRE2srjyn0/qdWZ0Dj8wdsv2u+/OD5
IozSz4FtIpWYWIAYbuQjrUFw1X0afq8Jm6hiqnLmot1M63wLHrSRlP2GdeAee6Qn
KWdKrpzG9CKH6x/7bxXKEWdA246TSVLQ0m8AI4RAymd06zeO9IthLB+44RKN+QOx
FJv7/NfjAVlO2/pgoQcis/gESxvmkc3EkX4XMG42T6AhK4SDJk/FasMSHKhjsKY/
51/4/65dAUkm0g==
-----END CERTIFICATE-----
Generated at Wed Sep 10 05:28:07 2025 by rpki-client