Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: Vfn7m6sl6WHmQn3xQgZfrOSwdBX0wKjqQ3krRTqr1Q8=
Subject key identifier: 9A:CB:CC:51:FD:49:EA:09:5E:7B:C0:DE:53:44:53:A6:E2:0F:1B:61
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 01993313E6890D17FE809D0EC0D4BD757773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0D9B
Signing time: Wed 10 Sep 2025 10:02:46 +0000
Manifest this update: Wed 10 Sep 2025 10:02:46 +0000
Manifest next update: Thu 11 Sep 2025 10:02:46 +0000
Files and hashes: 1: LYrINpBkGiqMBKci7kDEkT4clMM.roa (hash: rpmajg0c6Lkm2tGH4aWf1gD3QwFb6C9vHxZey3xWrlo=)
2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: nJyiHHCMLLnAw5I3u4MON1H+Z0H1X2AOZxR6PoLiMu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:13:e6:89:0d:17:fe:80:9d:0e:c0:d4:bd:75:77:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Sep 10 10:02:46 2025 GMT
Not After : Sep 11 10:02:46 2025 GMT
Subject: CN=9acbcc51fd49ea095e7bc0de534453a6e20f1b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:47:2a:4d:70:8c:31:fb:b4:90:5a:ce:a9:
53:44:bd:81:04:eb:e4:1e:14:d5:cf:4e:2f:e9:4c:
19:1b:26:3e:6d:28:5b:56:5f:c1:7e:22:39:0c:f6:
3d:95:59:31:b8:58:04:b9:00:f9:f1:c4:a1:4a:f1:
7c:84:57:dd:f6:9a:dc:01:b6:7d:97:dc:36:03:91:
15:05:11:75:2b:93:64:fb:bf:6f:9c:ca:ef:23:37:
8b:a6:c9:19:28:4b:b8:86:63:78:73:21:d4:a0:60:
a7:3c:c4:f4:3c:ad:64:aa:db:40:e7:89:b5:c6:01:
86:ad:f0:50:1a:42:0d:c6:56:42:9f:49:3e:26:c9:
6c:d5:d1:9e:e2:c9:10:84:9b:43:ce:9c:db:f0:6c:
bb:e7:96:2c:aa:bc:b1:09:62:ee:0d:35:47:a6:44:
a8:9b:f2:76:0b:97:c2:91:91:32:fc:14:3f:c0:b6:
9d:40:e1:62:d7:a2:bf:71:af:26:06:4c:f6:30:d7:
39:f0:00:82:a4:39:d3:63:51:2e:71:24:fe:ac:b4:
54:9f:50:d8:8b:0b:78:c4:a3:1e:89:71:b5:04:bc:
e5:98:bd:bc:31:e0:f7:2e:fe:4a:3b:63:89:2e:dc:
35:ec:3d:63:4a:b4:70:5b:aa:7b:70:42:b4:c7:0c:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CB:CC:51:FD:49:EA:09:5E:7B:C0:DE:53:44:53:A6:E2:0F:1B:61
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:22:ec:5d:11:23:a8:04:d2:42:56:10:e6:fb:7c:86:9c:91:
f7:0b:70:b6:cb:96:e7:c3:ac:a5:d4:27:22:5b:e0:fa:f1:40:
7f:59:a8:98:a2:26:1b:70:c4:bb:28:a5:6e:a9:ff:80:3a:95:
28:a0:fa:f4:d0:99:5e:e5:1e:97:85:bd:09:f6:90:4f:1b:3a:
7b:f5:6c:f3:c5:7b:28:2b:5a:5e:9a:3d:2b:e7:8d:9c:4b:c1:
f4:20:4f:6d:92:c7:50:9b:de:1e:7e:0f:b4:ce:a5:82:ef:67:
77:72:ca:3d:41:20:d6:25:42:d1:3f:f0:29:a9:f7:e0:dc:55:
ad:e6:a5:9c:89:07:de:44:11:fc:76:94:a5:80:93:f3:b2:a5:
16:89:e0:e8:20:8a:7e:f6:56:31:8e:ba:6b:54:62:e9:d6:05:
2a:54:d5:e6:a1:b0:dc:8d:9d:85:86:21:2c:79:6e:cc:12:b2:
3b:e9:51:9f:60:5c:3d:be:7a:e6:f0:a2:28:0f:1b:76:f2:2f:
bd:a5:5f:42:c8:d8:3c:52:bd:eb:11:b0:bd:37:7a:62:bf:da:
86:b3:36:c0:b1:d1:55:6b:24:e4:30:5a:d3:17:dd:ad:7d:7c:
1e:72:6b:f4:ce:b4:85:48:eb:51:5b:4d:5e:3e:5f:3b:48:f1:
4b:49:90:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzE+aJDRf+gJ0OwNS9dXdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDM4N2M5NDEzNGQ5YTA4ZmZkMzI2MzA5Njc3MDNhZGM1
ODJiNmMwHhcNMjUwOTEwMTAwMjQ2WhcNMjUwOTExMTAwMjQ2WjAzMTEwLwYDVQQD
Eyg5YWNiY2M1MWZkNDllYTA5NWU3YmMwZGU1MzQ0NTNhNmUyMGYxYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFlHKk1wjDH7tJBazqlTRL2BBOvk
HhTVz04v6UwZGyY+bShbVl/BfiI5DPY9lVkxuFgEuQD58cShSvF8hFfd9prcAbZ9
l9w2A5EVBRF1K5Nk+79vnMrvIzeLpskZKEu4hmN4cyHUoGCnPMT0PK1kqttA54m1
xgGGrfBQGkINxlZCn0k+Jsls1dGe4skQhJtDzpzb8Gy755YsqryxCWLuDTVHpkSo
m/J2C5fCkZEy/BQ/wLadQOFi16K/ca8mBkz2MNc58ACCpDnTY1EucST+rLRUn1DY
iwt4xKMeiXG1BLzlmL28MeD3Lv5KO2OJLtw17D1jSrRwW6p7cEK0xwxBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrLzFH9SeoJXnvA3lNEU6biDxthMB8GA1UdIwQY
MBaAFEIDh8lBNNmgj/0yYwlncDrcWCtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMt
Mzc2ZjRiNGQ5ZGE2LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9hMzhhODctMDE1OS00OTBlLWI2OWMtMzc2ZjRiNGQ5ZGE2
LzEvUWdPSHlVRTAyYUNQX1RKakNXZHdPdHhZSzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiLsXREj
qATSQlYQ5vt8hpyR9wtwtsuW58OspdQnIlvg+vFAf1momKImG3DEuyilbqn/gDqV
KKD69NCZXuUel4W9CfaQTxs6e/Vs88V7KCtaXpo9K+eNnEvB9CBPbZLHUJveHn4P
tM6lgu9nd3LKPUEg1iVC0T/wKan34NxVrealnIkH3kQR/HaUpYCT87KlFong6CCK
fvZWMY66a1Ri6dYFKlTV5qGw3I2dhYYhLHluzBKyO+lRn2BcPb565vCiKA8bdvIv
vaVfQsjYPFK96xGwvTd6Yr/ahrM2wLHRVWsk5DBa0xfdrX18HnJr9M60hUjrUVtN
Xj5fO0jxS0mQkw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:24:27 2025 by rpki-client