Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: jCqyxSGfPfKDzbwhToEF2ezuUE7LsFDy8MY2hoK0ayc=
Subject key identifier: B2:0B:26:A4:BF:FA:84:33:D6:63:A1:29:05:F3:69:F6:AD:29:A3:21
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 0197B8909B0DCE752AB6B20CABF578595BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 0FB1
Signing time: Sat 28 Jun 2025 22:02:53 +0000
Manifest this update: Sat 28 Jun 2025 22:02:53 +0000
Manifest next update: Sun 29 Jun 2025 22:02:53 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: l/Pt0j0KlBBtywXCUoWJ+Rt8OX6TlnpLUrjAxk8vi1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:9b:0d:ce:75:2a:b6:b2:0c:ab:f5:78:59:5b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Jun 28 22:02:53 2025 GMT
Not After : Jun 29 22:02:53 2025 GMT
Subject: CN=b20b26a4bffa8433d663a12905f369f6ad29a321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:c8:32:a0:23:83:a2:af:a9:b4:de:6b:e7:
92:96:1a:52:7b:30:2d:9d:67:80:77:6c:2f:15:f8:
a7:07:56:41:95:ff:93:21:f5:84:08:00:c7:df:27:
ae:5f:b5:94:df:cb:41:1d:de:3a:80:5c:e5:c5:73:
5d:16:85:02:f6:93:3e:8c:fd:75:e4:5e:0f:6c:53:
6c:61:42:ee:fb:c5:fe:6d:40:a6:17:90:a4:cc:d4:
45:c0:08:80:a7:11:ab:78:23:e4:1a:8e:01:d3:fd:
54:33:22:5c:a7:13:3d:04:f7:e9:51:4b:cf:25:e0:
5a:a8:74:b7:a1:c8:37:7a:3f:1f:52:77:72:cd:d9:
0f:76:62:f9:83:09:0a:ad:87:56:7b:58:04:bd:b1:
9d:af:00:b6:7a:f4:00:1b:d7:a8:e1:cc:b7:fd:4a:
70:82:a8:24:7a:d2:38:22:aa:04:79:56:24:47:5b:
f2:15:aa:b8:6b:61:75:a6:6e:d0:8e:d7:9d:94:66:
ff:f8:f6:e5:71:70:03:7e:f5:0b:cb:e4:1e:10:13:
db:71:7b:c1:43:43:06:7c:d4:c9:d7:bd:da:4b:94:
63:79:53:d6:8c:56:29:41:3e:4d:0e:0d:54:ad:30:
2a:f1:eb:01:3e:14:ea:32:52:01:9a:ae:23:08:a7:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:26:A4:BF:FA:84:33:D6:63:A1:29:05:F3:69:F6:AD:29:A3:21
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:28:a9:cc:75:32:7c:f8:5f:65:84:9d:50:3d:cf:2e:70:95:
86:7e:5d:1f:8f:c3:5e:bc:20:78:2f:02:a7:f0:02:7e:e1:78:
c7:76:e9:36:e8:be:17:95:05:b9:aa:24:9f:0b:2e:ae:47:f7:
32:c6:3b:bc:71:6f:2d:bd:58:b8:11:41:12:fe:3e:43:02:b0:
f4:9c:a9:9a:47:c0:a0:27:e1:35:d7:a0:6d:ba:98:0f:dd:87:
51:d4:b5:95:35:86:3e:04:dc:25:42:a5:b0:36:4b:56:4d:fe:
45:b2:76:68:90:7b:79:c4:f3:15:b8:f4:97:e6:81:54:03:bf:
c0:0b:68:6d:fe:92:a0:b3:e1:27:20:b1:58:33:e5:b8:fd:b3:
0b:1b:f0:d0:79:dc:f2:4a:da:43:db:0c:9d:7f:09:6c:64:1e:
c6:51:50:d4:84:09:d6:c2:8a:ff:82:0c:f9:14:6d:97:74:5b:
d0:ca:6a:3e:2a:e1:c4:78:cb:fa:a7:d2:6b:16:19:fd:e7:15:
fb:32:b5:8d:77:8d:96:8c:e7:c3:aa:73:40:5f:78:08:c4:76:
5d:4a:a3:7d:99:f2:d5:22:03:77:e7:48:0e:cc:92:2a:96:94:
65:35:81:b8:12:0c:05:c3:47:17:27:fb:77:b6:fa:99:3c:d7:
2b:51:79:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kJsNznUqtrIMq/V4WVuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNGFhYmJmYWI5ZGU3MTI2YjdkMTE5ZGI1MjRkYTQxMTFm
MDRhZmUwHhcNMjUwNjI4MjIwMjUzWhcNMjUwNjI5MjIwMjUzWjAzMTEwLwYDVQQD
EyhiMjBiMjZhNGJmZmE4NDMzZDY2M2ExMjkwNWYzNjlmNmFkMjlhMzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuTIMqAjg6KvqbTea+eSlhpSezAt
nWeAd2wvFfinB1ZBlf+TIfWECADH3yeuX7WU38tBHd46gFzlxXNdFoUC9pM+jP11
5F4PbFNsYULu+8X+bUCmF5CkzNRFwAiApxGreCPkGo4B0/1UMyJcpxM9BPfpUUvP
JeBaqHS3ocg3ej8fUndyzdkPdmL5gwkKrYdWe1gEvbGdrwC2evQAG9eo4cy3/Upw
gqgketI4IqoEeVYkR1vyFaq4a2F1pm7QjtedlGb/+PblcXADfvULy+QeEBPbcXvB
Q0MGfNTJ173aS5RjeVPWjFYpQT5NDg1UrTAq8esBPhTqMlIBmq4jCKeq+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLILJqS/+oQz1mOhKQXzafatKaMhMB8GA1UdIwQY
MBaAFEBKq7+rnecSa30RnbUk2kER8Er+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYt
NzFhMjdlZjgxNzg2LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYtNzFhMjdlZjgxNzg2
LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiipzHUy
fPhfZYSdUD3PLnCVhn5dH4/DXrwgeC8Cp/ACfuF4x3bpNui+F5UFuaoknwsurkf3
MsY7vHFvLb1YuBFBEv4+QwKw9JypmkfAoCfhNdegbbqYD92HUdS1lTWGPgTcJUKl
sDZLVk3+RbJ2aJB7ecTzFbj0l+aBVAO/wAtobf6SoLPhJyCxWDPluP2zCxvw0Hnc
8kraQ9sMnX8JbGQexlFQ1IQJ1sKK/4IM+RRtl3Rb0MpqPirhxHjL+qfSaxYZ/ecV
+zK1jXeNloznw6pzQF94CMR2XUqjfZny1SIDd+dIDsySKpaUZTWBuBIMBcNHFyf7
d7b6mTzXK1F5+w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:43 2025 by rpki-client