Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: 7fWrWsEhfSRFaZIA1Kc3q2iCKrhEDTneGH0lmaBivPM=
Subject key identifier: 7D:11:D0:85:A0:65:FF:36:85:49:00:E7:0A:FB:CA:70:DB:FF:AD:C4
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 0198D65F5DEED1B3D4030E804D702BE58746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:30 +0000
Manifest this update: Sat 23 Aug 2025 10:00:30 +0000
Manifest next update: Sun 24 Aug 2025 10:00:30 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: sOvcUZlSeAm/dvE5T78JoYVs6vBX+s99zWWedAr512c=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5d:ee:d1:b3:d4:03:0e:80:4d:70:2b:e5:87:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Aug 23 10:00:30 2025 GMT
Not After : Aug 24 10:00:30 2025 GMT
Subject: CN=7d11d085a065ff36854900e70afbca70dbffadc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:06:75:1a:d3:62:5f:84:eb:47:c3:93:b0:
5e:e5:35:45:73:37:53:77:03:d0:0a:44:d2:d6:7a:
54:93:8b:56:01:d0:7c:1f:d5:bb:f4:da:69:48:2a:
de:28:ec:46:f9:c7:74:86:43:1c:81:9b:97:91:74:
81:c7:07:81:3b:f0:f4:b5:9e:59:10:b5:c7:a3:d6:
5f:ca:e3:0a:fe:ab:a4:d1:23:86:b7:52:3c:4b:e1:
e1:b9:14:a9:09:c0:67:79:6d:e1:9c:d4:5d:df:74:
ce:d4:ee:ce:65:a7:1d:f0:22:de:4d:ce:3a:a0:6e:
ef:d8:00:f5:25:2d:ee:a6:cc:3d:71:40:1c:15:83:
1d:ed:c2:c5:ed:8c:14:ff:02:4d:9c:d6:44:7d:50:
fa:04:3a:98:64:e0:3c:51:1b:5c:a3:a8:8e:7a:9d:
c0:6e:ca:eb:bc:b5:16:b6:2e:b0:dd:d9:28:e3:d1:
b0:66:2d:42:30:37:3b:31:6f:4d:32:31:1f:1d:5d:
f9:e5:e7:31:fd:49:d5:06:5e:89:85:91:c6:9f:6b:
9a:ee:c1:4c:cc:5d:d3:c0:fa:bb:f7:f7:86:5f:40:
b0:ca:7a:24:4d:68:03:bd:e4:8b:48:68:5c:86:57:
3d:96:64:aa:fc:50:81:d8:f7:aa:bc:98:3e:63:a3:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:11:D0:85:A0:65:FF:36:85:49:00:E7:0A:FB:CA:70:DB:FF:AD:C4
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9d:99:5c:06:ea:a0:71:df:61:f2:3d:38:b6:85:ad:66:ad:
6e:33:a2:65:5d:37:be:3e:cc:e8:c5:b6:33:05:2c:42:ca:9e:
16:a5:4e:31:09:87:f8:51:97:98:e8:09:70:14:58:32:b9:b2:
eb:99:41:59:e3:d7:db:d4:04:0f:30:51:b8:3b:5d:ef:c4:85:
be:1a:c2:cc:6c:2f:2a:05:f3:b7:fe:10:3a:02:55:53:4c:05:
56:61:59:a5:70:5b:d5:68:b1:b9:d7:be:4c:8d:0d:b3:0f:66:
3e:d3:0b:75:74:1d:eb:d7:4c:e4:c4:26:e1:26:d2:5e:9a:82:
d7:44:da:51:f1:ab:78:fe:60:9f:d2:cf:91:07:82:31:74:d7:
e3:b9:9f:a3:ff:5c:fe:d0:dd:bc:6e:ed:eb:67:62:65:41:b4:
f1:aa:cb:63:cb:0b:dd:15:42:7c:fe:d7:3b:48:11:bf:47:fc:
98:d9:49:9a:23:19:50:68:8a:dc:0e:6f:15:fd:b7:3f:f9:4e:
d4:07:7b:f9:91:81:7a:dd:98:8e:1e:b1:1d:b4:f4:7f:3e:b0:
9b:69:76:14:1f:24:b4:ea:a4:db:e4:bb:3a:cf:bc:a2:e4:a1:
27:af:95:cd:d8:7b:43:dc:52:9b:f1:10:2d:5c:b0:a8:78:c8:
3d:08:d0:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX13u0bPUAw6ATXAr5YdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTgxNzRkYjQ1MWQ5ZmVmZGVlYzE1ZjliOWM3OTI5ZGFh
ZTk5ODAwHhcNMjUwODIzMTAwMDMwWhcNMjUwODI0MTAwMDMwWjAzMTEwLwYDVQQD
Eyg3ZDExZDA4NWEwNjVmZjM2ODU0OTAwZTcwYWZiY2E3MGRiZmZhZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo38GdRrTYl+E60fDk7Be5TVFczdT
dwPQCkTS1npUk4tWAdB8H9W79NppSCreKOxG+cd0hkMcgZuXkXSBxweBO/D0tZ5Z
ELXHo9ZfyuMK/quk0SOGt1I8S+HhuRSpCcBneW3hnNRd33TO1O7OZacd8CLeTc46
oG7v2AD1JS3upsw9cUAcFYMd7cLF7YwU/wJNnNZEfVD6BDqYZOA8URtco6iOep3A
bsrrvLUWti6w3dko49GwZi1CMDc7MW9NMjEfHV355ecx/UnVBl6JhZHGn2ua7sFM
zF3TwPq79/eGX0CwynokTWgDveSLSGhchlc9lmSq/FCB2PeqvJg+Y6MbPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0R0IWgZf82hUkA5wr7ynDb/63EMB8GA1UdIwQY
MBaAFECYF020Udn+/e7BX5uceSnarpmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODct
Y2ZhOGY5ZDlmODFjLzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODctY2ZhOGY5ZDlmODFj
LzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJ2ZXAbq
oHHfYfI9OLaFrWatbjOiZV03vj7M6MW2MwUsQsqeFqVOMQmH+FGXmOgJcBRYMrmy
65lBWePX29QEDzBRuDtd78SFvhrCzGwvKgXzt/4QOgJVU0wFVmFZpXBb1Wixude+
TI0Nsw9mPtMLdXQd69dM5MQm4SbSXpqC10TaUfGreP5gn9LPkQeCMXTX47mfo/9c
/tDdvG7t62diZUG08arLY8sL3RVCfP7XO0gRv0f8mNlJmiMZUGiK3A5vFf23P/lO
1Ad7+ZGBet2Yjh6xHbT0fz6wm2l2FB8ktOqk2+S7Os+8ouShJ6+Vzdh7Q9xSm/EQ
LVywqHjIPQjQpA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:21 2025 by rpki-client