Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: W/QsRehU8HilrnLrjowo2aD+Xm7mQuilnUqAph8SjbA=
Subject key identifier: C0:43:72:18:82:AA:E7:C8:78:A0:B3:8D:80:48:BA:D7:01:E3:5D:22
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 0198D66068CA68666CB432E2702C84060352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: IH6hZYtsL1PPyg1zc+i507ZQIuZ0Pbp8s/eaShXiWmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:68:ca:68:66:6c:b4:32:e2:70:2c:84:06:03:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=c043721882aae7c878a0b38d8048bad701e35d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:aa:02:a3:e7:4c:21:71:4c:17:f1:28:9d:
c2:d5:ac:5a:f8:2d:94:ef:ac:e2:14:55:af:10:e5:
28:3d:dd:59:36:e0:7e:f6:60:bc:a4:28:d5:ba:f8:
e1:7f:62:4e:90:86:63:aa:21:09:f2:a4:a3:7e:d6:
bd:dc:73:b8:f6:e3:3d:e7:fc:f5:f7:76:f5:d8:f1:
28:c9:aa:b2:9f:28:eb:ba:15:ae:b8:5d:d5:5c:80:
92:fb:a4:cb:ec:3e:b7:72:ec:f8:60:be:03:b5:6a:
b7:73:b2:e8:30:c5:7b:22:b7:b5:03:1c:38:c6:af:
f4:b9:9d:aa:46:a1:4b:d6:94:44:c7:1c:cf:af:33:
c2:f3:6b:84:db:2d:48:65:bf:6a:1f:e4:aa:89:56:
37:6d:db:f5:5d:4d:9a:8c:8e:9c:27:b1:28:a0:59:
40:26:2e:ef:6a:ff:fb:fb:6f:3c:f0:3c:07:2e:ae:
ba:25:34:b0:86:81:bb:de:0b:20:fd:e7:e2:8e:bd:
42:0d:d1:5a:1c:2c:1a:68:a0:ee:30:78:66:a5:f3:
eb:88:cf:93:d9:8a:27:2a:83:95:50:da:a0:7a:67:
c0:96:e2:2e:1d:4f:23:b5:cf:67:51:24:3d:8f:66:
61:dc:25:3e:6e:a8:01:31:96:06:ad:a5:cc:35:5b:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:72:18:82:AA:E7:C8:78:A0:B3:8D:80:48:BA:D7:01:E3:5D:22
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ae:91:96:f2:06:2a:95:ee:7d:27:27:64:92:1b:60:78:0b:
88:0c:8c:df:36:a6:ac:d2:12:17:52:84:bd:dd:43:74:3d:a8:
94:d1:03:b6:b3:51:18:77:f3:e5:4e:45:47:3f:f9:1c:b8:f0:
36:46:49:5f:52:da:8b:bd:4c:3e:af:85:e0:07:46:74:50:3d:
f0:af:6e:c2:b5:24:62:93:b4:dc:0d:30:73:25:59:de:b1:c4:
b3:8f:d5:01:56:1f:b0:3c:19:e6:c5:a3:28:b2:83:56:66:1b:
d7:97:55:ce:00:9f:c6:71:4c:7e:35:49:4d:b3:eb:d8:b4:1d:
00:d9:af:39:ad:cb:4f:10:be:10:78:1c:26:d0:ad:1e:20:4e:
51:d0:0e:b7:ab:45:dd:0b:cb:eb:86:49:f7:ff:58:66:ac:cc:
f5:e7:1d:d4:8b:64:99:b7:59:90:34:6f:a8:9e:30:4b:fc:14:
8f:4e:fd:ad:06:9a:12:0a:34:a2:36:78:b7:0b:ab:91:5c:8c:
8d:51:cb:02:68:2e:a1:7d:cf:7a:27:05:f1:76:44:3b:67:1f:
52:21:61:ab:23:a3:6b:5a:4f:4d:65:b2:10:42:77:34:38:8a:
8b:5e:f5:a1:91:71:3d:69:ca:f7:c6:22:e0:32:a7:ea:dc:b4:
85:51:03:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYGjKaGZstDLicCyEBgNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw
NDc3OWYwHhcNMjUwODIzMTAwMTM5WhcNMjUwODI0MTAwMTM5WjAzMTEwLwYDVQQD
EyhjMDQzNzIxODgyYWFlN2M4NzhhMGIzOGQ4MDQ4YmFkNzAxZTM1ZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HiqAqPnTCFxTBfxKJ3C1axa+C2U
76ziFFWvEOUoPd1ZNuB+9mC8pCjVuvjhf2JOkIZjqiEJ8qSjfta93HO49uM95/z1
93b12PEoyaqynyjruhWuuF3VXICS+6TL7D63cuz4YL4DtWq3c7LoMMV7Ire1Axw4
xq/0uZ2qRqFL1pRExxzPrzPC82uE2y1IZb9qH+SqiVY3bdv1XU2ajI6cJ7EooFlA
Ji7vav/7+2888DwHLq66JTSwhoG73gsg/efijr1CDdFaHCwaaKDuMHhmpfPriM+T
2YonKoOVUNqgemfAluIuHU8jtc9nUSQ9j2Zh3CU+bqgBMZYGraXMNVsehQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBDchiCqufIeKCzjYBIutcB410iMB8GA1UdIwQY
MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt
ZjI2MWZlNTE2OTUxLzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx
LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWK6RlvIG
KpXufScnZJIbYHgLiAyM3zamrNISF1KEvd1DdD2olNEDtrNRGHfz5U5FRz/5HLjw
NkZJX1Lai71MPq+F4AdGdFA98K9uwrUkYpO03A0wcyVZ3rHEs4/VAVYfsDwZ5sWj
KLKDVmYb15dVzgCfxnFMfjVJTbPr2LQdANmvOa3LTxC+EHgcJtCtHiBOUdAOt6tF
3QvL64ZJ9/9YZqzM9ecd1ItkmbdZkDRvqJ4wS/wUj079rQaaEgo0ojZ4twurkVyM
jVHLAmguoX3PeicF8XZEO2cfUiFhqyOja1pPTWWyEEJ3NDiKi171oZFxPWnK98Yi
4DKn6ty0hVED0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:20 2025 by rpki-client