Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: CApe8YckwjTEqhImsgKiNimtf+OMTu3+A2WC8hRkGYU=
Subject key identifier: 33:E8:88:B3:D9:5C:95:5A:49:E6:E6:DC:CE:C4:00:FE:29:A0:65:0B
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 0198D4DFD4339EAA110A49FA0054ECF373A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: qquWzXgvGu/v6EvWF4E0I0jEOh2qQLmW1xI3+B3fx1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d4:33:9e:aa:11:0a:49:fa:00:54:ec:f3:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=33e888b3d95c955a49e6e6dccec400fe29a0650b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:0a:a0:7e:0d:41:fc:ef:6b:d4:b0:cd:bc:
54:c5:92:f0:0f:4f:b0:e1:e2:e3:80:b2:9e:3f:34:
9f:32:42:cc:51:a3:34:9c:db:34:b9:e7:9c:93:c7:
4f:d6:12:12:69:21:20:0d:7d:e7:07:d8:d6:90:2d:
55:32:6f:af:29:45:fe:7f:ec:31:14:92:e4:cb:be:
f7:97:fc:af:07:3a:c7:84:56:dd:67:0a:de:f5:09:
d7:14:f7:e8:ff:9b:5a:41:c8:b2:83:0f:ab:ae:63:
fc:17:ac:78:67:6c:98:86:70:07:8d:9c:ca:a0:02:
33:c1:44:1f:8d:eb:d4:a6:72:93:1a:f2:42:b0:75:
99:90:b4:86:5b:6c:8c:3f:d5:02:2d:7f:3a:07:ce:
30:e5:5e:57:25:f5:21:0c:8e:71:0d:74:56:02:50:
7d:88:cf:a2:b8:19:47:17:4f:3a:af:3a:f0:c9:20:
29:74:c9:69:06:ae:a6:16:65:e5:fe:f4:5c:f2:b3:
71:52:de:c0:ea:52:a2:2b:bd:75:27:29:7f:eb:cf:
d6:41:15:a4:e5:67:ab:0d:2a:2c:51:5c:ea:e3:ac:
23:29:58:e2:51:a6:ef:de:03:d6:15:7f:b3:b5:a3:
da:0e:f7:8b:68:60:f6:5b:11:bb:b2:40:a8:4b:74:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:88:B3:D9:5C:95:5A:49:E6:E6:DC:CE:C4:00:FE:29:A0:65:0B
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6f:a6:89:7d:5f:90:4a:73:05:1f:4c:6a:66:c8:70:13:fb:
cb:22:0f:41:05:a1:8b:4c:c6:4b:a1:5f:1d:67:50:2d:98:85:
1c:6a:42:66:b7:d7:02:ff:92:52:e9:b6:be:ee:94:07:fc:28:
96:6f:94:84:0d:22:e4:ef:12:d7:81:c2:4a:4c:45:70:ee:83:
8f:25:d7:1e:96:cc:38:57:7a:05:7d:fb:fc:c3:d3:df:3c:a6:
93:ec:42:4b:82:d6:52:e5:d2:69:c4:37:ac:27:c8:82:7f:3a:
2b:ca:32:5d:20:74:0d:3c:6f:0e:5e:b8:aa:fc:f8:59:43:72:
d8:d7:c5:e2:21:b3:d8:5e:45:67:37:32:d3:42:80:83:ed:2e:
7d:d9:57:cd:b7:82:b0:4c:4a:32:08:fa:28:d9:bf:e8:5f:54:
3b:a3:f9:0d:b3:72:35:38:01:cc:fe:7e:da:ac:af:e3:9d:b4:
a5:c2:13:b7:87:02:f8:95:76:3b:6d:3d:0d:c1:c2:41:72:e3:
a4:e5:7a:19:2c:5e:5b:38:95:dd:c8:3f:d1:36:3d:33:91:63:
41:c2:02:b2:84:00:86:d1:c5:ba:e4:0c:b2:64:3c:0f:32:8b:
4d:58:1a:3c:cb:9d:9f:02:3e:cd:8d:e7:f4:63:8a:6a:1b:b0:
69:b2:9e:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU39QznqoRCkn6AFTs83OgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzRhNTY0NGYwNDI5NTIxZDFmZGM1YmJiMjMzYTA0MWIy
MDA4ODcwHhcNMjUwODIzMDMwMTM1WhcNMjUwODI0MDMwMTM1WjAzMTEwLwYDVQQD
EygzM2U4ODhiM2Q5NWM5NTVhNDllNmU2ZGNjZWM0MDBmZTI5YTA2NTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYAKoH4NQfzva9SwzbxUxZLwD0+w
4eLjgLKePzSfMkLMUaM0nNs0ueeck8dP1hISaSEgDX3nB9jWkC1VMm+vKUX+f+wx
FJLky773l/yvBzrHhFbdZwre9QnXFPfo/5taQciygw+rrmP8F6x4Z2yYhnAHjZzK
oAIzwUQfjevUpnKTGvJCsHWZkLSGW2yMP9UCLX86B84w5V5XJfUhDI5xDXRWAlB9
iM+iuBlHF086rzrwySApdMlpBq6mFmXl/vRc8rNxUt7A6lKiK711Jyl/68/WQRWk
5WerDSosUVzq46wjKVjiUabv3gPWFX+ztaPaDveLaGD2WxG7skCoS3QSfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPoiLPZXJVaSebm3M7EAP4poGULMB8GA1UdIwQY
MBaAFEHEpWRPBClSHR/cW7sjOgQbIAiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81Y2M0YjctODY3ZC00NTJhLTg5MDIt
ZTg3OTMyYzU1NWYzLzEvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81Y2M0YjctODY3ZC00NTJhLTg5MDItZTg3OTMyYzU1NWYz
LzEvUWNTbFpFOEVLVklkSDl4YnV5TTZCQnNnQ0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG+miX1f
kEpzBR9MambIcBP7yyIPQQWhi0zGS6FfHWdQLZiFHGpCZrfXAv+SUum2vu6UB/wo
lm+UhA0i5O8S14HCSkxFcO6DjyXXHpbMOFd6BX37/MPT3zymk+xCS4LWUuXSacQ3
rCfIgn86K8oyXSB0DTxvDl64qvz4WUNy2NfF4iGz2F5FZzcy00KAg+0ufdlXzbeC
sExKMgj6KNm/6F9UO6P5DbNyNTgBzP5+2qyv4520pcITt4cC+JV2O209DcHCQXLj
pOV6GSxeWziV3cg/0TY9M5FjQcICsoQAhtHFuuQMsmQ8DzKLTVgaPMudnwI+zY3n
9GOKahuwabKe0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:19 2025 by rpki-client