Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: LBHdwGhW2h/7hN+9xbdbAwIwaTi51QzvD560CuJi6+g=
Subject key identifier: 9E:F5:8C:5B:E3:D4:84:AF:6C:96:35:EB:6C:06:52:D0:EF:1A:68:C0
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 0198D5BBA1CABA659CD0BA219E078D768F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 1597
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: Y1AKLvGftiTbofe/38aYGkH+UHMBkD2WKvJ8n9ueAbo=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a1:ca:ba:65:9c:d0:ba:21:9e:07:8d:76:8f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=9ef58c5be3d484af6c9635eb6c0652d0ef1a68c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:ac:2a:51:57:75:29:f6:39:31:72:e4:93:
90:9f:aa:60:c6:f1:34:b6:1c:63:c2:7d:af:1a:a6:
3b:d4:d4:34:af:52:ae:b2:c1:ca:ff:f7:08:ca:aa:
97:49:f5:43:55:60:12:e2:6a:71:8a:6a:bc:f5:30:
90:01:b3:26:fd:a5:c1:f8:58:97:0d:ba:85:ee:42:
9f:0d:a1:6f:5e:6e:b9:29:f9:58:00:e9:0c:38:1e:
8c:a4:0c:27:55:50:a6:03:1d:d7:61:93:ce:76:91:
c2:f8:18:84:8d:37:5b:08:ea:b5:05:c9:91:1c:b9:
44:06:98:97:d6:4f:ab:25:a4:d7:78:5b:52:a3:b5:
d8:9d:c7:f2:42:66:c7:1e:6e:98:b8:48:19:a9:ca:
1f:0f:3b:e7:39:8e:37:8e:8f:bb:89:a3:b4:9a:53:
68:62:f8:89:83:e8:dd:c6:a6:dd:4b:df:cf:0c:85:
e6:2c:50:93:b7:14:d2:b8:52:98:27:e5:20:a8:23:
f6:77:91:2a:1f:ce:14:93:26:b8:84:8a:16:9f:c3:
61:8c:2e:3e:d2:94:fc:64:63:b8:72:3f:77:e8:a4:
6c:36:70:17:dc:9f:87:89:b6:e7:e5:46:32:53:de:
cb:f1:ea:2d:82:9c:c5:e6:d5:ac:97:3d:3c:26:8b:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F5:8C:5B:E3:D4:84:AF:6C:96:35:EB:6C:06:52:D0:EF:1A:68:C0
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a4:eb:56:c4:a8:ad:20:c2:d5:4b:d7:bd:b4:a5:71:9d:21:
6d:a3:11:a3:db:f7:c7:78:d7:91:e6:eb:e8:c9:3f:ce:1a:ec:
56:7b:5e:d4:82:2d:56:6b:0b:8c:f1:7f:4e:bf:b2:27:65:9a:
a7:4f:0e:11:b3:7c:06:1c:03:09:00:06:8e:7b:db:02:f4:2f:
cf:86:93:c7:55:3a:b6:5c:1e:69:9c:0b:7b:f5:a6:e9:3e:05:
c9:9d:da:5d:70:cf:a6:92:01:24:22:74:13:a0:98:b9:89:7f:
51:a5:b2:00:f5:c5:93:09:02:d7:99:6f:80:5a:d6:04:20:ff:
45:5f:92:2d:02:28:f8:00:b2:8a:6e:ee:e8:75:82:f4:a4:5a:
93:93:72:3a:70:5b:ac:e1:48:ba:f4:66:91:77:b5:83:50:cf:
1d:3b:15:2e:87:19:38:bd:49:9e:6b:ab:62:27:ac:22:cd:b4:
ea:2b:4b:a0:85:71:96:d6:69:db:c7:a3:02:da:8a:4c:cd:54:
e2:12:ee:d4:92:e0:c9:6c:ce:f7:b0:79:8d:91:45:e0:2f:f1:
fe:a0:1d:b6:c5:da:23:1d:69:dd:ba:d0:34:2b:ca:20:b6:1f:
b7:08:8f:be:10:6d:3e:07:bf:0e:e1:5a:d1:bd:f7:86:ba:04:
0c:9e:81:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6HKumWc0LohngeNdo9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDA0NDc3MjQzY2EyMGI5NWRjOGVmZTA3MzM3NjM5ODA2
ZjYwNzUwHhcNMjUwODIzMDcwMTQwWhcNMjUwODI0MDcwMTQwWjAzMTEwLwYDVQQD
Eyg5ZWY1OGM1YmUzZDQ4NGFmNmM5NjM1ZWI2YzA2NTJkMGVmMWE2OGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjWsKlFXdSn2OTFy5JOQn6pgxvE0
thxjwn2vGqY71NQ0r1KussHK//cIyqqXSfVDVWAS4mpximq89TCQAbMm/aXB+FiX
DbqF7kKfDaFvXm65KflYAOkMOB6MpAwnVVCmAx3XYZPOdpHC+BiEjTdbCOq1BcmR
HLlEBpiX1k+rJaTXeFtSo7XYncfyQmbHHm6YuEgZqcofDzvnOY43jo+7iaO0mlNo
YviJg+jdxqbdS9/PDIXmLFCTtxTSuFKYJ+UgqCP2d5EqH84Ukya4hIoWn8NhjC4+
0pT8ZGO4cj936KRsNnAX3J+Hibbn5UYyU97L8eotgpzF5tWslz08JouyMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ71jFvj1ISvbJY162wGUtDvGmjAMB8GA1UdIwQY
MBaAFEIARHckPKILldyO/gczdjmAb2B1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mZDc1N2MtM2E3Yy00YjMxLWI0YTEt
Y2ZhN2EzMTBkNTQyLzEvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mZDc1N2MtM2E3Yy00YjMxLWI0YTEtY2ZhN2EzMTBkNTQy
LzEvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqTrVsSo
rSDC1UvXvbSlcZ0hbaMRo9v3x3jXkebr6Mk/zhrsVnte1IItVmsLjPF/Tr+yJ2Wa
p08OEbN8BhwDCQAGjnvbAvQvz4aTx1U6tlweaZwLe/Wm6T4FyZ3aXXDPppIBJCJ0
E6CYuYl/UaWyAPXFkwkC15lvgFrWBCD/RV+SLQIo+ACyim7u6HWC9KRak5NyOnBb
rOFIuvRmkXe1g1DPHTsVLocZOL1JnmurYiesIs206itLoIVxltZp28ejAtqKTM1U
4hLu1JLgyWzO97B5jZFF4C/x/qAdtsXaIx1p3brQNCvKILYftwiPvhBtPge/DuFa
0b33hroEDJ6BQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:24 2025 by rpki-client