Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: PCNVpXFakXBqaBoOxJKfFgnzKtv9vmOivQ4KProuZFU=
Subject key identifier: 50:D5:FD:6C:B3:16:21:FD:EA:D0:5B:CD:E1:AF:11:FC:E6:43:52:2E
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 0197B745A8A2AA5AB7C0CBCF32FEAB25CEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: /W2DxqNEKulp2yozvdm+MDtScxVRXMWS4KgowmodeKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a8:a2:aa:5a:b7:c0:cb:cf:32:fe:ab:25:ce:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=50d5fd6cb31621fdead05bcde1af11fce643522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:6e:ac:b0:b0:d3:b4:6d:cb:c2:dd:9d:16:
11:4c:4e:bf:3f:f6:70:ee:1f:4e:21:44:f4:74:34:
3b:7d:39:54:68:18:43:94:fb:e4:11:47:25:be:49:
44:a1:79:3e:ac:1b:c3:1b:c1:65:48:73:64:51:d6:
87:fd:01:86:08:33:3e:64:f1:81:56:29:e3:14:9a:
19:e9:69:a9:1d:2f:4a:7e:ca:7b:e1:5b:9d:b6:d6:
29:f3:5f:c0:b5:bb:ec:05:2b:0d:08:80:ea:73:30:
78:0d:64:39:de:f9:e7:cb:93:af:d4:a0:05:d1:01:
c3:98:c1:83:5e:d9:33:f3:4a:74:02:12:31:11:34:
0c:27:62:8c:48:d3:68:e6:d0:f4:c0:23:fa:29:79:
68:d8:87:30:b9:42:35:57:4d:0c:ef:4f:2a:13:ab:
64:e0:22:c9:2d:4a:bf:03:a7:a2:8a:5c:94:9b:a2:
7f:ae:e5:39:39:74:75:27:08:5f:97:8c:bd:61:ef:
21:11:ff:ae:2f:02:8a:6d:8d:36:ba:97:fb:9a:03:
20:f6:8d:d3:e6:61:02:d8:40:ee:e9:a3:24:46:0b:
cd:95:0a:0d:88:ed:a9:10:0d:3b:23:16:10:bb:3f:
56:67:f5:66:ec:ba:65:f2:07:78:34:fb:ea:85:7e:
c0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D5:FD:6C:B3:16:21:FD:EA:D0:5B:CD:E1:AF:11:FC:E6:43:52:2E
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ff:48:5b:a4:79:7b:72:75:c9:98:56:0d:89:43:c0:d8:af:
0b:49:2a:25:a9:76:b6:ad:4f:0e:dc:ae:4a:1b:fb:b8:fc:ce:
1a:19:38:53:42:ea:59:b1:8b:3a:bf:5b:75:56:d6:3f:80:3c:
24:29:a4:3b:1b:0c:04:b5:5e:b0:5b:c2:1d:f7:b2:de:8e:ff:
db:97:56:77:99:22:98:86:89:0d:cd:6e:53:99:31:ae:07:7a:
c0:60:3d:29:d8:a6:c2:07:72:b4:ea:08:d1:d8:29:9a:bd:09:
48:7a:a0:1a:02:8f:1c:9b:17:72:6b:72:14:b2:c1:56:0e:07:
ac:cb:59:9f:91:14:45:1f:64:ae:0d:c3:91:b7:1f:e9:c1:da:
57:8d:8c:b3:6c:16:4a:5f:59:74:ad:54:6a:fa:6d:63:ad:f0:
0e:fd:04:47:0b:e9:d5:db:08:03:69:3d:8d:08:d7:61:e0:e2:
64:3a:38:2f:f4:5c:4a:9e:dd:74:5f:fb:82:a8:05:e4:f3:fc:
ef:8d:ea:ae:e9:7c:23:ae:98:72:dc:86:ef:ef:92:85:ba:20:
93:e0:28:6b:c6:65:00:08:2f:8a:59:8d:ee:ec:35:ef:8b:99:
af:fb:41:19:7d:4e:65:7b:0a:d5:d7:1d:31:56:9a:91:cb:d9:
20:4b:12:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Raiiqlq3wMvPMv6rJc6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzczZTVmMWQ2OWRlYTBjMDFmMzEzOTc5NjJlN2Q3NGI0
M2Q3YmEwHhcNMjUwNjI4MTYwMTI0WhcNMjUwNjI5MTYwMTI0WjAzMTEwLwYDVQQD
Eyg1MGQ1ZmQ2Y2IzMTYyMWZkZWFkMDViY2RlMWFmMTFmY2U2NDM1MjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpBurLCw07Rty8LdnRYRTE6/P/Zw
7h9OIUT0dDQ7fTlUaBhDlPvkEUclvklEoXk+rBvDG8FlSHNkUdaH/QGGCDM+ZPGB
VinjFJoZ6WmpHS9Kfsp74VudttYp81/AtbvsBSsNCIDqczB4DWQ53vnny5Ov1KAF
0QHDmMGDXtkz80p0AhIxETQMJ2KMSNNo5tD0wCP6KXlo2IcwuUI1V00M708qE6tk
4CLJLUq/A6eiilyUm6J/ruU5OXR1Jwhfl4y9Ye8hEf+uLwKKbY02upf7mgMg9o3T
5mEC2EDu6aMkRgvNlQoNiO2pEA07IxYQuz9WZ/Vm7Lpl8gd4NPvqhX7A0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDV/WyzFiH96tBbzeGvEfzmQ1IuMB8GA1UdIwQY
MBaAFEF3Pl8dad6gwB8xOXli59dLQ9e6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjIt
MWJmNmM1MDlkMGM1LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9jY2NjNDgtNTc4MS00ZDY0LWEyYjItMWJmNmM1MDlkMGM1
LzEvUVhjLVh4MXAzcURBSHpFNWVXTG4xMHREMTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv9IW6R5
e3J1yZhWDYlDwNivC0kqJal2tq1PDtyuShv7uPzOGhk4U0LqWbGLOr9bdVbWP4A8
JCmkOxsMBLVesFvCHfey3o7/25dWd5kimIaJDc1uU5kxrgd6wGA9KdimwgdytOoI
0dgpmr0JSHqgGgKPHJsXcmtyFLLBVg4HrMtZn5EURR9krg3Dkbcf6cHaV42Ms2wW
Sl9ZdK1UavptY63wDv0ERwvp1dsIA2k9jQjXYeDiZDo4L/RcSp7ddF/7gqgF5PP8
743qrul8I66YctyG7++Shbogk+Aoa8ZlAAgvilmN7uw174uZr/tBGX1OZXsK1dcd
MVaakcvZIEsSLA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:10 2025 by rpki-client