Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: a9Isx5gEK6af99kCSEXG1UErBL20fp2gTqTtBnm7GJk=
Subject key identifier: 8D:28:01:93:12:DA:13:B5:D6:DE:86:F3:CD:11:C3:53:37:74:04:3A
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 0197B8213FD6FA8FDFE07F65F1D0E8E1AB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: Td44Q1JaOnNAm4b3GiRAN6v+Xu6hCoKh1ZVU036+rmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3f:d6:fa:8f:df:e0:7f:65:f1:d0:e8:e1:ab:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=8d28019312da13b5d6de86f3cd11c3533774043a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:95:d0:38:94:25:d8:fd:6f:82:6a:02:e8:
b2:6f:6c:da:97:07:ee:f7:b9:d4:82:33:c2:18:ec:
67:4b:60:10:2b:e9:1d:80:42:8f:e5:41:df:e6:64:
44:4e:16:c9:e7:7f:a0:6e:50:f1:b6:8a:d2:cd:2b:
c7:df:55:83:e0:92:a8:2a:1b:ee:45:85:1d:af:fc:
73:a5:88:0c:e0:3b:cf:bd:df:2a:bc:30:51:78:6c:
af:ab:d1:15:04:f5:cb:a3:b6:02:2c:ee:dc:30:87:
16:b6:08:0f:eb:cc:3d:64:14:b6:fc:13:fd:ce:3a:
0f:d6:0d:c1:31:25:ba:2e:99:39:36:82:d5:d0:d7:
64:08:fc:61:a6:ee:3b:d7:e0:e7:1e:06:31:9e:b3:
af:ae:2a:3c:0c:50:13:9e:61:a1:6f:65:40:29:35:
aa:c6:23:b3:49:7f:85:d6:da:d9:20:4b:e2:93:bd:
c5:36:db:4a:13:cb:4c:e1:44:70:35:61:5a:43:1a:
75:df:e3:66:e3:58:36:d7:43:59:ac:8e:c4:6c:01:
d8:ed:f7:24:5d:9f:cd:8f:fa:52:04:68:cd:b9:dd:
4f:3e:44:30:f9:ec:91:0b:2b:c1:bf:7b:36:b1:53:
ab:9e:06:e8:cf:cd:d8:72:8a:16:fb:6e:1d:c1:54:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:28:01:93:12:DA:13:B5:D6:DE:86:F3:CD:11:C3:53:37:74:04:3A
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2e:50:96:84:ad:6c:82:8e:24:50:6b:8e:87:40:aa:6d:f7:
6b:10:87:30:bd:6d:19:8a:17:7a:da:7c:bb:9d:f2:26:61:e7:
c0:bb:d5:ea:b3:f1:1a:2f:12:08:ef:e5:a0:c9:64:84:3a:bc:
3f:4d:68:64:d9:d7:05:6f:f0:69:b4:b6:fa:b5:5e:c8:11:68:
c3:3a:f1:86:ac:3a:af:a5:e7:61:7e:18:83:1a:ea:62:91:0a:
be:0b:7c:f8:b4:69:66:9d:35:18:3f:12:cd:1f:0a:3e:09:83:
d4:cf:2e:0e:d6:1d:fd:64:11:9a:ab:f9:83:65:e6:1a:31:bb:
ae:e9:b4:4d:d4:5a:28:db:17:71:f7:3f:31:6b:39:44:66:6b:
6b:c7:b0:02:82:aa:2e:d9:b9:d1:d1:af:1c:29:ab:58:ef:94:
66:28:13:ac:cb:59:d3:83:6c:19:94:98:03:37:14:e9:47:21:
3c:bb:c4:a3:ad:20:47:30:ce:03:34:68:01:35:fd:1c:c7:e2:
1e:6f:c2:2c:d1:ee:41:cb:32:34:a3:a2:f3:20:4f:bd:47:3d:
34:4d:4e:70:02:53:43:3a:00:27:5f:7c:86:d1:d9:61:63:2a:
e6:91:36:7a:f3:d1:b3:f9:56:7c:9e:e5:75:c9:f7:a5:86:28:
9a:22:87:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IT/W+o/f4H9l8dDo4atWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNTdmZDgzZTA4ZTBmMzFlNzk1MTQ2NzdjMDk4ODExZWY2
OTA2ZDcwHhcNMjUwNjI4MjAwMTE2WhcNMjUwNjI5MjAwMTE2WjAzMTEwLwYDVQQD
Eyg4ZDI4MDE5MzEyZGExM2I1ZDZkZTg2ZjNjZDExYzM1MzM3NzQwNDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DuV0DiUJdj9b4JqAuiyb2zalwfu
97nUgjPCGOxnS2AQK+kdgEKP5UHf5mREThbJ53+gblDxtorSzSvH31WD4JKoKhvu
RYUdr/xzpYgM4DvPvd8qvDBReGyvq9EVBPXLo7YCLO7cMIcWtggP68w9ZBS2/BP9
zjoP1g3BMSW6Lpk5NoLV0NdkCPxhpu471+DnHgYxnrOvrio8DFATnmGhb2VAKTWq
xiOzSX+F1trZIEvik73FNttKE8tM4URwNWFaQxp13+Nm41g210NZrI7EbAHY7fck
XZ/Nj/pSBGjNud1PPkQw+eyRCyvBv3s2sVOrngboz83YcooW+24dwVSS3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0oAZMS2hO11t6G880Rw1M3dAQ6MB8GA1UdIwQY
MBaAFEFX/YPgjg8x55UUZ3wJiBHvaQbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQt
ZTI4MzFjZDdmY2M4LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jMjczMDctMWZkZC00MjFiLWJiZmQtZTI4MzFjZDdmY2M4
LzEvUVZmOWctQ09EekhubFJSbmZBbUlFZTlwQnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC5QloSt
bIKOJFBrjodAqm33axCHML1tGYoXetp8u53yJmHnwLvV6rPxGi8SCO/loMlkhDq8
P01oZNnXBW/wabS2+rVeyBFowzrxhqw6r6XnYX4YgxrqYpEKvgt8+LRpZp01GD8S
zR8KPgmD1M8uDtYd/WQRmqv5g2XmGjG7rum0TdRaKNsXcfc/MWs5RGZra8ewAoKq
Ltm50dGvHCmrWO+UZigTrMtZ04NsGZSYAzcU6UchPLvEo60gRzDOAzRoATX9HMfi
Hm/CLNHuQcsyNKOi8yBPvUc9NE1OcAJTQzoAJ198htHZYWMq5pE2evPRs/lWfJ7l
dcn3pYYomiKH1w==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:52:46 2025 by rpki-client