Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: lNaItgVDoDHulqv68Ok0sTRAiaF34DKdHqkZqjgl5hY=
Subject key identifier: 91:98:C6:CA:EC:E7:07:00:C7:9B:F4:2F:CF:CB:CB:94:F0:57:39:CC
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 0198D6609D99D8FB1DB5602BE6C220F2B70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:52 +0000
Manifest this update: Sat 23 Aug 2025 10:01:52 +0000
Manifest next update: Sun 24 Aug 2025 10:01:52 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: xUoa+1mMSexPIPM+hUbaEZXJftQBzurmbuKfPZJAFYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9d:99:d8:fb:1d:b5:60:2b:e6:c2:20:f2:b7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Aug 23 10:01:52 2025 GMT
Not After : Aug 24 10:01:52 2025 GMT
Subject: CN=9198c6caece70700c79bf42fcfcbcb94f05739cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:d7:6c:41:9a:24:9c:33:50:44:84:ee:a2:
76:7f:f2:14:75:0c:a4:a2:e2:5e:48:95:ba:30:cb:
21:a0:35:1f:ca:c1:ad:55:ce:30:15:47:59:d6:8d:
01:18:88:48:52:8d:35:d5:7c:1c:29:c0:07:7a:21:
e0:a8:87:0e:53:20:8f:ff:75:54:93:0d:8e:0b:98:
57:80:95:11:b0:01:a4:29:09:91:da:e3:16:78:7b:
78:8d:62:fe:c6:60:76:37:5a:c4:ae:84:a4:44:b1:
57:cb:d1:6a:58:e7:07:79:97:13:b2:af:55:eb:4c:
ba:f4:b1:96:f1:aa:b2:5c:fb:f9:49:0b:39:55:36:
55:85:f0:86:ed:ca:f0:c6:9b:50:ad:25:fb:30:8b:
de:23:bd:a1:de:60:df:51:8f:6f:a0:19:6a:d4:9e:
8e:b2:e2:0a:86:d1:28:ec:b4:e0:5d:8f:87:1c:cf:
ba:86:8e:6e:41:2f:f4:97:b1:bc:61:72:1f:c5:b1:
01:54:b7:94:13:f3:02:36:24:50:a1:64:78:f4:0f:
c7:52:6f:e0:bd:b0:5d:5e:07:64:da:09:2d:6a:09:
66:21:bc:61:52:9d:c2:f8:b7:ab:9c:05:8d:87:4c:
b8:34:9d:6c:b2:aa:12:06:80:cb:a5:04:64:26:18:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:98:C6:CA:EC:E7:07:00:C7:9B:F4:2F:CF:CB:CB:94:F0:57:39:CC
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ff:d5:e7:a4:bd:c4:90:e3:0d:cc:13:ee:4d:a9:f4:c9:5f:
19:27:17:6a:6d:24:26:48:19:27:1b:79:2e:ba:db:be:4f:26:
4f:18:1d:53:24:d4:ef:f5:64:70:77:64:24:5e:67:2c:97:ac:
31:a7:e3:e7:6a:e8:1b:be:44:a2:82:3a:b0:5f:12:5b:2d:2f:
44:40:cb:42:1a:ce:30:35:ac:a9:38:29:ec:9d:7d:73:3d:7c:
20:5a:4f:e7:d0:86:5e:71:c4:86:53:16:cb:d0:a4:33:65:71:
82:0f:d4:65:0f:3c:d6:41:ff:21:7e:23:76:a5:c2:aa:cf:df:
b7:94:86:cb:d7:16:8e:51:8e:5c:61:cb:6f:79:8e:5e:3b:10:
f6:29:4e:af:ec:d3:fe:af:32:0c:d3:5f:63:e9:54:d6:9f:b3:
7a:0b:52:20:cf:00:26:c8:a4:24:63:50:d1:e1:68:ad:c5:79:
5b:11:2b:b4:15:62:68:51:d6:dd:8e:47:05:72:1e:d4:2e:7e:
11:73:7f:55:98:95:db:2f:ee:65:76:21:6e:0c:9a:c0:40:1b:
b9:3c:a9:51:fa:6a:cc:bc:46:3a:51:b1:e7:16:24:e6:5c:00:
de:cd:d9:82:5e:b7:55:2d:25:c5:05:d4:75:1a:ef:6f:1d:ee:
2a:8c:b5:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYJ2Z2PsdtWAr5sIg8rcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzhkNmYyZTFjMWJlZGZlN2JiOGNmNzlkYjI4YzhlZjNm
Yjc3NmYwHhcNMjUwODIzMTAwMTUyWhcNMjUwODI0MTAwMTUyWjAzMTEwLwYDVQQD
Eyg5MTk4YzZjYWVjZTcwNzAwYzc5YmY0MmZjZmNiY2I5NGYwNTczOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpfXbEGaJJwzUESE7qJ2f/IUdQyk
ouJeSJW6MMshoDUfysGtVc4wFUdZ1o0BGIhIUo011XwcKcAHeiHgqIcOUyCP/3VU
kw2OC5hXgJURsAGkKQmR2uMWeHt4jWL+xmB2N1rEroSkRLFXy9FqWOcHeZcTsq9V
60y69LGW8aqyXPv5SQs5VTZVhfCG7crwxptQrSX7MIveI72h3mDfUY9voBlq1J6O
suIKhtEo7LTgXY+HHM+6ho5uQS/0l7G8YXIfxbEBVLeUE/MCNiRQoWR49A/HUm/g
vbBdXgdk2gktaglmIbxhUp3C+LernAWNh0y4NJ1ssqoSBoDLpQRkJhhOVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGYxsrs5wcAx5v0L8/Ly5TwVznMMB8GA1UdIwQY
MBaAFELI1vLhwb7f57uM952yjI7z+3dvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgt
MGZkYjdiY2RmZmQ2LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgtMGZkYjdiY2RmZmQ2
LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoP/V56S9
xJDjDcwT7k2p9MlfGScXam0kJkgZJxt5Lrrbvk8mTxgdUyTU7/VkcHdkJF5nLJes
Mafj52roG75EooI6sF8SWy0vREDLQhrOMDWsqTgp7J19cz18IFpP59CGXnHEhlMW
y9CkM2Vxgg/UZQ881kH/IX4jdqXCqs/ft5SGy9cWjlGOXGHLb3mOXjsQ9ilOr+zT
/q8yDNNfY+lU1p+zegtSIM8AJsikJGNQ0eForcV5WxErtBViaFHW3Y5HBXIe1C5+
EXN/VZiV2y/uZXYhbgyawEAbuTypUfpqzLxGOlGx5xYk5lwA3s3Zgl63VS0lxQXU
dRrvbx3uKoy1xw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:51 2025 by rpki-client