Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: 0pN7KkGCOHmiCek9XASTabLSNlapdCU+jviEQnOH1K8=
Subject key identifier: 84:3F:9D:C7:AD:62:02:22:E4:4C:3E:8A:A8:98:59:5C:67:F7:0F:42
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 0198D6606C436B0D5BF9ADD280A6E569B2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: OAvB99fjzdQPItJckIHq87cWPr+hzZaOHR3hrWv3E5U=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6c:43:6b:0d:5b:f9:ad:d2:80:a6:e5:69:b2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=843f9dc7ad620222e44c3e8aa898595c67f70f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:71:60:d2:36:2f:0d:5e:fc:57:da:64:a2:
ff:69:4f:7f:74:ff:75:b8:ae:1a:42:94:52:21:8e:
d6:27:45:96:39:7c:3d:e1:dd:9d:1e:18:db:2d:69:
cc:f7:b2:04:11:34:42:bf:a0:c8:58:95:d8:a9:b8:
05:f8:58:84:b2:d0:e9:85:c2:48:fc:ae:c6:e0:ce:
aa:53:d2:14:f9:3d:d4:8b:d7:43:b8:c9:97:53:0a:
4c:e6:a0:90:4e:51:72:db:7a:9f:f8:58:94:f1:52:
c3:cc:b0:89:b0:8b:f9:4c:fc:2c:b5:a1:54:ae:e2:
01:c1:a3:c8:40:2c:a9:7e:a7:b5:c2:7b:b8:61:37:
25:7a:1f:e6:49:99:71:92:a6:d1:18:6d:e0:e7:91:
d4:b5:54:c5:57:c7:21:ba:ac:7c:ec:c1:a1:15:2c:
00:65:74:d9:4f:90:41:22:e2:59:cc:fb:af:76:0d:
f4:24:07:7c:12:3e:02:88:6e:ff:c5:5c:cc:14:d8:
5a:80:3b:1b:e2:37:f3:aa:f2:84:c1:b9:86:ad:dd:
1d:e6:3a:a9:85:7e:0c:8f:a3:a5:3d:4b:1b:ac:24:
34:b1:6f:39:53:61:11:59:43:9a:f3:eb:ab:2e:1e:
66:66:ea:63:ab:72:af:de:41:d4:66:44:4e:9a:08:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3F:9D:C7:AD:62:02:22:E4:4C:3E:8A:A8:98:59:5C:67:F7:0F:42
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1f:33:a3:48:41:19:ea:63:b0:af:2b:25:24:de:0f:c5:5b:
e7:1f:20:aa:79:3d:89:b0:13:bf:a5:ce:46:ed:3d:6f:1d:c7:
1b:27:41:9b:16:5f:cc:29:83:90:3f:23:7b:19:e6:13:44:9a:
e4:ef:22:36:79:b5:a1:d6:c3:12:55:dc:65:5d:af:fa:df:c5:
f7:0f:38:ad:fd:b6:dd:54:30:fa:44:c4:33:6a:43:fd:d6:c3:
9d:d5:a6:8e:97:25:68:68:85:55:06:97:7f:07:bd:f1:2a:74:
b0:f6:30:7d:82:7e:4a:31:34:ba:fd:22:e7:d6:86:b0:77:1a:
51:b3:06:9a:3c:76:32:64:ea:11:1c:6c:fc:01:cc:96:e2:25:
a2:1c:b9:cf:a9:e6:27:e4:3d:ae:da:d1:51:d5:54:4c:9e:69:
1d:cd:77:57:d5:74:80:c0:20:3f:2e:21:c1:59:a8:68:74:ca:
64:80:f0:c7:63:88:cf:46:f2:6d:cb:27:98:ff:a6:2c:20:d7:
6d:25:02:8a:d1:2a:a0:0a:34:dc:15:36:5d:8c:e9:cf:45:33:
38:3e:62:4d:ad:6c:fb:f6:de:da:13:67:ed:d7:21:61:e4:5a:
5d:95:a1:b9:da:ca:29:c8:1b:4c:f9:08:f7:77:8f:55:e1:52:
cb:6f:a3:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYGxDaw1b+a3SgKblabK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm
OWY1ODAwHhcNMjUwODIzMTAwMTM5WhcNMjUwODI0MTAwMTM5WjAzMTEwLwYDVQQD
Eyg4NDNmOWRjN2FkNjIwMjIyZTQ0YzNlOGFhODk4NTk1YzY3ZjcwZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCJxYNI2Lw1e/FfaZKL/aU9/dP91
uK4aQpRSIY7WJ0WWOXw94d2dHhjbLWnM97IEETRCv6DIWJXYqbgF+FiEstDphcJI
/K7G4M6qU9IU+T3Ui9dDuMmXUwpM5qCQTlFy23qf+FiU8VLDzLCJsIv5TPwstaFU
ruIBwaPIQCypfqe1wnu4YTcleh/mSZlxkqbRGG3g55HUtVTFV8chuqx87MGhFSwA
ZXTZT5BBIuJZzPuvdg30JAd8Ej4CiG7/xVzMFNhagDsb4jfzqvKEwbmGrd0d5jqp
hX4Mj6OlPUsbrCQ0sW85U2ERWUOa8+urLh5mZupjq3Kv3kHUZkROmgj5jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ/ncetYgIi5Ew+iqiYWVxn9w9CMB8GA1UdIwQY
MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt
MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi
LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx8zo0hB
GepjsK8rJSTeD8Vb5x8gqnk9ibATv6XORu09bx3HGydBmxZfzCmDkD8jexnmE0Sa
5O8iNnm1odbDElXcZV2v+t/F9w84rf223VQw+kTEM2pD/dbDndWmjpclaGiFVQaX
fwe98Sp0sPYwfYJ+SjE0uv0i59aGsHcaUbMGmjx2MmTqERxs/AHMluIlohy5z6nm
J+Q9rtrRUdVUTJ5pHc13V9V0gMAgPy4hwVmoaHTKZIDwx2OIz0bybcsnmP+mLCDX
bSUCitEqoAo03BU2XYzpz0UzOD5iTa1s+/be2hNn7dchYeRaXZWhudrKKcgbTPkI
93ePVeFSy2+jmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:21 2025 by rpki-client