Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: b9b2LOC2SuH0Xs31P92434I8kzzmHLNBdk7J4N4fSeA=
Subject key identifier: 48:BD:76:C5:2E:09:31:D6:1E:B5:75:0C:FA:8F:04:74:C8:85:CC:05
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 0198D58350E1E61647047FB2D59985D18687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 0362
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: j1eR4lNkRKlOD5mbe/vgppR4L3phN7OB7+tcnc5WALM=)
3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:50:e1:e6:16:47:04:7f:b2:d5:99:85:d1:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=48bd76c52e0931d61eb5750cfa8f0474c885cc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:fa:8e:22:59:0b:45:02:1a:2b:71:ef:b8:
98:63:ba:90:ed:3c:54:5a:1f:70:d0:ed:82:8b:3e:
51:6d:df:d9:ba:66:2b:c1:c5:8f:64:36:25:89:08:
64:21:a4:22:d5:4e:88:4d:5b:9b:c3:2d:7e:f9:a9:
e8:f8:e6:57:88:7c:ce:02:0e:5b:d0:da:4a:76:ab:
d0:8f:6c:52:e2:59:71:1c:6e:1b:6d:14:86:3b:84:
ab:82:12:ff:81:5b:96:31:31:77:5c:0b:90:ab:78:
f3:a5:f2:73:3e:c9:b2:dc:3b:c3:a5:7b:26:d9:82:
2f:b9:03:16:e8:b2:f0:0c:43:2a:20:3d:37:82:36:
b0:41:75:cb:fb:40:15:74:99:a1:36:8d:1e:9f:6a:
9b:a6:93:55:60:c2:d5:1c:96:c1:b3:03:54:6e:dd:
a1:24:db:2e:92:c9:ee:8c:c2:b4:98:94:3a:c3:09:
b6:a0:1e:a4:e1:91:ff:4a:5a:05:95:92:6f:39:a5:
69:8b:ac:41:20:55:93:87:cd:cf:26:f1:01:13:ef:
53:8a:4c:de:85:1a:f6:07:8e:59:dc:87:d9:95:c8:
08:d0:71:11:44:4b:13:9f:2b:30:47:83:31:0b:ca:
fb:72:0a:6c:45:12:23:2a:f1:99:37:b6:b7:58:86:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BD:76:C5:2E:09:31:D6:1E:B5:75:0C:FA:8F:04:74:C8:85:CC:05
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ca:56:b3:68:38:64:45:28:fd:ae:07:3f:73:8f:7e:3a:f1:
4b:5f:72:6e:97:e6:10:c0:df:a4:c5:2d:2d:a6:35:0f:15:0a:
b5:85:04:c9:7a:02:05:60:52:43:1b:c0:80:16:2a:84:dc:f2:
b6:22:7c:00:f3:0f:d8:f4:50:ef:5e:c9:b6:68:21:5d:1c:32:
4b:37:5e:64:32:13:d5:42:e1:3b:5c:79:0c:ea:1b:25:7f:b9:
82:c8:c1:8d:8f:b9:a9:5b:b6:d9:e1:83:d7:e5:f2:44:33:70:
dd:6d:4f:98:52:24:5d:7c:7d:f4:7f:20:69:60:01:43:2c:c5:
d6:9b:b7:8a:30:4e:96:37:19:63:e1:c0:0b:33:21:a1:c2:05:
60:e3:76:2b:b6:c7:53:74:83:b2:be:94:cd:1b:7e:3b:ff:e4:
b5:4a:d8:a9:94:e9:eb:e9:0b:f7:03:68:44:30:4e:a1:e9:d6:
f4:c1:95:01:2d:51:69:dc:3b:cf:44:69:5c:a8:e1:83:69:95:
f0:03:b2:50:a9:1d:46:e7:60:5c:03:53:17:78:71:35:db:a1:
17:e6:74:c6:1e:3c:09:2b:ee:f3:75:95:1d:59:8a:35:f0:67:
97:2b:92:8d:35:7f:21:12:06:f9:9f:34:0a:36:85:46:7d:08:
54:d5:09:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1Dh5hZHBH+y1ZmF0YaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNTE4ZWNiZDY0NjRkNzhhZDQ1MTU1MTY0OGY5MjA2Zjdm
YjVmNDIwHhcNMjUwODIzMDYwMDA5WhcNMjUwODI0MDYwMDA5WjAzMTEwLwYDVQQD
Eyg0OGJkNzZjNTJlMDkzMWQ2MWViNTc1MGNmYThmMDQ3NGM4ODVjYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5L6jiJZC0UCGitx77iYY7qQ7TxU
Wh9w0O2Ciz5Rbd/ZumYrwcWPZDYliQhkIaQi1U6ITVubwy1++ano+OZXiHzOAg5b
0NpKdqvQj2xS4llxHG4bbRSGO4SrghL/gVuWMTF3XAuQq3jzpfJzPsmy3DvDpXsm
2YIvuQMW6LLwDEMqID03gjawQXXL+0AVdJmhNo0en2qbppNVYMLVHJbBswNUbt2h
JNsuksnujMK0mJQ6wwm2oB6k4ZH/SloFlZJvOaVpi6xBIFWTh83PJvEBE+9Tikze
hRr2B45Z3IfZlcgI0HERREsTnyswR4MxC8r7cgpsRRIjKvGZN7a3WIaV1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi9dsUuCTHWHrV1DPqPBHTIhcwFMB8GA1UdIwQY
MBaAFEBRjsvWRk14rUUVUWSPkgb3+19CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQt
N2MzZDc5NDAxZWMyLzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQtN2MzZDc5NDAxZWMy
LzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMpWs2g4
ZEUo/a4HP3OPfjrxS19ybpfmEMDfpMUtLaY1DxUKtYUEyXoCBWBSQxvAgBYqhNzy
tiJ8APMP2PRQ717JtmghXRwySzdeZDIT1ULhO1x5DOobJX+5gsjBjY+5qVu22eGD
1+XyRDNw3W1PmFIkXXx99H8gaWABQyzF1pu3ijBOljcZY+HACzMhocIFYON2K7bH
U3SDsr6UzRt+O//ktUrYqZTp6+kL9wNoRDBOoenW9MGVAS1Radw7z0RpXKjhg2mV
8AOyUKkdRudgXANTF3hxNduhF+Z0xh48CSvu83WVHVmKNfBnlyuSjTV/IRIG+Z80
CjaFRn0IVNUJ0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:48 2025 by rpki-client