Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: TJycMCBUnkPK0DgTKWHx7VFOCsUKk7QSyGea63IZSbk=
Subject key identifier: 55:A2:D2:46:B3:C1:81:FD:22:9D:F1:65:97:BF:1E:4B:E6:02:8D:70
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 0197B9A1CA969E91F79591102C5D1ADC062C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 02CF
Signing time: Sun 29 Jun 2025 03:01:17 +0000
Manifest this update: Sun 29 Jun 2025 03:01:17 +0000
Manifest next update: Mon 30 Jun 2025 03:01:17 +0000
Files and hashes: 1: 7fqM8GCj-eNanfhBlPQ1PMMaPkQ.roa (hash: cyPdhHEtqG0jKqnla9COVxpAyirC8qiWW4mGGbTTw34=)
2: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: vKghS8tjQnRWddzzsSn46Fu3DbhL9Vaf+uJRz0Mr4b8=)
3: WRsKHbHpQ9jZIvciUb2Wz6AHSW4.roa (hash: 8Nnxx5No66UiBNPIjWPMS0jddJkyISjgfdGXoNS0d/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:ca:96:9e:91:f7:95:91:10:2c:5d:1a:dc:06:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Jun 29 03:01:17 2025 GMT
Not After : Jun 30 03:01:17 2025 GMT
Subject: CN=55a2d246b3c181fd229df16597bf1e4be6028d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6c:03:84:03:69:2b:11:f9:34:86:a5:25:f8:
cb:34:b5:e2:a8:69:42:70:3e:1f:3c:5e:54:14:ef:
f7:1d:0d:96:0b:86:5e:fb:92:73:c7:78:89:73:a0:
c4:38:2e:47:c9:dc:ea:8b:a2:7b:3b:2a:77:83:d0:
ac:3d:b5:68:ce:a4:c5:b4:c8:7d:89:24:ed:61:99:
07:5d:a5:ad:99:f3:f5:b3:eb:52:1f:55:be:7a:55:
d9:42:73:bd:a3:29:64:f4:ff:c9:27:2d:51:d0:20:
33:28:05:39:fc:0b:c0:42:70:e2:b3:8f:75:05:af:
6b:43:50:f0:ec:df:37:99:25:db:ab:8a:62:63:ec:
f4:12:40:57:ee:23:2d:10:2a:a2:bf:fa:75:38:5e:
03:29:42:1d:f4:85:f3:97:e5:96:5f:7e:0b:4e:30:
19:8d:69:ad:e1:76:01:83:cb:19:b3:e9:04:72:fd:
20:21:99:f0:43:9c:af:7d:81:49:0d:d4:b1:f5:9a:
4b:35:fe:91:a1:9b:05:d9:c5:9e:81:e3:ee:e2:6a:
c4:46:14:db:9a:b6:5b:b4:2d:6a:45:e4:d9:91:a3:
8d:53:6c:9c:2a:5a:69:f9:e9:f1:93:98:76:8f:a9:
c0:9b:d3:27:0b:27:b8:d0:e1:03:6b:14:c5:29:a0:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A2:D2:46:B3:C1:81:FD:22:9D:F1:65:97:BF:1E:4B:E6:02:8D:70
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:26:1e:39:95:a2:ea:c1:dc:69:07:b3:99:d5:e1:87:c8:97:
22:f6:91:df:89:10:be:a0:28:af:ab:3a:80:7c:88:50:60:9e:
34:cc:66:4f:7e:34:3f:ee:40:60:8a:cb:ad:b5:e6:8d:ab:ca:
3d:40:50:73:91:97:43:7d:26:d6:57:05:21:4e:20:0b:da:b0:
85:f8:0e:66:05:0b:db:1c:3d:0f:8f:41:13:36:37:70:67:26:
c1:1f:49:39:25:ee:c7:1b:90:83:3e:88:ff:f1:e4:28:8d:06:
80:58:7b:40:a2:05:f8:69:7a:e7:94:2d:ba:54:e3:39:94:97:
34:0a:d4:e9:1a:62:85:55:1c:01:31:e6:29:b8:e5:36:45:1b:
0f:0d:91:da:6d:a6:da:9e:57:4a:c2:df:5f:23:c2:6f:1a:87:
d0:34:4c:c0:4b:60:7f:38:22:e2:32:c7:93:f0:4f:0d:f1:e1:
62:1c:8b:43:61:51:c4:20:a0:1e:78:fb:0d:25:6a:e4:e6:b8:
6b:40:aa:d9:52:db:c2:55:41:49:00:94:9b:57:02:65:2c:49:
89:b7:58:8c:3c:cf:d6:a9:84:22:7a:a1:10:2d:54:d6:8a:91:
62:7e:fd:0d:38:05:5b:88:3e:f1:da:3f:87:a2:75:04:99:b0:
a3:8e:3e:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5ocqWnpH3lZEQLF0a3AYsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNTE4ZWNiZDY0NjRkNzhhZDQ1MTU1MTY0OGY5MjA2Zjdm
YjVmNDIwHhcNMjUwNjI5MDMwMTE3WhcNMjUwNjMwMDMwMTE3WjAzMTEwLwYDVQQD
Eyg1NWEyZDI0NmIzYzE4MWZkMjI5ZGYxNjU5N2JmMWU0YmU2MDI4ZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mwDhANpKxH5NIalJfjLNLXiqGlC
cD4fPF5UFO/3HQ2WC4Ze+5Jzx3iJc6DEOC5Hydzqi6J7Oyp3g9CsPbVozqTFtMh9
iSTtYZkHXaWtmfP1s+tSH1W+elXZQnO9oylk9P/JJy1R0CAzKAU5/AvAQnDis491
Ba9rQ1Dw7N83mSXbq4piY+z0EkBX7iMtECqiv/p1OF4DKUId9IXzl+WWX34LTjAZ
jWmt4XYBg8sZs+kEcv0gIZnwQ5yvfYFJDdSx9ZpLNf6RoZsF2cWegePu4mrERhTb
mrZbtC1qReTZkaONU2ycKlpp+enxk5h2j6nAm9MnCye40OEDaxTFKaCRbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWi0kazwYH9Ip3xZZe/HkvmAo1wMB8GA1UdIwQY
MBaAFEBRjsvWRk14rUUVUWSPkgb3+19CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQt
N2MzZDc5NDAxZWMyLzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80MzcxNTAtNzgzYy00MzFhLWIzZmQtN2MzZDc5NDAxZWMy
LzEvUUZHT3k5WkdUWGl0UlJWUlpJLVNCdmY3WDBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyYeOZWi
6sHcaQezmdXhh8iXIvaR34kQvqAor6s6gHyIUGCeNMxmT340P+5AYIrLrbXmjavK
PUBQc5GXQ30m1lcFIU4gC9qwhfgOZgUL2xw9D49BEzY3cGcmwR9JOSXuxxuQgz6I
//HkKI0GgFh7QKIF+Gl655QtulTjOZSXNArU6RpihVUcATHmKbjlNkUbDw2R2m2m
2p5XSsLfXyPCbxqH0DRMwEtgfzgi4jLHk/BPDfHhYhyLQ2FRxCCgHnj7DSVq5Oa4
a0Cq2VLbwlVBSQCUm1cCZSxJibdYjDzP1qmEInqhEC1U1oqRYn79DTgFW4g+8do/
h6J1BJmwo44+kg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:38 2025 by rpki-client