Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
File: QZV-DXwo4yonWu2yD4AjYbRb_1E.mft (raw, json)
Hash identifier: 06/oS4UM5OT0f9X353a/D6oCzcNMWF0CZdiwcaiB3Gw=
Subject key identifier: D3:7E:82:B5:F0:1B:D2:41:24:77:10:AF:51:62:8C:46:6D:B6:71:3E
Authority key identifier: 41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
Certificate issuer: /CN=41957e0d7c28e32a275aedb20f802361b45bff51
Certificate serial: 0198D65FE98066B12579C94C414A9E63CEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 10:01:06 +0000
Manifest this update: Sat 23 Aug 2025 10:01:06 +0000
Manifest next update: Sun 24 Aug 2025 10:01:06 +0000
Files and hashes: 1: QZV-DXwo4yonWu2yD4AjYbRb_1E.crl (hash: 6XzFit4eAMZjELwKUBmirabnaNfRYXLdln2E5wmGyiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e9:80:66:b1:25:79:c9:4c:41:4a:9e:63:ce:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41957e0d7c28e32a275aedb20f802361b45bff51
Validity
Not Before: Aug 23 10:01:06 2025 GMT
Not After : Aug 24 10:01:06 2025 GMT
Subject: CN=d37e82b5f01bd241247710af51628c466db6713e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:1a:75:6b:42:b5:bb:f1:2a:1f:c5:6b:47:
b1:50:13:06:af:0a:2f:45:d7:27:34:c8:b8:15:2a:
5d:71:15:1f:ac:87:ff:be:3d:1d:32:06:a3:2f:ed:
c0:7b:40:c5:84:da:66:d0:00:97:0a:fc:f6:2c:96:
4d:62:55:d2:7d:a5:62:8c:25:f7:e8:ad:d1:ad:da:
22:a5:20:64:56:07:10:90:e5:88:f7:21:6f:e0:26:
19:b5:d2:e8:dc:42:80:ee:7f:4b:67:53:29:60:90:
a8:8b:04:7d:b8:5c:19:80:73:d6:b2:91:7e:f4:de:
ec:3b:e4:fa:64:8d:8f:ac:0c:54:3b:fd:85:23:d0:
8c:73:bd:e1:05:2e:f5:95:45:db:b2:98:2c:23:5e:
83:10:27:c0:34:b8:2c:87:91:a7:81:52:c4:06:6c:
a5:0c:07:11:20:95:b0:15:64:1c:99:63:0b:02:6c:
a1:4e:c9:c9:35:45:f3:49:db:46:ec:3c:76:86:d2:
e8:fe:f7:f3:5e:17:43:0c:38:59:fc:f5:7a:9c:b8:
ca:9e:1a:a7:d8:4f:66:26:8a:d8:b5:b9:c3:f1:63:
d9:2f:3e:41:b2:79:19:d2:65:1d:00:36:27:8a:55:
b9:0d:a0:3e:b2:a6:07:58:e6:aa:43:cd:dd:f6:3e:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:82:B5:F0:1B:D2:41:24:77:10:AF:51:62:8C:46:6D:B6:71:3E
X509v3 Authority Key Identifier:
keyid:41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f3:ed:4a:e1:77:7d:a0:c0:dc:3d:65:57:87:7d:b6:38:b6:
e5:0f:f3:53:52:d4:0e:34:5e:59:a2:9d:da:71:6e:61:5b:94:
c9:ce:f1:eb:4e:99:48:57:8b:6c:06:c7:48:29:a6:e8:62:af:
f3:a6:a7:a6:8c:24:02:1e:99:5f:4a:f5:c2:58:75:8d:3f:13:
ca:89:71:d6:d1:c9:ca:60:96:34:93:28:4e:17:7f:70:59:53:
d1:d6:5d:81:3d:5c:30:ff:c9:5b:62:c9:fc:f2:dc:04:cd:ea:
36:cb:e3:41:ee:2a:a3:23:0e:78:dd:d3:09:30:b4:4a:80:30:
d4:57:6d:00:10:74:b2:fb:07:ea:ad:a7:9a:a5:99:e6:05:f3:
b0:c5:40:a7:5f:79:7c:04:c1:24:4e:5f:86:84:f0:ff:e0:9b:
99:b5:27:d5:00:dd:eb:7b:a7:c5:74:16:29:55:bc:ad:33:95:
37:d1:4d:1f:ed:ea:82:ba:25:c1:8b:ea:11:58:2f:25:c9:7d:
54:cb:70:ba:f5:1f:a6:29:e8:0e:33:d6:58:3a:b2:d7:81:7a:
0b:df:f5:0c:b3:d7:b3:f7:0f:f8:9a:79:0d:97:c8:17:c9:5b:
1e:25:a9:f4:14:7e:39:b2:aa:b7:cd:6f:cd:46:61:d4:15:26:
ee:f0:42:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX+mAZrEleclMQUqeY871MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTU3ZTBkN2MyOGUzMmEyNzVhZWRiMjBmODAyMzYxYjQ1
YmZmNTEwHhcNMjUwODIzMTAwMTA2WhcNMjUwODI0MTAwMTA2WjAzMTEwLwYDVQQD
EyhkMzdlODJiNWYwMWJkMjQxMjQ3NzEwYWY1MTYyOGM0NjZkYjY3MTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG0adWtCtbvxKh/Fa0exUBMGrwov
RdcnNMi4FSpdcRUfrIf/vj0dMgajL+3Ae0DFhNpm0ACXCvz2LJZNYlXSfaVijCX3
6K3RrdoipSBkVgcQkOWI9yFv4CYZtdLo3EKA7n9LZ1MpYJCoiwR9uFwZgHPWspF+
9N7sO+T6ZI2PrAxUO/2FI9CMc73hBS71lUXbspgsI16DECfANLgsh5GngVLEBmyl
DAcRIJWwFWQcmWMLAmyhTsnJNUXzSdtG7Dx2htLo/vfzXhdDDDhZ/PV6nLjKnhqn
2E9mJorYtbnD8WPZLz5BsnkZ0mUdADYnilW5DaA+sqYHWOaqQ83d9j5khQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNN+grXwG9JBJHcQr1FijEZttnE+MB8GA1UdIwQY
MBaAFEGVfg18KOMqJ1rtsg+AI2G0W/9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YTFkNDUtN2YzZS00ODRkLWI3OTYt
ZDUxNzUyYmZmMTU0LzEvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YTFkNDUtN2YzZS00ODRkLWI3OTYtZDUxNzUyYmZmMTU0
LzEvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGfPtSuF3
faDA3D1lV4d9tji25Q/zU1LUDjReWaKd2nFuYVuUyc7x606ZSFeLbAbHSCmm6GKv
86anpowkAh6ZX0r1wlh1jT8Tyolx1tHJymCWNJMoThd/cFlT0dZdgT1cMP/JW2LJ
/PLcBM3qNsvjQe4qoyMOeN3TCTC0SoAw1FdtABB0svsH6q2nmqWZ5gXzsMVAp195
fATBJE5fhoTw/+CbmbUn1QDd63unxXQWKVW8rTOVN9FNH+3qgrolwYvqEVgvJcl9
VMtwuvUfpinoDjPWWDqy14F6C9/1DLPXs/cP+Jp5DZfIF8lbHiWp9BR+ObKqt81v
zUZh1BUm7vBC/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:41 2025 by rpki-client