Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: aO+VgFfAY9bLJJxsue3wWllClKGY7eRWiDZmcOdct38=
Subject key identifier: 43:FB:76:F0:78:F4:79:8F:A2:5A:04:2A:B4:D3:C9:C2:81:02:73:60
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 0197B745937B51AC316DF07AFB57DF8895A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: NwYdHgVOj4HaM3X+KCjpNRUXPZ03gae5cRYqE5ET4CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:93:7b:51:ac:31:6d:f0:7a:fb:57:df:88:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=43fb76f078f4798fa25a042ab4d3c9c281027360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:d3:7c:c5:28:d3:4c:7c:78:e9:fa:61:4f:
55:07:94:0a:58:aa:03:a1:a5:ae:0b:6a:e2:03:71:
1b:cb:94:f9:99:59:36:55:a7:01:31:0d:05:b7:f1:
f0:e3:8f:c4:65:de:1a:7b:4f:dc:3e:0f:77:13:cc:
1f:52:44:41:61:c8:ed:2f:75:b0:ff:82:1f:dd:07:
c4:02:f1:99:8b:18:45:82:85:44:39:ad:19:03:56:
89:1d:d6:8a:9e:af:ba:c7:23:2c:19:c8:a1:16:02:
9b:ea:56:a7:78:41:d2:5d:c5:ee:f8:17:61:ea:46:
f5:e5:2a:45:40:09:54:f4:89:98:84:81:47:5f:76:
61:84:86:39:82:7e:11:9e:45:97:27:36:a6:cd:54:
06:a2:7c:e3:4c:22:66:71:2c:0d:49:db:40:4a:12:
f7:b8:ea:39:f6:1a:35:e4:fc:24:11:16:60:fc:90:
b8:14:2a:79:0d:47:bc:ed:df:5a:f9:c9:20:b1:eb:
5d:3a:8c:3c:3e:4b:e3:7d:e5:9a:93:bc:6b:f8:c6:
bf:69:e0:bb:15:2d:f1:39:20:42:ba:e6:37:d7:3f:
6c:94:db:e6:a5:b6:6d:bb:fc:b3:ca:56:fd:29:ef:
f0:33:c9:9d:8c:1e:a1:70:db:f0:1e:81:aa:fd:00:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FB:76:F0:78:F4:79:8F:A2:5A:04:2A:B4:D3:C9:C2:81:02:73:60
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:63:b4:a0:84:9b:ec:0a:07:7c:03:d0:17:4a:d3:31:f4:b7:
ac:74:1b:99:de:23:98:54:e6:c5:a5:c6:63:88:bb:ef:a8:d9:
a9:e6:c7:b0:58:c2:c4:0b:a6:f6:3e:99:df:17:e6:ff:f6:e6:
5b:6c:60:02:c3:2c:f4:1d:78:29:72:a2:92:d7:d1:74:b5:f1:
1b:e8:f3:22:2b:6e:74:b8:8a:6f:2c:78:4c:b0:58:e2:bf:27:
2e:cd:98:b8:51:4e:25:b1:3b:5c:e9:67:d9:ee:7d:0c:a4:ba:
b6:3d:84:da:b4:64:df:fd:2f:94:96:cc:9a:91:5f:68:e8:88:
d4:62:22:84:f9:84:46:0b:db:92:9e:c5:1c:38:5f:76:aa:3e:
ca:1c:a9:89:12:fa:98:fd:db:23:1a:0e:b5:bd:41:ef:4a:65:
32:44:f1:59:a6:b3:8f:39:14:eb:26:86:c2:56:0a:8f:fb:f3:
44:80:c5:22:af:38:2f:11:15:09:51:32:70:20:cc:07:a9:ab:
80:29:2d:c7:9d:61:d7:9a:c7:1f:5e:62:72:e3:dc:42:70:39:
7c:53:d0:d5:35:45:31:f1:a6:02:9a:2b:a1:1a:41:19:88:d8:
1e:ea:cb:e5:31:c3:56:49:27:1b:ac:28:c3:84:07:1a:5d:23:
f6:e0:93:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RZN7UawxbfB6+1ffiJWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMzI0ZjI1MWI2OGZmNTQ2M2Y2YjUzNTA3ZjY2YTRiMDM0
ZGMwZTUwHhcNMjUwNjI4MTYwMTE5WhcNMjUwNjI5MTYwMTE5WjAzMTEwLwYDVQQD
Eyg0M2ZiNzZmMDc4ZjQ3OThmYTI1YTA0MmFiNGQzYzljMjgxMDI3MzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUrTfMUo00x8eOn6YU9VB5QKWKoD
oaWuC2riA3Eby5T5mVk2VacBMQ0Ft/Hw44/EZd4ae0/cPg93E8wfUkRBYcjtL3Ww
/4If3QfEAvGZixhFgoVEOa0ZA1aJHdaKnq+6xyMsGcihFgKb6laneEHSXcXu+Bdh
6kb15SpFQAlU9ImYhIFHX3ZhhIY5gn4RnkWXJzamzVQGonzjTCJmcSwNSdtAShL3
uOo59ho15PwkERZg/JC4FCp5DUe87d9a+ckgsetdOow8PkvjfeWak7xr+Ma/aeC7
FS3xOSBCuuY31z9slNvmpbZtu/yzylb9Ke/wM8mdjB6hcNvwHoGq/QBkIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP7dvB49HmPoloEKrTTycKBAnNgMB8GA1UdIwQY
MBaAFEMyTyUbaP9UY/a1NQf2aksDTcDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hZmVhZDUtOTM3My00ODVhLWE5M2Et
YmMzM2E1NDg5OGUwLzEvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hZmVhZDUtOTM3My00ODVhLWE5M2EtYmMzM2E1NDg5OGUw
LzEvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmO0oISb
7AoHfAPQF0rTMfS3rHQbmd4jmFTmxaXGY4i776jZqebHsFjCxAum9j6Z3xfm//bm
W2xgAsMs9B14KXKiktfRdLXxG+jzIitudLiKbyx4TLBY4r8nLs2YuFFOJbE7XOln
2e59DKS6tj2E2rRk3/0vlJbMmpFfaOiI1GIihPmERgvbkp7FHDhfdqo+yhypiRL6
mP3bIxoOtb1B70plMkTxWaazjzkU6yaGwlYKj/vzRIDFIq84LxEVCVEycCDMB6mr
gCktx51h15rHH15icuPcQnA5fFPQ1TVFMfGmAporoRpBGYjYHurL5THDVkknG6wo
w4QHGl0j9uCT7g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:14:35 2025 by rpki-client