Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: r1L01hahYkJLnpLnzqWeOR8XZHtQ6Ydtbyw1gqQCo6U=
Subject key identifier: 56:3F:5D:6E:38:4D:49:2F:9B:6D:0F:9B:77:A4:F6:C6:BE:20:CF:EA
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 0198D5835A4239CCBE6CDA4EA6F68E6FD15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: 0xXhyvhAjJuCWtNCFU5iyaeGsv7u5Qx4KcLtG+8khsQ=)
2: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=)
3: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=)
4: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=)
5: oi0U9f8KU3xL5hcxj-l_j_oxaQE.roa (hash: VaBV5SBKPM+Ny0Aym3FdNVG9ABI2dtE3XxpwOFbyKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5a:42:39:cc:be:6c:da:4e:a6:f6:8e:6f:d1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=563f5d6e384d492f9b6d0f9b77a4f6c6be20cfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:11:54:ae:4b:54:1b:5c:c7:b2:4b:91:42:
ea:ae:d7:e2:41:a9:be:a2:32:ad:a1:fd:3f:a9:6f:
6f:44:96:87:7e:e5:14:a1:28:24:9f:13:7f:19:f3:
3a:b5:d8:e8:8e:db:89:76:5b:e6:d1:db:d0:3b:d8:
8f:11:6a:5d:95:7d:6d:5d:1d:73:92:1e:8d:97:32:
4f:66:a9:9e:07:19:62:ad:aa:0f:47:4a:ff:4a:f3:
e4:aa:0b:db:ca:70:c5:dd:7a:4f:25:2d:22:bd:d3:
d5:8c:8b:b9:c5:26:4d:4b:9b:01:11:c8:6e:05:99:
c4:8f:93:65:88:e6:de:df:1d:1b:32:e3:f6:0d:6a:
76:7c:34:b1:22:f9:47:a2:73:4e:73:23:e8:dc:7f:
31:dd:75:38:5d:69:9a:ec:18:9b:82:3b:60:a5:2e:
4e:83:ca:4c:e6:74:96:8f:29:64:e6:89:21:f3:1b:
40:f5:03:f4:ce:4a:f9:29:1b:75:cd:4d:33:36:f8:
fb:85:11:4f:a5:90:7f:0d:a1:0f:d9:02:f8:50:04:
7f:e7:91:3f:cd:c7:8b:84:a5:6c:36:73:97:85:39:
eb:f7:84:ba:88:30:26:79:1f:39:fd:ae:d7:a9:10:
08:87:ed:b4:7a:e6:23:83:41:4c:3d:cb:03:53:cd:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:5D:6E:38:4D:49:2F:9B:6D:0F:9B:77:A4:F6:C6:BE:20:CF:EA
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fa:df:80:ed:76:dd:93:dc:86:64:09:6e:c5:bf:52:f3:20:
69:3e:8b:8f:31:aa:9d:b5:d6:b5:48:1b:f7:b7:40:c9:0c:3d:
ca:f9:14:16:04:02:40:3b:55:54:5b:7f:64:ec:48:f0:fc:49:
07:4a:58:22:be:07:0b:80:a6:39:c2:c2:d2:51:47:f2:86:ea:
41:e9:64:4e:1d:32:e4:41:16:14:54:e0:20:2f:ea:bb:4e:ea:
4f:8e:53:4a:a7:19:0c:7f:80:a2:25:f0:8f:7e:8f:e2:d7:63:
5b:27:68:78:3f:4f:8a:57:fa:c8:6e:7a:cc:60:87:d8:fc:50:
66:41:02:a1:e2:1a:8b:79:eb:43:a8:8b:42:4e:93:59:09:8f:
ad:83:1a:04:61:63:bc:0d:9f:12:70:29:36:20:53:c0:44:e5:
62:d8:18:d1:b9:6a:08:3d:7e:1a:b3:a5:3f:8c:b4:a2:38:18:
3a:3a:bc:be:0f:6e:41:ae:2e:6a:1f:92:16:f7:44:81:f2:d5:
66:75:d2:39:94:55:af:f4:75:38:e6:16:0f:9b:09:e7:e3:17:
c6:73:86:17:7d:6b:e5:6d:82:0e:fd:fd:08:3a:c5:4f:d7:d2:
6f:6f:2b:c9:8c:ca:44:39:71:99:e6:44:17:c9:8c:51:e5:54:
4c:a2:42:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1pCOcy+bNpOpvaOb9FcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjUwODIzMDYwMDExWhcNMjUwODI0MDYwMDExWjAzMTEwLwYDVQQD
Eyg1NjNmNWQ2ZTM4NGQ0OTJmOWI2ZDBmOWI3N2E0ZjZjNmJlMjBjZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3cRVK5LVBtcx7JLkULqrtfiQam+
ojKtof0/qW9vRJaHfuUUoSgknxN/GfM6tdjojtuJdlvm0dvQO9iPEWpdlX1tXR1z
kh6NlzJPZqmeBxliraoPR0r/SvPkqgvbynDF3XpPJS0ivdPVjIu5xSZNS5sBEchu
BZnEj5NliObe3x0bMuP2DWp2fDSxIvlHonNOcyPo3H8x3XU4XWma7BibgjtgpS5O
g8pM5nSWjylk5okh8xtA9QP0zkr5KRt1zU0zNvj7hRFPpZB/DaEP2QL4UAR/55E/
zceLhKVsNnOXhTnr94S6iDAmeR85/a7XqRAIh+20euYjg0FMPcsDU80KDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY/XW44TUkvm20Pm3ek9sa+IM/qMB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/rfgO12
3ZPchmQJbsW/UvMgaT6LjzGqnbXWtUgb97dAyQw9yvkUFgQCQDtVVFt/ZOxI8PxJ
B0pYIr4HC4CmOcLC0lFH8obqQelkTh0y5EEWFFTgIC/qu07qT45TSqcZDH+AoiXw
j36P4tdjWydoeD9Pilf6yG56zGCH2PxQZkECoeIai3nrQ6iLQk6TWQmPrYMaBGFj
vA2fEnApNiBTwETlYtgY0blqCD1+GrOlP4y0ojgYOjq8vg9uQa4uah+SFvdEgfLV
ZnXSOZRVr/R1OOYWD5sJ5+MXxnOGF31r5W2CDv39CDrFT9fSb28ryYzKRDlxmeZE
F8mMUeVUTKJCpA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:39 2025 by rpki-client