Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier: tMhpVvF2i6dhq2ss4atouVd8KpT2AHLmTTUKpyPNcFc=
Subject key identifier: A8:0E:B0:42:E1:83:85:5D:B5:5F:15:E9:E6:66:EF:49:CD:21:4E:40
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial: 0198D583739948455EC1D509A8D6C974E876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number: 0F4D
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=)
2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: Pvt6u2oOa+o6N1CVfYKa1NPbzpcz1pQ0mb5Zt/NTJB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:73:99:48:45:5e:c1:d5:09:a8:d6:c9:74:e8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=a80eb042e183855db55f15e9e666ef49cd214e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:92:1f:23:61:1a:a7:51:9b:ec:d6:1e:64:92:
94:1b:72:fc:cb:a5:bc:65:7b:1d:46:b4:4b:f8:9a:
77:c3:ae:c7:87:a3:d5:55:0c:90:fa:4e:0d:f4:dd:
62:84:40:af:7b:ea:92:84:3f:33:29:e2:9b:82:aa:
0c:bf:6b:bd:70:44:49:af:17:c7:a6:68:ec:f2:75:
1e:8f:ec:41:68:d5:c8:1b:08:7b:8d:c5:f7:3d:06:
3a:70:8c:73:9c:81:c9:20:72:c5:21:0f:e8:37:ef:
db:b3:8b:28:16:d5:c0:3a:04:27:75:be:b7:5d:db:
50:d8:96:48:60:5e:9a:d3:3f:bd:4b:ee:9f:04:46:
30:63:d4:07:bb:5a:c4:bc:38:43:47:65:1f:88:ca:
12:3a:ac:73:2b:9c:00:a3:72:18:a8:bc:28:bb:9a:
c4:e6:d6:ed:71:dc:d0:1c:7e:01:d2:16:8e:9d:eb:
d6:f0:df:88:dc:ed:62:0d:b6:32:1e:b6:a3:e4:29:
22:26:d0:d2:80:e2:3e:cf:52:15:e4:c9:2e:4e:ed:
2a:41:9d:1d:d9:44:dd:3b:6e:65:3d:cb:bb:14:31:
b1:69:91:23:43:f5:8f:20:0a:5b:d6:ca:aa:ab:7a:
a9:40:42:da:e7:4d:32:99:15:a9:fd:30:ed:8d:18:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:B0:42:E1:83:85:5D:B5:5F:15:E9:E6:66:EF:49:CD:21:4E:40
X509v3 Authority Key Identifier:
keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:21:7b:b7:24:34:95:21:5d:6a:64:28:5a:22:32:71:d7:7f:
e3:6b:ba:e9:55:66:14:3f:1a:54:f8:94:ee:e1:83:15:ea:3a:
b6:0b:1b:fd:35:db:25:5d:9c:07:3f:64:81:8b:84:17:77:15:
b8:5c:01:03:df:67:bc:ec:35:6d:95:67:4c:aa:c4:14:9b:b8:
c1:29:a7:84:90:56:05:66:46:11:d5:d5:b3:f3:30:bc:6b:3a:
26:ce:44:59:59:2e:95:d3:54:14:e5:f8:e4:27:b1:b1:7d:12:
08:24:b5:f0:0d:d4:80:f8:52:3d:c1:f8:b3:60:01:e4:10:07:
02:93:96:83:27:96:cf:ca:ed:c5:db:58:48:13:10:6f:2e:7f:
ec:d6:67:11:9f:f6:fa:ed:20:ac:df:f6:70:c8:dd:a0:f4:71:
3e:53:b1:7e:e4:fe:86:2c:62:d8:61:c8:84:aa:74:dc:9e:e2:
27:aa:b3:7d:e7:ca:64:e9:cb:76:eb:e1:fe:81:58:1e:b7:01:
8c:22:63:56:f9:50:b0:eb:bd:f9:ad:9f:1d:cd:ab:fc:26:15:
c2:9d:2e:72:f8:00:b0:0a:43:ce:2c:70:1b:c1:61:13:d7:e8:
36:92:d1:8a:e7:c7:dd:3d:f8:53:54:f0:29:76:cf:19:d6:68:
97:13:5f:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg3OZSEVewdUJqNbJdOh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2NjNTUyYWI1N2RiYWZhNDYyMWZiNWRjNTkzYTQ1NjA3
Y2ZiMGEwHhcNMjUwODIzMDYwMDE4WhcNMjUwODI0MDYwMDE4WjAzMTEwLwYDVQQD
EyhhODBlYjA0MmUxODM4NTVkYjU1ZjE1ZTllNjY2ZWY0OWNkMjE0ZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpIfI2Eap1Gb7NYeZJKUG3L8y6W8
ZXsdRrRL+Jp3w67Hh6PVVQyQ+k4N9N1ihECve+qShD8zKeKbgqoMv2u9cERJrxfH
pmjs8nUej+xBaNXIGwh7jcX3PQY6cIxznIHJIHLFIQ/oN+/bs4soFtXAOgQndb63
XdtQ2JZIYF6a0z+9S+6fBEYwY9QHu1rEvDhDR2UfiMoSOqxzK5wAo3IYqLwou5rE
5tbtcdzQHH4B0haOnevW8N+I3O1iDbYyHraj5CkiJtDSgOI+z1IV5MkuTu0qQZ0d
2UTdO25lPcu7FDGxaZEjQ/WPIApb1sqqq3qpQELa500ymRWp/TDtjRhLxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgOsELhg4VdtV8V6eZm70nNIU5AMB8GA1UdIwQY
MBaAFEJ8xVKrV9uvpGIftdxZOkVgfPsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDct
ODVhNWI0Y2ZjODRmLzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDctODVhNWI0Y2ZjODRm
LzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCF7tyQ0
lSFdamQoWiIycdd/42u66VVmFD8aVPiU7uGDFeo6tgsb/TXbJV2cBz9kgYuEF3cV
uFwBA99nvOw1bZVnTKrEFJu4wSmnhJBWBWZGEdXVs/MwvGs6Js5EWVkuldNUFOX4
5CexsX0SCCS18A3UgPhSPcH4s2AB5BAHApOWgyeWz8rtxdtYSBMQby5/7NZnEZ/2
+u0grN/2cMjdoPRxPlOxfuT+hixi2GHIhKp03J7iJ6qzfefKZOnLduvh/oFYHrcB
jCJjVvlQsOu9+a2fHc2r/CYVwp0ucvgAsApDzixwG8FhE9foNpLRiufH3T34U1Tw
KXbPGdZolxNfgw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:06 2025 by rpki-client