Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
File: QSHH-wQVOCnZahwDjw33FNpZVAQ.mft (raw, json)
Hash identifier: 9crlu+8lGPbdXwYMT0CfKeWSt6RMQsbID+lJX+Nz+eQ=
Subject key identifier: 47:38:C3:EB:96:54:7B:59:7C:5D:0E:18:32:99:9D:42:DB:91:FD:00
Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404
Certificate serial: 0197B77BFE2CC0E3641D9C6A0880BC731113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
Manifest number: 144D
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: QSHH-wQVOCnZahwDjw33FNpZVAQ.crl (hash: WAyD9WzhcGYRSpBEzWKIUUJqe3c4l59D710otMlyaY0=)
2: mjDoFz4eHyi_j3f9O8pUYP3JsY0.roa (hash: 2+YlsZR42nnbb9KjpTYXIUqIvFdsI2xFIsW6avZLprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fe:2c:c0:e3:64:1d:9c:6a:08:80:bc:73:11:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=4738c3eb96547b597c5d0e1832999d42db91fd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:9f:af:dc:14:58:11:d3:8b:60:cb:07:9a:
8c:eb:ad:41:f0:f5:d7:61:ef:e1:5e:8e:dc:8d:c0:
f9:ad:09:5e:e6:cb:6e:fa:66:f5:4e:37:e3:c2:b2:
fc:d4:d6:07:47:d2:70:da:80:cd:ef:39:b4:d3:2e:
51:38:c2:5a:9f:46:a2:54:f5:91:c5:da:df:38:46:
ed:90:5d:d9:56:61:30:c5:d5:a7:be:3e:17:1b:9e:
c1:fd:bc:bc:37:56:4d:03:b9:0a:7b:16:0e:58:de:
08:4a:f2:90:eb:d2:6c:c8:bb:ae:e4:64:14:57:05:
2e:db:1e:6e:59:3d:28:a9:26:96:42:be:b8:a1:f9:
f2:bb:9b:8b:20:6b:0e:69:1e:2c:55:9b:3a:b7:8c:
ea:a6:90:fa:1c:bc:22:11:e2:d5:86:1f:d4:33:f8:
83:f9:ea:23:e6:e5:59:40:57:f0:1b:c1:76:c3:22:
d8:b2:b0:6b:94:80:7f:e6:68:f8:ba:18:56:24:c6:
43:02:29:12:32:76:53:af:00:8c:a8:c7:bd:3e:94:
c6:67:e4:8c:1e:0c:96:bd:67:29:6e:79:59:2a:7e:
c3:1b:ff:3b:75:e8:28:ed:0f:d5:fa:e7:04:6d:e9:
d1:55:78:35:e0:70:69:ab:df:01:d8:2d:4a:f2:53:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:C3:EB:96:54:7B:59:7C:5D:0E:18:32:99:9D:42:DB:91:FD:00
X509v3 Authority Key Identifier:
keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:29:ea:63:d3:7f:f4:b9:5b:31:5d:ac:51:5e:35:ec:1f:91:
30:ee:32:f2:f4:22:4a:e7:8c:cf:51:6a:3e:75:f9:49:9c:b2:
00:8e:9a:a4:c1:c7:6f:95:ee:dc:53:ea:a3:f4:8e:19:d8:e6:
21:aa:da:18:14:6a:05:d0:fa:58:e9:84:95:8d:ef:ae:bb:e8:
5b:f2:d5:eb:94:8e:12:95:03:68:ae:83:26:31:90:f9:18:74:
69:7f:97:bd:c7:50:79:4d:52:e1:d3:08:5d:c8:78:96:a5:04:
08:12:19:15:88:f8:17:28:f7:a9:84:75:5f:82:77:0f:a1:2f:
62:22:6b:39:d8:e7:33:69:fb:b4:9e:22:89:8b:5b:b2:e6:df:
9c:43:05:59:23:18:c8:4b:ad:a3:50:e2:3b:65:da:eb:b0:61:
76:96:9f:43:ed:3d:68:d4:55:87:52:bd:b1:e2:44:30:13:1a:
dd:d6:90:63:b1:b3:72:4f:84:eb:79:5d:be:d5:02:83:44:c2:
d0:95:03:19:cb:f9:1f:36:33:cc:ce:f3:a2:63:5a:6c:35:d9:
e1:47:3c:c5:f9:70:ed:cf:29:b2:22:8d:9b:b7:5e:1e:b5:0e:
5c:ce:50:0b:c2:4d:5a:a8:91:51:54:d3:d1:7b:31:1b:5d:f5:
25:db:87:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/4swONkHZxqCIC8cxETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjFjN2ZiMDQxNTM4MjlkOTZhMWMwMzhmMGRmNzE0ZGE1
OTU0MDQwHhcNMjUwNjI4MTcwMDQ1WhcNMjUwNjI5MTcwMDQ1WjAzMTEwLwYDVQQD
Eyg0NzM4YzNlYjk2NTQ3YjU5N2M1ZDBlMTgzMjk5OWQ0MmRiOTFmZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocOfr9wUWBHTi2DLB5qM661B8PXX
Ye/hXo7cjcD5rQle5stu+mb1TjfjwrL81NYHR9Jw2oDN7zm00y5ROMJan0aiVPWR
xdrfOEbtkF3ZVmEwxdWnvj4XG57B/by8N1ZNA7kKexYOWN4ISvKQ69JsyLuu5GQU
VwUu2x5uWT0oqSaWQr64ofnyu5uLIGsOaR4sVZs6t4zqppD6HLwiEeLVhh/UM/iD
+eoj5uVZQFfwG8F2wyLYsrBrlIB/5mj4uhhWJMZDAikSMnZTrwCMqMe9PpTGZ+SM
HgyWvWcpbnlZKn7DG/87dego7Q/V+ucEbenRVXg14HBpq98B2C1K8lME3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc4w+uWVHtZfF0OGDKZnULbkf0AMB8GA1UdIwQY
MBaAFEEhx/sEFTgp2WocA48N9xTaWVQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNISC13UVZPQ25aYWh3RGp3MzNGTnBaVkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wNWUxMDktMjM0Ny00YTdjLThhZGIt
ZDE5ODFkZDQ0NmNmLzEvUVNISC13UVZPQ25aYWh3RGp3MzNGTnBaVkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wNWUxMDktMjM0Ny00YTdjLThhZGItZDE5ODFkZDQ0NmNm
LzEvUVNISC13UVZPQ25aYWh3RGp3MzNGTnBaVkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADynqY9N/
9LlbMV2sUV417B+RMO4y8vQiSueMz1FqPnX5SZyyAI6apMHHb5Xu3FPqo/SOGdjm
IaraGBRqBdD6WOmElY3vrrvoW/LV65SOEpUDaK6DJjGQ+Rh0aX+XvcdQeU1S4dMI
Xch4lqUECBIZFYj4Fyj3qYR1X4J3D6EvYiJrOdjnM2n7tJ4iiYtbsubfnEMFWSMY
yEuto1DiO2Xa67BhdpafQ+09aNRVh1K9seJEMBMa3daQY7Gzck+E63ldvtUCg0TC
0JUDGcv5HzYzzM7zomNabDXZ4Uc8xflw7c8psiKNm7deHrUOXM5QC8JNWqiRUVTT
0XsxG131JduHww==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:34 2025 by rpki-client