
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier: UwLmsClcUpU19+YiRsQLiz+KsmLvhlgetp+DZGeQjgA=
Subject key identifier: 0E:46:E1:6B:AF:6F:7A:CA:DC:38:B1:AE:07:8B:55:0E:DA:85:52:98
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial: 0198D583AE2AAD99CA9DC8C2A9EB29FAAF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number: 034F
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: OnfMq6N9ZQw10mQvprdoagmxTUXPspOpdff843gw4lc=)
2: YPXVOgtlv47MULpqvQ2eiJqw0s0.roa (hash: 1U3YQJEvDPze+SY3FCaghiXBlRWFSFhPdqgWDRzyuw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ae:2a:ad:99:ca:9d:c8:c2:a9:eb:29:fa:af:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=0e46e16baf6f7acadc38b1ae078b550eda855298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:83:e0:2e:39:dd:27:45:cd:86:f9:27:f3:91:
41:8c:7f:77:8c:f4:c4:6e:1d:0a:57:d2:51:82:a9:
d6:49:ef:12:bd:8a:91:de:b3:9c:e6:57:54:46:53:
fe:55:7c:e4:2d:b9:f5:b4:8d:b1:9d:01:c6:55:90:
42:e8:cb:d5:03:c1:9b:71:c7:d4:0a:bd:6c:1b:1d:
64:96:24:e0:00:9a:87:d0:1f:d0:58:a8:bf:dc:0e:
32:66:dd:db:e6:09:29:3c:78:bc:cd:66:b1:54:57:
25:a4:1f:f6:95:60:6c:9f:c3:6d:18:c1:1b:7b:f1:
4c:06:bd:9b:9a:2d:1a:9d:76:b2:44:22:39:65:b0:
ae:cc:2e:73:be:ef:3a:f2:8f:ca:8d:87:74:07:b5:
10:84:71:b3:d8:df:02:6d:d1:a0:a2:b9:4f:94:4f:
24:7c:44:52:02:35:d8:ed:81:4d:0a:c1:91:32:ca:
f2:eb:64:be:8e:6d:0c:4b:16:61:b9:68:6b:2e:b0:
6a:cb:b0:6f:9f:49:50:37:01:7d:b0:53:52:50:89:
6a:b0:6f:98:66:1d:ab:1d:e3:9a:3d:8f:bf:ac:27:
8e:c5:79:73:af:66:43:4e:b0:b8:d9:64:9e:0e:72:
c2:a5:62:4c:92:ba:07:8e:56:c6:f2:e3:ae:25:cb:
86:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:E1:6B:AF:6F:7A:CA:DC:38:B1:AE:07:8B:55:0E:DA:85:52:98
X509v3 Authority Key Identifier:
keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:37:6d:a4:49:ee:b7:d8:f3:67:94:47:f0:0c:91:c8:4e:3e:
bc:1d:6e:24:66:d7:35:26:b7:23:4c:98:59:37:0b:13:b7:48:
8f:fa:c6:be:9a:dc:46:d6:ac:0b:fc:2d:fd:80:34:e9:7c:71:
40:19:51:7b:aa:52:17:d9:1a:d4:7e:3a:74:2a:5b:b1:4b:5e:
5d:8c:30:d1:84:49:f5:9b:60:42:88:76:b8:05:65:3e:d0:9a:
5f:48:37:0f:73:88:d8:69:34:b7:6b:97:d2:e3:0a:eb:a7:bd:
20:75:48:ec:c3:15:67:17:02:f5:28:9e:3f:48:30:5c:0e:84:
75:c8:11:18:05:20:5e:4b:f7:91:7c:25:74:e9:dc:81:76:28:
72:47:fc:10:43:8d:cb:6a:18:b5:b8:3d:b4:07:43:7e:94:b1:
b4:4c:f2:91:41:ee:dc:53:2d:53:c7:07:28:6e:47:80:e5:58:
dd:31:26:2f:ec:3d:35:99:49:57:a4:6b:8e:da:b0:1d:54:76:
f6:c5:d2:e0:fb:2b:54:f4:ba:78:60:c6:18:41:2a:aa:5c:35:
0c:40:81:28:88:9c:d4:4b:c8:14:44:3e:b1:a5:e8:40:d7:d4:
0e:2e:30:95:5b:44:0b:64:fc:be:65:52:40:d9:f4:2f:4c:d3:
ce:a4:57:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg64qrZnKncjCqesp+q+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGRlMjgxMzFjNzNiNWY1MzIwZjUxZGFlNmMxYmQ0N2Fi
ODJmOTIwHhcNMjUwODIzMDYwMDMzWhcNMjUwODI0MDYwMDMzWjAzMTEwLwYDVQQD
EygwZTQ2ZTE2YmFmNmY3YWNhZGMzOGIxYWUwNzhiNTUwZWRhODU1Mjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4PgLjndJ0XNhvkn85FBjH93jPTE
bh0KV9JRgqnWSe8SvYqR3rOc5ldURlP+VXzkLbn1tI2xnQHGVZBC6MvVA8GbccfU
Cr1sGx1kliTgAJqH0B/QWKi/3A4yZt3b5gkpPHi8zWaxVFclpB/2lWBsn8NtGMEb
e/FMBr2bmi0anXayRCI5ZbCuzC5zvu868o/KjYd0B7UQhHGz2N8CbdGgorlPlE8k
fERSAjXY7YFNCsGRMsry62S+jm0MSxZhuWhrLrBqy7Bvn0lQNwF9sFNSUIlqsG+Y
Zh2rHeOaPY+/rCeOxXlzr2ZDTrC42WSeDnLCpWJMkroHjlbG8uOuJcuGPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5G4Wuvb3rK3DixrgeLVQ7ahVKYMB8GA1UdIwQY
MBaAFEAN4oExxztfUyD1Ha5sG9R6uC+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lNzk3ZjItZjI3Mi00NjYzLWIxNDUt
YmM2YTFiMjFmZDVlLzEvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lNzk3ZjItZjI3Mi00NjYzLWIxNDUtYmM2YTFiMjFmZDVl
LzEvUUEzaWdUSEhPMTlUSVBVZHJtd2IxSHE0TDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzdtpEnu
t9jzZ5RH8AyRyE4+vB1uJGbXNSa3I0yYWTcLE7dIj/rGvprcRtasC/wt/YA06Xxx
QBlRe6pSF9ka1H46dCpbsUteXYww0YRJ9ZtgQoh2uAVlPtCaX0g3D3OI2Gk0t2uX
0uMK66e9IHVI7MMVZxcC9SieP0gwXA6EdcgRGAUgXkv3kXwldOncgXYockf8EEON
y2oYtbg9tAdDfpSxtEzykUHu3FMtU8cHKG5HgOVY3TEmL+w9NZlJV6RrjtqwHVR2
9sXS4PsrVPS6eGDGGEEqqlw1DECBKIic1EvIFEQ+saXoQNfUDi4wlVtEC2T8vmVS
QNn0L0zTzqRXJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:45 2025 by rpki-client