Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: oo/65+OlM/jRPIBQ4KxCsW4pZr7NS+6tmvcRN0aMtDA=
Subject key identifier: 87:C1:DA:43:CB:A7:11:76:B1:B7:16:CA:97:9C:9A:51:66:E1:75:98
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 0198D583DD8D22E72CB24B63F6A3FFBB492E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 0F67
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=)
2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: oMXUWuZmzIsh2e8F9XXm0hUvt6eIyPvFRxKh88aPjOc=)
3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:dd:8d:22:e7:2c:b2:4b:63:f6:a3:ff:bb:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=87c1da43cba71176b1b716ca979c9a5166e17598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:f4:f8:38:0a:fe:fe:8b:f7:cd:be:60:eb:
0b:09:40:4d:4c:f9:05:56:f7:47:1b:78:a9:31:0e:
2e:98:30:d8:56:a7:6c:24:63:01:03:9e:00:73:ed:
fb:87:a3:9f:97:13:73:f8:4b:55:59:73:41:6d:27:
c4:db:b8:c4:53:0a:6a:c9:d0:cc:62:0b:76:28:f5:
97:65:6b:b5:70:47:1a:60:9d:62:94:86:fd:2b:55:
fa:35:e6:ed:2b:20:ab:78:28:c5:69:4b:0e:0b:3f:
57:9e:1f:57:34:52:34:3e:a8:00:2c:f1:3d:22:4b:
fa:f9:f6:c2:bb:f7:5d:84:35:df:8a:c2:db:a6:eb:
14:af:8b:da:4c:1e:94:9a:80:29:63:c5:da:2f:15:
0d:95:2e:03:a4:19:69:f1:b9:8a:44:8c:9e:7b:f2:
98:9b:96:0a:34:61:4b:51:0b:58:ab:61:82:ac:b8:
c4:ea:4d:43:68:f2:4b:a2:ec:99:27:03:28:88:90:
b8:ff:9b:e8:aa:4b:a2:d0:f9:1c:cd:50:e4:b2:d6:
d2:d1:7f:0e:92:66:f3:75:e7:71:82:08:66:58:19:
05:8c:f7:a0:96:95:8b:47:3c:9b:e0:20:be:95:32:
20:47:3d:b9:85:e1:3e:ce:95:8e:9d:1d:41:46:db:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C1:DA:43:CB:A7:11:76:B1:B7:16:CA:97:9C:9A:51:66:E1:75:98
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:aa:06:84:38:4c:8b:bd:db:ee:14:63:62:23:0a:0b:41:57:
e4:27:74:ce:4e:10:fb:19:b4:ef:94:c2:af:f1:73:f4:0e:60:
6a:41:be:0d:7e:a4:c6:2c:fc:38:5d:e2:a1:4f:b6:7c:a2:34:
38:bd:04:88:fd:76:55:e7:a1:fa:f6:0b:53:a1:be:b1:b8:07:
01:37:af:f0:2f:2f:98:2f:1c:39:3d:d8:a0:df:da:5a:4e:46:
37:c1:d7:00:38:e0:7d:1a:63:1a:e3:a3:d0:90:8d:9d:be:c0:
b1:df:1c:43:8f:53:10:1f:ed:4f:66:94:18:d7:8b:74:0a:ee:
67:0c:e2:9a:9d:b1:37:8b:b1:80:7e:95:7e:71:9d:f1:af:07:
c2:b3:d6:ea:a9:6f:55:c8:13:50:14:3e:2d:7e:23:b4:57:4b:
c1:44:64:ff:c7:ae:f7:a9:42:69:10:1d:50:c2:c2:38:9a:cb:
63:98:8a:d1:1d:fd:7a:0b:d4:7d:1f:54:ae:1e:59:41:ec:18:
d3:25:38:72:5a:60:ff:32:a1:6c:48:a6:b7:b9:16:43:21:83:
6b:ed:f2:73:8b:cf:d7:17:d9:eb:7e:a7:fd:c9:f1:e0:aa:34:
60:fe:73:96:1e:a7:97:8a:20:99:3e:a4:cb:15:b0:ac:29:86:
d4:42:37:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg92NIucssktj9qP/u0kuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl
ZTAzZWUwHhcNMjUwODIzMDYwMDQ1WhcNMjUwODI0MDYwMDQ1WjAzMTEwLwYDVQQD
Eyg4N2MxZGE0M2NiYTcxMTc2YjFiNzE2Y2E5NzljOWE1MTY2ZTE3NTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpv0+DgK/v6L982+YOsLCUBNTPkF
VvdHG3ipMQ4umDDYVqdsJGMBA54Ac+37h6OflxNz+EtVWXNBbSfE27jEUwpqydDM
Ygt2KPWXZWu1cEcaYJ1ilIb9K1X6NebtKyCreCjFaUsOCz9Xnh9XNFI0PqgALPE9
Ikv6+fbCu/ddhDXfisLbpusUr4vaTB6UmoApY8XaLxUNlS4DpBlp8bmKRIyee/KY
m5YKNGFLUQtYq2GCrLjE6k1DaPJLouyZJwMoiJC4/5voqkui0PkczVDkstbS0X8O
kmbzdedxgghmWBkFjPeglpWLRzyb4CC+lTIgRz25heE+zpWOnR1BRts6UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfB2kPLpxF2sbcWypecmlFm4XWYMB8GA1UdIwQY
MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt
YmQxZDQ4ZDUxMmNlLzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl
LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqoGhDhM
i73b7hRjYiMKC0FX5Cd0zk4Q+xm075TCr/Fz9A5gakG+DX6kxiz8OF3ioU+2fKI0
OL0EiP12Veeh+vYLU6G+sbgHATev8C8vmC8cOT3YoN/aWk5GN8HXADjgfRpjGuOj
0JCNnb7Asd8cQ49TEB/tT2aUGNeLdAruZwzimp2xN4uxgH6VfnGd8a8HwrPW6qlv
VcgTUBQ+LX4jtFdLwURk/8eu96lCaRAdUMLCOJrLY5iK0R39egvUfR9Urh5ZQewY
0yU4clpg/zKhbEimt7kWQyGDa+3yc4vP1xfZ636n/cnx4Ko0YP5zlh6nl4ogmT6k
yxWwrCmG1EI3xA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:05 2025 by rpki-client