Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
File: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft (raw, json)
Hash identifier: YanBe7+sE5FWjX2f6l1UJAbLR6msmj64ZYnmQY5TAyY=
Subject key identifier: 49:CE:25:5C:F5:6D:2C:7D:E5:2C:65:3F:88:E8:A8:84:52:68:63:EC
Authority key identifier: 42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
Certificate issuer: /CN=429fe46633e4d3276251b3b261af727d35d4dffb
Certificate serial: 0198D4739D345034D93E89C76BD7FAD9E372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
Manifest number: 05C5
Signing time: Sat 23 Aug 2025 01:03:23 +0000
Manifest this update: Sat 23 Aug 2025 01:03:23 +0000
Manifest next update: Sun 24 Aug 2025 01:03:23 +0000
Files and hashes: 1: Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl (hash: CR2+CKNvoA/VlOjWtXvHyMNBl1mw6Dou6eIU38+Lr5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9d:34:50:34:d9:3e:89:c7:6b:d7:fa:d9:e3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429fe46633e4d3276251b3b261af727d35d4dffb
Validity
Not Before: Aug 23 01:03:23 2025 GMT
Not After : Aug 24 01:03:23 2025 GMT
Subject: CN=49ce255cf56d2c7de52c653f88e8a884526863ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:76:77:e4:e4:e8:e7:bc:74:a6:76:be:b6:
05:be:81:82:d1:09:73:8d:5a:7a:87:56:cb:95:0f:
3e:a5:82:a2:8a:bc:4a:33:58:4c:92:07:27:b6:66:
01:a8:0d:06:4e:8c:29:51:7a:4f:c7:a3:26:ce:51:
7a:6b:46:dc:dd:bb:48:d8:2e:ec:49:89:20:b6:40:
fa:aa:55:4c:bb:4d:d7:f6:ee:c7:a0:33:27:97:c9:
ca:09:f1:a2:38:aa:49:7a:e2:4f:d6:ba:6c:5a:ee:
6b:8f:3d:f8:d6:57:a6:d7:32:80:7b:db:98:bf:e8:
13:1d:f5:43:f6:ac:c2:3d:c9:e1:21:0b:15:ca:d9:
13:34:61:2b:35:2a:1c:1f:a9:09:1d:ae:17:47:e7:
7d:b7:66:b2:35:30:41:98:44:af:85:6e:52:e6:64:
40:30:4b:7e:40:2d:e7:7b:db:3f:ca:fb:fb:54:f1:
71:35:37:8e:a9:68:10:f8:b7:72:ea:b9:05:6b:7d:
5a:09:56:83:c9:42:80:f8:a1:ac:f2:c1:6c:89:32:
c8:88:d6:2d:ca:8f:22:17:3d:95:ab:25:2d:18:de:
1a:a3:8e:8a:29:00:f0:bc:1c:50:d1:8e:6e:ac:a6:
eb:ee:fb:bb:80:96:9a:1f:9a:7e:33:e1:22:78:b1:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:25:5C:F5:6D:2C:7D:E5:2C:65:3F:88:E8:A8:84:52:68:63:EC
X509v3 Authority Key Identifier:
keyid:42:9F:E4:66:33:E4:D3:27:62:51:B3:B2:61:AF:72:7D:35:D4:DF:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc4ed7-4e12-46ff-bf30-069dac119166/1/Qp_kZjPk0ydiUbOyYa9yfTXU3_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e3:6e:d5:aa:89:fe:09:62:fe:8d:53:d2:f6:64:cb:a2:01:
83:54:cd:f1:37:ed:2e:90:e5:21:db:95:8e:19:b1:ac:d5:ee:
66:f6:01:a0:a6:d0:71:0c:17:4f:95:6d:02:c3:c8:6c:37:d1:
96:ea:19:42:41:5c:53:e7:75:54:85:6c:56:fa:93:e6:2a:f7:
57:e8:50:eb:69:d7:7e:17:8a:25:02:20:3f:3e:40:9d:7d:27:
2c:23:79:33:4d:48:93:a4:07:cc:fa:4b:ed:70:b3:f2:e2:4a:
82:12:82:de:4e:62:9e:2d:50:8e:ce:26:d0:87:d1:ea:45:a7:
f6:08:d9:f6:46:83:64:c7:e1:99:c8:ce:1c:b5:54:03:84:5f:
18:8b:da:7a:04:06:08:d2:43:25:94:c8:71:a1:08:0e:17:57:
4b:51:dd:7e:8f:3d:6d:4f:dd:d1:24:b7:b0:e7:f8:f6:80:64:
d1:8b:0e:5d:a5:52:81:df:95:92:a4:14:40:61:29:66:92:de:
35:b6:54:c7:a4:48:af:f2:f4:7f:26:55:07:d3:73:df:ec:62:
92:6c:df:c0:31:81:16:1e:f2:ee:76:2d:57:28:3d:b4:0c:0a:
d0:d9:df:76:91:5e:28:18:05:0c:d7:55:29:3e:5b:62:37:70:
52:06:ef:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc500UDTZPonHa9f62eNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWZlNDY2MzNlNGQzMjc2MjUxYjNiMjYxYWY3MjdkMzVk
NGRmZmIwHhcNMjUwODIzMDEwMzIzWhcNMjUwODI0MDEwMzIzWjAzMTEwLwYDVQQD
Eyg0OWNlMjU1Y2Y1NmQyYzdkZTUyYzY1M2Y4OGU4YTg4NDUyNjg2M2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMx2d+Tk6Oe8dKZ2vrYFvoGC0Qlz
jVp6h1bLlQ8+pYKiirxKM1hMkgcntmYBqA0GTowpUXpPx6MmzlF6a0bc3btI2C7s
SYkgtkD6qlVMu03X9u7HoDMnl8nKCfGiOKpJeuJP1rpsWu5rjz341lem1zKAe9uY
v+gTHfVD9qzCPcnhIQsVytkTNGErNSocH6kJHa4XR+d9t2ayNTBBmESvhW5S5mRA
MEt+QC3ne9s/yvv7VPFxNTeOqWgQ+Ldy6rkFa31aCVaDyUKA+KGs8sFsiTLIiNYt
yo8iFz2VqyUtGN4ao46KKQDwvBxQ0Y5urKbr7vu7gJaaH5p+M+EieLHJPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnOJVz1bSx95SxlP4joqIRSaGPsMB8GA1UdIwQY
MBaAFEKf5GYz5NMnYlGzsmGvcn011N/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYzRlZDctNGUxMi00NmZmLWJmMzAt
MDY5ZGFjMTE5MTY2LzEvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mYzRlZDctNGUxMi00NmZmLWJmMzAtMDY5ZGFjMTE5MTY2
LzEvUXBfa1pqUGsweWRpVWJPeVlhOXlmVFhVM19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+Nu1aqJ
/gli/o1T0vZky6IBg1TN8TftLpDlIduVjhmxrNXuZvYBoKbQcQwXT5VtAsPIbDfR
luoZQkFcU+d1VIVsVvqT5ir3V+hQ62nXfheKJQIgPz5AnX0nLCN5M01Ik6QHzPpL
7XCz8uJKghKC3k5ini1Qjs4m0IfR6kWn9gjZ9kaDZMfhmcjOHLVUA4RfGIvaegQG
CNJDJZTIcaEIDhdXS1Hdfo89bU/d0SS3sOf49oBk0YsOXaVSgd+VkqQUQGEpZpLe
NbZUx6RIr/L0fyZVB9Nz3+xikmzfwDGBFh7y7nYtVyg9tAwK0NnfdpFeKBgFDNdV
KT5bYjdwUgbvUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:39 2025 by rpki-client