Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
File: QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft (raw, json)
Hash identifier: rQ35kC1aXAGcj37/tT7pe7po/W8akzrX2ADp2JsRaD0=
Subject key identifier: FE:79:DC:0A:31:14:7B:BF:88:F8:A7:D6:2F:7E:27:9F:6C:2B:3E:FB
Authority key identifier: 40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
Certificate issuer: /CN=40ee9765864bd11d4a349426e372e11a94348de2
Certificate serial: 0198D66069633735575D593579AA8828B60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
Manifest number: 0759
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl (hash: JWeeuRWa08p8K2rsqWvqQMTLgL6JNtRnyl4Gjd3H8NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:69:63:37:35:57:5d:59:35:79:aa:88:28:b6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee9765864bd11d4a349426e372e11a94348de2
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=fe79dc0a31147bbf88f8a7d62f7e279f6c2b3efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:c5:29:74:d5:a7:8e:1b:d3:eb:41:34:08:
65:fe:f2:f1:e7:3c:ab:d5:ac:48:6e:eb:cc:14:86:
77:f4:0c:1f:e5:38:82:57:79:cd:ea:fa:0f:30:be:
4a:50:4e:3f:8e:47:75:80:ae:8f:25:96:f8:41:c9:
42:e3:6f:66:fc:62:8f:42:5b:81:eb:6f:53:3d:a5:
4c:5c:f5:ea:df:ce:fb:41:b8:21:0a:0c:83:e4:02:
c8:a5:8d:f7:6c:68:3f:9d:c9:99:71:05:e9:74:bb:
01:2d:d2:26:1c:d7:0f:20:55:8c:09:14:d6:04:28:
4d:91:27:64:56:07:a9:dd:eb:96:42:bc:42:01:82:
e9:28:f7:0c:d9:4b:a5:59:83:8e:52:0d:3e:d6:d3:
56:e3:ae:87:32:2d:da:fc:2b:63:8d:12:77:70:b3:
9a:44:e6:fa:48:10:43:05:51:5b:53:d4:ba:99:06:
8b:61:40:ae:19:df:d5:77:17:61:ea:5e:8d:d3:69:
2e:35:30:3a:b0:8c:d5:61:7c:dc:1f:6f:c2:02:3d:
06:12:45:e8:46:fb:41:16:df:c6:f7:14:a5:ae:0c:
2d:d4:5e:0e:70:d6:ad:2f:2d:90:76:fd:c4:a6:e2:
ee:e4:d7:6f:96:55:dc:c6:56:bf:a5:0a:2c:f1:3f:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:79:DC:0A:31:14:7B:BF:88:F8:A7:D6:2F:7E:27:9F:6C:2B:3E:FB
X509v3 Authority Key Identifier:
keyid:40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fc:88:09:97:90:cf:25:e0:73:f8:93:45:41:48:9d:ac:46:
ce:cd:95:e4:f1:da:11:52:74:37:8c:43:d2:64:2f:14:fa:b2:
f5:95:91:49:45:ef:a6:5f:af:65:0b:ab:a5:ef:cd:3d:c8:56:
c3:ff:66:61:eb:c9:74:dc:78:77:a8:aa:27:2e:b2:1b:2f:a6:
68:90:0d:09:b6:c6:55:37:57:4f:85:6e:4d:97:f0:2f:b0:76:
f3:b0:cb:3e:6d:f4:5b:fa:12:82:81:51:55:04:63:5b:b1:60:
64:3e:cc:e0:bb:42:cc:07:7d:4d:01:09:f6:b1:41:2d:de:1b:
f0:e4:a6:4c:f4:7b:ad:72:c2:0d:49:f1:ed:33:a9:bf:62:54:
d3:60:2c:9c:c3:db:82:27:1c:fc:2c:05:f3:3f:b6:cc:e2:04:
97:fc:c0:77:ed:49:ad:51:46:36:13:51:97:c5:6e:83:d1:ea:
10:9a:82:5b:5d:65:d0:f0:8a:b6:a4:99:1e:0a:2f:7d:b3:6d:
f7:b2:1c:64:8a:69:ed:f7:62:6c:35:9c:a1:8e:3e:e6:9c:8d:
d9:5b:32:57:12:a2:63:3d:4a:4c:e6:c9:f1:28:68:07:15:98:
14:87:d3:9f:2f:ff:7f:91:b4:15:3e:9c:2f:23:05:59:13:61:
45:95:e6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYGljNzVXXVk1eaqIKLYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWU5NzY1ODY0YmQxMWQ0YTM0OTQyNmUzNzJlMTFhOTQz
NDhkZTIwHhcNMjUwODIzMTAwMTM5WhcNMjUwODI0MTAwMTM5WjAzMTEwLwYDVQQD
EyhmZTc5ZGMwYTMxMTQ3YmJmODhmOGE3ZDYyZjdlMjc5ZjZjMmIzZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47rFKXTVp44b0+tBNAhl/vLx5zyr
1axIbuvMFIZ39Awf5TiCV3nN6voPML5KUE4/jkd1gK6PJZb4QclC429m/GKPQluB
629TPaVMXPXq3877QbghCgyD5ALIpY33bGg/ncmZcQXpdLsBLdImHNcPIFWMCRTW
BChNkSdkVgep3euWQrxCAYLpKPcM2UulWYOOUg0+1tNW466HMi3a/CtjjRJ3cLOa
ROb6SBBDBVFbU9S6mQaLYUCuGd/Vdxdh6l6N02kuNTA6sIzVYXzcH2/CAj0GEkXo
RvtBFt/G9xSlrgwt1F4OcNatLy2Qdv3EpuLu5NdvllXcxla/pQos8T+1vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP553AoxFHu/iPin1i9+J59sKz77MB8GA1UdIwQY
MBaAFEDul2WGS9EdSjSUJuNy4RqUNI3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU82WFpZWkwwUjFLTkpRbTQzTGhHcFEwamVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NWQ3YjktY2NmOS00YjczLWI2Njkt
MzUzM2E1MTJmY2Y3LzEvUU82WFpZWkwwUjFLTkpRbTQzTGhHcFEwamVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82NWQ3YjktY2NmOS00YjczLWI2NjktMzUzM2E1MTJmY2Y3
LzEvUU82WFpZWkwwUjFLTkpRbTQzTGhHcFEwamVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovyICZeQ
zyXgc/iTRUFInaxGzs2V5PHaEVJ0N4xD0mQvFPqy9ZWRSUXvpl+vZQurpe/NPchW
w/9mYevJdNx4d6iqJy6yGy+maJANCbbGVTdXT4VuTZfwL7B287DLPm30W/oSgoFR
VQRjW7FgZD7M4LtCzAd9TQEJ9rFBLd4b8OSmTPR7rXLCDUnx7TOpv2JU02AsnMPb
gicc/CwF8z+2zOIEl/zAd+1JrVFGNhNRl8Vug9HqEJqCW11l0PCKtqSZHgovfbNt
97IcZIpp7fdibDWcoY4+5pyN2VsyVxKiYz1KTObJ8ShoBxWYFIfTny//f5G0FT6c
LyMFWRNhRZXmHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:59 2025 by rpki-client