Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: Vg2JU5gY/5VnWBks09hHAtDDq/brPHNwuM3s/qypRZs=
Subject key identifier: 72:21:DE:C4:DB:CE:EC:B2:13:46:82:F9:18:9A:54:E9:DD:9C:DE:4D
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 0197B632866529C8DC639F43E5F39301C30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0AC1
Signing time: Sat 28 Jun 2025 11:00:53 +0000
Manifest this update: Sat 28 Jun 2025 11:00:53 +0000
Manifest next update: Sun 29 Jun 2025 11:00:53 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: bAgv2nAaQkq7Ci9PABwIIG0beKUa9AoIXAFs/y794uc=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:86:65:29:c8:dc:63:9f:43:e5:f3:93:01:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Jun 28 11:00:53 2025 GMT
Not After : Jun 29 11:00:53 2025 GMT
Subject: CN=7221dec4dbceecb2134682f9189a54e9dd9cde4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:43:ca:6f:09:b0:46:b7:04:af:4c:a4:7f:
1e:59:04:b3:99:35:8a:c2:5e:1e:dd:86:50:e1:72:
0f:70:d9:02:f1:2e:03:03:16:ad:b3:c6:af:1c:75:
3e:d4:32:b8:10:bb:48:92:da:d4:af:f2:51:bc:75:
8b:8c:40:b6:d2:d6:f1:ef:19:af:7b:4b:ea:fe:00:
38:36:a4:62:8d:d1:30:93:9d:3b:46:13:f0:1a:9d:
ce:96:26:05:c3:71:31:e8:bc:b7:7d:2d:2c:3c:a2:
11:e7:37:de:e1:71:d3:a1:ba:bc:76:19:d9:ec:30:
2d:89:5a:fd:a4:18:c7:ae:6a:14:2d:dc:dd:a8:b0:
5a:42:b2:64:d7:c3:7a:61:15:66:ee:3e:80:85:9b:
c6:d9:60:63:6e:3e:a9:1b:d0:8b:77:da:14:4e:e9:
27:9c:10:b5:25:2d:38:57:22:93:cc:fb:04:32:54:
98:56:6f:47:ca:bb:f2:71:23:38:c3:4e:62:24:db:
5e:26:c6:92:1c:c8:43:0e:5b:b3:35:76:c7:ef:39:
6e:58:f5:85:99:4f:a4:5e:0d:8f:9e:5a:26:12:0f:
64:8b:98:c8:10:c8:69:df:b5:43:d9:18:b2:93:98:
76:32:e2:22:74:10:53:68:38:18:98:bf:b4:83:7d:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:21:DE:C4:DB:CE:EC:B2:13:46:82:F9:18:9A:54:E9:DD:9C:DE:4D
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e0:79:6d:ce:7e:0a:f7:16:20:7d:f6:52:a6:84:a8:18:01:
1e:bf:09:75:e0:57:a5:a3:bc:ac:ac:99:44:f8:40:bf:41:54:
63:b7:f1:26:59:80:e0:99:ba:11:b0:52:35:9f:d9:34:17:53:
6c:67:32:2e:de:76:26:68:cc:4a:cf:90:60:25:6d:e5:45:ab:
06:9b:e6:00:2e:74:31:a1:2a:ab:24:4d:c4:4a:5c:0d:22:17:
2e:b5:27:4e:fd:36:42:d0:10:83:21:7a:bf:83:20:33:57:27:
c5:7a:74:2d:96:98:ff:4e:c5:7f:b2:f5:d5:dd:79:2f:f7:40:
60:41:48:db:a3:74:13:ae:f1:ff:e6:d1:fb:6c:a3:32:bc:10:
dd:a6:58:29:3e:ca:13:af:e4:4b:24:cf:64:3d:09:d8:3c:f6:
d0:11:f4:16:85:05:af:ef:5b:f0:32:5a:61:45:a0:94:11:08:
58:14:9a:12:71:96:5e:3c:e3:28:eb:71:dd:96:67:24:ca:4e:
42:80:1f:94:2e:8d:e7:59:1f:3d:10:ff:dc:94:ac:1e:a4:80:
72:f9:d7:d8:38:c7:30:e3:ed:5a:81:6b:f4:25:5f:50:b6:bc:
4a:66:de:76:42:5d:ec:bf:3f:c8:ac:c1:e0:45:06:d6:fa:d2:
aa:33:df:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MoZlKcjcY59D5fOTAcMMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDBlNGI0YTk3ODgyYzE3OThjNDcwZTNhYmQ4MDVlMzI1
ZGQ1OTUwHhcNMjUwNjI4MTEwMDUzWhcNMjUwNjI5MTEwMDUzWjAzMTEwLwYDVQQD
Eyg3MjIxZGVjNGRiY2VlY2IyMTM0NjgyZjkxODlhNTRlOWRkOWNkZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiBDym8JsEa3BK9MpH8eWQSzmTWK
wl4e3YZQ4XIPcNkC8S4DAxats8avHHU+1DK4ELtIktrUr/JRvHWLjEC20tbx7xmv
e0vq/gA4NqRijdEwk507RhPwGp3OliYFw3Ex6Ly3fS0sPKIR5zfe4XHTobq8dhnZ
7DAtiVr9pBjHrmoULdzdqLBaQrJk18N6YRVm7j6AhZvG2WBjbj6pG9CLd9oUTukn
nBC1JS04VyKTzPsEMlSYVm9HyrvycSM4w05iJNteJsaSHMhDDluzNXbH7zluWPWF
mU+kXg2PnlomEg9ki5jIEMhp37VD2Riyk5h2MuIidBBTaDgYmL+0g32T5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIh3sTbzuyyE0aC+RiaVOndnN5NMB8GA1UdIwQY
MBaAFEEA5LSpeILBeYxHDjq9gF4yXdWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAt
ZGFhOWYyYTMzYmFmLzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iZWI5N2UtMDk1Ny00NDgwLThiNDAtZGFhOWYyYTMzYmFm
LzEvUVFEa3RLbDRnc0Y1akVjT09yMkFYakpkMVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOB5bc5+
CvcWIH32UqaEqBgBHr8JdeBXpaO8rKyZRPhAv0FUY7fxJlmA4Jm6EbBSNZ/ZNBdT
bGcyLt52JmjMSs+QYCVt5UWrBpvmAC50MaEqqyRNxEpcDSIXLrUnTv02QtAQgyF6
v4MgM1cnxXp0LZaY/07Ff7L11d15L/dAYEFI26N0E67x/+bR+2yjMrwQ3aZYKT7K
E6/kSyTPZD0J2Dz20BH0FoUFr+9b8DJaYUWglBEIWBSaEnGWXjzjKOtx3ZZnJMpO
QoAflC6N51kfPRD/3JSsHqSAcvnX2DjHMOPtWoFr9CVfULa8SmbedkJd7L8/yKzB
4EUG1vrSqjPfyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:22 2025 by rpki-client