Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: pBD/b5vwHeSqNZ85Aki0roqD1H9Wno3Tkm/g10AaW8A=
Subject key identifier: 64:E7:D6:68:FB:DF:47:BA:4E:51:A0:3D:65:E0:9F:4E:11:85:8B:91
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 0197B77CE6972A99A0647A9A90948678A29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 104C
Signing time: Sat 28 Jun 2025 17:01:45 +0000
Manifest this update: Sat 28 Jun 2025 17:01:45 +0000
Manifest next update: Sun 29 Jun 2025 17:01:45 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: hqY0WY2O9ksf3+zlCzc27Zk1K/b1knDYWNe5vHs2oN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:e6:97:2a:99:a0:64:7a:9a:90:94:86:78:a2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Jun 28 17:01:45 2025 GMT
Not After : Jun 29 17:01:45 2025 GMT
Subject: CN=64e7d668fbdf47ba4e51a03d65e09f4e11858b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:66:90:91:6d:75:4f:73:fc:57:ed:2b:f7:ce:
77:1d:0c:11:57:fe:ba:74:31:3d:dd:b4:e3:e7:1d:
c3:43:56:03:37:8f:2b:29:c4:93:cf:c2:93:3f:25:
f4:3a:e3:24:f6:ec:7c:b8:94:26:62:fb:e1:b0:1a:
9c:40:73:ef:b7:c3:ae:9c:af:24:c6:4f:58:a0:cd:
77:b7:72:1e:f3:2d:78:5d:71:54:9a:13:0f:b5:1e:
54:14:14:b0:f4:cc:2c:3f:73:9e:fa:0e:3e:a3:45:
6d:89:47:0b:bf:74:b1:ef:74:97:16:9f:c8:9f:5f:
7a:ee:32:60:87:e1:22:47:b7:2b:1f:8e:83:04:89:
dc:7a:3f:47:44:3c:5d:5b:7f:34:a1:a5:56:34:c2:
af:38:0b:f1:da:7e:21:9f:51:d3:a8:74:fd:a6:b2:
a2:cc:5f:b1:c1:94:24:80:57:3f:c3:7d:7e:e1:f8:
5d:57:5d:a5:d7:88:13:ae:7f:2f:6b:6c:8d:66:37:
83:7a:fe:6d:fe:da:f4:6a:ca:74:9e:ad:86:69:a8:
ed:51:88:b2:7a:9c:9f:7a:54:67:5d:ea:6b:fd:23:
43:7b:79:25:55:dc:c6:03:9f:a2:c1:08:85:e4:13:
f7:8f:e0:ae:38:a2:38:0f:69:54:35:37:dd:d9:1b:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E7:D6:68:FB:DF:47:BA:4E:51:A0:3D:65:E0:9F:4E:11:85:8B:91
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dd:6e:67:a5:99:b8:9a:ac:3d:db:82:c0:1c:79:45:19:2d:
5a:a8:9e:fa:4b:ff:15:fe:90:31:09:1b:8a:2b:87:05:9a:01:
03:8f:32:23:ea:4c:a9:b3:d7:5a:8c:b0:94:86:6c:83:24:4d:
18:7d:47:97:d2:b8:d5:1a:93:6d:14:3f:8b:e4:d4:8b:72:9b:
db:63:23:d4:c7:b2:18:55:49:8a:7a:00:37:b0:11:b2:3b:78:
14:d5:00:d8:db:76:3b:a4:8e:5d:27:dd:86:51:44:98:af:a6:
e3:4c:9d:bc:4e:78:53:99:a8:19:a1:9d:b6:54:86:31:d1:41:
e0:20:75:ae:af:07:32:1a:f4:52:3f:33:e7:c2:fd:7b:2f:bb:
7b:87:a4:14:6e:0f:24:c5:15:fb:af:d8:04:1f:b6:26:42:3c:
a4:c1:31:a5:24:a9:4b:f6:d8:36:06:3c:f3:a9:b2:47:b8:48:
94:2a:28:f5:fe:e5:84:e2:43:c7:74:5c:bd:54:8e:e9:17:58:
d5:f6:bc:a1:e0:e0:2f:8b:d6:d4:66:48:f7:b6:81:df:99:9b:
1a:dc:53:03:94:ee:d3:d2:9b:be:ca:9e:d2:ce:31:84:73:4c:
ce:a7:c8:f2:a0:51:b5:5b:84:92:5b:4c:59:32:35:fb:0f:13:
c4:ef:8c:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fOaXKpmgZHqakJSGeKKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMTFjY2QyYmQyMjU0NGFiZTU4NWE3Y2QzZjk0OTExZWEw
Yzk0MmEwHhcNMjUwNjI4MTcwMTQ1WhcNMjUwNjI5MTcwMTQ1WjAzMTEwLwYDVQQD
Eyg2NGU3ZDY2OGZiZGY0N2JhNGU1MWEwM2Q2NWUwOWY0ZTExODU4YjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02aQkW11T3P8V+0r9853HQwRV/66
dDE93bTj5x3DQ1YDN48rKcSTz8KTPyX0OuMk9ux8uJQmYvvhsBqcQHPvt8OunK8k
xk9YoM13t3Ie8y14XXFUmhMPtR5UFBSw9MwsP3Oe+g4+o0VtiUcLv3Sx73SXFp/I
n1967jJgh+EiR7crH46DBIncej9HRDxdW380oaVWNMKvOAvx2n4hn1HTqHT9prKi
zF+xwZQkgFc/w31+4fhdV12l14gTrn8va2yNZjeDev5t/tr0asp0nq2GaajtUYiy
epyfelRnXepr/SNDe3klVdzGA5+iwQiF5BP3j+CuOKI4D2lUNTfd2RuEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTn1mj730e6TlGgPWXgn04RhYuRMB8GA1UdIwQY
MBaAFEMRzNK9IlRKvlhafNP5SRHqDJQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYt
ZDM3OGJhZjZhYTkyLzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8zM2Q2NDgtMDYxMC00OTIxLWJkMGYtZDM3OGJhZjZhYTky
LzEvUXhITTByMGlWRXEtV0ZwODBfbEpFZW9NbENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid1uZ6WZ
uJqsPduCwBx5RRktWqie+kv/Ff6QMQkbiiuHBZoBA48yI+pMqbPXWoywlIZsgyRN
GH1Hl9K41RqTbRQ/i+TUi3Kb22Mj1MeyGFVJinoAN7ARsjt4FNUA2Nt2O6SOXSfd
hlFEmK+m40ydvE54U5moGaGdtlSGMdFB4CB1rq8HMhr0Uj8z58L9ey+7e4ekFG4P
JMUV+6/YBB+2JkI8pMExpSSpS/bYNgY886myR7hIlCoo9f7lhOJDx3RcvVSO6RdY
1fa8oeDgL4vW1GZI97aB35mbGtxTA5Tu09Kbvsqe0s4xhHNMzqfI8qBRtVuEkltM
WTI1+w8TxO+M6w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:15 2025 by rpki-client