Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: DfwW0m+xlfRzsAtcSXHb/QCAIWnAgaAzZdrhLw/n1Zk=
Subject key identifier: E0:0F:B9:1E:9E:AB:30:2E:27:28:49:EE:B1:21:85:51:4A:D3:D7:53
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 0197CE045DB50C534A1B1C202C57FDD82D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 12C7
Signing time: Thu 03 Jul 2025 02:01:21 +0000
Manifest this update: Thu 03 Jul 2025 02:01:21 +0000
Manifest next update: Fri 04 Jul 2025 02:01:21 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: 3dgvJ/UfeN4MLpVswQL3DRxxLMqqS+OdLXzD847yTek=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:04:5d:b5:0c:53:4a:1b:1c:20:2c:57:fd:d8:2d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Jul 3 02:01:21 2025 GMT
Not After : Jul 4 02:01:21 2025 GMT
Subject: CN=e00fb91e9eab302e272849eeb12185514ad3d753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:00:62:34:3a:82:ce:fb:9f:95:f3:59:9a:
04:b6:8c:42:51:0a:7c:1f:6d:4d:7a:38:a2:24:40:
42:14:fa:05:43:ef:b4:cf:36:41:e0:dc:14:cc:16:
0f:14:0e:c6:bf:61:09:45:d6:06:11:db:76:a3:54:
0b:30:53:ff:bd:22:f1:5f:e7:22:11:e1:89:f8:b9:
b2:ea:35:dd:37:44:43:a4:18:a3:b2:4f:01:c1:48:
d7:69:d9:f5:7f:ca:66:b1:4f:28:63:df:9d:64:e3:
a3:56:05:13:6c:8b:1d:f1:ee:a2:06:53:76:f2:e3:
f4:ba:9a:7b:d6:32:d1:f0:d8:2a:96:d6:31:65:a0:
4c:b3:cb:60:97:80:0a:ef:63:3b:b1:71:e9:92:8a:
34:2e:fb:8a:f8:2c:2c:c5:c2:1e:4d:85:e5:59:9e:
65:34:93:8b:66:24:e9:f6:56:dd:60:d7:4e:6b:45:
63:26:e6:68:51:2c:bd:e4:7c:62:89:1d:d3:47:c4:
c5:69:f2:eb:95:7a:13:92:d6:3f:1c:62:fb:d2:41:
c4:d7:32:c1:f3:26:0c:6d:bb:f3:d4:4a:bd:a3:2f:
f6:aa:90:f4:04:d9:80:b6:f4:1a:fe:d7:5d:05:16:
31:cb:db:c0:12:8b:98:c1:1a:13:e9:eb:bb:f6:d2:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:B9:1E:9E:AB:30:2E:27:28:49:EE:B1:21:85:51:4A:D3:D7:53
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f5:93:75:cd:c8:3f:2a:b9:87:aa:d4:df:83:4c:7f:4b:2f:
d7:54:63:01:c7:d5:75:73:a5:e4:ef:2c:19:21:ba:85:2b:c3:
2d:ae:f4:b8:66:fe:a7:3c:a5:fd:1e:6a:1d:22:b3:69:a1:87:
6f:7a:64:ea:42:18:e3:ba:39:59:58:9d:a6:de:54:67:f8:4b:
33:c1:fb:33:49:72:0c:06:c3:3b:85:18:f3:00:ed:5c:f6:48:
74:0b:02:11:b3:45:ec:48:0a:46:df:82:42:d5:c6:75:16:35:
a5:7c:a0:75:c5:1c:f7:7c:e1:3b:cd:6d:b9:00:39:3e:5f:6b:
2e:09:fa:cf:a8:14:e0:bc:3e:4f:8a:a7:6e:28:5e:73:d7:02:
14:7e:6c:57:79:0b:33:db:7a:3d:f6:d7:48:7e:90:cc:b1:28:
b8:66:3c:b7:27:14:5c:32:c8:19:a8:63:f1:90:1f:30:71:1a:
3d:4c:10:84:6e:12:6d:1c:96:55:61:00:3d:5a:18:12:43:65:
42:e8:df:75:ae:80:40:1a:be:d6:b6:1a:e2:77:49:63:96:70:
c2:b2:0c:c1:2b:c6:62:45:07:18:21:39:09:8b:f4:2c:fa:bd:
ac:e1:d7:f8:22:ef:1b:c3:4d:0c:93:e7:ac:29:7b:67:d0:bb:
e1:ed:03:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOBF21DFNKGxwgLFf92C2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi
YjgwOTIwHhcNMjUwNzAzMDIwMTIxWhcNMjUwNzA0MDIwMTIxWjAzMTEwLwYDVQQD
EyhlMDBmYjkxZTllYWIzMDJlMjcyODQ5ZWViMTIxODU1MTRhZDNkNzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kYAYjQ6gs77n5XzWZoEtoxCUQp8
H21NejiiJEBCFPoFQ++0zzZB4NwUzBYPFA7Gv2EJRdYGEdt2o1QLMFP/vSLxX+ci
EeGJ+Lmy6jXdN0RDpBijsk8BwUjXadn1f8pmsU8oY9+dZOOjVgUTbIsd8e6iBlN2
8uP0upp71jLR8NgqltYxZaBMs8tgl4AK72M7sXHpkoo0LvuK+CwsxcIeTYXlWZ5l
NJOLZiTp9lbdYNdOa0VjJuZoUSy95HxiiR3TR8TFafLrlXoTktY/HGL70kHE1zLB
8yYMbbvz1Eq9oy/2qpD0BNmAtvQa/tddBRYxy9vAEouYwRoT6eu79tKzBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAPuR6eqzAuJyhJ7rEhhVFK09dTMB8GA1UdIwQY
MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt
Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj
LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfWTdc3I
Pyq5h6rU34NMf0sv11RjAcfVdXOl5O8sGSG6hSvDLa70uGb+pzyl/R5qHSKzaaGH
b3pk6kIY47o5WVidpt5UZ/hLM8H7M0lyDAbDO4UY8wDtXPZIdAsCEbNF7EgKRt+C
QtXGdRY1pXygdcUc93zhO81tuQA5Pl9rLgn6z6gU4Lw+T4qnbihec9cCFH5sV3kL
M9t6PfbXSH6QzLEouGY8tycUXDLIGahj8ZAfMHEaPUwQhG4SbRyWVWEAPVoYEkNl
Qujfda6AQBq+1rYa4ndJY5ZwwrIMwSvGYkUHGCE5CYv0LPq9rOHX+CLvG8NNDJPn
rCl7Z9C74e0DLQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:53:10 2025 by rpki-client