Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: h4x0syGTDwrUR0UkhK2mIYm3RY1LxqFqJGIjYIbkF3Y=
Subject key identifier: 7E:D8:6F:62:AA:9A:AA:03:36:C9:1A:64:DC:88:D6:59:93:E1:A5:C9
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 0197B5FC20BC1D6A3664E2655369366F3FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 0400
Signing time: Sat 28 Jun 2025 10:01:28 +0000
Manifest this update: Sat 28 Jun 2025 10:01:28 +0000
Manifest next update: Sun 29 Jun 2025 10:01:28 +0000
Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: ExJRTBeipqd1guE/TvXg/nQVYH700Brncd75gha596A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:20:bc:1d:6a:36:64:e2:65:53:69:36:6f:3f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Jun 28 10:01:28 2025 GMT
Not After : Jun 29 10:01:28 2025 GMT
Subject: CN=7ed86f62aa9aaa0336c91a64dc88d65993e1a5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:66:4c:7c:e5:fe:c2:47:1e:50:31:4a:7e:b1:
00:86:71:55:ab:03:ab:86:38:4e:a1:90:f8:6a:2e:
7f:a0:12:e3:ee:cc:76:d3:c2:f1:e3:9a:b3:f3:f3:
97:e2:d2:7d:60:16:4b:c6:c9:fd:66:cd:c6:e6:a2:
ff:81:08:ee:e4:dd:24:6f:1a:2a:d6:a7:2d:b7:a6:
c8:95:5c:9b:57:57:d9:dc:d8:f4:56:2f:56:bb:b0:
43:56:4e:a9:97:64:a6:ca:25:0c:6d:74:ae:ac:8d:
a2:e2:1e:72:e6:cc:2b:0e:8e:7f:0e:b3:30:7d:c8:
4c:7b:4f:00:9f:00:33:1c:3c:08:b9:e5:c3:d9:c8:
6b:c1:60:ed:5b:38:eb:70:33:25:0d:36:8c:18:a2:
7b:35:7d:2d:b0:ee:2e:8a:df:47:18:14:02:d5:03:
ba:62:cd:c6:4b:5d:ac:d2:63:ab:60:c6:33:47:c6:
df:38:95:b5:e7:18:c4:91:ff:5a:2d:a7:2a:0d:1b:
c8:ca:3a:f6:84:37:36:76:c2:10:d5:1e:38:18:94:
29:9d:71:62:06:64:4f:60:a9:bf:4d:ee:3e:c1:38:
ad:63:0e:c4:5f:d9:ad:2a:0d:bb:85:7b:00:25:f0:
5e:4b:03:83:36:b3:97:fa:25:45:5c:ff:c4:44:42:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:6F:62:AA:9A:AA:03:36:C9:1A:64:DC:88:D6:59:93:E1:A5:C9
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:dd:e3:bb:c4:51:a9:18:81:bc:2c:68:72:ab:e1:2e:90:ce:
c1:09:04:84:ed:37:05:3e:25:23:f1:fe:ec:12:86:c7:8c:10:
9d:bf:90:ea:8c:1e:8e:79:44:4f:a4:89:f6:28:a0:2d:3a:ba:
4a:91:e0:c9:e4:6f:90:28:6e:95:2b:e5:d1:c6:16:43:b5:a6:
56:0e:a7:3c:4b:9b:4b:cd:b8:e5:3b:25:93:50:42:60:8d:7f:
6e:7b:4d:45:e1:79:a8:50:03:1a:a4:42:56:6e:6a:20:90:4c:
e9:d5:f0:21:2c:fb:8c:55:6b:55:80:0e:a5:e0:ad:c1:e9:06:
ba:53:f3:95:b0:1b:fb:b7:61:c3:e6:cb:1d:5b:41:9f:a6:47:
94:df:8f:01:11:61:94:32:27:23:7d:7f:a3:b8:43:27:37:c2:
67:0d:f7:9d:fa:99:02:aa:3b:ff:94:6f:8f:d1:fe:c5:3c:ac:
a0:a7:f8:d8:c2:fe:3e:55:02:d5:0e:f3:b3:d6:29:54:a8:66:
2c:2b:50:00:75:1b:50:33:26:3f:51:89:29:e4:c3:e7:06:76:
2e:88:2e:72:b3:a4:2d:53:d1:3a:80:a6:59:a2:bd:0d:87:7d:
11:24:26:0d:81:c8:68:a9:3a:ba:51:10:40:69:96:7b:da:dd:
d9:7d:41:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/CC8HWo2ZOJlU2k2bz+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxY2M0ZjJiMzYyMTQ5OGIyYjEyYmM5M2U1NmU2OTgwYzJj
NmRjODgwHhcNMjUwNjI4MTAwMTI4WhcNMjUwNjI5MTAwMTI4WjAzMTEwLwYDVQQD
Eyg3ZWQ4NmY2MmFhOWFhYTAzMzZjOTFhNjRkYzg4ZDY1OTkzZTFhNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22ZMfOX+wkceUDFKfrEAhnFVqwOr
hjhOoZD4ai5/oBLj7sx208Lx45qz8/OX4tJ9YBZLxsn9Zs3G5qL/gQju5N0kbxoq
1qctt6bIlVybV1fZ3Nj0Vi9Wu7BDVk6pl2SmyiUMbXSurI2i4h5y5swrDo5/DrMw
fchMe08AnwAzHDwIueXD2chrwWDtWzjrcDMlDTaMGKJ7NX0tsO4uit9HGBQC1QO6
Ys3GS12s0mOrYMYzR8bfOJW15xjEkf9aLacqDRvIyjr2hDc2dsIQ1R44GJQpnXFi
BmRPYKm/Te4+wTitYw7EX9mtKg27hXsAJfBeSwODNrOX+iVFXP/EREJQGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7Yb2KqmqoDNskaZNyI1lmT4aXJMB8GA1UdIwQY
MBaAFEHMTys2IUmLKxK8k+VuaYDCxtyIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGIt
YTljNWVlZDg1YmE3LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81MzUzYmEtZTUyMC00ZmI5LWJkMGItYTljNWVlZDg1YmE3
LzEvUWN4UEt6WWhTWXNyRXJ5VDVXNXBnTUxHM0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAct3ju8RR
qRiBvCxocqvhLpDOwQkEhO03BT4lI/H+7BKGx4wQnb+Q6owejnlET6SJ9iigLTq6
SpHgyeRvkChulSvl0cYWQ7WmVg6nPEubS8245Tslk1BCYI1/bntNReF5qFADGqRC
Vm5qIJBM6dXwISz7jFVrVYAOpeCtwekGulPzlbAb+7dhw+bLHVtBn6ZHlN+PARFh
lDInI31/o7hDJzfCZw33nfqZAqo7/5Rvj9H+xTysoKf42ML+PlUC1Q7zs9YpVKhm
LCtQAHUbUDMmP1GJKeTD5wZ2LogucrOkLVPROoCmWaK9DYd9ESQmDYHIaKk6ulEQ
QGmWe9rd2X1BiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:10 2025 by rpki-client