Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: oKN8tztrfrO1XAYGtDlNwBYWHDgwxTzIznov+cUQXlY=
Subject key identifier: 59:D4:63:70:05:DE:D1:06:8C:78:93:1E:63:93:B6:56:BE:43:2C:F3
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 0198D660BFAAF17E92BB09FC2D97BFCA0DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: bJQhi4n199oUtnYFLau5pdnjzIX2OGQGuqVpV/0W4e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bf:aa:f1:7e:92:bb:09:fc:2d:97:bf:ca:0d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=59d4637005ded1068c78931e6393b656be432cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:cd:0e:46:61:23:02:62:2d:6b:00:71:c4:
49:b9:0d:87:f0:7f:49:73:51:a1:7e:f1:47:06:12:
fa:53:ce:2e:d3:ec:a9:9f:c9:0b:e5:bf:9d:73:23:
13:7a:e5:f2:e2:b5:94:f9:5e:f5:23:4a:68:f5:96:
69:f5:c0:ff:a0:d3:81:d7:04:7e:85:d1:42:f6:01:
f4:4a:fc:df:13:ad:0b:c2:9a:e3:43:41:96:bf:c3:
be:49:dc:e1:65:ef:c2:2a:96:3a:c9:53:46:ab:24:
3e:35:b7:73:05:29:39:98:20:b9:59:4e:64:5a:60:
72:68:aa:59:bc:79:93:98:b0:c7:12:7b:de:3f:71:
65:44:7f:e5:22:52:31:f2:9a:bf:a3:19:e7:ed:c1:
9c:ca:a9:04:7c:2f:96:3f:79:34:3b:41:8c:ee:28:
bf:f9:f7:3f:c1:b4:75:87:a8:63:4e:98:c5:5e:fc:
6a:53:c3:97:7e:74:0b:b7:2a:35:51:a3:c0:e9:de:
28:c4:b1:7b:25:15:37:5c:2c:01:23:ac:5c:89:19:
db:9e:ab:7e:7a:b6:c4:01:be:fe:6a:3e:60:7e:ef:
e4:c0:b5:e7:f8:ae:75:2b:a4:6d:25:d2:6e:d5:8d:
b4:df:6a:57:72:83:69:5f:3b:dc:b3:c7:0d:a0:5d:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:63:70:05:DE:D1:06:8C:78:93:1E:63:93:B6:56:BE:43:2C:F3
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7d:10:44:fa:25:51:59:fb:7d:c5:3d:fa:5e:9b:a0:00:cf:
1f:58:93:18:c2:b0:13:37:1b:27:d6:8a:b7:ce:de:9c:a7:5f:
63:01:6a:f2:28:5f:e1:2c:b8:27:c8:3e:f6:eb:05:f1:34:4e:
a6:07:52:e5:cc:51:fd:c7:e6:e9:18:f2:a3:e4:17:b0:c6:ad:
9f:e8:41:cd:08:f7:af:ad:1e:4a:79:b0:a7:d1:a2:cf:eb:bd:
f1:66:1e:23:78:ae:f2:74:e7:2b:90:a3:a6:56:e6:b4:cf:c2:
92:aa:20:b3:88:de:6d:cb:70:2a:e6:f5:36:a6:26:26:9c:54:
12:6a:ea:6c:9b:a6:cf:31:65:cf:ae:d8:28:92:32:d5:96:45:
bd:24:4b:fd:be:a7:f5:25:5d:ce:af:6b:84:ca:9a:38:a4:57:
57:02:b3:ec:9c:b6:4a:72:52:fc:50:58:84:00:0e:16:bf:ad:
a4:fb:e2:34:d1:94:69:72:b0:14:23:f9:59:04:c2:5b:7c:d0:
68:03:c7:05:00:9a:ac:8f:6a:72:cf:3d:83:91:ac:e2:98:c9:
83:b7:ce:cd:b5:f1:2c:6d:38:1f:29:5e:0c:00:98:8d:d3:31:
68:9c:4e:09:5f:e3:18:b8:cc:4a:95:08:5b:ae:2d:8f:29:87:
16:df:67:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYL+q8X6Suwn8LZe/yg22MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTM1MTc2MDY5ODllYjM1MmY2OTk5NzZmMjE5ZmFlYzhl
MzUwZTcwHhcNMjUwODIzMTAwMjAxWhcNMjUwODI0MTAwMjAxWjAzMTEwLwYDVQQD
Eyg1OWQ0NjM3MDA1ZGVkMTA2OGM3ODkzMWU2MzkzYjY1NmJlNDMyY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/jNDkZhIwJiLWsAccRJuQ2H8H9J
c1GhfvFHBhL6U84u0+ypn8kL5b+dcyMTeuXy4rWU+V71I0po9ZZp9cD/oNOB1wR+
hdFC9gH0SvzfE60LwprjQ0GWv8O+SdzhZe/CKpY6yVNGqyQ+NbdzBSk5mCC5WU5k
WmByaKpZvHmTmLDHEnveP3FlRH/lIlIx8pq/oxnn7cGcyqkEfC+WP3k0O0GM7ii/
+fc/wbR1h6hjTpjFXvxqU8OXfnQLtyo1UaPA6d4oxLF7JRU3XCwBI6xciRnbnqt+
erbEAb7+aj5gfu/kwLXn+K51K6RtJdJu1Y2032pXcoNpXzvcs8cNoF2PPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnUY3AF3tEGjHiTHmOTtla+QyzzMB8GA1UdIwQY
MBaAFEOjUXYGmJ6zUvaZl28hn67I41DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjIt
YjBhMmRlZGM2NWE2LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjItYjBhMmRlZGM2NWE2
LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEH0QRPol
UVn7fcU9+l6boADPH1iTGMKwEzcbJ9aKt87enKdfYwFq8ihf4Sy4J8g+9usF8TRO
pgdS5cxR/cfm6Rjyo+QXsMatn+hBzQj3r60eSnmwp9Giz+u98WYeI3iu8nTnK5Cj
plbmtM/Ckqogs4jebctwKub1NqYmJpxUEmrqbJumzzFlz67YKJIy1ZZFvSRL/b6n
9SVdzq9rhMqaOKRXVwKz7Jy2SnJS/FBYhAAOFr+tpPviNNGUaXKwFCP5WQTCW3zQ
aAPHBQCarI9qcs89g5Gs4pjJg7fOzbXxLG04HyleDACYjdMxaJxOCV/jGLjMSpUI
W64tjymHFt9nzA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:37 2025 by rpki-client