Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: CCDqSXx9vZP72OAyq8AxA6P/L2tTzmTf3o8vJVkORAM=
Subject key identifier: BD:94:DB:B5:6E:2A:10:06:8D:D0:24:61:11:E1:52:F7:57:F1:D4:DF
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 01978CC8AA53D13A8EE09446309189824CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 15A0
Signing time: Fri 20 Jun 2025 10:00:50 +0000
Manifest this update: Fri 20 Jun 2025 10:00:50 +0000
Manifest next update: Sat 21 Jun 2025 10:00:50 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: wwMNT3C1mdDUorG75rtEXmpcgcKCBhiGB1S4Cxmo8nQ=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:c8:aa:53:d1:3a:8e:e0:94:46:30:91:89:82:4c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Jun 20 10:00:50 2025 GMT
Not After : Jun 21 10:00:50 2025 GMT
Subject: CN=bd94dbb56e2a10068dd0246111e152f757f1d4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:d6:ac:89:31:d8:b1:e0:17:96:81:82:98:
6a:e2:a7:cc:73:68:dc:dd:d1:73:4f:b3:69:64:76:
bf:10:99:a7:4e:78:e7:cb:64:b9:11:07:f1:f4:98:
0e:64:b4:e5:17:94:a5:6f:bb:31:bc:dd:08:d5:8c:
fa:72:5c:e3:02:40:1f:70:1e:22:71:2e:c9:1e:d2:
ed:53:c6:dd:20:59:34:b3:2d:67:49:49:7b:93:44:
49:44:7a:c0:25:0d:ea:c5:2c:0b:93:39:37:e0:7d:
51:86:f9:cd:c8:61:30:34:e5:6b:8d:ef:a3:5e:df:
34:0f:3e:16:cb:8f:7c:bf:f5:9a:8b:2b:5e:7f:41:
7d:75:cd:c8:9c:df:78:e7:09:02:50:6a:91:06:8e:
0d:41:95:06:3e:72:f7:f2:d9:08:8d:db:07:9a:e8:
4f:2f:1e:1c:8e:0f:88:65:0c:b4:cd:66:5d:e7:69:
43:de:1e:2b:da:c0:22:7a:bb:16:f5:2d:16:4d:2a:
e2:2e:8a:15:4e:f7:85:9e:ec:a0:d6:ce:3e:a4:21:
60:2f:98:c3:52:3f:4c:ca:10:0f:44:55:1a:15:a3:
a8:b3:f7:ab:2b:e7:3a:df:10:ca:03:f2:97:f6:c8:
96:22:b7:b7:aa:97:6e:a4:82:60:37:be:88:9f:bb:
de:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:94:DB:B5:6E:2A:10:06:8D:D0:24:61:11:E1:52:F7:57:F1:D4:DF
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:df:15:93:d9:48:33:b8:3f:cd:93:35:3b:37:56:cd:69:28:
42:1d:2f:91:6d:4b:00:8f:06:4d:6d:c9:f4:89:57:27:17:ad:
bd:38:2c:9f:a5:44:38:c4:90:f6:6a:df:1b:5d:c1:c0:dc:c6:
68:67:79:f4:ca:da:9a:8c:47:18:02:ce:ef:3c:1f:18:8f:32:
a3:d9:d8:4b:c3:90:26:b8:d8:fa:a0:77:ac:2a:7b:ce:bd:2d:
6b:e7:df:ae:33:71:22:fc:66:bb:68:3e:46:ad:fa:10:ec:ff:
30:64:36:ea:cc:bc:6f:40:f4:14:3b:83:10:33:4f:33:04:21:
d3:9c:5f:9a:b9:79:43:17:01:d0:74:5b:b4:4d:d5:ee:c4:55:
23:91:6b:c6:55:31:39:ad:21:8c:5e:be:ec:12:db:32:e6:22:
cf:05:37:d8:7f:8f:8c:e9:4e:9f:ba:f8:25:b7:8d:72:c1:dc:
81:17:d1:da:b3:07:26:5e:5a:57:00:01:90:38:8e:f1:e3:04:
4f:85:ae:d1:54:24:b7:7b:d3:eb:ab:90:a2:cf:6d:4d:ce:77:
a4:6a:4c:4a:e1:4f:9a:50:df:62:1f:9e:5d:90:d2:59:fb:40:
ed:cf:f1:c5:e8:52:bc:3b:05:ce:30:ff:32:7e:e8:60:f3:69:
0c:02:a4:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeMyKpT0TqO4JRGMJGJgkzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2
NzllZTEwHhcNMjUwNjIwMTAwMDUwWhcNMjUwNjIxMTAwMDUwWjAzMTEwLwYDVQQD
EyhiZDk0ZGJiNTZlMmExMDA2OGRkMDI0NjExMWUxNTJmNzU3ZjFkNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8nWrIkx2LHgF5aBgphq4qfMc2jc
3dFzT7NpZHa/EJmnTnjny2S5EQfx9JgOZLTlF5Slb7sxvN0I1Yz6clzjAkAfcB4i
cS7JHtLtU8bdIFk0sy1nSUl7k0RJRHrAJQ3qxSwLkzk34H1RhvnNyGEwNOVrje+j
Xt80Dz4Wy498v/Waiytef0F9dc3InN945wkCUGqRBo4NQZUGPnL38tkIjdsHmuhP
Lx4cjg+IZQy0zWZd52lD3h4r2sAiersW9S0WTSriLooVTveFnuyg1s4+pCFgL5jD
Uj9MyhAPRFUaFaOos/erK+c63xDKA/KX9siWIre3qpdupIJgN76In7veQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2U27VuKhAGjdAkYRHhUvdX8dTfMB8GA1UdIwQY
MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt
ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz
LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd8Vk9lI
M7g/zZM1OzdWzWkoQh0vkW1LAI8GTW3J9IlXJxetvTgsn6VEOMSQ9mrfG13BwNzG
aGd59MramoxHGALO7zwfGI8yo9nYS8OQJrjY+qB3rCp7zr0ta+ffrjNxIvxmu2g+
Rq36EOz/MGQ26sy8b0D0FDuDEDNPMwQh05xfmrl5QxcB0HRbtE3V7sRVI5FrxlUx
Oa0hjF6+7BLbMuYizwU32H+PjOlOn7r4JbeNcsHcgRfR2rMHJl5aVwABkDiO8eME
T4Wu0VQkt3vT66uQos9tTc53pGpMSuFPmlDfYh+eXZDSWftA7c/xxehSvDsFzjD/
Mn7oYPNpDAKkXw==
-----END CERTIFICATE-----
Generated at Fri Jun 20 13:52:39 2025 by rpki-client