Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: FCpElYMRpAHmUKV4x3ONAXmfYUjQxRQJbf5POBlLDNo=
Subject key identifier: 59:83:4A:77:E3:5D:B8:5B:8B:52:6E:4C:5C:04:AF:33:51:10:5A:49
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 01977CE78F620C6EEDDE7CDA8B93E4D352B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0C56
Signing time: Tue 17 Jun 2025 08:00:39 +0000
Manifest this update: Tue 17 Jun 2025 08:00:39 +0000
Manifest next update: Wed 18 Jun 2025 08:00:39 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: O1K0+FEPs0nN5c+Slw0fQBmZrbmQGwV541z66kCcqqs=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:e7:8f:62:0c:6e:ed:de:7c:da:8b:93:e4:d3:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Jun 17 08:00:39 2025 GMT
Not After : Jun 18 08:00:39 2025 GMT
Subject: CN=59834a77e35db85b8b526e4c5c04af3351105a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:8c:7e:b3:36:3e:b9:6a:3b:3a:46:4e:b7:
05:bf:f2:96:4b:bb:81:a8:da:24:75:39:05:72:d2:
e8:f4:05:3b:15:33:a6:16:24:68:be:d5:72:9e:28:
20:96:91:52:c9:56:dc:0a:b1:4a:5f:42:62:3e:0a:
fb:a4:6f:2d:4a:5e:5c:ad:81:49:c7:bc:f2:f3:34:
fa:91:89:06:ff:87:7f:69:d2:0d:99:6f:1d:f3:65:
d5:19:cf:67:38:97:17:bc:6e:c8:91:fd:14:e0:44:
79:ce:6e:ab:65:55:30:f5:7a:1a:bd:cb:39:2b:17:
65:4e:4f:ba:38:ba:a8:4b:af:2d:00:17:2b:07:07:
a1:da:f7:aa:5c:a6:3c:d3:79:56:d2:df:1e:2d:cd:
92:36:79:b6:75:d5:3b:d1:25:10:a6:d7:0a:fc:22:
de:f3:7f:dc:8a:57:f6:83:44:fe:06:04:bf:4c:71:
9b:e1:e3:3f:65:8f:6d:75:af:1e:c8:78:9a:96:53:
c8:b8:44:df:9b:d7:13:f1:c9:d1:5d:7b:8c:f2:ae:
8e:ff:36:dd:3b:3c:75:8f:8b:10:38:a1:6a:92:27:
0f:d9:cb:bf:70:bf:e0:73:10:dc:38:4e:4c:e7:d2:
99:eb:2e:06:53:8b:9c:c5:34:ee:69:0e:05:2d:e1:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:83:4A:77:E3:5D:B8:5B:8B:52:6E:4C:5C:04:AF:33:51:10:5A:49
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b9:26:d2:1e:43:1f:ee:af:42:2a:59:50:b3:d4:3e:40:f8:
88:0f:a5:f3:1d:5c:96:77:02:87:8e:45:3f:36:10:fd:17:3a:
ce:d5:b6:e0:2f:05:cd:e9:ac:1c:79:d2:43:72:76:8c:23:24:
59:bb:fd:33:a5:1d:52:63:93:d3:3f:5e:06:d8:70:12:51:e3:
5b:95:5e:7a:77:d7:1f:5f:fe:16:0a:26:8e:77:71:84:b2:1a:
97:16:62:ba:4c:a8:d9:52:0e:22:f5:38:a9:4d:31:92:1c:a1:
3a:be:d5:84:c3:3b:2f:d9:f9:34:5c:bd:32:a5:34:a3:69:85:
1c:14:9e:32:c9:0c:b0:6f:2f:e0:f0:b3:dc:fd:27:3c:09:89:
fb:1e:23:80:b6:01:7e:92:dc:95:2e:55:b0:9d:cd:8e:32:0f:
02:ec:07:b3:c1:a3:a0:06:5c:93:6b:1d:45:65:4b:a0:13:e5:
69:00:25:71:14:9d:75:29:b5:93:bf:21:61:71:d3:b7:a1:26:
be:8b:9f:3c:59:2d:cc:be:ed:69:59:d4:9a:b8:ea:3a:35:11:
79:06:90:58:7e:56:a7:f6:ad:ef:3e:8e:3c:4a:72:26:cd:bc:
fd:8c:0e:34:30:ac:58:88:49:45:b1:48:dd:26:2f:9c:e7:c5:
8a:4c:36:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8549iDG7t3nzai5Pk01K5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTk1MjA0Njc3MGY1NGU4YmUxZmQ3ZDY3MzEzMjI2NWFk
NzBmYTgwHhcNMjUwNjE3MDgwMDM5WhcNMjUwNjE4MDgwMDM5WjAzMTEwLwYDVQQD
Eyg1OTgzNGE3N2UzNWRiODViOGI1MjZlNGM1YzA0YWYzMzUxMTA1YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DOMfrM2PrlqOzpGTrcFv/KWS7uB
qNokdTkFctLo9AU7FTOmFiRovtVynigglpFSyVbcCrFKX0JiPgr7pG8tSl5crYFJ
x7zy8zT6kYkG/4d/adINmW8d82XVGc9nOJcXvG7Ikf0U4ER5zm6rZVUw9Xoavcs5
KxdlTk+6OLqoS68tABcrBweh2veqXKY803lW0t8eLc2SNnm2ddU70SUQptcK/CLe
83/cilf2g0T+BgS/THGb4eM/ZY9tda8eyHiallPIuETfm9cT8cnRXXuM8q6O/zbd
Ozx1j4sQOKFqkicP2cu/cL/gcxDcOE5M59KZ6y4GU4ucxTTuaQ4FLeHyswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmDSnfjXbhbi1JuTFwErzNREFpJMB8GA1UdIwQY
MBaAFEEZUgRncPVOi+H9fWcxMiZa1w+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUt
OGI5MWJjNjFlN2MzLzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUtOGI5MWJjNjFlN2Mz
LzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7km0h5D
H+6vQipZULPUPkD4iA+l8x1clncCh45FPzYQ/Rc6ztW24C8FzemsHHnSQ3J2jCMk
Wbv9M6UdUmOT0z9eBthwElHjW5VeenfXH1/+FgomjndxhLIalxZiukyo2VIOIvU4
qU0xkhyhOr7VhMM7L9n5NFy9MqU0o2mFHBSeMskMsG8v4PCz3P0nPAmJ+x4jgLYB
fpLclS5VsJ3NjjIPAuwHs8GjoAZck2sdRWVLoBPlaQAlcRSddSm1k78hYXHTt6Em
voufPFktzL7taVnUmrjqOjUReQaQWH5Wp/at7z6OPEpyJs28/YwONDCsWIhJRbFI
3SYvnOfFikw2qw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:11:59 2025 by rpki-client