Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: qH3T8ec+iAX3NI4/ztTWSUV+NTa1PYo34eLTKM8JgtU=
Subject key identifier: 1E:9D:90:7B:8E:EA:F8:E3:2C:70:66:A5:E0:8B:7F:FA:55:36:A1:1D
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 019872CFE6BF26997AE87A46CC096338CB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 10F0
Signing time: Mon 04 Aug 2025 02:01:24 +0000
Manifest this update: Mon 04 Aug 2025 02:01:24 +0000
Manifest next update: Tue 05 Aug 2025 02:01:24 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: BnNr/j1D+kXeGPUFLXmTThsuFyozzSU55Zae+b9a4YE=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:e6:bf:26:99:7a:e8:7a:46:cc:09:63:38:cb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Aug 4 02:01:24 2025 GMT
Not After : Aug 5 02:01:24 2025 GMT
Subject: CN=1e9d907b8eeaf8e32c7066a5e08b7ffa5536a11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:78:ab:38:18:96:b5:f4:ae:e6:04:17:98:
31:f5:fe:68:27:61:40:95:57:11:fc:13:84:50:5c:
fb:14:5d:2f:b8:34:3f:b3:cd:73:e3:86:7c:6e:23:
73:1d:05:49:45:1d:c3:82:a6:73:75:2a:60:d6:2e:
f9:4d:6b:6d:4e:bd:f8:79:e7:d3:5a:10:2d:4f:61:
cf:b9:a1:26:42:40:f9:b2:45:94:45:a9:90:bd:d4:
e8:44:e3:7b:37:5c:26:5a:85:a2:69:7e:b6:0f:7f:
bb:6a:36:df:02:bd:1a:1d:93:03:e5:f9:cd:5f:9d:
e5:06:81:8a:c8:82:65:13:72:45:c3:4a:fb:3a:30:
c4:ff:b7:39:2a:8b:a5:23:87:6a:ea:7c:da:70:75:
a1:a4:a2:fe:59:9a:46:ed:73:bb:2e:bd:45:0c:88:
a8:07:6f:4c:f9:2a:db:c7:af:dc:c3:7e:e1:70:28:
1a:10:31:04:3a:1b:7a:0e:0d:72:7c:c2:ba:56:e5:
be:92:77:2e:21:ea:5f:b1:7c:9d:52:d7:34:68:e7:
26:d8:81:d8:cc:a1:18:2e:6d:11:b9:3b:15:7c:29:
48:dc:dc:1f:69:e5:b9:0c:00:22:f7:9d:a9:15:4c:
37:0a:a9:de:01:1f:6f:3c:34:87:34:5c:d5:d2:96:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9D:90:7B:8E:EA:F8:E3:2C:70:66:A5:E0:8B:7F:FA:55:36:A1:1D
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a1:60:42:0d:44:92:8e:6b:1d:b8:ff:4a:ae:e4:5b:9b:5d:
2e:71:26:61:61:c6:c0:f2:c3:a0:7e:0d:97:33:7f:3a:73:eb:
49:bd:86:f2:3f:f4:56:11:bc:92:21:20:f3:ca:83:47:92:a0:
84:c4:03:ce:6d:a0:c0:d1:1d:93:04:8b:e7:8f:8a:57:da:5d:
54:f1:22:c3:be:8d:20:05:50:25:f5:8c:02:72:80:1e:4a:34:
48:9a:36:bd:fd:2d:f7:28:65:85:38:67:ee:be:6a:90:6c:3b:
ff:b9:dd:92:69:c4:81:11:10:1e:4d:6b:c9:82:f9:20:60:30:
82:d5:6f:38:33:07:57:4f:7e:48:b5:5b:dd:2a:62:a0:80:3d:
d2:2d:d6:b9:da:dd:ab:12:bf:31:ce:be:5a:c7:31:92:b7:79:
d7:09:db:19:0b:a2:14:c1:50:d5:32:e3:bd:c4:3a:d0:bb:f0:
05:38:68:56:94:12:ac:0e:37:7c:1f:19:a8:97:7f:a5:8a:ea:
f8:ab:a4:f8:62:4d:93:d3:20:a9:94:a2:51:b9:08:01:db:6e:
2f:20:4c:cf:ec:5b:e3:b3:12:d3:92:c3:1f:e9:b6:f0:69:81:
da:7d:e5:6f:66:0e:12:69:76:9e:c1:8f:36:41:6c:02:00:dd:
9c:88:70:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz+a/Jpl66HpGzAljOMsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi
MjRhYmQwHhcNMjUwODA0MDIwMTI0WhcNMjUwODA1MDIwMTI0WjAzMTEwLwYDVQQD
EygxZTlkOTA3YjhlZWFmOGUzMmM3MDY2YTVlMDhiN2ZmYTU1MzZhMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cZ4qzgYlrX0ruYEF5gx9f5oJ2FA
lVcR/BOEUFz7FF0vuDQ/s81z44Z8biNzHQVJRR3DgqZzdSpg1i75TWttTr34eefT
WhAtT2HPuaEmQkD5skWURamQvdToRON7N1wmWoWiaX62D3+7ajbfAr0aHZMD5fnN
X53lBoGKyIJlE3JFw0r7OjDE/7c5KoulI4dq6nzacHWhpKL+WZpG7XO7Lr1FDIio
B29M+Srbx6/cw37hcCgaEDEEOht6Dg1yfMK6VuW+kncuIepfsXydUtc0aOcm2IHY
zKEYLm0RuTsVfClI3NwfaeW5DAAi952pFUw3CqneAR9vPDSHNFzV0pYzdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6dkHuO6vjjLHBmpeCLf/pVNqEdMB8GA1UdIwQY
MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt
NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz
LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6FgQg1E
ko5rHbj/Sq7kW5tdLnEmYWHGwPLDoH4NlzN/OnPrSb2G8j/0VhG8kiEg88qDR5Kg
hMQDzm2gwNEdkwSL54+KV9pdVPEiw76NIAVQJfWMAnKAHko0SJo2vf0t9yhlhThn
7r5qkGw7/7ndkmnEgREQHk1ryYL5IGAwgtVvODMHV09+SLVb3SpioIA90i3Wudrd
qxK/Mc6+Wscxkrd51wnbGQuiFMFQ1TLjvcQ60LvwBThoVpQSrA43fB8ZqJd/pYrq
+Kuk+GJNk9MgqZSiUbkIAdtuLyBMz+xb47MS05LDH+m28GmB2n3lb2YOEml2nsGP
NkFsAgDdnIhwXA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:38 2025 by rpki-client