
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: tuBzdw5DyaeB3XrsVEYzGFWwriPTXnx7jSsOtruLtTY=
Subject key identifier: F0:AC:2A:D2:73:52:51:2F:0F:9F:71:3C:23:53:65:7F:43:61:98:C5
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019892C94C5A06E574AE32607C6B5D84B95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 07:02:02 +0000
Manifest this update: Sun 10 Aug 2025 07:02:02 +0000
Manifest next update: Mon 11 Aug 2025 07:02:02 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: TdCu2udEiNq8MCcpTEJ4cm8zxBrrayE4eyhd6Ly3AIo=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:4c:5a:06:e5:74:ae:32:60:7c:6b:5d:84:b9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Aug 10 07:02:02 2025 GMT
Not After : Aug 11 07:02:02 2025 GMT
Subject: CN=f0ac2ad27352512f0f9f713c2353657f436198c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:ca:28:8f:2b:04:15:05:5e:e3:85:ec:5e:
04:d8:c2:95:d0:18:bb:d4:15:7b:75:73:32:c0:8f:
90:f5:1b:8a:c2:69:f0:c4:aa:ec:92:38:10:46:d9:
96:95:57:cf:a3:a9:37:7b:cc:e1:52:38:f8:c3:6f:
30:f1:36:0c:2f:82:60:7a:fc:a1:4e:b7:08:b9:5d:
9c:19:2e:ec:38:82:e6:15:7a:ae:81:e8:49:ba:0e:
31:ba:c0:44:fb:42:39:3a:a2:12:aa:40:14:95:ba:
d6:ff:cd:ce:69:2f:41:cb:42:15:6f:4b:c8:37:56:
9d:fe:c4:77:1d:a8:c4:16:b1:ea:eb:4f:87:60:68:
ab:a0:c5:99:da:53:6d:09:5b:ed:64:e2:2e:55:0d:
d0:7b:b1:51:2e:ae:f2:dd:31:e1:e4:b1:d0:da:7a:
8a:c0:33:82:e7:25:3d:fe:eb:87:39:85:c9:84:9f:
44:06:bf:38:0c:c5:e5:50:eb:01:07:ab:eb:d1:fa:
b6:67:13:ab:de:2f:77:5b:b0:2a:ae:56:5a:cc:39:
8f:f9:7d:4c:88:65:b6:43:48:c0:68:c0:08:b2:01:
69:27:35:73:a2:f9:ae:04:dc:c2:17:59:b0:1d:88:
a1:4e:99:cf:33:46:8e:7a:a5:9f:7e:c2:10:23:0c:
18:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:2A:D2:73:52:51:2F:0F:9F:71:3C:23:53:65:7F:43:61:98:C5
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4e:b6:7a:ae:85:28:77:75:19:2d:e1:5f:4e:6d:ed:f9:d2:
7e:b9:b7:74:56:da:6f:d9:d4:c7:f4:55:44:0b:d4:a4:95:23:
75:4e:0c:13:6a:c2:8c:24:4f:51:27:b7:f4:84:59:1e:41:42:
aa:64:a4:21:b2:f5:b8:fc:69:0b:35:54:08:22:21:6f:e6:56:
19:a3:3e:d1:9c:dc:11:ee:b6:46:a5:02:36:7b:f5:81:b1:99:
c8:5a:09:45:39:21:62:4e:f1:c5:a0:ce:58:81:ee:32:91:d3:
21:39:92:45:99:a1:41:3b:36:82:00:b5:cf:28:b1:0b:8a:0a:
df:ab:56:6d:7f:1c:6c:4d:33:ec:72:47:98:29:78:06:aa:2c:
10:d4:c2:86:36:be:ac:4b:50:a7:3a:88:56:63:c3:e4:37:f1:
cd:cd:6b:37:3f:48:b2:06:0d:c0:a7:4c:78:ee:0b:56:92:b4:
dd:3d:f0:7a:0d:c8:3f:27:81:bd:d9:7d:62:57:31:06:8a:ca:
c9:c9:df:8f:b1:a4:8a:23:80:7b:2f:1f:01:54:04:f3:6c:5a:
5a:88:20:1f:4e:ac:d2:29:c3:5e:a8:a2:f0:c7:75:96:9e:88:
33:fc:86:6b:13:9b:1c:f5:68:02:09:d1:68:92:e9:39:a0:3c:
8a:89:dc:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyUxaBuV0rjJgfGtdhLldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTgxNzRkYjQ1MWQ5ZmVmZGVlYzE1ZjliOWM3OTI5ZGFh
ZTk5ODAwHhcNMjUwODEwMDcwMjAyWhcNMjUwODExMDcwMjAyWjAzMTEwLwYDVQQD
EyhmMGFjMmFkMjczNTI1MTJmMGY5ZjcxM2MyMzUzNjU3ZjQzNjE5OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHfKKI8rBBUFXuOF7F4E2MKV0Bi7
1BV7dXMywI+Q9RuKwmnwxKrskjgQRtmWlVfPo6k3e8zhUjj4w28w8TYML4Jgevyh
TrcIuV2cGS7sOILmFXqugehJug4xusBE+0I5OqISqkAUlbrW/83OaS9By0IVb0vI
N1ad/sR3HajEFrHq60+HYGiroMWZ2lNtCVvtZOIuVQ3Qe7FRLq7y3THh5LHQ2nqK
wDOC5yU9/uuHOYXJhJ9EBr84DMXlUOsBB6vr0fq2ZxOr3i93W7AqrlZazDmP+X1M
iGW2Q0jAaMAIsgFpJzVzovmuBNzCF1mwHYihTpnPM0aOeqWffsIQIwwYzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCsKtJzUlEvD59xPCNTZX9DYZjFMB8GA1UdIwQY
MBaAFECYF020Udn+/e7BX5uceSnarpmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODct
Y2ZhOGY5ZDlmODFjLzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODctY2ZhOGY5ZDlmODFj
LzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiE62eq6F
KHd1GS3hX05t7fnSfrm3dFbab9nUx/RVRAvUpJUjdU4ME2rCjCRPUSe39IRZHkFC
qmSkIbL1uPxpCzVUCCIhb+ZWGaM+0ZzcEe62RqUCNnv1gbGZyFoJRTkhYk7xxaDO
WIHuMpHTITmSRZmhQTs2ggC1zyixC4oK36tWbX8cbE0z7HJHmCl4BqosENTChja+
rEtQpzqIVmPD5Dfxzc1rNz9IsgYNwKdMeO4LVpK03T3weg3IPyeBvdl9YlcxBorK
ycnfj7GkiiOAey8fAVQE82xaWoggH06s0inDXqii8Md1lp6IM/yGaxObHPVoAgnR
aJLpOaA8ioncBw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:40:50 2025 by rpki-client