Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier: pvY8Sc9//j55fVNDXwUAKyAkN5yXaJDAPlpSdB3yXd8=
Subject key identifier: E5:EB:4D:D0:D6:50:A1:77:85:4E:FD:E7:60:F9:9D:1C:A0:E2:65:26
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer: /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial: 019873E3741F06CC071510CB55A240CDA40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number: 08E0
Signing time: Mon 04 Aug 2025 07:02:22 +0000
Manifest this update: Mon 04 Aug 2025 07:02:22 +0000
Manifest next update: Tue 05 Aug 2025 07:02:22 +0000
Files and hashes: 1: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: NSSVJDEbCaHDDqyB74DsrQvUqnGr2YgPhxnJj7R6JBQ=)
2: dwbiIWEratA3KWkL5imPi021V8I.roa (hash: uBYUZ2jEhyVMlLuwkanT9PAiy5t/N1UtpXaLMB0jCDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:74:1f:06:cc:07:15:10:cb:55:a2:40:cd:a4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Validity
Not Before: Aug 4 07:02:22 2025 GMT
Not After : Aug 5 07:02:22 2025 GMT
Subject: CN=e5eb4dd0d650a177854efde760f99d1ca0e26526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:76:25:81:22:88:a0:70:56:3b:ad:7e:2d:
2a:20:1f:e8:81:fe:6e:6f:13:6e:37:ba:bb:30:78:
c1:ef:8e:24:d8:2c:34:6e:74:b4:57:7c:37:ea:ef:
9a:d1:e6:d4:14:ec:0f:2d:e3:2d:6d:a7:cf:97:99:
6b:35:b1:01:31:a0:a2:9e:bb:57:b0:22:d0:11:90:
60:ff:a3:ea:26:9a:59:e8:6c:fb:29:a9:e5:8e:ca:
da:3b:91:16:77:7b:f2:28:00:3d:c6:80:33:6e:ef:
5a:48:7a:65:3e:4a:09:0a:e3:53:c7:a7:bd:d6:b7:
c6:d1:8f:96:d8:b5:7c:55:a9:85:e2:f8:41:58:5e:
e4:56:fe:01:85:ce:c1:e7:ca:7f:82:3e:6b:f2:1b:
07:90:69:7c:75:f9:d3:fc:5d:79:fe:b4:31:ab:0f:
c2:72:0c:87:b7:9e:c8:51:a8:04:ec:b8:6b:c3:4b:
56:eb:91:b8:0a:95:da:f5:fc:2d:07:9e:e9:9a:7e:
68:68:dd:bc:29:38:f3:65:06:d7:da:37:87:e1:c6:
bd:a7:19:87:46:1f:96:03:17:9a:6a:88:e3:e0:52:
49:e3:80:94:e3:33:a4:22:14:77:d4:4d:50:f5:cd:
54:e5:8e:21:b8:32:74:da:d9:46:76:64:f3:1f:8d:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EB:4D:D0:D6:50:A1:77:85:4E:FD:E7:60:F9:9D:1C:A0:E2:65:26
X509v3 Authority Key Identifier:
keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3c:41:b3:e4:fa:99:d4:02:73:0c:73:65:77:9f:fc:cb:84:
20:f2:3d:af:cb:06:9b:c4:31:e4:9e:a7:69:b3:ad:74:07:59:
8f:94:df:db:aa:81:3c:c1:6a:3f:60:69:e6:c0:ec:90:87:fb:
62:c0:76:25:9d:67:1c:cf:e0:71:db:22:2d:07:cb:f1:35:77:
ef:47:55:e1:79:dc:b3:8d:f2:58:8a:0b:6e:bd:f1:27:50:7f:
c2:9a:52:a2:1f:57:d4:97:43:b7:2a:4b:b9:4f:8a:64:0f:28:
40:a9:c9:f1:bd:f4:27:06:ed:6e:e5:a4:e9:6e:0e:4a:f5:31:
27:c5:f9:8f:83:f1:4d:ff:1a:0b:54:65:52:3b:08:de:1f:22:
5c:5e:7a:29:18:64:26:49:df:da:58:6c:4c:0f:47:d2:22:71:
f6:32:13:07:61:4d:8e:12:9c:59:d9:bf:c5:5d:1c:69:87:82:
ed:48:46:5a:9a:1b:1e:6e:6d:77:dc:c4:e2:2e:fb:88:ce:a7:
97:9b:e9:a1:82:ca:39:9b:73:7f:fd:00:fa:dd:61:78:e6:26:
09:15:bc:ff:b4:0d:a4:66:00:f6:01:ea:f0:53:ed:38:e6:93:
78:c2:64:c5:ef:d4:7d:cc:47:23:a0:55:40:a5:e5:1d:54:e4:
23:f9:39:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz43QfBswHFRDLVaJAzaQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDY0NTFiOTIzYTA3ZTM2NWIyZjE5MGZhYTU1YTU3MmRk
MGZhZmMwHhcNMjUwODA0MDcwMjIyWhcNMjUwODA1MDcwMjIyWjAzMTEwLwYDVQQD
EyhlNWViNGRkMGQ2NTBhMTc3ODU0ZWZkZTc2MGY5OWQxY2EwZTI2NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomB2JYEiiKBwVjutfi0qIB/ogf5u
bxNuN7q7MHjB744k2Cw0bnS0V3w36u+a0ebUFOwPLeMtbafPl5lrNbEBMaCinrtX
sCLQEZBg/6PqJppZ6Gz7KanljsraO5EWd3vyKAA9xoAzbu9aSHplPkoJCuNTx6e9
1rfG0Y+W2LV8VamF4vhBWF7kVv4Bhc7B58p/gj5r8hsHkGl8dfnT/F15/rQxqw/C
cgyHt57IUagE7Lhrw0tW65G4CpXa9fwtB57pmn5oaN28KTjzZQbX2jeH4ca9pxmH
Rh+WAxeaaojj4FJJ44CU4zOkIhR31E1Q9c1U5Y4huDJ02tlGdmTzH40piwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXrTdDWUKF3hU7952D5nRyg4mUmMB8GA1UdIwQY
MBaAFEHWRRuSOgfjZbLxkPqlWlct0Pr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEt
ZjU2Yzg0OTQzYTdkLzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kZWU3NDQtMDg1NC00Y2YxLWFmNmEtZjU2Yzg0OTQzYTdk
LzEvUWRaRkc1STZCLU5sc3ZHUS1xVmFWeTNRLXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjxBs+T6
mdQCcwxzZXef/MuEIPI9r8sGm8Qx5J6nabOtdAdZj5Tf26qBPMFqP2Bp5sDskIf7
YsB2JZ1nHM/gcdsiLQfL8TV370dV4Xncs43yWIoLbr3xJ1B/wppSoh9X1JdDtypL
uU+KZA8oQKnJ8b30JwbtbuWk6W4OSvUxJ8X5j4PxTf8aC1RlUjsI3h8iXF56KRhk
Jknf2lhsTA9H0iJx9jITB2FNjhKcWdm/xV0caYeC7UhGWpobHm5td9zE4i77iM6n
l5vpoYLKOZtzf/0A+t1heOYmCRW8/7QNpGYA9gHq8FPtOOaTeMJkxe/UfcxHI6BV
QKXlHVTkI/k5AA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:58 2025 by rpki-client