Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json)
Hash identifier: F6izaUxTUQq1JHKRuH/3/ddpW1SnJoUQknGKu1bTSGc=
Subject key identifier: 94:0F:89:CB:E8:7B:7C:BD:B3:C3:78:2D:C9:82:02:45:F9:3E:23:29
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 01987450588988DFED38C9A76484D388EE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
Manifest number: 015D
Signing time: Mon 04 Aug 2025 09:01:19 +0000
Manifest this update: Mon 04 Aug 2025 09:01:19 +0000
Manifest next update: Tue 05 Aug 2025 09:01:19 +0000
Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: Tyi3s5uvlWQSIwOh4WWL4p6ThMmIqGKGV8jAK/3tkXU=)
2: rg92faZanaYES8NBj5pg8WmI5nI.roa (hash: 8R4hL47sFCLdHAmoIZE8IPnGm4ZN8Yi2FpnpcDwoEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:58:89:88:df:ed:38:c9:a7:64:84:d3:88:ee:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Aug 4 09:01:19 2025 GMT
Not After : Aug 5 09:01:19 2025 GMT
Subject: CN=940f89cbe87b7cbdb3c3782dc9820245f93e2329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:b4:52:a4:0f:a3:af:6a:a7:f6:4c:05:8d:
c3:e4:15:3d:5e:3b:2a:51:42:8d:09:93:9d:d4:6a:
fa:66:91:1b:b4:f0:6a:92:71:64:01:21:6f:94:b7:
22:65:52:f0:40:68:29:01:8c:86:70:c9:b2:2e:8b:
fe:ac:a6:22:b6:43:15:4a:e7:f7:0f:b6:a9:01:45:
54:45:44:cb:86:b6:6c:d6:ff:c4:9d:22:77:c1:47:
13:29:34:a6:11:ca:57:de:20:f9:74:73:ff:59:74:
b1:b8:61:04:bc:b9:d8:73:ed:7b:36:39:ce:b7:3a:
72:7b:d1:19:6a:15:4d:27:2f:b4:20:4f:d4:a2:ce:
b1:52:ec:09:e9:79:2a:a3:a3:d0:28:fc:4d:88:bb:
3c:90:09:49:11:e1:f2:84:2b:fa:b8:c0:0d:3b:ff:
ee:5d:5f:64:a5:fe:cc:31:1b:cd:17:8a:36:ca:20:
ce:ac:c7:97:ff:16:8c:bf:92:62:31:f7:96:1f:87:
9f:d9:36:51:d3:1b:a9:b7:af:16:29:9d:e9:34:67:
6f:3d:d0:a1:48:d2:b5:44:e8:5a:e4:28:9a:8e:0e:
13:ad:0e:94:0f:24:76:3d:c6:2c:b7:d4:e8:06:63:
f3:35:94:15:c1:c5:2b:51:73:3e:e7:55:1c:b7:69:
e3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0F:89:CB:E8:7B:7C:BD:B3:C3:78:2D:C9:82:02:45:F9:3E:23:29
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2e:ba:54:c9:d8:74:ed:84:6a:3f:83:98:bd:5f:3c:9b:66:
c7:06:68:98:eb:78:5b:8e:8e:f1:6d:8b:82:5b:e3:b0:27:b9:
c5:c1:d6:62:af:c2:27:57:1e:6f:4a:8c:fd:76:79:31:ae:fd:
54:fa:48:3f:98:ef:8f:30:c2:d0:06:2e:21:22:87:a1:fa:f7:
9d:21:bd:2f:d9:f8:cc:72:12:85:4a:90:a6:81:97:8e:60:e9:
cf:89:ef:02:81:9a:20:e3:9f:9d:60:6b:b4:b7:15:47:eb:6b:
cf:e8:cc:51:de:cb:f0:6a:46:b8:ac:99:34:58:7f:7e:fd:19:
1d:5b:8b:9a:91:e5:ee:61:c4:20:41:15:ac:4b:d8:40:05:85:
aa:23:ff:69:02:53:09:e5:5e:f1:50:be:23:2c:a2:eb:3a:c4:
17:e8:5a:88:0d:fe:88:4c:8d:f8:7c:45:12:bf:a8:99:07:64:
79:d0:08:9a:dd:b4:19:a8:57:00:f1:e5:f5:23:ea:fe:78:22:
24:f0:67:8d:22:00:25:65:66:d0:45:fd:b2:ba:83:b4:2b:c8:
e4:45:6b:66:ad:5a:40:a5:67:ac:51:3a:dc:b4:55:e0:d1:05:
13:c6:1e:28:d2:7d:82:e8:8c:38:bc:46:ba:2e:9e:40:61:b1:
6e:2d:da:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UFiJiN/tOMmnZITTiO5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjczYzE1ZWE0NWRmMzcxOTNlMzQ1YjY5ZWRkODNmOGM2
ZjIyMDIwHhcNMjUwODA0MDkwMTE5WhcNMjUwODA1MDkwMTE5WjAzMTEwLwYDVQQD
Eyg5NDBmODljYmU4N2I3Y2JkYjNjMzc4MmRjOTgyMDI0NWY5M2UyMzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4e0UqQPo69qp/ZMBY3D5BU9Xjsq
UUKNCZOd1Gr6ZpEbtPBqknFkASFvlLciZVLwQGgpAYyGcMmyLov+rKYitkMVSuf3
D7apAUVURUTLhrZs1v/EnSJ3wUcTKTSmEcpX3iD5dHP/WXSxuGEEvLnYc+17NjnO
tzpye9EZahVNJy+0IE/Uos6xUuwJ6Xkqo6PQKPxNiLs8kAlJEeHyhCv6uMANO//u
XV9kpf7MMRvNF4o2yiDOrMeX/xaMv5JiMfeWH4ef2TZR0xupt68WKZ3pNGdvPdCh
SNK1ROha5Ciajg4TrQ6UDyR2PcYst9ToBmPzNZQVwcUrUXM+51Uct2njcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQPicvoe3y9s8N4LcmCAkX5PiMpMB8GA1UdIwQY
MBaAFEAnPBXqRd83GT40W2nt2D+MbyICMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNjOEZlcEYzemNaUGpSYmFlM1lQNHh2SWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82YTExNTMtYzNiYi00M2RkLTk3YmUt
MzAzYzlhMTE4ODZiLzEvUUNjOEZlcEYzemNaUGpSYmFlM1lQNHh2SWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82YTExNTMtYzNiYi00M2RkLTk3YmUtMzAzYzlhMTE4ODZi
LzEvUUNjOEZlcEYzemNaUGpSYmFlM1lQNHh2SWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS66VMnY
dO2Eaj+DmL1fPJtmxwZomOt4W46O8W2LglvjsCe5xcHWYq/CJ1ceb0qM/XZ5Ma79
VPpIP5jvjzDC0AYuISKHofr3nSG9L9n4zHIShUqQpoGXjmDpz4nvAoGaIOOfnWBr
tLcVR+trz+jMUd7L8GpGuKyZNFh/fv0ZHVuLmpHl7mHEIEEVrEvYQAWFqiP/aQJT
CeVe8VC+Iyyi6zrEF+haiA3+iEyN+HxFEr+omQdkedAImt20GahXAPHl9SPq/ngi
JPBnjSIAJWVm0EX9srqDtCvI5EVrZq1aQKVnrFE63LRV4NEFE8YeKNJ9guiMOLxG
ui6eQGGxbi3a4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:24 2025 by rpki-client