Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: xfovizX5FiPMmB8braoKW+oD7NumPL3MngA1WsRFon8=
Subject key identifier: 7A:FD:6A:13:30:DA:3C:11:E9:54:1A:89:C8:89:34:75:17:4F:42:6E
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 019896A498834D83620E9B3730D1E64030AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 05A8
Signing time: Mon 11 Aug 2025 01:00:25 +0000
Manifest this update: Mon 11 Aug 2025 01:00:25 +0000
Manifest next update: Tue 12 Aug 2025 01:00:25 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: glljFB54S7l3x9GFlMJ8a480kzN+WjIBnB+vmcJd3ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:98:83:4d:83:62:0e:9b:37:30:d1:e6:40:30:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Aug 11 01:00:25 2025 GMT
Not After : Aug 12 01:00:25 2025 GMT
Subject: CN=7afd6a1330da3c11e9541a89c8893475174f426e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:18:f9:a5:f0:8c:03:47:5b:40:53:a9:10:
1f:67:fd:86:0f:ce:44:3e:00:e5:fa:96:b4:ac:21:
a2:4a:82:50:2e:29:92:bb:7e:0e:b8:04:04:d0:7e:
52:f7:d1:55:c3:aa:67:41:5d:2f:95:1f:5c:4e:c9:
a8:36:92:d8:5f:db:77:2f:d8:78:da:fd:8e:e6:19:
47:4b:a2:0c:e4:fb:98:78:dc:93:6c:7d:35:b1:e6:
ed:eb:e9:fe:92:53:fd:09:23:9e:dd:33:8a:39:84:
6d:c3:bd:cf:d4:fa:c5:e7:81:a7:f9:33:02:50:0b:
37:22:10:10:1c:65:83:d1:cd:66:a6:51:c0:10:69:
36:74:95:14:6b:90:fe:4c:e0:e5:e1:7b:b0:2d:96:
ee:99:6b:54:a7:e6:d4:40:bb:e0:1e:19:dc:66:e4:
f6:5c:f6:75:12:cd:3a:fd:86:08:fe:c9:d8:0a:21:
a1:93:57:ed:4f:f2:0e:d2:77:c7:57:8a:73:91:4b:
6e:11:48:51:8c:3e:9f:37:8e:75:79:59:22:8f:34:
3e:df:41:b0:63:10:de:47:f7:04:61:ad:6e:f6:90:
45:e2:da:29:5b:7d:8e:55:82:b2:49:78:16:02:4d:
ab:6e:de:89:38:10:4f:ab:e7:6d:a3:7c:ca:c7:99:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:6A:13:30:DA:3C:11:E9:54:1A:89:C8:89:34:75:17:4F:42:6E
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d6:bb:b3:96:80:d6:59:44:e8:ec:04:f9:af:b6:10:d8:b7:
2a:f5:f2:31:cb:25:2d:42:02:13:bc:cf:53:17:1b:93:1b:d2:
05:d9:72:fb:ff:3c:da:0b:fa:22:7a:67:df:cc:ff:91:aa:79:
ed:63:9d:ae:2c:c5:d4:7e:f5:c8:75:a7:77:58:c2:91:1f:8f:
d3:4f:34:7d:b4:89:31:92:37:2b:1b:35:83:8b:f0:e5:7d:24:
f5:28:5f:de:33:b3:a1:dc:f3:4e:ef:91:4f:15:46:9b:a8:77:
01:b0:61:e3:e6:13:e5:af:b5:7f:31:92:a4:1a:4b:ae:da:82:
8e:87:7a:34:fe:f0:a0:78:9e:24:27:30:45:2e:d7:36:d4:cf:
8c:a4:1c:16:f1:97:1e:88:5d:0d:22:6b:53:0a:8c:08:d1:32:
55:83:49:0b:37:62:c1:a6:0b:8b:ae:a1:95:e2:1c:58:13:21:
b3:29:a2:f2:48:06:42:24:89:9a:81:a6:19:0a:09:ca:c8:35:
6f:b4:70:58:f2:0e:fe:3b:b8:b8:d1:f0:17:ba:91:23:82:a4:
3f:26:26:d4:85:1c:77:b6:84:ca:60:41:0f:be:41:7d:47:92:
d8:41:84:93:d2:2f:f6:0f:af:24:fd:78:03:1e:d6:9d:52:8d:
d4:8c:27:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpJiDTYNiDps3MNHmQDCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWM3MDA1NmE3OGRmNWY4ZmM3MGZmMDAzZDEyZjYwZDE1
MWQ3OTEwHhcNMjUwODExMDEwMDI1WhcNMjUwODEyMDEwMDI1WjAzMTEwLwYDVQQD
Eyg3YWZkNmExMzMwZGEzYzExZTk1NDFhODljODg5MzQ3NTE3NGY0MjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKcY+aXwjANHW0BTqRAfZ/2GD85E
PgDl+pa0rCGiSoJQLimSu34OuAQE0H5S99FVw6pnQV0vlR9cTsmoNpLYX9t3L9h4
2v2O5hlHS6IM5PuYeNyTbH01sebt6+n+klP9CSOe3TOKOYRtw73P1PrF54Gn+TMC
UAs3IhAQHGWD0c1mplHAEGk2dJUUa5D+TODl4XuwLZbumWtUp+bUQLvgHhncZuT2
XPZ1Es06/YYI/snYCiGhk1ftT/IO0nfHV4pzkUtuEUhRjD6fN451eVkijzQ+30Gw
YxDeR/cEYa1u9pBF4topW32OVYKySXgWAk2rbt6JOBBPq+dto3zKx5kCXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHr9ahMw2jwR6VQaiciJNHUXT0JuMB8GA1UdIwQY
MBaAFECccAVqeN9fj8cP8APRL2DRUdeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMt
MDc3ZTdkYmVkNjk4LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMtMDc3ZTdkYmVkNjk4
LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlda7s5aA
1llE6OwE+a+2ENi3KvXyMcslLUICE7zPUxcbkxvSBdly+/882gv6Inpn38z/kap5
7WOdrizF1H71yHWnd1jCkR+P0080fbSJMZI3Kxs1g4vw5X0k9Shf3jOzodzzTu+R
TxVGm6h3AbBh4+YT5a+1fzGSpBpLrtqCjod6NP7woHieJCcwRS7XNtTPjKQcFvGX
HohdDSJrUwqMCNEyVYNJCzdiwaYLi66hleIcWBMhsymi8kgGQiSJmoGmGQoJysg1
b7RwWPIO/ju4uNHwF7qRI4KkPyYm1IUcd7aEymBBD75BfUeS2EGEk9Iv9g+vJP14
Ax7WnVKN1IwnbA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:49 2025 by rpki-client