Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: i+CvyhltBFXFgjy+Q85o83TAj8q4ES6TVO37UNLYb9Q=
Subject key identifier: D4:19:EB:04:3C:70:0D:E9:71:14:F2:4B:85:80:0F:7D:90:58:38:63
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 01988D6B8DFFA00CF140CAC8B6880572BF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 1297
Signing time: Sat 09 Aug 2025 06:01:32 +0000
Manifest this update: Sat 09 Aug 2025 06:01:32 +0000
Manifest next update: Sun 10 Aug 2025 06:01:32 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=)
3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: r4DAO9wLS4x2Y5c34Vp5PM9VBo7SKE/+Uwri58RiKco=)
4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=)
6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:8d:ff:a0:0c:f1:40:ca:c8:b6:88:05:72:bf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Aug 9 06:01:32 2025 GMT
Not After : Aug 10 06:01:32 2025 GMT
Subject: CN=d419eb043c700de97114f24b85800f7d90583863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:c2:41:41:85:16:09:30:44:93:dd:5f:6e:
cd:65:5d:73:a2:79:7d:34:52:15:61:ef:d8:b4:c4:
75:d1:78:9e:56:10:7b:a4:93:8c:07:a6:1a:5b:04:
3b:8c:f5:aa:1b:47:84:92:7f:df:80:d7:66:13:d6:
02:f4:f3:aa:22:5e:ac:62:3b:52:c8:32:b2:6a:71:
84:ff:a9:9f:42:77:a2:b2:60:33:17:76:53:30:bc:
0b:99:e5:fb:f2:c7:08:4d:b7:ad:ee:23:0a:11:3c:
70:97:c2:e0:99:00:e7:61:25:08:0c:cf:85:20:e0:
82:cc:79:ea:ac:4f:bc:fb:9b:c0:26:fd:90:0f:46:
f2:16:35:98:78:92:6a:c7:ea:ef:b2:24:3c:1f:f6:
43:0d:f8:a9:21:52:94:7c:3a:22:ef:3a:cb:41:55:
e2:15:f0:d8:fc:f7:aa:5f:34:64:71:43:8f:87:87:
e6:be:d3:87:c8:40:76:5e:0d:2e:72:2c:db:7f:66:
5d:bc:63:d5:c2:84:29:1d:4a:02:26:78:79:ba:36:
ec:ae:c8:6d:49:29:da:de:56:c4:a3:ab:09:f7:7d:
e5:ad:b9:21:c6:b1:47:7b:cd:61:2d:fa:06:0a:c7:
a2:51:eb:4a:ae:43:4b:79:ec:55:77:29:59:59:c1:
75:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:19:EB:04:3C:70:0D:E9:71:14:F2:4B:85:80:0F:7D:90:58:38:63
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:df:f2:68:2c:c3:75:e9:28:e3:12:47:fb:b3:d9:5b:5f:26:
46:b1:f8:7d:32:ae:60:12:48:95:2f:f3:83:ae:bf:ed:33:57:
c5:e7:e4:c6:0d:6e:9d:6a:61:a7:e4:04:25:95:88:7d:b7:dc:
16:44:84:a0:cf:2a:c5:fd:72:45:c2:5b:cf:ef:00:0b:b4:b7:
06:80:dc:61:c9:84:a4:2a:37:7d:b8:d2:a4:10:8d:5e:4b:cc:
fc:14:8b:22:a2:83:8c:34:77:43:3e:67:59:fe:77:47:e0:42:
bd:22:9f:ac:04:e7:34:24:53:92:83:47:39:8f:f4:43:bc:2a:
7e:2e:d1:58:0a:8c:b0:11:6c:e5:a8:e8:fa:db:c7:1b:27:5f:
a5:b2:4e:ce:2e:08:84:8c:6d:9c:cc:9e:7d:1e:81:8a:63:f2:
2a:d0:7f:bc:a0:8a:a1:11:cd:1a:93:b5:9d:58:03:c9:5e:43:
b7:d4:72:c8:0c:b5:51:69:dd:2f:73:de:e1:12:39:a4:57:1a:
b9:4c:21:c5:df:2a:19:cf:30:10:7e:4c:aa:0d:3f:49:f0:15:
77:ed:59:d4:dc:40:ea:61:08:d3:b2:3b:2c:49:7c:99:86:42:
73:54:c0:ff:e6:88:85:35:18:06:72:7a:45:ea:c6:df:c4:cc:
fd:7d:4a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNa43/oAzxQMrItogFcr+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz
ZWY0NmUwHhcNMjUwODA5MDYwMTMyWhcNMjUwODEwMDYwMTMyWjAzMTEwLwYDVQQD
EyhkNDE5ZWIwNDNjNzAwZGU5NzExNGYyNGI4NTgwMGY3ZDkwNTgzODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx17CQUGFFgkwRJPdX27NZV1zonl9
NFIVYe/YtMR10XieVhB7pJOMB6YaWwQ7jPWqG0eEkn/fgNdmE9YC9POqIl6sYjtS
yDKyanGE/6mfQneismAzF3ZTMLwLmeX78scITbet7iMKETxwl8LgmQDnYSUIDM+F
IOCCzHnqrE+8+5vAJv2QD0byFjWYeJJqx+rvsiQ8H/ZDDfipIVKUfDoi7zrLQVXi
FfDY/PeqXzRkcUOPh4fmvtOHyEB2Xg0ucizbf2ZdvGPVwoQpHUoCJnh5ujbsrsht
SSna3lbEo6sJ933lrbkhxrFHe81hLfoGCseiUetKrkNLeexVdylZWcF1mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQZ6wQ8cA3pcRTyS4WAD32QWDhjMB8GA1UdIwQY
MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt
Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx
LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9/yaCzD
deko4xJH+7PZW18mRrH4fTKuYBJIlS/zg66/7TNXxefkxg1unWphp+QEJZWIfbfc
FkSEoM8qxf1yRcJbz+8AC7S3BoDcYcmEpCo3fbjSpBCNXkvM/BSLIqKDjDR3Qz5n
Wf53R+BCvSKfrATnNCRTkoNHOY/0Q7wqfi7RWAqMsBFs5ajo+tvHGydfpbJOzi4I
hIxtnMyefR6BimPyKtB/vKCKoRHNGpO1nVgDyV5Dt9RyyAy1UWndL3Pe4RI5pFca
uUwhxd8qGc8wEH5Mqg0/SfAVd+1Z1NxA6mEI07I7LEl8mYZCc1TA/+aIhTUYBnJ6
RerG38TM/X1K4w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:38 2025 by rpki-client