Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: RekK0JLK6Rhc4RjUkEXrPSKQv2T3h61g6wxXuaWDmtc=
Subject key identifier: 62:23:27:45:CE:58:A5:A8:ED:16:CF:40:F1:0F:DB:3C:72:D8:25:6A
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 01987B9C5F9C3167E9E2896C354690E18FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 1618
Signing time: Tue 05 Aug 2025 19:01:42 +0000
Manifest this update: Tue 05 Aug 2025 19:01:42 +0000
Manifest next update: Wed 06 Aug 2025 19:01:42 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: VGr38MbJX57P5nEIyoXAIneZiDSJJ3EnjqQoZ5yUYhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:5f:9c:31:67:e9:e2:89:6c:35:46:90:e1:8f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Aug 5 19:01:42 2025 GMT
Not After : Aug 6 19:01:42 2025 GMT
Subject: CN=62232745ce58a5a8ed16cf40f10fdb3c72d8256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:04:36:5f:a2:b8:31:7c:8a:c7:ff:50:14:
60:af:1a:13:8f:be:2a:f2:2c:02:9c:fa:dc:ee:0d:
68:b8:6c:f0:fd:4a:16:17:a7:f9:60:57:c0:83:0a:
f3:de:6c:6e:8d:0e:8d:b2:df:f4:7a:02:91:b3:b6:
90:20:76:0a:db:3c:e9:0d:30:af:33:dc:23:4b:1b:
4c:0a:67:ec:db:7f:51:f7:dd:fe:8d:83:3b:f8:74:
8a:b0:4d:3a:4d:de:1b:2d:8a:e2:b5:0d:8c:da:33:
c0:8c:e6:c7:90:d3:63:9c:52:52:c9:ad:05:f8:c9:
68:70:21:fa:bd:8d:44:d2:d5:00:86:e5:78:9c:8e:
cf:2b:bf:2d:91:41:1f:5b:e8:2b:68:e2:16:5f:4e:
72:58:a4:14:2c:21:82:60:93:6f:39:40:32:f1:20:
8d:1e:01:47:7d:30:3b:51:6a:d6:e8:67:6c:d9:ef:
4a:61:43:9a:62:21:06:66:7b:0a:6e:83:64:52:b2:
10:d7:86:0b:bb:b3:f9:9c:63:db:44:3b:e2:79:20:
01:63:ed:9a:c2:7e:a9:40:6f:e6:33:70:11:94:75:
dd:cd:72:21:96:bd:80:eb:50:5a:30:c7:8e:79:55:
1f:62:cf:b0:06:82:c3:59:95:ca:cd:58:66:8e:5c:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:23:27:45:CE:58:A5:A8:ED:16:CF:40:F1:0F:DB:3C:72:D8:25:6A
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:33:f0:20:0d:0c:2f:d9:0d:eb:91:aa:ea:c7:e0:ed:03:13:
2d:8d:96:ca:72:13:9a:2b:f0:5b:de:3c:fb:93:4a:d2:13:7a:
f7:60:5f:2e:6d:6c:1b:4d:4e:4e:25:ce:e1:39:ba:b3:b4:3b:
ee:09:16:71:10:b8:f0:58:78:85:0c:61:a9:08:ae:48:e0:da:
05:84:eb:1a:40:a9:90:13:85:3f:b3:47:b7:6f:99:b5:12:05:
56:71:b2:60:f3:91:66:7d:25:01:9a:d0:8f:61:4e:40:16:b1:
1d:03:99:a6:95:2a:8a:7f:02:a9:87:b7:5c:01:d4:fa:f5:ee:
9a:7f:15:77:ba:e4:89:3b:f5:61:3c:45:ef:bb:b9:b5:43:1e:
84:27:d7:f8:1a:7d:21:e3:29:fc:bc:db:51:e7:e4:b4:82:d3:
77:c0:54:19:77:93:92:20:2b:78:89:fe:a9:4c:ab:f3:e8:24:
ad:9b:30:37:a5:99:1e:2e:8e:7c:5d:2a:59:e2:f5:d8:4f:c1:
fb:9d:2d:39:ba:e4:fe:81:73:74:f8:ca:d8:49:05:d9:0d:e4:
7e:64:c0:51:b0:26:4b:03:7e:c9:fe:51:ab:8e:4a:a5:07:9b:
b4:c9:54:98:95:1a:bf:fc:4d:fb:ad:4c:64:19:c4:6b:ad:b4:
da:04:27:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nF+cMWfp4olsNUaQ4Y/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxN2VkNDFmMGFkZmRmMTlhNzE2MTRlMzkwNGMwZjA4NDk5
NzkyNTAwHhcNMjUwODA1MTkwMTQyWhcNMjUwODA2MTkwMTQyWjAzMTEwLwYDVQQD
Eyg2MjIzMjc0NWNlNThhNWE4ZWQxNmNmNDBmMTBmZGIzYzcyZDgyNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn8ENl+iuDF8isf/UBRgrxoTj74q
8iwCnPrc7g1ouGzw/UoWF6f5YFfAgwrz3mxujQ6Nst/0egKRs7aQIHYK2zzpDTCv
M9wjSxtMCmfs239R993+jYM7+HSKsE06Td4bLYritQ2M2jPAjObHkNNjnFJSya0F
+MlocCH6vY1E0tUAhuV4nI7PK78tkUEfW+graOIWX05yWKQULCGCYJNvOUAy8SCN
HgFHfTA7UWrW6Gds2e9KYUOaYiEGZnsKboNkUrIQ14YLu7P5nGPbRDvieSABY+2a
wn6pQG/mM3ARlHXdzXIhlr2A61BaMMeOeVUfYs+wBoLDWZXKzVhmjlySjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIjJ0XOWKWo7RbPQPEP2zxy2CVqMB8GA1UdIwQY
MBaAFEF+1B8K398ZpxYU45BMDwhJl5JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEt
NmVhODkxZThjZmM3LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lNWNjNTgtYWMxOC00ZTBkLWJmOTEtNmVhODkxZThjZmM3
LzEvUVg3VUh3cmYzeG1uRmhUamtFd1BDRW1Ya2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkjPwIA0M
L9kN65Gq6sfg7QMTLY2WynITmivwW948+5NK0hN692BfLm1sG01OTiXO4Tm6s7Q7
7gkWcRC48Fh4hQxhqQiuSODaBYTrGkCpkBOFP7NHt2+ZtRIFVnGyYPORZn0lAZrQ
j2FOQBaxHQOZppUqin8CqYe3XAHU+vXumn8Vd7rkiTv1YTxF77u5tUMehCfX+Bp9
IeMp/LzbUefktILTd8BUGXeTkiAreIn+qUyr8+gkrZswN6WZHi6OfF0qWeL12E/B
+50tObrk/oFzdPjK2EkF2Q3kfmTAUbAmSwN+yf5Rq45KpQebtMlUmJUav/xN+61M
ZBnEa6202gQn8g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:39 2025 by rpki-client