
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File: qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier: weahrhJrB6MkekuFj4tdKNg1/plBKppboLGl+IXjblQ=
Subject key identifier: DE:DD:87:26:E8:96:DC:83:1C:06:0C:93:BD:DA:3A:D4:C7:9B:D4:02
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer: /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial: 01988BB37A0D43286572767DECCC1A1A3555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number: 04B2
Signing time: Fri 08 Aug 2025 22:00:51 +0000
Manifest this update: Fri 08 Aug 2025 22:00:51 +0000
Manifest next update: Sat 09 Aug 2025 22:00:51 +0000
Files and hashes: 1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: Guqi+WwzUcASx1+3teTu1EqBy1Xz5lmm1dF5jvTrERw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:7a:0d:43:28:65:72:76:7d:ec:cc:1a:1a:35:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Validity
Not Before: Aug 8 22:00:51 2025 GMT
Not After : Aug 9 22:00:51 2025 GMT
Subject: CN=dedd8726e896dc831c060c93bdda3ad4c79bd402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:66:d1:b6:54:4b:c6:cf:5e:1d:68:2a:16:
ab:22:cf:41:eb:c5:42:95:29:e6:ca:4f:fc:df:ff:
e5:86:af:a9:80:15:e5:91:63:39:08:9c:1e:9f:5a:
55:70:9e:9b:ba:a8:ac:db:10:f6:ab:fd:e6:0c:52:
6a:e1:d6:d5:1d:ab:9c:c5:bc:63:75:57:e0:87:77:
21:f1:e3:cc:4f:c6:4e:0d:0e:32:a3:07:b0:65:1c:
d7:e2:f7:87:97:62:0f:78:10:84:fc:b1:b0:6e:07:
ea:7d:a1:58:1d:c7:22:f6:f4:ef:63:35:19:ee:4c:
82:09:5c:b3:f3:ea:bd:47:af:55:0a:fc:45:8e:1a:
ce:58:95:c2:97:fb:6d:7f:ce:2c:3e:b6:8e:71:b6:
9c:c5:0a:a5:c4:7b:e5:13:9f:38:f7:33:33:fe:f2:
40:7e:09:98:3e:f6:f4:19:3b:be:15:60:66:04:e1:
33:dd:37:08:65:4b:be:c3:50:90:b7:b5:b5:f6:18:
4d:25:05:a2:4e:b9:1b:a6:d7:5a:f3:a7:fe:78:88:
ad:9a:a8:4a:07:2a:3f:42:86:c3:84:31:ff:b0:82:
2e:3b:dd:85:a0:36:7b:3d:a8:1c:cf:3d:a0:e2:e2:
d6:13:49:fe:00:d6:ad:90:19:6b:e7:95:b4:d3:a9:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:87:26:E8:96:DC:83:1C:06:0C:93:BD:DA:3A:D4:C7:9B:D4:02
X509v3 Authority Key Identifier:
keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:64:34:1f:ff:7f:4f:a6:b7:b0:d4:06:e5:f3:86:32:7b:a4:
7a:84:ac:98:ca:58:87:ad:0d:e7:f4:67:f0:05:68:21:22:b2:
3a:ba:fb:2b:83:44:b8:91:5d:e3:57:75:d3:67:c9:94:1a:20:
a4:25:a0:ff:7c:ef:57:a0:49:c8:0e:19:5d:a4:5e:11:88:ae:
20:ab:84:ac:b0:c6:82:15:a3:3b:2f:a9:f1:fa:83:78:78:39:
1e:11:95:8c:8f:8e:ca:c9:16:b4:82:52:56:02:a4:c8:3d:f8:
46:a2:3f:ad:99:f3:c1:6d:4b:cf:14:84:fc:59:e1:11:4b:c4:
43:7a:c4:89:a5:b7:5e:32:ff:b3:29:3e:39:0c:6e:08:f1:2d:
f4:02:ec:a9:c2:e3:8b:0f:7f:b7:07:7d:d5:92:2e:a2:5d:53:
89:9e:84:0b:c7:0f:55:c1:fc:04:11:ac:77:5d:96:59:90:30:
9d:81:28:15:5d:cb:34:c8:b1:33:ed:81:c0:2a:08:3a:d7:c9:
02:2c:7f:c5:ed:f7:0e:20:5c:1f:fd:83:51:e1:41:fa:bf:7c:
89:14:26:58:a0:31:34:e4:d7:e9:33:64:d1:94:f9:37:fe:21:
c8:eb:88:e7:86:22:a1:fe:aa:d6:0b:b9:b0:b9:51:a3:95:67:
a2:ce:2c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs3oNQyhlcnZ97MwaGjVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjA5MDJjN2IzMGZlYzNlMGRjZjVmMjNiZmVkZjUwMTgy
MzQyOWIwHhcNMjUwODA4MjIwMDUxWhcNMjUwODA5MjIwMDUxWjAzMTEwLwYDVQQD
EyhkZWRkODcyNmU4OTZkYzgzMWMwNjBjOTNiZGRhM2FkNGM3OWJkNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdBm0bZUS8bPXh1oKharIs9B68VC
lSnmyk/83//lhq+pgBXlkWM5CJwen1pVcJ6buqis2xD2q/3mDFJq4dbVHaucxbxj
dVfgh3ch8ePMT8ZODQ4yowewZRzX4veHl2IPeBCE/LGwbgfqfaFYHcci9vTvYzUZ
7kyCCVyz8+q9R69VCvxFjhrOWJXCl/ttf84sPraOcbacxQqlxHvlE5849zMz/vJA
fgmYPvb0GTu+FWBmBOEz3TcIZUu+w1CQt7W19hhNJQWiTrkbptda86f+eIitmqhK
Byo/QobDhDH/sIIuO92FoDZ7Pagczz2g4uLWE0n+ANatkBlr55W006kWVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7dhyboltyDHAYMk73aOtTHm9QCMB8GA1UdIwQY
MBaAFKnwkCx7MP7D4Nz18jv+31AYI0KbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kNjZmZjMtYjYwNy00NzZlLThkNWUt
ODk2ODU2NWRmNjNhLzEvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kNjZmZjMtYjYwNy00NzZlLThkNWUtODk2ODU2NWRmNjNh
LzEvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2Q0H/9/
T6a3sNQG5fOGMnukeoSsmMpYh60N5/Rn8AVoISKyOrr7K4NEuJFd41d102fJlBog
pCWg/3zvV6BJyA4ZXaReEYiuIKuErLDGghWjOy+p8fqDeHg5HhGVjI+OyskWtIJS
VgKkyD34RqI/rZnzwW1LzxSE/FnhEUvEQ3rEiaW3XjL/syk+OQxuCPEt9ALsqcLj
iw9/twd91ZIuol1TiZ6EC8cPVcH8BBGsd12WWZAwnYEoFV3LNMixM+2BwCoIOtfJ
Aix/xe33DiBcH/2DUeFB+r98iRQmWKAxNOTX6TNk0ZT5N/4hyOuI54Yiof6q1gu5
sLlRo5Vnos4sFA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:11 2025 by rpki-client