Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
File: Q-ZRNoOGaONd1VLvDCH76avtE5s.mft (raw, json)
Hash identifier: JfPBQLL3VNn8b6FPgy5rOscz8f8nAEQeXx6EtnNH9OA=
Subject key identifier: CD:25:1F:C6:CB:7A:85:C6:85:81:AA:7F:73:8D:A6:EB:AA:84:B0:87
Authority key identifier: 43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
Certificate issuer: /CN=43e65136838668e35dd552ef0c21fbe9abed139b
Certificate serial: 01988E7D7295F69FD03A2914A252A61F1B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
Manifest number: 01FF
Signing time: Sat 09 Aug 2025 11:00:42 +0000
Manifest this update: Sat 09 Aug 2025 11:00:42 +0000
Manifest next update: Sun 10 Aug 2025 11:00:42 +0000
Files and hashes: 1: Q-ZRNoOGaONd1VLvDCH76avtE5s.crl (hash: 9ruJv/6tO1twJeQ7iNHFfVnNGbKBxbP2Qpjf5o3wpZo=)
2: aIJd5q5n1BMhAvDcaHy6hyORixY.roa (hash: g4oLD9R9gouTz6cg2k+J0gSsSi5IKrB+jtKfUgG2zS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:72:95:f6:9f:d0:3a:29:14:a2:52:a6:1f:1b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e65136838668e35dd552ef0c21fbe9abed139b
Validity
Not Before: Aug 9 11:00:42 2025 GMT
Not After : Aug 10 11:00:42 2025 GMT
Subject: CN=cd251fc6cb7a85c68581aa7f738da6ebaa84b087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:ce:fc:f8:4d:c3:ec:c4:67:1d:76:1a:16:
9e:2b:96:21:c4:ff:8d:46:b0:71:a9:8f:dd:7f:95:
ff:57:cd:da:60:91:ae:b0:f3:62:11:f6:21:52:7e:
be:c2:63:08:11:3c:6e:04:c2:ee:30:0c:b5:ae:f4:
22:ad:4a:45:1e:22:1f:1a:77:88:7f:f9:a4:8c:97:
30:67:b1:99:b5:b1:25:0b:05:42:52:4b:ac:85:fe:
85:d6:6d:89:33:16:be:78:61:23:a3:19:8a:1e:a0:
09:7b:3b:44:49:92:17:6a:76:b9:37:15:85:9e:2c:
96:8b:cd:95:26:d7:e6:0d:b7:12:11:b1:b0:78:2c:
70:9f:14:54:2a:31:20:f6:c7:d8:a9:a7:a9:b8:34:
cc:8c:2e:d8:cb:64:4a:7a:df:ce:77:22:f5:ae:57:
d6:71:bf:9e:a4:a4:ee:dd:0b:30:5b:aa:fc:01:3f:
95:e5:6b:f4:ac:40:a6:e3:b9:35:f8:3a:2d:d4:79:
01:0c:cf:a8:86:2b:71:e8:cf:6d:e0:9f:ef:21:7c:
a5:9b:ce:84:b1:cf:a0:5b:36:3c:68:35:bb:22:41:
d5:03:f1:d3:86:99:d9:db:5b:26:e8:40:0f:fa:8d:
a6:2b:86:02:e5:34:b6:25:4b:5a:83:37:57:e4:94:
32:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:25:1F:C6:CB:7A:85:C6:85:81:AA:7F:73:8D:A6:EB:AA:84:B0:87
X509v3 Authority Key Identifier:
keyid:43:E6:51:36:83:86:68:E3:5D:D5:52:EF:0C:21:FB:E9:AB:ED:13:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-ZRNoOGaONd1VLvDCH76avtE5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a19e7e-b5b4-44f7-b937-0da6dc2c782c/1/Q-ZRNoOGaONd1VLvDCH76avtE5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1d:69:66:1a:5b:45:14:0b:d6:1f:60:5f:13:0f:81:b9:a2:
9b:80:cd:1e:c3:4c:4e:bc:ae:df:01:0f:d0:f2:02:f5:72:73:
60:86:e9:79:f7:a8:41:29:1a:8f:a4:71:ab:84:49:d4:2c:f4:
25:6b:fd:cc:c8:2d:49:07:27:82:07:78:88:8c:bb:77:64:d9:
10:8d:54:43:86:45:f9:28:2b:d1:43:1a:c7:9b:93:5c:6f:4d:
39:b2:99:51:45:3b:53:29:22:56:e1:60:84:44:3f:1f:64:d3:
e9:a1:ae:7f:cc:eb:61:95:d5:81:91:a9:26:29:b1:aa:5d:bc:
c0:b9:c0:86:e7:71:68:68:cb:d4:d7:8b:db:9b:b9:00:20:a0:
cb:e9:0a:be:99:b2:be:55:22:1d:ad:f7:88:39:f6:78:6b:e4:
4a:6f:a4:03:88:1a:9b:72:23:ae:5a:5d:d9:18:23:b4:31:33:
e0:b7:b4:bb:66:23:0d:bc:e0:a9:87:c5:c8:13:ba:4f:50:35:
52:6c:b9:cc:45:d4:8c:35:20:93:55:fc:50:0f:fa:09:5b:91:
5c:a9:b5:30:78:3b:8f:fa:87:f1:3a:f6:3b:61:04:0d:c0:81:
89:ae:73:a3:e5:fa:65:1b:62:54:a9:0a:2b:24:42:9b:56:4a:
23:2f:e7:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOfXKV9p/QOikUolKmHxsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTY1MTM2ODM4NjY4ZTM1ZGQ1NTJlZjBjMjFmYmU5YWJl
ZDEzOWIwHhcNMjUwODA5MTEwMDQyWhcNMjUwODEwMTEwMDQyWjAzMTEwLwYDVQQD
EyhjZDI1MWZjNmNiN2E4NWM2ODU4MWFhN2Y3MzhkYTZlYmFhODRiMDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWzO/PhNw+zEZx12GhaeK5YhxP+N
RrBxqY/df5X/V83aYJGusPNiEfYhUn6+wmMIETxuBMLuMAy1rvQirUpFHiIfGneI
f/mkjJcwZ7GZtbElCwVCUkushf6F1m2JMxa+eGEjoxmKHqAJeztESZIXana5NxWF
niyWi82VJtfmDbcSEbGweCxwnxRUKjEg9sfYqaepuDTMjC7Yy2RKet/OdyL1rlfW
cb+epKTu3QswW6r8AT+V5Wv0rECm47k1+Dot1HkBDM+ohitx6M9t4J/vIXylm86E
sc+gWzY8aDW7IkHVA/HThpnZ21sm6EAP+o2mK4YC5TS2JUtagzdX5JQyLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0lH8bLeoXGhYGqf3ONpuuqhLCHMB8GA1UdIwQY
MBaAFEPmUTaDhmjjXdVS7wwh++mr7RObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5Mzct
MGRhNmRjMmM3ODJjLzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hMTllN2UtYjViNC00NGY3LWI5MzctMGRhNmRjMmM3ODJj
LzEvUS1aUk5vT0dhT05kMVZMdkRDSDc2YXZ0RTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMh1pZhpb
RRQL1h9gXxMPgbmim4DNHsNMTryu3wEP0PIC9XJzYIbpefeoQSkaj6Rxq4RJ1Cz0
JWv9zMgtSQcnggd4iIy7d2TZEI1UQ4ZF+Sgr0UMax5uTXG9NObKZUUU7UykiVuFg
hEQ/H2TT6aGuf8zrYZXVgZGpJimxql28wLnAhudxaGjL1NeL25u5ACCgy+kKvpmy
vlUiHa33iDn2eGvkSm+kA4gam3Ijrlpd2RgjtDEz4Le0u2YjDbzgqYfFyBO6T1A1
Umy5zEXUjDUgk1X8UA/6CVuRXKm1MHg7j/qH8Tr2O2EEDcCBia5zo+X6ZRtiVKkK
KyRCm1ZKIy/nog==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:39 2025 by rpki-client