Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier: la5Vwa271lxPqFIWHTdZiP5dEDDCrGxHqlZZGKoaIBU=
Subject key identifier: 79:CB:AF:29:F2:48:86:11:50:40:AD:46:CC:92:52:F4:7A:74:52:1F
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial: 019892C810F39554DB57757149CCFE966E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number: 157A
Signing time: Sun 10 Aug 2025 07:00:41 +0000
Manifest this update: Sun 10 Aug 2025 07:00:41 +0000
Manifest next update: Mon 11 Aug 2025 07:00:41 +0000
Files and hashes: 1: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: VsgO0n8dUBgfhNj6cN7eUaWTeMyY18Ii+DuEpf4oOBQ=)
2: fSiDlWwoGniklT0F1na2YoYly6g.roa (hash: jQShuABqrNJ6xVnXKO1phumkAcZdn3LFktiTS8/eFss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:10:f3:95:54:db:57:75:71:49:cc:fe:96:6e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Validity
Not Before: Aug 10 07:00:41 2025 GMT
Not After : Aug 11 07:00:41 2025 GMT
Subject: CN=79cbaf29f24886115040ad46cc9252f47a74521f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:3d:7b:0a:80:1b:cf:ff:6f:60:25:1d:b2:
85:be:ec:05:a6:4c:a3:19:df:c0:ca:79:c3:b0:a3:
98:06:be:5e:2f:a3:ac:71:2e:20:cf:e7:b9:12:43:
0b:c7:3f:7b:2b:35:88:5e:0b:b1:65:97:db:cd:97:
24:35:d2:fb:a9:c4:03:0c:6d:d6:ae:ed:8a:a1:4c:
6e:b7:b5:85:6f:bf:08:de:34:05:11:d8:04:0e:35:
c4:ba:b2:2d:71:42:72:f7:33:46:c7:b9:78:73:02:
45:45:2b:66:0b:c1:f3:a9:a1:6c:54:11:b8:4d:ed:
91:27:35:7d:a3:df:5e:18:ac:cf:38:df:cd:f5:35:
09:d1:f9:d8:41:c7:b2:c7:92:df:70:d6:9d:a9:dd:
72:ea:26:93:f5:61:d2:fb:36:0f:59:2f:42:97:d0:
de:7a:cb:62:7f:72:e9:21:c6:1f:fd:9d:31:8a:5c:
03:28:fd:f3:ac:7e:45:cb:0f:bb:ad:0c:8b:58:03:
ce:f8:94:b2:bb:d1:9e:8f:ea:33:e3:26:e0:dc:71:
04:fb:7b:bf:a9:48:f8:79:8c:ee:30:cc:a6:bb:2a:
c6:c3:60:ca:9d:d1:73:cd:9d:71:7b:4d:50:1a:aa:
ce:e4:7f:a0:37:39:84:f1:17:c2:92:59:a9:fe:08:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:AF:29:F2:48:86:11:50:40:AD:46:CC:92:52:F4:7A:74:52:1F
X509v3 Authority Key Identifier:
keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5f:81:99:53:65:3d:87:ee:f0:58:48:77:4d:da:4c:5b:be:
13:40:eb:51:d1:26:38:db:83:40:99:54:ad:f8:63:20:d7:49:
62:85:fb:ef:90:7d:1a:13:04:ad:7d:39:30:cb:ab:b6:ab:f9:
2e:5d:ef:13:f3:33:ec:96:bc:34:f0:e3:8b:ef:75:ab:cb:76:
df:9c:60:da:61:cd:ab:23:98:1e:67:f0:f1:bb:c3:13:2a:91:
56:83:c8:30:a6:80:1b:e9:55:9b:40:f8:c3:33:ba:43:81:2c:
a6:48:2e:78:f2:69:b6:32:9d:fd:f3:56:50:ab:3a:3d:a0:78:
7e:e6:bc:e4:dd:16:18:89:1a:17:d9:78:bd:b1:ed:59:66:a9:
9f:e0:ea:f4:a8:98:aa:b0:26:f8:c9:ee:4a:40:13:d0:6e:0a:
3b:fc:97:97:99:27:06:fd:c2:b5:53:f7:24:50:ab:18:90:2a:
fd:90:93:ca:44:d3:0f:7d:9d:41:a6:9f:8c:a8:fc:97:9e:38:
4c:0a:d3:49:26:3f:3f:a6:ae:42:aa:f5:ca:4d:6d:9b:62:7c:
de:e5:85:95:8c:60:7a:d7:62:65:0c:3f:81:c9:e7:a7:20:47:
64:bf:d5:9a:7f:5e:24:09:57:b3:a5:85:22:38:bb:88:95:10:
f9:63:63:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyBDzlVTbV3VxScz+lm4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2I1OWE0MThlYWRmYTVkYzg2OWY1NmYxODQ3ZmIyNWQ5
ODdmYzYwHhcNMjUwODEwMDcwMDQxWhcNMjUwODExMDcwMDQxWjAzMTEwLwYDVQQD
Eyg3OWNiYWYyOWYyNDg4NjExNTA0MGFkNDZjYzkyNTJmNDdhNzQ1MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooc9ewqAG8//b2AlHbKFvuwFpkyj
Gd/AynnDsKOYBr5eL6OscS4gz+e5EkMLxz97KzWIXguxZZfbzZckNdL7qcQDDG3W
ru2KoUxut7WFb78I3jQFEdgEDjXEurItcUJy9zNGx7l4cwJFRStmC8HzqaFsVBG4
Te2RJzV9o99eGKzPON/N9TUJ0fnYQceyx5LfcNadqd1y6iaT9WHS+zYPWS9Cl9De
estif3LpIcYf/Z0xilwDKP3zrH5Fyw+7rQyLWAPO+JSyu9Gej+oz4ybg3HEE+3u/
qUj4eYzuMMymuyrGw2DKndFzzZ1xe01QGqrO5H+gNzmE8RfCklmp/ghHCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnLrynySIYRUECtRsySUvR6dFIfMB8GA1UdIwQY
MBaAFEDLWaQY6t+l3IafVvGEf7JdmH/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQt
MTFmMWI1YTRiMGRjLzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQtMTFmMWI1YTRiMGRj
LzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQF+BmVNl
PYfu8FhId03aTFu+E0DrUdEmONuDQJlUrfhjINdJYoX775B9GhMErX05MMurtqv5
Ll3vE/Mz7Ja8NPDji+91q8t235xg2mHNqyOYHmfw8bvDEyqRVoPIMKaAG+lVm0D4
wzO6Q4EspkguePJptjKd/fNWUKs6PaB4fua85N0WGIkaF9l4vbHtWWapn+Dq9KiY
qrAm+MnuSkAT0G4KO/yXl5knBv3CtVP3JFCrGJAq/ZCTykTTD32dQaafjKj8l544
TArTSSY/P6auQqr1yk1tm2J83uWFlYxgetdiZQw/gcnnpyBHZL/Vmn9eJAlXs6WF
Iji7iJUQ+WNjqw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:49 2025 by rpki-client