Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier: VgMeCVMeLhymDiosf0LFC9IrRkmfZoQhFBqmdfJb144=
Subject key identifier: 30:8F:09:C5:96:4F:37:4E:F0:8E:6E:7A:CB:47:81:E5:81:06:E0:24
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial: 019874F4F3D4872FDFEC7370C797A0D13816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number: 116A
Signing time: Mon 04 Aug 2025 12:01:06 +0000
Manifest this update: Mon 04 Aug 2025 12:01:06 +0000
Manifest next update: Tue 05 Aug 2025 12:01:06 +0000
Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: Dp/whofnLmug3h97ld0nA80cl857ByCUgcnIdeGz2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:f3:d4:87:2f:df:ec:73:70:c7:97:a0:d1:38:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Validity
Not Before: Aug 4 12:01:06 2025 GMT
Not After : Aug 5 12:01:06 2025 GMT
Subject: CN=308f09c5964f374ef08e6e7acb4781e58106e024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:2c:92:c3:81:0d:8a:4f:cb:59:eb:0b:60:
11:c5:7e:c9:54:1c:a9:af:fa:3a:fb:9b:61:97:59:
ea:6d:50:13:f7:7e:1d:80:67:98:7a:b5:3d:6b:0c:
00:77:16:66:b6:6d:5b:5d:79:ee:03:2c:63:c8:b0:
55:8f:24:e3:22:71:7a:1f:44:64:3d:86:38:24:5b:
da:8c:ac:7b:28:a5:2e:c3:d1:91:59:d5:c0:bb:21:
bb:45:f0:91:cf:33:65:df:58:13:a0:da:5a:bd:ad:
34:ed:0c:55:ee:4a:79:39:b8:d5:e7:bf:f6:fc:62:
70:fc:aa:39:35:d4:c7:66:43:b5:f1:d6:b6:51:74:
1b:1e:33:4d:e5:ee:50:49:13:ff:ef:ea:14:36:bf:
9b:07:15:df:15:7e:82:2c:0d:55:4b:f2:23:95:97:
b7:db:fd:1d:53:57:f8:6a:5c:77:0a:6f:5a:47:b0:
9c:16:56:36:8a:5a:1e:3e:57:c0:8d:b7:b6:3b:62:
a7:7e:ee:08:ba:32:79:40:62:8d:19:87:fc:09:55:
80:28:38:c7:67:94:86:00:8f:7f:05:f3:b6:2e:19:
ed:07:9c:1c:df:84:5c:eb:08:5c:f2:38:76:7b:7f:
f1:c6:e2:11:78:12:51:87:8d:44:78:4e:d8:74:aa:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8F:09:C5:96:4F:37:4E:F0:8E:6E:7A:CB:47:81:E5:81:06:E0:24
X509v3 Authority Key Identifier:
keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e7:1e:56:a9:d8:33:9e:e9:c8:e2:a3:c5:75:e7:1e:96:81:
10:9d:fc:62:05:c5:75:d2:ca:d0:19:3f:ec:20:b4:06:07:30:
79:5e:a7:af:fc:9b:e0:95:eb:8f:40:86:c0:9c:e8:4e:a1:19:
a2:45:6c:66:b4:22:9a:e5:3d:e3:70:ab:80:6b:46:b1:d7:ae:
cf:b7:34:cb:ec:5b:cb:68:46:27:c4:ce:30:15:31:91:36:37:
6b:55:38:91:c9:ed:ff:04:6b:7e:b4:fb:c0:9f:dd:0a:d4:d7:
38:cb:c8:94:1f:06:89:72:99:94:0c:cb:f8:84:0e:41:b7:8b:
fb:f5:a3:7a:49:3a:f4:86:08:38:72:7e:5f:c3:04:77:0d:67:
02:af:a1:ce:03:73:a4:f9:3a:9b:27:84:35:fa:7f:7c:bb:1d:
32:cb:48:d3:4d:2f:70:92:b1:06:53:be:e1:8f:4a:bb:4b:80:
3e:df:59:0f:ae:51:d1:9a:13:ba:c4:06:03:8e:e6:6d:44:40:
83:40:8e:5f:bb:6b:25:c5:47:27:fe:ee:6e:32:4b:9e:01:92:
e8:df:10:a9:e4:f3:d9:d9:b7:fa:de:f6:03:7e:3a:14:52:05:
74:86:87:7b:6b:63:a2:4a:77:86:47:a6:e2:96:60:da:f4:b4:
21:12:02:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09PPUhy/f7HNwx5eg0TgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MjQwZjAyN2E5NDA5MjI5YzU5ZmY2MzBhYTJhODBmOTM3
OGE5M2YwHhcNMjUwODA0MTIwMTA2WhcNMjUwODA1MTIwMTA2WjAzMTEwLwYDVQQD
EygzMDhmMDljNTk2NGYzNzRlZjA4ZTZlN2FjYjQ3ODFlNTgxMDZlMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoMsksOBDYpPy1nrC2ARxX7JVByp
r/o6+5thl1nqbVAT934dgGeYerU9awwAdxZmtm1bXXnuAyxjyLBVjyTjInF6H0Rk
PYY4JFvajKx7KKUuw9GRWdXAuyG7RfCRzzNl31gToNpava007QxV7kp5ObjV57/2
/GJw/Ko5NdTHZkO18da2UXQbHjNN5e5QSRP/7+oUNr+bBxXfFX6CLA1VS/IjlZe3
2/0dU1f4alx3Cm9aR7CcFlY2iloePlfAjbe2O2Knfu4IujJ5QGKNGYf8CVWAKDjH
Z5SGAI9/BfO2LhntB5wc34Rc6whc8jh2e3/xxuIReBJRh41EeE7YdKp/LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCPCcWWTzdO8I5uestHgeWBBuAkMB8GA1UdIwQY
MBaAFKkkDwJ6lAkinFn/YwqiqA+TeKk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iZmNmN2YtOTMwYy00ZWQ0LTk2Y2Qt
M2QxYjNhODZjZTg3LzEvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iZmNmN2YtOTMwYy00ZWQ0LTk2Y2QtM2QxYjNhODZjZTg3
LzEvcVNRUEFucVVDU0tjV2Y5akNxS29ENU40cVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuceVqnY
M57pyOKjxXXnHpaBEJ38YgXFddLK0Bk/7CC0BgcweV6nr/yb4JXrj0CGwJzoTqEZ
okVsZrQimuU943CrgGtGsdeuz7c0y+xby2hGJ8TOMBUxkTY3a1U4kcnt/wRrfrT7
wJ/dCtTXOMvIlB8GiXKZlAzL+IQOQbeL+/Wjekk69IYIOHJ+X8MEdw1nAq+hzgNz
pPk6myeENfp/fLsdMstI000vcJKxBlO+4Y9Ku0uAPt9ZD65R0ZoTusQGA47mbURA
g0COX7trJcVHJ/7ubjJLngGS6N8QqeTz2dm3+t72A346FFIFdIaHe2tjokp3hkem
4pZg2vS0IRIC1A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:18 2025 by rpki-client