
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: x2LwZEbNPCD54HbDZLdDIKLV3UtZVAAxWvy+VDpQ1EE=
Subject key identifier: 1A:7A:DE:5B:D0:48:77:50:3A:1A:D7:1F:7B:2E:7B:68:E2:55:19:E0
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019890359438BDEFB3549E2ADEE9F201A2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0D0E
Signing time: Sat 09 Aug 2025 19:01:26 +0000
Manifest this update: Sat 09 Aug 2025 19:01:26 +0000
Manifest next update: Sun 10 Aug 2025 19:01:26 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: e3Ckbt8HzE7Todkkca7hjNRy12XaRQGuXGLicB9LqjA=)
2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:94:38:bd:ef:b3:54:9e:2a:de:e9:f2:01:a2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Aug 9 19:01:26 2025 GMT
Not After : Aug 10 19:01:26 2025 GMT
Subject: CN=1a7ade5bd04877503a1ad71f7b2e7b68e25519e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:fa:67:85:0d:74:3e:cf:68:bd:b3:f9:b4:
de:a4:06:9c:1c:f3:22:60:56:cf:97:df:28:8c:98:
16:c1:2e:03:b1:10:2a:33:92:65:58:15:0e:7c:56:
70:68:a2:8d:0e:bc:e6:12:b9:ef:37:bd:89:12:94:
2a:b9:2d:38:1e:a1:10:4a:35:01:18:34:df:e1:a9:
18:44:2c:ca:8d:01:43:11:b2:21:33:60:a5:e5:fc:
52:f1:85:23:c2:9c:78:34:0f:98:12:e2:53:37:3f:
4b:c4:df:0d:0d:f5:dd:a0:b9:64:86:43:e4:47:2d:
d8:77:8d:e8:47:2f:8c:8a:ac:d3:1f:7b:03:ca:21:
e9:99:95:08:e6:1d:75:21:01:31:64:d2:bb:54:47:
d3:8a:66:4f:83:f2:54:4a:2a:e4:47:d9:f0:48:d7:
80:70:ee:f1:b1:d1:55:ea:36:41:f5:da:bf:18:26:
2c:01:3e:a8:53:fd:3c:33:81:1a:d8:87:04:79:01:
c5:71:2f:6a:69:99:8a:87:e2:c3:6b:60:f7:c3:2a:
14:d3:f0:29:d2:36:c9:15:c7:11:65:f2:96:c4:d2:
0e:6d:f6:65:88:9f:8e:d6:28:45:33:bc:14:fa:9c:
61:40:37:7f:d8:ff:0f:ce:b4:2f:99:e8:8d:68:83:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:DE:5B:D0:48:77:50:3A:1A:D7:1F:7B:2E:7B:68:E2:55:19:E0
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:bd:85:56:fd:02:14:2d:fc:af:ac:e5:c0:26:f5:c1:4d:c9:
22:ca:6c:60:57:fe:ef:5b:90:a3:dc:20:2c:f2:a4:59:f9:2d:
1d:25:27:bf:4a:bd:b3:2f:95:56:5f:37:25:85:af:ed:44:fe:
5b:ee:06:53:62:89:61:41:e0:b8:f0:52:cd:24:e0:33:b0:3c:
9b:ce:59:0c:72:9f:4b:45:69:e9:48:6d:3f:48:d4:3d:a9:70:
30:2b:a4:dc:0f:db:ae:d9:26:2a:c3:6c:c9:00:ab:e8:f7:85:
2f:2d:0f:f5:0c:75:fe:b8:21:2a:89:2a:be:22:e5:15:35:60:
90:df:3c:98:3f:3c:bf:fd:34:ef:96:a5:83:01:38:c4:49:3b:
de:16:f1:0e:23:2f:fc:68:63:9b:32:ca:24:ec:25:05:44:18:
2f:46:2d:10:54:6b:98:d8:c4:24:7b:39:64:f3:d7:13:d5:c5:
b0:53:81:29:a8:a1:a9:ee:c2:f9:fe:23:35:b0:29:1c:fc:77:
ec:9b:2f:00:ff:b0:1e:f0:f2:56:d9:5c:8f:9a:03:e6:06:6d:
51:cb:68:3a:52:c7:e6:45:12:72:18:51:cd:71:94:29:5d:4b:
88:71:63:59:7c:1f:fe:ff:b0:83:c5:28:3d:26:87:d1:e2:8e:
68:90:88:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNZQ4ve+zVJ4q3unyAaLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDRmZDE5ODBiYTAxNzg4YTM1M2EyNmZlZjg5NTRlZDdj
MTFmOTYwHhcNMjUwODA5MTkwMTI2WhcNMjUwODEwMTkwMTI2WjAzMTEwLwYDVQQD
EygxYTdhZGU1YmQwNDg3NzUwM2ExYWQ3MWY3YjJlN2I2OGUyNTUxOWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDz6Z4UNdD7PaL2z+bTepAacHPMi
YFbPl98ojJgWwS4DsRAqM5JlWBUOfFZwaKKNDrzmErnvN72JEpQquS04HqEQSjUB
GDTf4akYRCzKjQFDEbIhM2Cl5fxS8YUjwpx4NA+YEuJTNz9LxN8NDfXdoLlkhkPk
Ry3Yd43oRy+MiqzTH3sDyiHpmZUI5h11IQExZNK7VEfTimZPg/JUSirkR9nwSNeA
cO7xsdFV6jZB9dq/GCYsAT6oU/08M4Ea2IcEeQHFcS9qaZmKh+LDa2D3wyoU0/Ap
0jbJFccRZfKWxNIObfZliJ+O1ihFM7wU+pxhQDd/2P8PzrQvmeiNaINVkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp63lvQSHdQOhrXH3sue2jiVRngMB8GA1UdIwQY
MBaAFEBE/RmAugF4ijU6Jv74lU7XwR+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNWIxNmEtZjc2Yi00MWE0LTg4YmMt
OTFjZjYxNmQyYzUyLzEvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8xNWIxNmEtZjc2Yi00MWE0LTg4YmMtOTFjZjYxNmQyYzUy
LzEvUUVUOUdZQzZBWGlLTlRvbV92aVZUdGZCSDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv72FVv0C
FC38r6zlwCb1wU3JIspsYFf+71uQo9wgLPKkWfktHSUnv0q9sy+VVl83JYWv7UT+
W+4GU2KJYUHguPBSzSTgM7A8m85ZDHKfS0Vp6UhtP0jUPalwMCuk3A/brtkmKsNs
yQCr6PeFLy0P9Qx1/rghKokqviLlFTVgkN88mD88v/0075algwE4xEk73hbxDiMv
/GhjmzLKJOwlBUQYL0YtEFRrmNjEJHs5ZPPXE9XFsFOBKaihqe7C+f4jNbApHPx3
7JsvAP+wHvDyVtlcj5oD5gZtUctoOlLH5kUSchhRzXGUKV1LiHFjWXwf/v+wg8Uo
PSaH0eKOaJCI1A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:25 2025 by rpki-client