
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
File: Qb-tl6WMtQy_yE7IZa89ccixha8.mft (raw, json)
Hash identifier: vTsKk+hn9ZCp3brQZExrAny/1bBnulbgHJv3IFXcxtk=
Subject key identifier: F3:77:E0:18:F1:50:32:4C:E0:B8:52:3F:08:70:33:56:C5:5A:05:9D
Authority key identifier: 41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
Certificate issuer: /CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Certificate serial: 01987F0A2E51735C373564C74D9304E70497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
Manifest number: 111F
Signing time: Wed 06 Aug 2025 11:00:29 +0000
Manifest this update: Wed 06 Aug 2025 11:00:29 +0000
Manifest next update: Thu 07 Aug 2025 11:00:29 +0000
Files and hashes: 1: Qb-tl6WMtQy_yE7IZa89ccixha8.crl (hash: cIZlFcq0IihrTSrdhT8Ir8/nQ4FFFhZsqVybtmvitI0=)
2: TAMhyO_TxaxCZl8ndF5QQYJ7fSc.roa (hash: fwo98qFwUrEP75fKt0AHaKO4fww5cOw9kGra/QKoqNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:2e:51:73:5c:37:35:64:c7:4d:93:04:e7:04:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41bfad97a58cb50cbfc84ec865af3d71c8b185af
Validity
Not Before: Aug 6 11:00:29 2025 GMT
Not After : Aug 7 11:00:29 2025 GMT
Subject: CN=f377e018f150324ce0b8523f08703356c55a059d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:43:71:e6:ae:55:1a:14:2e:31:67:48:b3:0e:
30:50:48:b6:05:a2:8a:77:9f:5e:30:dd:a5:dc:c9:
b4:a0:82:24:0b:f6:4e:52:2e:5b:15:1d:f9:fb:52:
b5:b7:e4:af:3f:51:bd:4b:89:8f:0b:61:9e:08:52:
aa:87:a4:9d:58:a3:b0:b8:f8:8c:e8:9f:a9:da:2e:
f9:80:62:e1:1c:3e:6c:3e:0e:ae:e2:1f:72:a7:dc:
e2:56:38:21:f4:d0:ba:c4:60:8c:1f:a6:81:b4:f7:
82:07:4c:8d:e3:4d:d0:ae:b2:66:7d:7d:41:04:7e:
82:0f:b8:c1:82:29:f8:f4:cd:7a:ed:8d:fb:8a:69:
16:91:8e:87:d3:e4:e8:c9:d6:f2:93:e8:ce:5a:aa:
9d:2b:a2:dd:4d:2c:38:b3:d9:42:9e:26:3e:45:da:
b5:54:57:53:99:73:8c:90:b3:cc:7a:3b:a2:0a:1a:
a4:82:b5:29:7f:30:01:91:8e:0d:aa:67:d7:14:35:
b8:ab:61:d7:a9:96:4a:f2:71:c2:e8:48:56:dd:8a:
77:80:f1:fa:72:43:25:b3:40:72:60:1e:eb:29:0e:
ab:24:db:21:7f:49:2a:96:d9:60:cb:51:53:58:52:
c7:6e:3d:c7:18:bc:bf:97:ac:ee:5d:92:97:38:95:
d8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:E0:18:F1:50:32:4C:E0:B8:52:3F:08:70:33:56:C5:5A:05:9D
X509v3 Authority Key Identifier:
keyid:41:BF:AD:97:A5:8C:B5:0C:BF:C8:4E:C8:65:AF:3D:71:C8:B1:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qb-tl6WMtQy_yE7IZa89ccixha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/Qb-tl6WMtQy_yE7IZa89ccixha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a0:e9:c8:4a:11:73:24:8d:cf:fe:c9:55:a2:c3:30:89:f5:
45:f4:d2:00:87:71:5f:61:4b:d4:0a:59:6d:19:14:87:8b:18:
5c:25:c2:3b:ed:73:06:42:09:6b:31:3c:63:50:34:29:59:35:
89:b8:30:63:6b:88:2d:8b:99:e4:41:fd:64:3a:52:b8:97:23:
f1:e3:f9:8d:c8:e0:c2:3e:54:21:c1:ca:59:81:b7:ea:d8:ad:
01:0e:72:7f:d3:fb:d0:26:71:8b:63:fa:2d:47:3d:0b:83:2f:
eb:14:78:99:05:62:ba:5c:a0:3c:b7:54:43:f7:7c:d6:c7:9b:
c7:fe:4f:5b:03:f4:ef:cd:c4:d6:4e:5f:c7:f5:a6:0c:23:55:
75:81:8f:35:82:3c:22:04:d6:8a:c4:5d:de:f8:96:af:0d:d3:
61:06:e5:71:07:3f:2e:52:81:fb:c6:a4:ae:f7:06:0f:89:08:
66:34:a5:b9:17:65:49:46:27:1d:cf:6e:33:5d:4b:a0:60:4e:
0f:8a:68:f7:d2:cb:2c:f4:4c:54:68:60:86:00:a0:d1:f0:95:
4d:95:22:8b:24:15:55:57:91:93:bd:9f:27:0f:b1:50:49:cd:
5b:f1:e4:e8:05:a3:ea:bc:59:88:f1:d8:0d:45:01:24:2c:69:
ab:fa:61:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/Ci5Rc1w3NWTHTZME5wSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmZhZDk3YTU4Y2I1MGNiZmM4NGVjODY1YWYzZDcxYzhi
MTg1YWYwHhcNMjUwODA2MTEwMDI5WhcNMjUwODA3MTEwMDI5WjAzMTEwLwYDVQQD
EyhmMzc3ZTAxOGYxNTAzMjRjZTBiODUyM2YwODcwMzM1NmM1NWEwNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkNx5q5VGhQuMWdIsw4wUEi2BaKK
d59eMN2l3Mm0oIIkC/ZOUi5bFR35+1K1t+SvP1G9S4mPC2GeCFKqh6SdWKOwuPiM
6J+p2i75gGLhHD5sPg6u4h9yp9ziVjgh9NC6xGCMH6aBtPeCB0yN403QrrJmfX1B
BH6CD7jBgin49M167Y37imkWkY6H0+Toydbyk+jOWqqdK6LdTSw4s9lCniY+Rdq1
VFdTmXOMkLPMejuiChqkgrUpfzABkY4NqmfXFDW4q2HXqZZK8nHC6EhW3Yp3gPH6
ckMls0ByYB7rKQ6rJNshf0kqltlgy1FTWFLHbj3HGLy/l6zuXZKXOJXYiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPN34BjxUDJM4LhSPwhwM1bFWgWdMB8GA1UdIwQY
MBaAFEG/rZeljLUMv8hOyGWvPXHIsYWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAt
YmY3OGJiODVhNjllLzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kNDYwMDEtMTYwOS00NDg3LTkxNTAtYmY3OGJiODVhNjll
LzEvUWItdGw2V010UXlfeUU3SVphODljY2l4aGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzKDpyEoR
cySNz/7JVaLDMIn1RfTSAIdxX2FL1ApZbRkUh4sYXCXCO+1zBkIJazE8Y1A0KVk1
ibgwY2uILYuZ5EH9ZDpSuJcj8eP5jcjgwj5UIcHKWYG36titAQ5yf9P70CZxi2P6
LUc9C4Mv6xR4mQViulygPLdUQ/d81sebx/5PWwP0783E1k5fx/WmDCNVdYGPNYI8
IgTWisRd3viWrw3TYQblcQc/LlKB+8akrvcGD4kIZjSluRdlSUYnHc9uM11LoGBO
D4po99LLLPRMVGhghgCg0fCVTZUiiyQVVVeRk72fJw+xUEnNW/Hk6AWj6rxZiPHY
DUUBJCxpq/phVg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:05:31 2025 by rpki-client