
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: QhNmkNIuUJOHA/tUvMdb/SjlHN8OpgQgdt4h7R7gDik=
Subject key identifier: B6:54:C6:4D:57:DB:D8:11:C4:3A:1E:36:F5:4A:09:3C:DE:13:A2:04
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 0198898EEB8B2EAAF1C0B8BCDB1D41DD2D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 0630
Signing time: Fri 08 Aug 2025 12:01:41 +0000
Manifest this update: Fri 08 Aug 2025 12:01:41 +0000
Manifest next update: Sat 09 Aug 2025 12:01:41 +0000
Files and hashes: 1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: SML7h7NzsIJLjuuiVFT/wICOTSz4Qg7pQ+wRQkwZ54U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:eb:8b:2e:aa:f1:c0:b8:bc:db:1d:41:dd:2d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Aug 8 12:01:41 2025 GMT
Not After : Aug 9 12:01:41 2025 GMT
Subject: CN=b654c64d57dbd811c43a1e36f54a093cde13a204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:55:bc:f2:42:08:28:bf:51:6c:ae:1a:7c:
03:57:de:fc:cc:df:95:3c:2f:f2:5c:67:b8:97:19:
75:88:e2:7c:96:19:82:36:0e:a2:bf:18:da:0c:1b:
19:bb:65:58:ed:3a:51:b6:80:be:03:ae:0c:7b:75:
d9:01:9c:15:9f:1b:d0:e7:23:45:a3:52:33:f5:82:
47:2a:cb:72:96:37:c1:1e:2a:21:23:22:f1:a0:7d:
2c:92:d3:40:18:e8:30:73:c8:7e:40:81:91:5e:38:
5b:24:aa:1d:55:1c:9a:61:53:79:d3:64:29:5a:cf:
df:b4:e7:14:69:a2:f0:f3:05:79:84:14:2f:54:39:
3e:c1:f9:d7:46:74:4f:4e:19:50:c0:9f:c3:51:fc:
d6:f0:79:09:a3:ab:9b:11:13:a4:92:41:5a:3a:19:
fa:93:b5:8a:c2:e2:6b:7f:f1:0e:c3:c1:3f:45:6b:
6b:76:c3:6e:f7:71:18:60:8f:f0:e7:4a:c2:7a:ad:
09:c0:b2:82:31:7a:fb:df:d9:94:04:54:f0:3e:ff:
4b:51:81:0b:4f:2b:49:ae:6c:3b:4b:b6:4d:77:0f:
14:13:c7:da:1e:80:1d:e9:a7:d4:92:f1:30:b6:30:
2c:22:b2:64:0c:4e:4b:89:09:45:34:e6:f9:06:10:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:54:C6:4D:57:DB:D8:11:C4:3A:1E:36:F5:4A:09:3C:DE:13:A2:04
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:1a:a6:5a:96:4c:f6:23:6c:2a:c7:e5:57:86:d4:50:29:69:
95:df:82:40:b9:d2:9b:9c:2e:d4:f8:2f:91:b4:3b:18:31:2f:
8c:c5:40:8c:dd:8f:1b:85:25:8d:94:20:4e:f3:61:d7:73:85:
af:f5:2b:c1:dd:f8:2f:43:c3:7c:2a:f2:55:04:88:2d:94:9b:
51:b4:3c:a7:c1:bd:4e:78:c1:b0:46:d6:02:5b:45:ed:ac:29:
53:6a:99:97:10:69:22:ed:12:be:de:44:48:7c:ba:a7:b8:74:
ed:f7:42:af:e3:36:ec:ad:04:24:50:4c:0c:83:d6:08:b3:de:
72:24:3a:d5:af:d5:c1:dc:a1:41:cb:6c:f6:af:73:83:02:f8:
52:8c:c0:b0:0f:fc:24:30:04:e6:42:be:d6:9b:83:40:90:9c:
9f:e4:83:58:9d:9c:df:b7:fa:61:68:61:0d:b7:ff:89:5f:34:
b9:31:58:cb:e7:d0:94:74:4a:27:ea:33:3b:b8:3a:2d:20:9d:
63:1f:98:08:f8:3e:5e:76:47:37:d1:70:a1:34:8d:53:8f:c8:
9a:41:7f:16:44:d3:b2:b6:9b:48:91:56:76:4b:ae:a4:57:17:
b4:e3:07:55:96:7a:f0:c8:b3:43:98:f1:4a:8f:0b:8c:42:52:
14:30:9e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJjuuLLqrxwLi82x1B3S1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDkxNWNkZDMyMmJmZTM5NDcyNTM2OTU1NDY0YTVmZjY3
MTE3YzMwHhcNMjUwODA4MTIwMTQxWhcNMjUwODA5MTIwMTQxWjAzMTEwLwYDVQQD
EyhiNjU0YzY0ZDU3ZGJkODExYzQzYTFlMzZmNTRhMDkzY2RlMTNhMjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw49VvPJCCCi/UWyuGnwDV978zN+V
PC/yXGe4lxl1iOJ8lhmCNg6ivxjaDBsZu2VY7TpRtoC+A64Me3XZAZwVnxvQ5yNF
o1Iz9YJHKstyljfBHiohIyLxoH0sktNAGOgwc8h+QIGRXjhbJKodVRyaYVN502Qp
Ws/ftOcUaaLw8wV5hBQvVDk+wfnXRnRPThlQwJ/DUfzW8HkJo6ubEROkkkFaOhn6
k7WKwuJrf/EOw8E/RWtrdsNu93EYYI/w50rCeq0JwLKCMXr739mUBFTwPv9LUYEL
TytJrmw7S7ZNdw8UE8faHoAd6afUkvEwtjAsIrJkDE5LiQlFNOb5BhAWxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZUxk1X29gRxDoeNvVKCTzeE6IEMB8GA1UdIwQY
MBaAFEFJFc3TIr/jlHJTaVVGSl/2cRfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yODMyMzQtYTUyYS00NTU2LWIzY2It
ZjFkNWNhOTZhN2Q2LzEvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yODMyMzQtYTUyYS00NTU2LWIzY2ItZjFkNWNhOTZhN2Q2
LzEvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2hqmWpZM
9iNsKsflV4bUUClpld+CQLnSm5wu1PgvkbQ7GDEvjMVAjN2PG4UljZQgTvNh13OF
r/Urwd34L0PDfCryVQSILZSbUbQ8p8G9TnjBsEbWAltF7awpU2qZlxBpIu0Svt5E
SHy6p7h07fdCr+M27K0EJFBMDIPWCLPeciQ61a/VwdyhQcts9q9zgwL4UozAsA/8
JDAE5kK+1puDQJCcn+SDWJ2c37f6YWhhDbf/iV80uTFYy+fQlHRKJ+ozO7g6LSCd
Yx+YCPg+XnZHN9FwoTSNU4/ImkF/FkTTsrabSJFWdkuupFcXtOMHVZZ68MizQ5jx
So8LjEJSFDCeaQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:33 2025 by rpki-client