Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: qy1PuVH1xkE8OQHqPNvudPUfAdQnIOAJ3urza9Xb0Y0=
Subject key identifier: 62:CF:F9:EA:C6:BF:40:40:10:8C:E0:AB:1B:EA:7B:AA:36:8B:4B:DE
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 01987CE5D46918CC79FB278B38F1AA8F2772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 0305
Signing time: Wed 06 Aug 2025 01:01:33 +0000
Manifest this update: Wed 06 Aug 2025 01:01:33 +0000
Manifest next update: Thu 07 Aug 2025 01:01:33 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: SFIFEoh4GNqSxzdHk9lAt8yeV2qYwn3fLJ3wUXiNcmU=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:d4:69:18:cc:79:fb:27:8b:38:f1:aa:8f:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Aug 6 01:01:33 2025 GMT
Not After : Aug 7 01:01:33 2025 GMT
Subject: CN=62cff9eac6bf4040108ce0ab1bea7baa368b4bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:d3:07:cb:1d:bb:c4:cc:58:b1:16:8c:f8:
7a:80:60:a5:37:c5:cc:08:fd:5a:18:a5:66:41:04:
53:94:54:de:47:29:c9:13:1c:df:d2:7e:52:d3:23:
d9:d2:86:7d:e7:a7:0e:27:33:51:82:3d:16:53:63:
93:4e:e5:0c:34:85:78:d9:bf:cd:b0:93:e7:0c:6a:
1e:d2:2a:5d:f2:dc:0d:52:b2:6e:4b:e0:fb:bb:d7:
a8:47:aa:a8:31:72:64:11:0b:7f:8d:a3:08:ca:93:
29:15:ab:4b:1a:92:12:70:27:94:bc:3b:66:ef:e6:
ea:95:43:ff:8e:b8:0f:19:07:11:7d:95:00:66:2f:
73:73:86:f6:10:47:b1:5c:2e:50:23:8c:0d:ce:ea:
3b:d1:6f:36:90:cd:43:ff:f8:54:ed:5a:c2:59:b2:
07:b4:7c:00:d0:45:cc:a6:81:6b:c9:cf:a5:07:f8:
a3:ef:c1:2b:75:f0:cc:e5:39:d1:6d:cd:b9:9c:53:
23:9c:f7:84:d8:0c:89:47:ae:13:a8:9d:32:91:d2:
8e:d5:95:66:70:3e:84:62:9d:48:2a:35:ae:e4:f0:
55:c0:8c:8c:d1:7d:5c:6a:ff:60:cd:66:d9:1d:64:
44:2f:48:9a:9a:1c:31:66:ad:b2:86:54:13:7a:c9:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CF:F9:EA:C6:BF:40:40:10:8C:E0:AB:1B:EA:7B:AA:36:8B:4B:DE
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b5:0b:0d:a0:94:1f:74:4b:82:4f:0d:1b:17:7b:a9:2d:20:
6e:96:aa:8d:11:8a:60:fc:a6:08:80:6e:29:82:32:79:86:15:
74:d2:21:ac:47:ea:f0:76:00:18:6b:72:8d:a8:d8:54:3d:f9:
9a:80:5a:b8:c4:cc:8e:b5:34:77:14:65:51:ed:f9:33:1c:79:
9d:c7:11:93:71:fa:e1:ce:46:00:e9:26:13:87:4d:60:51:5f:
fa:d9:56:d3:37:f5:e8:f0:16:cb:e9:fe:fb:f8:1b:f8:e7:f9:
4f:f3:07:8c:7e:b0:5c:bf:5a:7a:ca:6d:65:80:4f:93:f1:1e:
4c:68:5b:4e:3f:8d:6d:a7:38:0b:86:49:2a:6e:8f:62:94:17:
f6:5f:51:84:5c:f3:fe:2a:55:31:7e:34:b5:4d:b4:54:d7:42:
e2:10:10:08:5f:02:4b:fb:7a:eb:7d:f6:05:2e:10:03:4b:aa:
8f:f2:5f:d2:95:c6:55:22:90:ab:af:f8:08:e4:6a:02:ff:65:
42:de:87:df:36:e6:d9:1e:44:a3:57:8e:ee:22:18:38:dd:b9:
f7:ee:ec:01:ae:c1:4a:3b:a7:c7:fd:b3:a1:0d:18:e7:32:42:
b8:d2:5c:d7:82:af:4e:dc:dc:3e:3f:e4:9c:1d:fe:f6:5f:87:
e3:d8:18:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85dRpGMx5+yeLOPGqjydyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTVjM2VmMDBjZmZlY2UyZjcxYjYxOTkxYzZjNmQzZGE0
OWMxMTAwHhcNMjUwODA2MDEwMTMzWhcNMjUwODA3MDEwMTMzWjAzMTEwLwYDVQQD
Eyg2MmNmZjllYWM2YmY0MDQwMTA4Y2UwYWIxYmVhN2JhYTM2OGI0YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6DTB8sdu8TMWLEWjPh6gGClN8XM
CP1aGKVmQQRTlFTeRynJExzf0n5S0yPZ0oZ956cOJzNRgj0WU2OTTuUMNIV42b/N
sJPnDGoe0ipd8twNUrJuS+D7u9eoR6qoMXJkEQt/jaMIypMpFatLGpIScCeUvDtm
7+bqlUP/jrgPGQcRfZUAZi9zc4b2EEexXC5QI4wNzuo70W82kM1D//hU7VrCWbIH
tHwA0EXMpoFryc+lB/ij78ErdfDM5TnRbc25nFMjnPeE2AyJR64TqJ0ykdKO1ZVm
cD6EYp1IKjWu5PBVwIyM0X1cav9gzWbZHWREL0iamhwxZq2yhlQTesl+TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLP+erGv0BAEIzgqxvqe6o2i0veMB8GA1UdIwQY
MBaAFEKVw+8Az/7OL3G2GZHGxtPaScEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBYRDd3RFBfczR2Y2JZWmtjYkcwOXBKd1JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYzdmODMtYmMyOC00MjgyLWFhMDIt
OTY5ZjJhMDBlZGUwLzEvUXBYRDd3RFBfczR2Y2JZWmtjYkcwOXBKd1JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYzdmODMtYmMyOC00MjgyLWFhMDItOTY5ZjJhMDBlZGUw
LzEvUXBYRDd3RFBfczR2Y2JZWmtjYkcwOXBKd1JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbULDaCU
H3RLgk8NGxd7qS0gbpaqjRGKYPymCIBuKYIyeYYVdNIhrEfq8HYAGGtyjajYVD35
moBauMTMjrU0dxRlUe35Mxx5nccRk3H64c5GAOkmE4dNYFFf+tlW0zf16PAWy+n+
+/gb+Of5T/MHjH6wXL9aesptZYBPk/EeTGhbTj+Nbac4C4ZJKm6PYpQX9l9RhFzz
/ipVMX40tU20VNdC4hAQCF8CS/t66332BS4QA0uqj/Jf0pXGVSKQq6/4CORqAv9l
Qt6H3zbm2R5Eo1eO7iIYON259+7sAa7BSjunx/2zoQ0Y5zJCuNJc14KvTtzcPj/k
nB3+9l+H49gYgw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:21:58 2025 by rpki-client