
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: JciDhJCE25wUu0MGEmtFC+8exWtAq4rrEJYH+x6P/fM=
Subject key identifier: DB:87:27:E9:66:37:84:80:16:33:8E:D6:BF:5E:6E:D1:7A:48:1A:0A
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 01988B7C9B3204C5E1B53FD168F711C1B80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 1627
Signing time: Fri 08 Aug 2025 21:00:55 +0000
Manifest this update: Fri 08 Aug 2025 21:00:55 +0000
Manifest next update: Sat 09 Aug 2025 21:00:55 +0000
Files and hashes: 1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: pxGapU5o7131OwE251DaFS2VJeiwBAepapL5PUrSWV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:9b:32:04:c5:e1:b5:3f:d1:68:f7:11:c1:b8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Aug 8 21:00:55 2025 GMT
Not After : Aug 9 21:00:55 2025 GMT
Subject: CN=db8727e96637848016338ed6bf5e6ed17a481a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1b:ba:91:cf:60:a3:1f:c9:7a:39:56:53:98:
89:bb:41:3f:91:58:bc:28:e8:7e:b1:a5:53:c5:3e:
f7:39:fd:89:0e:45:be:42:36:03:25:83:34:00:34:
4e:a8:bc:c4:03:0f:17:6a:50:51:01:5b:5e:71:c1:
45:7c:25:a2:d4:fd:c1:e1:cc:16:97:02:40:7d:9e:
a5:e4:f4:1e:17:f1:df:89:51:19:ef:01:d0:01:51:
83:8c:39:53:6e:10:b8:37:4f:40:5b:cd:ab:9a:28:
59:7b:17:9d:fa:a4:2b:0a:41:38:16:5b:f2:05:12:
50:6b:b9:d5:5c:08:ef:f9:c1:80:27:9c:84:b5:3f:
01:22:0e:45:dc:a0:d4:ca:cb:6b:b1:a8:91:4b:20:
98:c2:d0:52:19:19:eb:55:70:b0:ac:d5:f4:bb:e2:
88:45:01:bf:42:20:cb:7a:45:00:58:bc:ac:4a:3d:
c5:e7:88:6f:e8:89:08:8e:53:ab:bb:26:c0:c4:5d:
2d:87:38:53:7d:1f:e3:13:d6:cd:20:0f:cb:8a:36:
a6:13:af:be:4e:9b:9c:07:be:e7:70:00:0b:56:d5:
a3:86:30:06:0c:6a:25:65:39:ff:20:5e:da:ce:09:
0d:61:dc:6d:09:10:8c:88:89:ce:32:6a:25:cc:51:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:87:27:E9:66:37:84:80:16:33:8E:D6:BF:5E:6E:D1:7A:48:1A:0A
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:87:6a:fe:32:00:ba:c5:c9:85:04:9c:71:88:54:b5:6d:ec:
bc:c5:59:b9:d1:86:e1:67:4e:6c:60:df:9a:f1:fc:97:1f:58:
fd:9c:45:b8:0a:d8:c4:f0:74:9f:8e:27:e0:9f:2c:77:06:34:
3d:c1:66:ff:c2:6a:85:bc:6d:af:7e:28:e9:bd:6b:6a:be:70:
8f:da:a6:e2:4a:1b:5b:3e:44:e2:a0:63:ac:17:62:e0:aa:4d:
b7:23:d5:3f:1f:6c:47:50:d9:fc:bf:f3:27:95:af:9d:d4:36:
67:d0:22:a1:89:26:71:83:51:31:34:71:03:b9:28:8f:44:42:
c0:d2:1c:2d:fc:75:7a:76:8e:c5:3d:38:0f:53:6e:da:72:38:
2e:e4:33:05:d5:e6:a2:6d:04:1a:31:42:eb:09:c9:60:56:ea:
6d:1a:06:24:02:55:0d:00:f9:2a:f8:b2:be:96:e3:91:f1:40:
a0:07:21:43:ed:e2:d4:6b:e0:be:65:da:85:85:f0:d9:fb:ec:
27:bf:14:b2:75:8e:ee:39:17:bf:85:1f:33:f3:4d:d8:ef:48:
19:27:de:7f:dc:98:0a:1a:02:0c:c1:ca:ef:a1:d1:37:d8:41:
81:e1:fd:1c:4f:19:cf:24:a9:f7:87:1c:c7:ae:59:0d:51:97:
d9:d2:10:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfJsyBMXhtT/RaPcRwbgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOGRmODY4ZjdkOWU5OGQ0ZmQ0MWU2ZGE1OTdhMjgzYzkx
NDFiNDQwHhcNMjUwODA4MjEwMDU1WhcNMjUwODA5MjEwMDU1WjAzMTEwLwYDVQQD
EyhkYjg3MjdlOTY2Mzc4NDgwMTYzMzhlZDZiZjVlNmVkMTdhNDgxYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthu6kc9gox/JejlWU5iJu0E/kVi8
KOh+saVTxT73Of2JDkW+QjYDJYM0ADROqLzEAw8XalBRAVteccFFfCWi1P3B4cwW
lwJAfZ6l5PQeF/HfiVEZ7wHQAVGDjDlTbhC4N09AW82rmihZexed+qQrCkE4Flvy
BRJQa7nVXAjv+cGAJ5yEtT8BIg5F3KDUystrsaiRSyCYwtBSGRnrVXCwrNX0u+KI
RQG/QiDLekUAWLysSj3F54hv6IkIjlOruybAxF0thzhTfR/jE9bNIA/LijamE6++
TpucB77ncAALVtWjhjAGDGolZTn/IF7azgkNYdxtCRCMiInOMmolzFFHCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuHJ+lmN4SAFjOO1r9ebtF6SBoKMB8GA1UdIwQY
MBaAFEGN+Gj32emNT9QebaWXooPJFBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEt
ZWU5YzM0NTJjYmFmLzEvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jNmY4NmQtZjc5NS00MTlmLWFkMzEtZWU5YzM0NTJjYmFm
LzEvUVkzNGFQZlo2WTFQMUI1dHBaZWlnOGtVRzBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYdq/jIA
usXJhQSccYhUtW3svMVZudGG4WdObGDfmvH8lx9Y/ZxFuArYxPB0n44n4J8sdwY0
PcFm/8Jqhbxtr34o6b1rar5wj9qm4kobWz5E4qBjrBdi4KpNtyPVPx9sR1DZ/L/z
J5WvndQ2Z9AioYkmcYNRMTRxA7koj0RCwNIcLfx1enaOxT04D1Nu2nI4LuQzBdXm
om0EGjFC6wnJYFbqbRoGJAJVDQD5KviyvpbjkfFAoAchQ+3i1GvgvmXahYXw2fvs
J78UsnWO7jkXv4UfM/NN2O9IGSfef9yYChoCDMHK76HRN9hBgeH9HE8ZzySp94cc
x65ZDVGX2dIQNQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:51 2025 by rpki-client