Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
File: QiYpIEOCMfMh47gQEIiyD5DAjUY.mft (raw, json)
Hash identifier: qLgaD/9Sb41YR1hJUD4Ye0yzagKHeD/B8eQI81AX58k=
Subject key identifier: 40:C9:E3:B5:EB:6F:93:F7:8F:E7:CA:54:FE:6D:35:D1:53:89:26:8C
Authority key identifier: 42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
Certificate issuer: /CN=42262920438231f321e3b8101088b20f90c08d46
Certificate serial: 019771517FDDE04839F76AE4337FDA9F341B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
Manifest number: 04F3
Signing time: Sun 15 Jun 2025 02:00:55 +0000
Manifest this update: Sun 15 Jun 2025 02:00:55 +0000
Manifest next update: Mon 16 Jun 2025 02:00:55 +0000
Files and hashes: 1: QiYpIEOCMfMh47gQEIiyD5DAjUY.crl (hash: TZ4cvtBDsumAcvwo/cPj2Wt/8MBwHCpQ9VJUm1xpk18=)
2: vzK0GcfKIhsh5S1UL0NdOS-MO04.roa (hash: tbZrlZm8dX+O2bKlUBHktkojMJRjyTWeZk1UwYb3Lj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:7f:dd:e0:48:39:f7:6a:e4:33:7f:da:9f:34:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42262920438231f321e3b8101088b20f90c08d46
Validity
Not Before: Jun 15 02:00:55 2025 GMT
Not After : Jun 16 02:00:55 2025 GMT
Subject: CN=40c9e3b5eb6f93f78fe7ca54fe6d35d15389268c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:03:9c:8a:40:3f:29:06:2a:36:a5:e6:a3:
d5:d9:de:4c:85:49:ee:6b:04:15:13:f8:7b:9b:46:
e8:46:4f:27:40:7e:08:e2:f5:75:93:56:9d:b3:6d:
bf:49:1b:e0:fd:cf:ea:a4:59:c8:6b:fb:2d:df:f9:
92:09:d2:9b:7e:3d:3b:9f:0b:73:74:15:df:10:2f:
ba:13:7a:13:37:82:d2:6d:e0:e1:18:ae:1e:ce:ff:
8c:16:6b:5e:ce:02:ab:6e:37:a1:f2:c2:ae:ee:fb:
13:ee:84:3f:c5:ff:8a:8c:c8:a9:dd:b2:a5:0b:19:
7a:67:f4:b0:67:de:9e:38:7f:3b:ee:f7:d9:66:ed:
b7:34:a3:c9:3e:9c:11:95:d6:f1:a8:cd:d5:c8:e7:
d2:67:2b:c3:75:56:61:4a:af:ab:38:6a:bc:ec:cd:
f7:cd:63:ca:97:bb:e2:0e:01:9a:43:4e:39:59:5d:
55:07:85:8d:6b:fc:02:aa:6a:d3:32:1f:1a:12:a1:
a9:5c:3e:66:fe:73:47:68:43:c5:79:85:44:ab:e8:
7e:16:e3:d1:58:a5:3a:21:12:96:e1:ff:e9:f6:ad:
9a:e0:77:57:13:8b:f7:c0:81:9e:79:b8:77:1e:9a:
58:0b:c7:59:33:22:1d:e1:c9:96:7f:ff:35:ff:25:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C9:E3:B5:EB:6F:93:F7:8F:E7:CA:54:FE:6D:35:D1:53:89:26:8C
X509v3 Authority Key Identifier:
keyid:42:26:29:20:43:82:31:F3:21:E3:B8:10:10:88:B2:0F:90:C0:8D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiYpIEOCMfMh47gQEIiyD5DAjUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c9b733-3bb4-4bbb-9636-74e620b1801b/1/QiYpIEOCMfMh47gQEIiyD5DAjUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d0:38:62:3f:2c:a5:92:a8:ca:08:fd:22:3a:eb:31:ea:89:
9b:15:1a:da:b5:d5:14:18:39:98:ca:f0:f6:f0:98:4c:40:da:
0f:a4:3f:6c:dc:c4:4e:c2:ee:d9:78:87:77:f4:79:83:07:37:
5c:1c:4f:5b:35:18:9e:57:84:8c:49:95:52:91:c7:5b:4a:17:
eb:9b:f3:2a:6c:7a:a4:46:69:0c:5b:cc:d4:a6:9f:00:6e:ae:
05:b7:48:1a:63:61:27:5e:1e:0d:e2:b0:e1:6f:8a:59:b2:a0:
30:99:cb:1a:fb:73:ce:cc:e3:00:08:64:b2:5a:dc:27:95:43:
62:91:e9:56:22:4b:53:2d:31:27:31:4a:63:ac:e8:f9:20:45:
81:d3:72:40:29:dc:a8:e8:96:2a:60:00:9a:f0:84:cf:39:5d:
db:83:f2:61:e0:10:80:d3:f2:74:d8:a0:2e:af:b5:72:e7:10:
d3:fd:a6:d2:56:d1:28:61:27:a0:2b:11:8e:fd:70:75:7c:ba:
b1:9a:15:a2:51:c4:0b:33:4a:6e:bb:9f:97:e8:83:ad:cd:cf:
de:ea:df:46:e8:03:78:f0:da:1d:67:f0:0b:7d:28:7c:f3:72:
bd:ee:ec:a8:7a:c7:45:71:08:c1:12:8e:31:1e:5c:b6:6a:41:
17:c7:ce:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxUX/d4Eg592rkM3/anzQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjYyOTIwNDM4MjMxZjMyMWUzYjgxMDEwODhiMjBmOTBj
MDhkNDYwHhcNMjUwNjE1MDIwMDU1WhcNMjUwNjE2MDIwMDU1WjAzMTEwLwYDVQQD
Eyg0MGM5ZTNiNWViNmY5M2Y3OGZlN2NhNTRmZTZkMzVkMTUzODkyNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvEDnIpAPykGKjal5qPV2d5MhUnu
awQVE/h7m0boRk8nQH4I4vV1k1ads22/SRvg/c/qpFnIa/st3/mSCdKbfj07nwtz
dBXfEC+6E3oTN4LSbeDhGK4ezv+MFmtezgKrbjeh8sKu7vsT7oQ/xf+KjMip3bKl
Cxl6Z/SwZ96eOH877vfZZu23NKPJPpwRldbxqM3VyOfSZyvDdVZhSq+rOGq87M33
zWPKl7viDgGaQ045WV1VB4WNa/wCqmrTMh8aEqGpXD5m/nNHaEPFeYVEq+h+FuPR
WKU6IRKW4f/p9q2a4HdXE4v3wIGeebh3HppYC8dZMyId4cmWf/81/yXgzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDJ47Xrb5P3j+fKVP5tNdFTiSaMMB8GA1UdIwQY
MBaAFEImKSBDgjHzIeO4EBCIsg+QwI1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jOWI3MzMtM2JiNC00YmJiLTk2MzYt
NzRlNjIwYjE4MDFiLzEvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jOWI3MzMtM2JiNC00YmJiLTk2MzYtNzRlNjIwYjE4MDFi
LzEvUWlZcElFT0NNZk1oNDdnUUVJaXlENURBalVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNA4Yj8s
pZKoygj9IjrrMeqJmxUa2rXVFBg5mMrw9vCYTEDaD6Q/bNzETsLu2XiHd/R5gwc3
XBxPWzUYnleEjEmVUpHHW0oX65vzKmx6pEZpDFvM1KafAG6uBbdIGmNhJ14eDeKw
4W+KWbKgMJnLGvtzzszjAAhkslrcJ5VDYpHpViJLUy0xJzFKY6zo+SBFgdNyQCnc
qOiWKmAAmvCEzzld24PyYeAQgNPydNigLq+1cucQ0/2m0lbRKGEnoCsRjv1wdXy6
sZoVolHECzNKbrufl+iDrc3P3urfRugDePDaHWfwC30ofPNyve7sqHrHRXEIwRKO
MR5ctmpBF8fOog==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:12:50 2025 by rpki-client