Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: 6P4xzHx5JhV8lfD9NKZtiUH7LIrg+rSTFAXg4lmTq5Q=
Subject key identifier: 1B:69:0D:1C:A5:0E:87:24:1B:30:97:94:C4:9F:1D:D2:88:9F:40:2F
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 0198733D88A2360B8BCE69CB1B8E52DDFE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 07C4
Signing time: Mon 04 Aug 2025 04:01:09 +0000
Manifest this update: Mon 04 Aug 2025 04:01:09 +0000
Manifest next update: Tue 05 Aug 2025 04:01:09 +0000
Files and hashes: 1: KVvOGYEyHhWhRHwS9LQjG3XK8EI.roa (hash: AFMADJ+EdA++truR6oHaQkzeXGaM562uJumCeUqnVzo=)
2: MHGZA5Y3PVpWBImn85tARMZRftQ.roa (hash: bnJhZwRrO7KGALVUCy1om+i/htb3dvM6lJ1uAmGl2G8=)
3: O1UMqFY4UYla6Wia0-cx5UTbNYo.roa (hash: yk9XmbWdQVbHd1Fk+ePRsax442yqoQX1eANsND8ceoU=)
4: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: VHtVL3qMPoYF58mx2+ek37XtZ61GdEWTqhfvCh9BM0E=)
5: TNSMUQvHGS8vGJs7QmyW0_jz86Y.roa (hash: qI6N5+Q6nkQDs5kBZ+Upq2gzqwGu3xE2kqSgmDsGATI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:88:a2:36:0b:8b:ce:69:cb:1b:8e:52:dd:fe:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Aug 4 04:01:09 2025 GMT
Not After : Aug 5 04:01:09 2025 GMT
Subject: CN=1b690d1ca50e87241b309794c49f1dd2889f402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:33:6f:3d:27:25:79:82:71:1a:0f:a1:e1:
0a:e9:aa:97:a1:23:3a:c5:18:b3:10:96:42:e5:7b:
62:1c:5c:51:22:d1:f0:08:ce:c6:55:a4:87:03:78:
28:42:87:7b:25:de:96:e0:da:53:59:d7:42:42:b6:
67:ad:ec:ca:75:33:04:06:f0:60:15:f2:58:1b:c3:
19:a2:8a:ae:a9:78:03:46:60:e6:be:27:e4:46:65:
ab:c1:28:15:a3:87:db:bb:03:cf:d9:67:af:57:4a:
8c:66:e1:b9:17:c2:3f:83:5d:f2:68:48:25:e4:0c:
bd:4c:5d:4c:63:ac:ba:e9:33:5f:e3:c5:ad:86:c8:
8e:d4:ee:9e:24:a5:31:f5:38:dc:f7:2f:74:b8:d5:
3a:28:47:86:75:c8:fb:7b:7b:ec:19:cb:e2:a5:a9:
8c:4e:f4:02:d5:22:8f:7b:0a:bf:12:32:17:90:57:
ce:56:cb:8a:7d:8d:d3:85:30:90:b1:62:24:d8:2c:
48:0e:c8:97:fb:e8:1b:1d:a2:42:3b:4a:b3:b0:7c:
66:51:78:83:53:65:c5:c3:a3:60:2b:24:39:e3:42:
bc:10:13:7c:c2:1c:a0:91:91:59:54:74:36:2f:91:
03:39:aa:2c:5e:df:f3:e9:5e:d0:5d:f3:6f:b1:e3:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:69:0D:1C:A5:0E:87:24:1B:30:97:94:C4:9F:1D:D2:88:9F:40:2F
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7f:dd:52:e4:40:52:93:6a:63:6c:58:4e:c8:33:5f:1d:8e:
8e:29:83:2f:7d:7c:b9:1c:4e:78:bf:5d:d8:a8:66:a0:bf:1c:
4d:da:ed:b5:d3:2e:e8:12:79:b9:b8:60:1b:ff:54:e0:35:0f:
26:46:7e:3b:4b:20:59:0c:66:af:b0:3d:cc:0f:66:41:95:0f:
66:97:06:bc:05:02:45:9a:69:c9:74:a2:24:ea:f6:4a:b2:53:
9c:ac:2c:a2:1f:c1:d8:47:5b:b6:bd:ec:c7:7c:a3:04:a4:ac:
85:1e:dc:88:51:d7:9a:08:c1:7a:e6:43:24:7b:a7:21:ca:4c:
85:3a:1e:0e:35:90:2b:5d:ac:9c:eb:eb:32:21:28:54:ba:42:
e8:18:23:cf:28:f9:7d:cc:cc:38:76:4e:02:3d:75:44:01:4f:
c9:25:65:f8:19:d2:ce:2f:1c:1f:d1:5f:61:75:34:55:f9:e5:
27:d2:34:34:b3:c9:67:4c:95:f1:e2:2f:6e:6d:31:13:96:62:
d5:2e:ca:29:d8:03:58:51:b7:e1:3f:16:91:89:1b:86:4e:c3:
34:2e:2c:89:be:c7:61:98:ba:78:87:d7:bd:ab:da:11:da:0b:
23:4a:29:6a:b6:45:d8:d8:48:e2:40:4e:44:84:06:b1:68:3f:
7d:e7:8e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPYiiNguLzmnLG45S3f55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2Q1YTUwMzhkNWUxMmZlMWM5ZDlmNWM4NjY0MDc0YzNk
ZDBhYzcwHhcNMjUwODA0MDQwMTA5WhcNMjUwODA1MDQwMTA5WjAzMTEwLwYDVQQD
EygxYjY5MGQxY2E1MGU4NzI0MWIzMDk3OTRjNDlmMWRkMjg4OWY0MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ4zbz0nJXmCcRoPoeEK6aqXoSM6
xRizEJZC5XtiHFxRItHwCM7GVaSHA3goQod7Jd6W4NpTWddCQrZnrezKdTMEBvBg
FfJYG8MZooquqXgDRmDmvifkRmWrwSgVo4fbuwPP2WevV0qMZuG5F8I/g13yaEgl
5Ay9TF1MY6y66TNf48WthsiO1O6eJKUx9Tjc9y90uNU6KEeGdcj7e3vsGcvipamM
TvQC1SKPewq/EjIXkFfOVsuKfY3ThTCQsWIk2CxIDsiX++gbHaJCO0qzsHxmUXiD
U2XFw6NgKyQ540K8EBN8whygkZFZVHQ2L5EDOaosXt/z6V7QXfNvseOuswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtpDRylDockGzCXlMSfHdKIn0AvMB8GA1UdIwQY
MBaAFEDNWlA41eEv4cnZ9chmQHTD3QrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEt
NjU5YzY3MTkxMWYxLzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEtNjU5YzY3MTkxMWYx
LzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3/dUuRA
UpNqY2xYTsgzXx2OjimDL318uRxOeL9d2KhmoL8cTdrttdMu6BJ5ubhgG/9U4DUP
JkZ+O0sgWQxmr7A9zA9mQZUPZpcGvAUCRZppyXSiJOr2SrJTnKwsoh/B2Edbtr3s
x3yjBKSshR7ciFHXmgjBeuZDJHunIcpMhToeDjWQK12snOvrMiEoVLpC6Bgjzyj5
fczMOHZOAj11RAFPySVl+BnSzi8cH9FfYXU0VfnlJ9I0NLPJZ0yV8eIvbm0xE5Zi
1S7KKdgDWFG34T8WkYkbhk7DNC4sib7HYZi6eIfXvavaEdoLI0oparZF2NhI4kBO
RIQGsWg/feeO4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:48 2025 by rpki-client