Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: EbpQ1J8vbQ7nnIP727F+7IOUAP2AFmqt024XOjCUwOA=
Subject key identifier: 13:3F:21:01:62:70:AA:E5:C9:E5:AC:FB:48:DD:6A:CD:67:5C:F1:85
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 01987E9CE393765914DE7A60A5AE3E424404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 0F3A
Signing time: Wed 06 Aug 2025 09:01:07 +0000
Manifest this update: Wed 06 Aug 2025 09:01:07 +0000
Manifest next update: Thu 07 Aug 2025 09:01:07 +0000
Files and hashes: 1: AHAIEOWCHWLKa9JHFINf6irqksg.roa (hash: 0crUb9fChI2AB7u9/en/nHBi9yIJVpozoehFQ2yd02I=)
2: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: 1TMsb1IR+Oo3q+sSmx4/fcjL2rz3WY0HtuKGqDE6qsk=)
3: iuTZJrZ_xqcN--oZzppXYNl2GLY.roa (hash: EaSRmqObnprgwhDFxETI2q5Xy3PnwGKEyMaUX8iySCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:e3:93:76:59:14:de:7a:60:a5:ae:3e:42:44:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Aug 6 09:01:07 2025 GMT
Not After : Aug 7 09:01:07 2025 GMT
Subject: CN=133f21016270aae5c9e5acfb48dd6acd675cf185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:73:4e:7a:d6:86:62:b2:b0:81:1b:d3:ad:
27:f9:df:05:5a:df:2d:24:f2:c6:36:4f:f9:3d:04:
44:8b:d3:45:1d:f2:aa:d6:0b:32:60:6b:31:1d:07:
cb:f8:f7:d3:f3:40:09:b9:78:b9:16:1d:6e:78:63:
78:bf:d7:16:21:87:21:e0:8c:0d:94:e3:2d:eb:1c:
85:90:66:03:69:5d:5c:28:f0:45:98:22:d2:36:89:
fb:ef:76:91:74:6d:e6:e5:21:95:68:b4:d5:49:2d:
99:d6:85:61:80:d2:83:3e:84:3b:0e:83:19:5a:7b:
d1:c2:f4:2d:46:e7:df:7e:ae:af:f0:18:e7:fc:8d:
5f:a7:30:73:53:ee:cf:d0:85:9f:17:1c:f2:40:8c:
e4:78:e0:75:9c:03:3f:30:13:54:14:5a:d0:dd:8b:
84:6d:88:62:bb:ea:8e:8d:a5:17:27:ae:c1:2a:2f:
c2:09:07:21:d0:cf:4e:49:4b:0b:2c:2d:59:15:08:
c6:8a:ad:bc:66:d5:de:8f:ce:0f:16:1f:cd:c6:53:
42:83:c5:d2:43:b2:78:92:1b:8e:a7:45:43:f8:3b:
07:e5:22:42:1c:1c:b7:09:fd:ae:89:1f:db:7c:53:
15:89:67:ee:ca:27:68:c1:63:95:3e:e2:d9:e2:0d:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:21:01:62:70:AA:E5:C9:E5:AC:FB:48:DD:6A:CD:67:5C:F1:85
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ce:81:6f:0a:86:da:05:31:3e:d1:7c:16:8d:ce:4b:c6:32:
8c:27:44:d5:61:3b:78:34:a6:e7:d1:1c:b4:e0:9d:64:89:5d:
e3:b5:09:fd:89:7a:99:de:76:8f:c0:35:86:c1:d2:87:5a:f8:
e5:f3:bf:e8:93:23:32:b6:95:31:4c:51:c2:d2:49:4f:16:68:
10:23:14:6c:5e:bd:db:86:3c:59:ff:91:05:6e:42:d5:96:7a:
25:0d:cb:2c:28:d2:cf:2a:6a:e6:19:29:a2:56:55:10:96:82:
ac:a5:4a:2a:b2:4c:a5:28:d9:1c:bb:d5:7c:a6:22:59:33:77:
01:86:18:98:20:b0:ba:4f:65:7d:c2:01:82:ac:bf:b3:53:9e:
28:83:d4:a2:2b:bf:a6:93:31:03:4a:b2:02:58:ab:eb:39:00:
1d:75:e3:e9:fb:07:cf:d8:d8:6e:f5:61:c9:94:11:4d:32:79:
29:13:68:2c:ad:5c:61:96:7b:d2:78:e6:19:19:e5:3a:24:cb:
73:c2:18:40:da:27:d4:cf:44:83:f3:5d:cb:c4:43:4b:af:dc:
ff:34:6c:d0:49:51:72:d8:cd:62:26:90:36:07:cf:85:f3:bd:
23:85:a7:be:47:78:8c:e6:c2:a7:7b:e4:26:f2:3c:10:ce:08:
74:9c:82:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+nOOTdlkU3npgpa4+QkQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl
ZTAzZWUwHhcNMjUwODA2MDkwMTA3WhcNMjUwODA3MDkwMTA3WjAzMTEwLwYDVQQD
EygxMzNmMjEwMTYyNzBhYWU1YzllNWFjZmI0OGRkNmFjZDY3NWNmMTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6RzTnrWhmKysIEb060n+d8FWt8t
JPLGNk/5PQREi9NFHfKq1gsyYGsxHQfL+PfT80AJuXi5Fh1ueGN4v9cWIYch4IwN
lOMt6xyFkGYDaV1cKPBFmCLSNon773aRdG3m5SGVaLTVSS2Z1oVhgNKDPoQ7DoMZ
WnvRwvQtRufffq6v8Bjn/I1fpzBzU+7P0IWfFxzyQIzkeOB1nAM/MBNUFFrQ3YuE
bYhiu+qOjaUXJ67BKi/CCQch0M9OSUsLLC1ZFQjGiq28ZtXej84PFh/NxlNCg8XS
Q7J4khuOp0VD+DsH5SJCHBy3Cf2uiR/bfFMViWfuyidowWOVPuLZ4g2cowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBM/IQFicKrlyeWs+0jdas1nXPGFMB8GA1UdIwQY
MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt
YmQxZDQ4ZDUxMmNlLzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl
LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh86BbwqG
2gUxPtF8Fo3OS8YyjCdE1WE7eDSm59EctOCdZIld47UJ/Yl6md52j8A1hsHSh1r4
5fO/6JMjMraVMUxRwtJJTxZoECMUbF6924Y8Wf+RBW5C1ZZ6JQ3LLCjSzypq5hkp
olZVEJaCrKVKKrJMpSjZHLvVfKYiWTN3AYYYmCCwuk9lfcIBgqy/s1OeKIPUoiu/
ppMxA0qyAlir6zkAHXXj6fsHz9jYbvVhyZQRTTJ5KRNoLK1cYZZ70njmGRnlOiTL
c8IYQNon1M9Eg/Ndy8RDS6/c/zRs0ElRctjNYiaQNgfPhfO9I4Wnvkd4jObCp3vk
JvI8EM4IdJyCrw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:19:11 2025 by rpki-client