Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: rIyfOccHw6kDNXCLahHD4VGd2meWT4WN3MP6FBszClU=
Subject key identifier: AC:4E:F3:14:50:30:70:79:6F:41:4E:E2:19:7C:64:0C:FE:FA:48:6C
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 01987B9D6655C3DF4837F1254FE99E41E168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0A28
Signing time: Tue 05 Aug 2025 19:02:49 +0000
Manifest this update: Tue 05 Aug 2025 19:02:49 +0000
Manifest next update: Wed 06 Aug 2025 19:02:49 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: 6Z4mBtWlPH90dyLCPD2tE/JlA5dmrPF4OS+VEteqXnc=)
2: dmWwMKmVtBjrQ943YS9mH5Wi3ME.roa (hash: prLT1d+yXEMIyzM51qGGgQHR5qaRcSsmNt9aZioq8kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:66:55:c3:df:48:37:f1:25:4f:e9:9e:41:e1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: Aug 5 19:02:49 2025 GMT
Not After : Aug 6 19:02:49 2025 GMT
Subject: CN=ac4ef314503070796f414ee2197c640cfefa486c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:78:da:ee:0b:d6:f8:a0:bb:76:d9:68:ba:
ca:c5:84:71:f6:87:13:a8:6a:d6:d4:c7:2c:39:bd:
79:89:3c:ae:15:23:48:75:5e:fe:4c:5a:91:80:15:
15:d6:2d:5d:48:fc:5d:33:73:b7:1b:2e:92:92:47:
17:eb:0e:8e:1f:0c:9f:be:59:82:5b:a7:86:80:f8:
2a:2b:10:40:64:0a:60:86:e4:1f:8a:0a:d3:ee:6f:
66:98:4d:42:cf:e9:89:e3:d7:17:de:1d:84:1f:21:
4a:c2:47:4c:c4:8e:27:46:a7:60:b7:a4:e7:38:de:
f1:de:e8:83:5c:0b:a4:62:58:81:06:68:5d:a7:1c:
53:d1:25:5d:f6:2a:c9:ab:7b:06:28:32:da:31:59:
10:f0:95:36:6e:c6:5a:3f:ee:a1:19:d1:17:bf:1a:
f5:08:07:7e:bd:bf:d7:89:08:f7:dd:a9:25:55:0c:
ef:6d:0f:ff:0f:0c:8d:07:50:87:4b:ba:2f:9f:54:
92:0b:55:c4:79:7e:18:21:12:2d:73:9b:67:53:5a:
d1:5b:d6:02:b2:4b:07:d4:6a:3f:9e:ba:d6:fa:2e:
0f:5f:a1:4b:09:06:03:9e:39:2c:84:5e:8b:ac:9f:
26:04:c4:d7:e2:03:53:b3:47:72:c4:d5:7c:92:bc:
dc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4E:F3:14:50:30:70:79:6F:41:4E:E2:19:7C:64:0C:FE:FA:48:6C
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:17:e8:3b:fd:fd:41:88:fa:18:1e:3f:ad:17:90:58:9b:38:
b2:aa:ec:70:c3:32:26:b2:00:a2:61:b3:d1:9c:08:61:de:e3:
45:df:76:1a:3d:cb:55:02:cc:8e:3e:a6:26:f0:29:93:6b:e7:
90:a8:eb:b3:ea:fb:2b:a3:af:f5:2e:66:d8:d4:d3:db:a2:22:
86:33:48:78:72:d9:70:34:2f:3f:b8:e3:93:ed:06:cc:33:71:
cf:80:3b:07:94:68:4b:41:be:50:80:89:0c:1e:55:d7:aa:e2:
ca:be:f1:f8:47:f5:a2:4e:67:73:ea:d2:c0:8b:e0:80:90:73:
e1:b9:10:40:42:db:96:bf:86:87:f3:e6:4c:fd:f5:02:d1:d6:
04:be:53:bc:7c:ef:19:b0:ab:8d:10:e9:98:46:5a:17:4e:bb:
8f:cd:c5:ad:a7:b8:03:43:6d:cd:c6:64:4c:3a:b0:31:d3:ed:
84:70:5b:ac:01:05:15:ea:40:c9:f6:18:a7:1b:82:49:24:b2:
cf:da:c3:36:8b:ac:e8:e1:78:c8:95:b3:89:07:55:8c:4c:14:
72:27:c1:fc:bf:18:79:7c:19:99:b9:f8:57:12:3b:b0:28:3e:
43:17:23:9a:8d:c7:84:e4:bd:cf:37:b1:52:9d:bd:54:28:e2:
cb:aa:58:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nWZVw99IN/ElT+meQeFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1OTFhNzViZDY5M2U5ZDNiNzY2ODM0YmYwNzRmN2Ix
ZWVlM2EwHhcNMjUwODA1MTkwMjQ5WhcNMjUwODA2MTkwMjQ5WjAzMTEwLwYDVQQD
EyhhYzRlZjMxNDUwMzA3MDc5NmY0MTRlZTIxOTdjNjQwY2ZlZmE0ODZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym942u4L1vigu3bZaLrKxYRx9ocT
qGrW1McsOb15iTyuFSNIdV7+TFqRgBUV1i1dSPxdM3O3Gy6SkkcX6w6OHwyfvlmC
W6eGgPgqKxBAZApghuQfigrT7m9mmE1Cz+mJ49cX3h2EHyFKwkdMxI4nRqdgt6Tn
ON7x3uiDXAukYliBBmhdpxxT0SVd9irJq3sGKDLaMVkQ8JU2bsZaP+6hGdEXvxr1
CAd+vb/XiQj33aklVQzvbQ//DwyNB1CHS7ovn1SSC1XEeX4YIRItc5tnU1rRW9YC
sksH1Go/nrrW+i4PX6FLCQYDnjkshF6LrJ8mBMTX4gNTs0dyxNV8krzcswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxO8xRQMHB5b0FO4hl8ZAz++khsMB8GA1UdIwQY
MBaAFEDVWRp1vWk+nTt2aDS/B097Hu46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85YzlmMjgtNGY0MS00NzJkLWE2M2Ut
YTEwYTNhNDk2M2ZiLzEvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85YzlmMjgtNGY0MS00NzJkLWE2M2UtYTEwYTNhNDk2M2Zi
LzEvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBfoO/39
QYj6GB4/rReQWJs4sqrscMMyJrIAomGz0ZwIYd7jRd92Gj3LVQLMjj6mJvApk2vn
kKjrs+r7K6Ov9S5m2NTT26IihjNIeHLZcDQvP7jjk+0GzDNxz4A7B5RoS0G+UICJ
DB5V16riyr7x+Ef1ok5nc+rSwIvggJBz4bkQQELblr+Gh/PmTP31AtHWBL5TvHzv
GbCrjRDpmEZaF067j83Frae4A0NtzcZkTDqwMdPthHBbrAEFFepAyfYYpxuCSSSy
z9rDNous6OF4yJWziQdVjEwUcifB/L8YeXwZmbn4VxI7sCg+Qxcjmo3HhOS9zzex
Up29VCjiy6pYpw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 21:36:49 2025 by rpki-client