Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: fe7pAhmKwBiLjl+oxUKYJYPCm5/bC7RgGju/cedd+6M=
Subject key identifier: 32:73:55:E1:F8:C2:78:A5:4C:5E:5B:7B:33:6A:93:56:58:81:81:09
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 01987261DD3943678657D6333AF5076A89B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 00:01:12 +0000
Manifest this update: Mon 04 Aug 2025 00:01:12 +0000
Manifest next update: Tue 05 Aug 2025 00:01:12 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: qgkP+5EHyU612LQjuL7IumNSP7q2fkihPX/x5czjg2o=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:dd:39:43:67:86:57:d6:33:3a:f5:07:6a:89:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Aug 4 00:01:12 2025 GMT
Not After : Aug 5 00:01:12 2025 GMT
Subject: CN=327355e1f8c278a54c5e5b7b336a935658818109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:62:23:53:b4:31:3e:1e:04:c4:6e:26:e7:
04:97:92:6b:f1:ee:fe:4d:22:9d:3c:2f:8e:c9:8f:
fc:e5:ca:87:75:cf:f8:da:f1:4b:bb:c3:f5:33:ee:
c9:40:1a:46:87:98:e9:76:d8:9e:c0:46:c3:e7:f4:
97:0e:2a:84:4a:60:04:de:ce:bb:34:c0:16:96:27:
42:0c:ad:90:e8:10:98:b3:17:d2:c0:04:b2:2e:0f:
71:ae:ae:9d:f3:09:00:f5:1c:28:c8:ab:ce:2a:f7:
90:7e:0e:d3:ab:9b:96:89:2f:09:7c:f7:dc:f3:57:
d1:a0:c7:f1:3a:df:2e:c6:98:74:33:83:0f:f7:bc:
db:da:34:05:08:fb:44:c0:2e:bf:6b:98:21:b8:be:
86:26:e5:da:2b:d2:df:54:40:3f:b1:3c:7c:a8:72:
e9:64:d4:94:b7:46:12:e4:be:9b:8b:f3:b4:b4:77:
04:60:0b:b3:c4:b4:cc:e4:05:12:13:e4:78:4f:f5:
27:13:8b:48:ef:cd:ea:96:3a:de:81:1d:4d:b1:ea:
0b:e9:19:7b:08:3c:22:67:fb:65:b1:7c:f6:7a:e4:
27:13:48:e2:71:49:48:f6:44:a3:ca:80:79:87:d8:
06:bd:2c:8b:0f:fd:d5:fa:f1:69:55:31:b2:12:b7:
05:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:73:55:E1:F8:C2:78:A5:4C:5E:5B:7B:33:6A:93:56:58:81:81:09
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d0:55:00:f7:4b:d2:21:f2:6a:2d:fd:3a:39:1e:a3:9d:b6:
1c:24:16:48:b6:57:50:e4:2c:86:8e:68:b0:22:47:74:89:47:
61:e3:cc:e1:b7:a4:f1:b4:74:3a:c3:1f:a8:b8:85:13:6c:6d:
76:02:5b:ea:34:72:41:d1:58:0a:43:0c:89:10:eb:e3:9a:e9:
cd:51:50:94:cf:fd:1b:dc:15:f7:e6:4c:20:80:55:0b:24:cd:
62:c2:7f:30:c7:0d:78:ef:97:7d:b4:7e:b0:74:b0:a4:35:b7:
b3:28:e5:99:5a:63:d1:a4:2a:46:13:9a:07:e3:2e:7b:80:c0:
76:29:54:0c:0f:e9:a3:1b:4d:29:c6:de:e0:47:e6:5f:9e:09:
4b:61:ae:c1:7a:80:8a:ab:99:37:43:b2:54:9c:23:3a:1a:41:
64:d4:3e:4e:4f:1a:0f:4f:3d:0f:c2:71:6e:04:de:d4:b1:f7:
ed:3e:ba:9b:dc:11:43:26:67:30:c4:84:87:b5:98:31:3f:ce:
10:bb:6c:e9:e5:5f:b3:78:ad:11:0d:73:8b:5d:58:1f:0d:f4:
4b:e4:59:3c:ed:c6:ca:d3:e2:4e:7c:68:b5:c4:f9:69:07:d1:
87:a3:9b:46:1e:ef:85:7b:c2:82:3b:bc:7e:cf:61:48:27:24:
a0:84:b5:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYd05Q2eGV9YzOvUHaom2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3
OTBjZjcwHhcNMjUwODA0MDAwMTEyWhcNMjUwODA1MDAwMTEyWjAzMTEwLwYDVQQD
EygzMjczNTVlMWY4YzI3OGE1NGM1ZTViN2IzMzZhOTM1NjU4ODE4MTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK5iI1O0MT4eBMRuJucEl5Jr8e7+
TSKdPC+OyY/85cqHdc/42vFLu8P1M+7JQBpGh5jpdtiewEbD5/SXDiqESmAE3s67
NMAWlidCDK2Q6BCYsxfSwASyLg9xrq6d8wkA9RwoyKvOKveQfg7Tq5uWiS8JfPfc
81fRoMfxOt8uxph0M4MP97zb2jQFCPtEwC6/a5ghuL6GJuXaK9LfVEA/sTx8qHLp
ZNSUt0YS5L6bi/O0tHcEYAuzxLTM5AUSE+R4T/UnE4tI783qljregR1NseoL6Rl7
CDwiZ/tlsXz2euQnE0jicUlI9kSjyoB5h9gGvSyLD/3V+vFpVTGyErcFBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJzVeH4wnilTF5bezNqk1ZYgYEJMB8GA1UdIwQY
MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt
N2YyMGVmMDJmMjY0LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0
LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9BVAPdL
0iHyai39Ojkeo522HCQWSLZXUOQsho5osCJHdIlHYePM4bek8bR0OsMfqLiFE2xt
dgJb6jRyQdFYCkMMiRDr45rpzVFQlM/9G9wV9+ZMIIBVCyTNYsJ/MMcNeO+XfbR+
sHSwpDW3syjlmVpj0aQqRhOaB+Mue4DAdilUDA/poxtNKcbe4EfmX54JS2GuwXqA
iquZN0OyVJwjOhpBZNQ+Tk8aD089D8JxbgTe1LH37T66m9wRQyZnMMSEh7WYMT/O
ELts6eVfs3itEQ1zi11YHw30S+RZPO3GytPiTnxotcT5aQfRh6ObRh7vhXvCgju8
fs9hSCckoIS12w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:04 2025 by rpki-client