Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: OBlNqhLpdte0E3+TOhPr+PckzircCLQR9OdjHUa/+Rk=
Subject key identifier: A6:1B:EA:DE:36:AF:FA:CD:20:BB:07:1C:AC:BD:33:DE:A9:C0:ED:E1
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 019775D29EEDC5A5A9A990401038F4C54229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 0299
Signing time: Sun 15 Jun 2025 23:00:26 +0000
Manifest this update: Sun 15 Jun 2025 23:00:26 +0000
Manifest next update: Mon 16 Jun 2025 23:00:26 +0000
Files and hashes: 1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=)
2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: z9zeayY73gvhfycjaO5sEmn2Jz5Sy82J64vayhNz4Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:9e:ed:c5:a5:a9:a9:90:40:10:38:f4:c5:42:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Jun 15 23:00:26 2025 GMT
Not After : Jun 16 23:00:26 2025 GMT
Subject: CN=a61beade36affacd20bb071cacbd33dea9c0ede1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a4:e6:f0:9b:3f:46:43:15:04:56:65:fb:e5:
a8:28:23:31:79:a1:ab:0c:89:c6:cf:c8:5d:cc:3f:
cd:f6:f5:eb:a4:ad:16:24:b4:79:ac:dc:1c:83:98:
46:76:47:84:21:cf:7b:f8:13:cf:4d:3f:f4:37:a1:
79:52:6b:6b:8c:f2:24:09:9d:8a:24:4b:67:de:af:
65:21:c7:68:c4:23:66:36:65:67:d4:18:9b:7d:5f:
1a:7e:40:77:e8:70:2c:5e:9f:47:29:df:51:c6:71:
c4:c7:8a:b7:b5:52:d3:60:15:ac:43:b0:ef:b1:31:
3b:3d:06:af:5e:f9:9f:35:7f:bc:3e:cc:04:84:94:
99:f1:ce:40:e9:2d:d9:a3:7f:25:db:ff:4a:18:94:
44:93:6b:e9:82:2d:49:95:b4:50:27:41:d1:2f:17:
22:43:72:b3:bc:49:3a:8e:28:0a:af:7d:31:87:28:
86:c3:6b:9a:4a:75:3d:74:fc:48:7b:3f:84:8c:a0:
c5:7c:ce:d8:ff:1d:62:cc:25:a1:9d:6a:90:70:51:
b5:fc:cb:f7:b9:af:6c:c5:64:90:1b:30:84:c8:98:
ec:fb:06:e7:c0:3d:4d:7e:fc:19:7f:b6:c8:85:47:
15:aa:0c:86:3e:2a:13:24:dd:d2:6a:46:32:3b:59:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1B:EA:DE:36:AF:FA:CD:20:BB:07:1C:AC:BD:33:DE:A9:C0:ED:E1
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:83:dd:01:cb:ea:b6:35:2e:0b:f3:e2:26:88:50:d9:3a:
49:6b:60:6b:12:bf:f9:d9:8f:db:70:7e:d6:6a:da:1f:3c:eb:
4f:18:e0:60:4a:79:0b:f5:4a:da:ac:cd:2e:d8:4d:53:bf:36:
38:99:29:ab:53:fc:11:67:ff:27:6b:5f:48:83:64:5e:b7:2c:
a0:05:31:3c:fa:3c:ab:c9:1a:6a:14:59:3d:08:09:d5:4e:de:
3c:ef:32:43:a1:8b:5b:c3:db:2d:f3:2c:8d:a8:bb:55:cc:ff:
4b:39:12:1a:df:9c:7f:23:ec:ef:be:46:83:96:88:5c:a0:fc:
6c:87:3f:9d:38:b3:fc:b0:80:0f:fa:1b:3d:7d:d9:8c:ca:58:
b2:cc:0c:6d:ce:25:94:0e:ed:31:4d:22:86:76:5f:be:79:b8:
1f:66:0b:54:70:53:47:78:7f:dd:ce:87:d5:2f:92:ee:38:ff:
3c:93:b3:6a:09:8f:02:e0:0c:6c:22:d3:27:28:c4:a6:bd:b7:
53:47:1a:b0:10:5b:49:dc:23:fd:ea:ca:e1:e0:a7:75:a2:f9:
31:c9:6c:12:77:e7:a8:a2:8d:a3:6a:00:2f:5e:fc:ff:47:66:
4e:f0:71:a2:8b:8a:83:96:5c:0d:08:33:3f:ca:6a:d6:2b:43:
a1:4a:9c:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd10p7txaWpqZBAEDj0xUIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMGY5N2U2MzUwODIxOWI5NmNiYjIxMDYzNDNmNWUxYjZk
YzVhNGYwHhcNMjUwNjE1MjMwMDI2WhcNMjUwNjE2MjMwMDI2WjAzMTEwLwYDVQQD
EyhhNjFiZWFkZTM2YWZmYWNkMjBiYjA3MWNhY2JkMzNkZWE5YzBlZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qTm8Js/RkMVBFZl++WoKCMxeaGr
DInGz8hdzD/N9vXrpK0WJLR5rNwcg5hGdkeEIc97+BPPTT/0N6F5UmtrjPIkCZ2K
JEtn3q9lIcdoxCNmNmVn1BibfV8afkB36HAsXp9HKd9RxnHEx4q3tVLTYBWsQ7Dv
sTE7PQavXvmfNX+8PswEhJSZ8c5A6S3Zo38l2/9KGJREk2vpgi1JlbRQJ0HRLxci
Q3KzvEk6jigKr30xhyiGw2uaSnU9dPxIez+EjKDFfM7Y/x1izCWhnWqQcFG1/Mv3
ua9sxWSQGzCEyJjs+wbnwD1NfvwZf7bIhUcVqgyGPioTJN3SakYyO1m7kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYb6t42r/rNILsHHKy9M96pwO3hMB8GA1UdIwQY
MBaAFKoPl+Y1CCGblsuyEGND9eG23FpPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYjY2ZmUtNjk5YS00MTNiLWEyZmMt
ZjUxMWZkNjg4ZWRhLzEvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYjY2ZmUtNjk5YS00MTNiLWEyZmMtZjUxMWZkNjg4ZWRh
LzEvcWctWDVqVUlJWnVXeTdJUVkwUDE0YmJjV2s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkOD3QHL
6rY1Lgvz4iaIUNk6SWtgaxK/+dmP23B+1mraHzzrTxjgYEp5C/VK2qzNLthNU782
OJkpq1P8EWf/J2tfSINkXrcsoAUxPPo8q8kaahRZPQgJ1U7ePO8yQ6GLW8PbLfMs
jai7Vcz/SzkSGt+cfyPs775Gg5aIXKD8bIc/nTiz/LCAD/obPX3ZjMpYsswMbc4l
lA7tMU0ihnZfvnm4H2YLVHBTR3h/3c6H1S+S7jj/PJOzagmPAuAMbCLTJyjEpr23
U0casBBbSdwj/erK4eCndaL5MclsEnfnqKKNo2oAL178/0dmTvBxoouKg5ZcDQgz
P8pq1itDoUqcTA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:26:41 2025 by rpki-client