Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: Z1038WDIYj30mVWag6NpjCQlHlcGFiRqUKundl+Jgac=
Subject key identifier: 86:2B:8E:74:3A:20:FC:89:E5:62:8E:97:1D:61:FC:48:46:80:1D:FE
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 019874F52B4E9273E57708EDC8F393E21A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 13AC
Signing time: Mon 04 Aug 2025 12:01:21 +0000
Manifest this update: Mon 04 Aug 2025 12:01:21 +0000
Manifest next update: Tue 05 Aug 2025 12:01:21 +0000
Files and hashes: 1: PHhq7bUnGcZX4y_ykkmnYZLunMM.roa (hash: LoLkLVHGuU31zRjTVmAdVTtSVPzxLCqr19G9NEBPRqg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: fPYRX/o4HrwbUWZeDoe0wWKDRmpQbBxRp7iofXfuTVU=)
3: ZHuGa1b5EE3BXDt8zUZ6H71dsTI.roa (hash: c5Q65E0/2d2vtEwjuw2BN9yFwucni9qkVj/W8ITRCHA=)
4: mbmOrU1gpeptZI3HpUCwe4-8PxQ.roa (hash: U1SXSUwkwzX7zwHV3CIwtefKowszejuGaOw7kehwc7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:2b:4e:92:73:e5:77:08:ed:c8:f3:93:e2:1a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Aug 4 12:01:21 2025 GMT
Not After : Aug 5 12:01:21 2025 GMT
Subject: CN=862b8e743a20fc89e5628e971d61fc4846801dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:0d:80:7c:3a:13:0a:41:ce:3e:1f:80:46:
31:87:cc:8c:9c:8c:01:9d:a4:16:6c:fb:e6:30:df:
29:fe:fa:8e:97:da:3a:12:5e:43:a1:ab:01:c6:a1:
20:37:5c:cc:37:a5:47:52:94:1f:6f:6b:35:9d:d5:
ec:55:63:b8:6a:9e:dd:a8:e8:1f:77:45:ae:6d:12:
18:14:b6:34:6b:f6:a4:46:d1:fa:f1:2c:23:a0:6a:
4b:66:ba:81:06:f3:7a:7b:ae:48:05:34:d2:5f:c3:
96:f8:8d:ea:a9:49:cf:b8:b5:3c:d1:41:69:a9:56:
14:c5:af:f2:34:15:b9:b1:1c:35:91:28:0e:d7:8f:
05:3b:dc:f7:c2:ad:0c:30:21:12:32:d3:20:76:91:
d6:19:61:f7:76:ea:7f:65:34:5c:e4:16:31:c7:d9:
77:85:54:93:23:db:f6:a4:e1:f0:da:37:33:82:82:
8c:c5:88:03:de:34:fa:c8:3a:cf:9c:a5:77:03:39:
d7:0b:6b:d8:87:9d:e7:99:8c:c5:5c:05:75:5d:ee:
ef:59:18:bc:93:04:52:fb:94:58:c6:4f:b6:38:1b:
6f:c5:c2:59:a1:91:5b:f1:00:72:32:33:0c:16:37:
2a:59:35:38:47:92:d5:05:67:6c:a9:06:d9:b8:1c:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:8E:74:3A:20:FC:89:E5:62:8E:97:1D:61:FC:48:46:80:1D:FE
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:16:dd:28:02:b3:ab:65:bb:a3:b9:ee:2c:52:3e:94:c2:aa:
07:84:73:74:42:0f:4f:eb:6b:f3:98:92:14:89:e3:a5:d2:01:
fa:04:d1:ca:16:26:15:b3:33:df:2a:95:82:73:7f:17:af:8b:
3e:53:15:e8:75:05:4a:40:ce:2a:97:f0:63:6d:77:84:b3:af:
fc:82:97:85:c0:cc:01:54:9b:36:96:39:81:64:e4:8c:4e:9a:
b2:e7:b0:49:46:70:a0:a7:73:f5:81:02:b6:d8:f3:cd:8f:4e:
86:fe:29:25:c5:0e:38:ce:dd:41:1a:44:f7:3a:98:a6:b5:8f:
07:a7:e8:86:93:1a:d1:9a:be:b0:37:27:6f:4b:c9:38:51:e8:
97:8a:47:47:30:c9:97:ec:91:ac:c6:7c:2e:3e:87:6d:84:28:
96:3c:a8:a7:6e:89:5a:0d:2e:81:68:92:41:f8:04:69:39:d0:
64:f4:6e:83:e6:16:cb:22:51:03:58:d9:d1:32:12:08:06:ce:
73:3c:63:44:58:b3:c1:d0:1b:8a:24:d2:fb:d7:2b:55:5a:89:
d2:1f:f8:b5:27:b5:a5:1e:79:a2:cd:30:33:1f:f0:a9:0c:df:
d7:99:63:c8:ff:c0:24:00:da:6e:61:c2:48:7d:a2:fa:e5:18:
43:0f:2f:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09StOknPldwjtyPOT4hqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzRjOTBlZDE2YWEyMGU0OTE3ODQyMGJmYzg0YTg4M2Mx
MmFjNjgwHhcNMjUwODA0MTIwMTIxWhcNMjUwODA1MTIwMTIxWjAzMTEwLwYDVQQD
Eyg4NjJiOGU3NDNhMjBmYzg5ZTU2MjhlOTcxZDYxZmM0ODQ2ODAxZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDwNgHw6EwpBzj4fgEYxh8yMnIwB
naQWbPvmMN8p/vqOl9o6El5DoasBxqEgN1zMN6VHUpQfb2s1ndXsVWO4ap7dqOgf
d0WubRIYFLY0a/akRtH68SwjoGpLZrqBBvN6e65IBTTSX8OW+I3qqUnPuLU80UFp
qVYUxa/yNBW5sRw1kSgO148FO9z3wq0MMCESMtMgdpHWGWH3dup/ZTRc5BYxx9l3
hVSTI9v2pOHw2jczgoKMxYgD3jT6yDrPnKV3AznXC2vYh53nmYzFXAV1Xe7vWRi8
kwRS+5RYxk+2OBtvxcJZoZFb8QByMjMMFjcqWTU4R5LVBWdsqQbZuByOKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYrjnQ6IPyJ5WKOlx1h/EhGgB3+MB8GA1UdIwQY
MBaAFELEyQ7RaqIOSReEIL/ISog8EqxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYt
YThlNGU3MWJlZTUxLzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYtYThlNGU3MWJlZTUx
LzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRbdKAKz
q2W7o7nuLFI+lMKqB4RzdEIPT+tr85iSFInjpdIB+gTRyhYmFbMz3yqVgnN/F6+L
PlMV6HUFSkDOKpfwY213hLOv/IKXhcDMAVSbNpY5gWTkjE6asuewSUZwoKdz9YEC
ttjzzY9Ohv4pJcUOOM7dQRpE9zqYprWPB6fohpMa0Zq+sDcnb0vJOFHol4pHRzDJ
l+yRrMZ8Lj6HbYQoljyop26JWg0ugWiSQfgEaTnQZPRug+YWyyJRA1jZ0TISCAbO
czxjRFizwdAbiiTS+9crVVqJ0h/4tSe1pR55os0wMx/wqQzf15ljyP/AJADabmHC
SH2i+uUYQw8vjg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:19 2025 by rpki-client