Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: TofFfDBjQqXTnBHAvGsOnyxqFEoIffvdzoiTEhvq8vo=
Subject key identifier: 24:31:1A:8E:1D:56:33:E4:A1:D7:9A:62:44:9F:C1:1E:38:5D:F4:A1
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 01989110BA3B87E96FA5E4912F7BD9919353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 132C
Signing time: Sat 09 Aug 2025 23:00:49 +0000
Manifest this update: Sat 09 Aug 2025 23:00:49 +0000
Manifest next update: Sun 10 Aug 2025 23:00:49 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: uLYHcBwb5vmKg95KbmVVVq8YxLFFTXUQNq73B8hx7Kk=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:ba:3b:87:e9:6f:a5:e4:91:2f:7b:d9:91:93:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Aug 9 23:00:49 2025 GMT
Not After : Aug 10 23:00:49 2025 GMT
Subject: CN=24311a8e1d5633e4a1d79a62449fc11e385df4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:f9:2e:2a:ef:64:ed:79:ef:0c:63:c4:8c:
46:79:ba:a5:21:c4:42:91:2d:29:74:0c:1a:1a:1b:
3a:e9:91:ae:58:f5:da:f1:34:2b:b6:16:0a:85:bd:
e4:cf:35:5c:dc:a2:83:02:f1:3b:99:a5:45:af:4e:
39:58:81:b7:08:25:ef:d4:5d:c8:d3:57:de:52:b1:
e3:9b:ce:2b:f6:aa:b7:ad:06:83:a6:3a:a8:9d:19:
66:26:63:b9:f1:99:33:ef:06:e8:fc:be:98:1f:c0:
4d:08:70:fa:9d:cf:a0:e6:68:82:1c:62:1f:d8:e2:
d0:6a:98:46:9c:00:1e:1b:4b:41:2e:6c:a1:d1:69:
bd:8f:85:7e:b6:ab:6b:ac:f9:47:03:93:10:5a:66:
4b:a9:b7:f2:ea:93:1c:e4:45:d1:54:fc:a8:a9:5f:
60:59:a6:71:20:1f:f0:eb:2f:0f:0f:c2:2b:ba:44:
16:95:ac:b3:99:b1:b8:5b:54:51:87:27:33:e1:d8:
b7:35:ff:03:c5:7c:68:9e:ae:1d:f8:fa:42:59:2c:
9b:99:04:65:ea:2c:73:e1:5f:08:55:91:9f:2b:54:
ab:13:fd:dd:99:c8:b6:31:20:84:e3:fd:da:c3:23:
52:25:6e:72:64:f4:22:89:1d:7a:6f:a8:b2:50:74:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:31:1A:8E:1D:56:33:E4:A1:D7:9A:62:44:9F:C1:1E:38:5D:F4:A1
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:33:76:ac:30:ac:be:46:d4:b9:32:27:49:ca:b0:b0:5c:61:
fa:ff:c6:56:42:40:60:da:74:f3:56:66:04:ba:16:87:0a:8d:
c4:c7:a6:1b:f5:49:9f:96:54:da:26:88:1d:e1:16:0b:09:66:
e0:af:a7:3c:3c:7e:da:8b:b1:a4:16:a2:b1:34:4a:b4:32:5f:
55:d0:53:33:6c:55:62:2e:7b:f6:fc:35:5c:b8:40:cd:f5:f1:
84:91:bc:19:c9:d4:02:8b:15:bb:ed:7e:44:b0:48:af:4f:c9:
cd:1b:6c:73:fa:9a:d7:e1:04:9e:f0:53:68:11:f2:18:64:25:
aa:0f:25:d7:37:ad:b3:65:a2:0a:c6:c5:0c:20:bd:55:9f:d1:
7d:ad:5b:59:1e:c9:a0:ee:a3:3f:d9:dc:2f:82:15:09:eb:63:
b8:f4:66:18:b8:a3:59:bb:b1:2a:ed:4f:eb:03:77:ce:1c:ac:
2d:e6:67:4a:85:8b:5d:bc:f4:b3:3b:e8:bf:96:a2:d9:80:d2:
2e:73:2c:2c:7f:5d:a0:3b:60:62:79:58:ad:40:2e:ee:d9:2e:
6a:41:51:68:06:e6:a9:36:01:6d:92:a4:f4:9b:24:94:61:b4:
b0:26:d5:4f:c0:b3:00:3f:ba:7c:d5:d4:d7:f1:0d:d7:61:e4:
c5:0b:ea:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRELo7h+lvpeSRL3vZkZNTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi
YjgwOTIwHhcNMjUwODA5MjMwMDQ5WhcNMjUwODEwMjMwMDQ5WjAzMTEwLwYDVQQD
EygyNDMxMWE4ZTFkNTYzM2U0YTFkNzlhNjI0NDlmYzExZTM4NWRmNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyr5LirvZO157wxjxIxGebqlIcRC
kS0pdAwaGhs66ZGuWPXa8TQrthYKhb3kzzVc3KKDAvE7maVFr045WIG3CCXv1F3I
01feUrHjm84r9qq3rQaDpjqonRlmJmO58Zkz7wbo/L6YH8BNCHD6nc+g5miCHGIf
2OLQaphGnAAeG0tBLmyh0Wm9j4V+tqtrrPlHA5MQWmZLqbfy6pMc5EXRVPyoqV9g
WaZxIB/w6y8PD8IrukQWlayzmbG4W1RRhycz4di3Nf8DxXxonq4d+PpCWSybmQRl
6ixz4V8IVZGfK1SrE/3dmci2MSCE4/3awyNSJW5yZPQiiR16b6iyUHRIYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQxGo4dVjPkodeaYkSfwR44XfShMB8GA1UdIwQY
MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt
Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj
LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTN2rDCs
vkbUuTInScqwsFxh+v/GVkJAYNp081ZmBLoWhwqNxMemG/VJn5ZU2iaIHeEWCwlm
4K+nPDx+2ouxpBaisTRKtDJfVdBTM2xVYi579vw1XLhAzfXxhJG8GcnUAosVu+1+
RLBIr0/JzRtsc/qa1+EEnvBTaBHyGGQlqg8l1zets2WiCsbFDCC9VZ/Rfa1bWR7J
oO6jP9ncL4IVCetjuPRmGLijWbuxKu1P6wN3zhysLeZnSoWLXbz0szvov5ai2YDS
LnMsLH9doDtgYnlYrUAu7tkuakFRaAbmqTYBbZKk9JsklGG0sCbVT8CzAD+6fNXU
1/EN12HkxQvqgw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:44 2025 by rpki-client