Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: yeht55gvRqAF2ohgfKvVvNxCvYmAwHp09IYBh4QCk/8=
Subject key identifier: 8E:14:EF:BE:9E:80:AA:66:77:76:85:29:17:38:38:EE:4F:45:1F:E5
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 019873E2C7A2660C3A7BCEF2259DB0F1985E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:38 +0000
Manifest this update: Mon 04 Aug 2025 07:01:38 +0000
Manifest next update: Tue 05 Aug 2025 07:01:38 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: vWwvArZjibz6DUM+jfp8A9PDfyL4cvm6d3IMZ1asFvg=)
2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:c7:a2:66:0c:3a:7b:ce:f2:25:9d:b0:f1:98:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Aug 4 07:01:38 2025 GMT
Not After : Aug 5 07:01:38 2025 GMT
Subject: CN=8e14efbe9e80aa6677768529173838ee4f451fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:e6:66:a9:86:2c:d3:f7:00:61:6f:e9:17:
d9:88:8d:67:a1:c2:b0:4e:aa:c2:31:4d:e3:e9:32:
67:bf:5c:b8:f0:f0:1c:8e:7d:5c:14:25:88:37:97:
59:07:aa:3d:aa:43:8d:53:a5:63:8d:89:cb:65:39:
db:3c:36:52:7c:2c:0a:1c:96:ff:f2:da:70:db:b4:
e9:9c:34:eb:50:18:a9:47:4d:97:01:15:0a:5a:29:
8e:5a:2a:a4:35:30:14:b1:e3:20:14:d3:99:32:63:
59:f7:be:0e:19:b1:ec:0d:4c:71:7d:c5:5a:37:45:
72:db:9f:c3:02:9f:b0:5e:de:a1:25:dc:ae:0d:89:
42:46:ef:b9:18:71:e4:e6:4f:f6:70:a2:2c:a3:44:
e5:95:65:c4:2e:ab:6d:53:c4:83:61:08:b5:ec:4f:
23:bd:68:7d:01:e9:18:51:25:f9:95:39:c2:a6:61:
ff:d4:94:69:7a:a8:d7:dc:86:cd:48:7a:24:35:54:
d9:75:2e:7d:60:27:f3:5d:1d:ef:95:30:a8:91:2c:
ac:81:e7:f8:3a:0a:05:eb:d1:6d:c9:71:70:0f:97:
87:ad:e8:1d:b9:b7:31:95:d7:6f:49:49:1c:d5:e0:
12:f5:57:1f:27:f1:1a:0c:eb:44:b4:f7:15:35:34:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:EF:BE:9E:80:AA:66:77:76:85:29:17:38:38:EE:4F:45:1F:E5
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7d:65:ed:ee:44:9c:5a:06:68:de:12:92:ad:26:4b:72:91:
b5:0d:ad:05:63:bf:9b:a2:1e:52:11:89:3c:0a:e4:9f:05:c7:
ec:d7:9a:d6:0b:42:b6:07:42:b3:b0:ab:e1:8d:ff:3b:29:73:
21:52:b3:3f:7c:7c:5b:ef:d9:d9:6a:a0:e7:64:9c:db:3c:b6:
9e:f7:79:f4:2b:96:8b:62:a9:78:bb:43:bf:a4:fa:34:34:ab:
ef:6d:d2:05:75:7d:7c:21:12:12:e4:95:58:83:cd:1c:de:fd:
51:40:50:36:4f:5c:15:dd:0d:c4:4f:a8:17:6c:8c:0d:b5:55:
7e:80:c1:72:da:59:b5:b5:3a:6d:3d:76:65:fd:11:93:f7:1b:
86:5c:3f:1f:a6:d4:c5:66:f6:f8:32:c2:a5:3a:c3:17:04:f3:
65:d6:e9:aa:c0:7e:5a:6b:4e:44:e6:82:ff:6d:df:25:8a:7f:
79:89:3c:2e:0d:1f:a7:5b:6a:9d:5b:40:1b:da:39:63:61:d2:
ef:dc:15:86:6f:9d:fc:b6:45:74:82:54:a5:9a:06:9c:ad:59:
8b:49:39:34:e8:fe:38:61:29:3c:33:b9:2c:88:a5:c3:35:fc:
61:3f:84:f9:b7:20:9b:02:b1:bb:23:f8:5c:67:51:fd:14:e7:
44:47:25:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4seiZgw6e87yJZ2w8ZheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2ZkM2E0OWJjNzFlNzRhMGQwYmY3ZTM0NmNhODliMjk1
OTdhMTIwHhcNMjUwODA0MDcwMTM4WhcNMjUwODA1MDcwMTM4WjAzMTEwLwYDVQQD
Eyg4ZTE0ZWZiZTllODBhYTY2Nzc3Njg1MjkxNzM4MzhlZTRmNDUxZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S7mZqmGLNP3AGFv6RfZiI1nocKw
TqrCMU3j6TJnv1y48PAcjn1cFCWIN5dZB6o9qkONU6VjjYnLZTnbPDZSfCwKHJb/
8tpw27TpnDTrUBipR02XARUKWimOWiqkNTAUseMgFNOZMmNZ974OGbHsDUxxfcVa
N0Vy25/DAp+wXt6hJdyuDYlCRu+5GHHk5k/2cKIso0TllWXELqttU8SDYQi17E8j
vWh9AekYUSX5lTnCpmH/1JRpeqjX3IbNSHokNVTZdS59YCfzXR3vlTCokSysgef4
OgoF69FtyXFwD5eHregdubcxlddvSUkc1eAS9VcfJ/EaDOtEtPcVNTQ+6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4U776egKpmd3aFKRc4OO5PRR/lMB8GA1UdIwQY
MBaAFEDP06Sbxx50oNC/fjRsqJspWXoSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUt
NjBiNmViYmI3ZTZmLzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wYjlmMDctZjE2Ni00Njc1LWIxODUtNjBiNmViYmI3ZTZm
LzEvUU1fVHBKdkhIblNnMEw5LU5HeW9teWxaZWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc31l7e5E
nFoGaN4Skq0mS3KRtQ2tBWO/m6IeUhGJPArknwXH7Nea1gtCtgdCs7Cr4Y3/Oylz
IVKzP3x8W+/Z2Wqg52Sc2zy2nvd59CuWi2KpeLtDv6T6NDSr723SBXV9fCESEuSV
WIPNHN79UUBQNk9cFd0NxE+oF2yMDbVVfoDBctpZtbU6bT12Zf0Rk/cbhlw/H6bU
xWb2+DLCpTrDFwTzZdbpqsB+WmtOROaC/23fJYp/eYk8Lg0fp1tqnVtAG9o5Y2HS
79wVhm+d/LZFdIJUpZoGnK1Zi0k5NOj+OGEpPDO5LIilwzX8YT+E+bcgmwKxuyP4
XGdR/RTnREclew==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:07 2025 by rpki-client