Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: d5I3ujjF85R/MvJVHs4kyqUgr+NWzY6eHoVi6oCc4+k=
Subject key identifier: FA:3D:BD:3F:20:E6:5F:FC:45:85:CD:07:A9:27:2D:50:57:89:F5:4D
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019784D80072607EE06588178C79543DB1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 1324
Signing time: Wed 18 Jun 2025 21:00:37 +0000
Manifest this update: Wed 18 Jun 2025 21:00:37 +0000
Manifest next update: Thu 19 Jun 2025 21:00:37 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: GwMtpZgRFDIfOd5/XU1XEKU/fTrTUUM/MFv8159CqUs=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:d8:00:72:60:7e:e0:65:88:17:8c:79:54:3d:b1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Jun 18 21:00:37 2025 GMT
Not After : Jun 19 21:00:37 2025 GMT
Subject: CN=fa3dbd3f20e65ffc4585cd07a9272d505789f54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:b4:04:87:6c:06:5a:69:ea:c2:9f:b4:7c:
b6:0d:e9:26:5c:5f:29:fc:ce:f4:46:19:25:25:00:
da:3c:19:74:57:1d:0a:ce:51:47:02:80:aa:ad:5f:
00:b4:c3:d9:b1:61:a4:c7:f0:2e:1f:d4:8d:6f:d5:
cb:31:05:a4:63:f3:47:f5:61:b0:91:12:5b:38:58:
c1:dc:11:1b:3e:24:10:b9:47:8c:8c:8e:8c:60:eb:
34:cd:72:42:c8:4d:f5:a0:29:e2:bd:18:1b:9a:a6:
1c:eb:ba:00:c8:b2:65:f1:e2:f1:00:92:23:52:ef:
1d:2f:1e:d8:2f:ce:26:95:ab:cb:d0:7e:bc:67:0a:
00:6e:d4:39:7b:78:32:21:dd:31:3e:1b:95:96:65:
d2:6e:ba:c5:7e:9b:26:f8:a6:6e:06:d5:58:27:86:
bf:0e:db:17:b2:e8:6d:ac:85:41:ee:d9:48:7d:ef:
f7:80:37:11:91:3b:b0:5e:1f:4e:9e:88:1b:9b:0c:
06:90:ea:47:ad:f5:a9:db:20:43:76:89:1c:3a:3e:
98:fc:bb:02:34:e7:12:8a:44:bf:10:aa:d6:e9:2c:
8c:54:fd:64:80:d0:3f:fd:5c:a0:81:09:1e:df:31:
d7:27:64:82:21:6b:04:bd:7d:a6:8a:ce:53:7c:fa:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:BD:3F:20:E6:5F:FC:45:85:CD:07:A9:27:2D:50:57:89:F5:4D
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b4:4c:24:50:2c:0c:5f:84:bd:58:ce:4a:63:ff:b7:26:c5:
1f:4b:5a:cf:f3:12:8e:12:65:84:fd:9d:93:b9:3d:fd:6d:85:
89:18:47:c9:e4:b8:b5:93:e2:b4:25:28:f7:29:6a:ca:f8:cd:
4e:59:8f:eb:76:b8:77:91:13:c2:f7:bd:8b:c1:62:04:ba:d8:
ee:da:02:b1:a3:b1:b4:f6:c9:c4:6f:2f:bd:e8:9e:bf:cb:66:
7b:ec:ba:f3:31:10:30:6f:df:75:7e:f7:0d:48:32:91:f9:d0:
22:c0:aa:73:7e:09:e2:32:38:c3:d0:b0:73:33:51:c9:3e:a1:
09:ec:b9:2d:79:17:99:2d:80:27:83:de:ec:56:2c:13:2e:4a:
96:67:51:c8:5c:f3:e3:15:13:33:84:b3:73:e3:23:ff:40:f2:
91:18:16:a4:09:75:bb:f0:1c:0f:c6:db:06:6b:5d:85:59:30:
11:fb:10:ae:5b:a5:13:d4:d1:61:71:a6:1d:46:59:85:cf:54:
e1:e1:70:43:c7:54:25:1b:ca:e7:36:b8:69:a9:2f:fb:f8:9a:
6e:85:68:ba:5b:5c:a9:a9:16:ba:ec:8b:d3:b8:13:4c:f3:eb:
3e:87:8a:f0:05:b5:48:44:27:16:23:1d:fc:d3:b0:b0:a9:18:
b4:b1:28:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeE2AByYH7gZYgXjHlUPbGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTJjNDdkYjhhMjE5MzExNTQ2MDVkNTc2YzNiNzM0MWQw
NmI0YjQwHhcNMjUwNjE4MjEwMDM3WhcNMjUwNjE5MjEwMDM3WjAzMTEwLwYDVQQD
EyhmYTNkYmQzZjIwZTY1ZmZjNDU4NWNkMDdhOTI3MmQ1MDU3ODlmNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZe0BIdsBlpp6sKftHy2DekmXF8p
/M70RhklJQDaPBl0Vx0KzlFHAoCqrV8AtMPZsWGkx/AuH9SNb9XLMQWkY/NH9WGw
kRJbOFjB3BEbPiQQuUeMjI6MYOs0zXJCyE31oCnivRgbmqYc67oAyLJl8eLxAJIj
Uu8dLx7YL84mlavL0H68ZwoAbtQ5e3gyId0xPhuVlmXSbrrFfpsm+KZuBtVYJ4a/
DtsXsuhtrIVB7tlIfe/3gDcRkTuwXh9OnogbmwwGkOpHrfWp2yBDdokcOj6Y/LsC
NOcSikS/EKrW6SyMVP1kgNA//VyggQke3zHXJ2SCIWsEvX2mis5TfPpKuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo9vT8g5l/8RYXNB6knLVBXifVNMB8GA1UdIwQY
MBaAFECSxH24ohkxFUYF1XbDtzQdBrS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYt
OGEzNmE2ZmFjZDUwLzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYtOGEzNmE2ZmFjZDUw
LzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrRMJFAs
DF+EvVjOSmP/tybFH0taz/MSjhJlhP2dk7k9/W2FiRhHyeS4tZPitCUo9ylqyvjN
TlmP63a4d5ETwve9i8FiBLrY7toCsaOxtPbJxG8vveiev8tme+y68zEQMG/fdX73
DUgykfnQIsCqc34J4jI4w9CwczNRyT6hCey5LXkXmS2AJ4Pe7FYsEy5KlmdRyFzz
4xUTM4Szc+Mj/0DykRgWpAl1u/AcD8bbBmtdhVkwEfsQrlulE9TRYXGmHUZZhc9U
4eFwQ8dUJRvK5za4aakv+/iaboVoultcqakWuuyL07gTTPPrPoeK8AW1SEQnFiMd
/NOwsKkYtLEoCA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 08:04:33 2025 by rpki-client