
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: JaIiEo1XSykNxO4q2qA4HOd0mvEivC8J4Yu65jzCe0g=
Subject key identifier: 43:59:E5:6F:89:CE:43:25:7A:91:48:AC:6F:13:77:CC:87:DF:43:71
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019873E34AC67BB3550289FFD4A7ED443D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 0E38
Signing time: Mon 04 Aug 2025 07:02:12 +0000
Manifest this update: Mon 04 Aug 2025 07:02:12 +0000
Manifest next update: Tue 05 Aug 2025 07:02:12 +0000
Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: wkq7jRIP3GuWQfPUYPpZ2mE2VeqLB1fSDeeAZohCXVM=)
3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4a:c6:7b:b3:55:02:89:ff:d4:a7:ed:44:3d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Aug 4 07:02:12 2025 GMT
Not After : Aug 5 07:02:12 2025 GMT
Subject: CN=4359e56f89ce43257a9148ac6f1377cc87df4371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:41:d7:81:3d:6f:1e:e2:7d:3c:83:b2:15:
cb:50:63:e2:23:bf:5d:b8:2e:89:3d:f8:b0:7b:3c:
fa:e9:47:86:dd:71:a2:29:7a:f1:3e:be:25:c8:42:
1d:68:d4:56:88:64:7b:d4:57:ab:b8:77:b7:b5:da:
06:64:5e:cc:d2:8d:cc:e8:71:31:3a:11:6f:1d:22:
36:b5:53:8b:a1:ee:7d:d7:1d:79:81:2e:cb:23:8d:
bc:5c:6a:80:19:3a:ae:48:78:aa:bd:b2:41:3f:55:
f1:8f:f6:5a:70:b6:22:a4:d2:f6:f9:b6:61:21:23:
f9:b3:4a:f5:35:ba:4b:41:13:ee:3b:c2:b8:e3:d9:
45:ad:96:c1:ee:21:94:27:b9:62:1e:01:fc:19:d2:
0e:21:3b:12:9a:47:a2:99:f9:88:de:56:0c:36:cf:
30:72:1f:56:d2:e0:98:cb:ae:41:61:b3:e1:97:18:
d5:63:77:d3:4d:63:46:77:ca:f1:13:54:bf:26:ce:
42:03:44:31:86:0d:ee:f6:5b:d2:34:25:ad:00:c0:
78:f0:1e:e2:3d:81:99:e4:bb:f1:73:7e:b7:dd:5d:
be:eb:6c:aa:d6:b5:0e:c1:66:d2:90:24:4d:fd:9e:
c7:89:42:e7:48:41:c1:9b:fb:0c:bd:a4:16:5f:fd:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:E5:6F:89:CE:43:25:7A:91:48:AC:6F:13:77:CC:87:DF:43:71
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:37:6c:28:38:39:6f:44:e8:5a:ba:a7:ec:c2:18:82:e6:70:
63:3b:77:0a:60:45:33:04:9b:4f:ed:af:8b:62:1c:6d:c4:5b:
71:9c:b9:fc:30:28:d9:d2:ba:84:1f:95:6c:e9:9b:32:0d:11:
c3:d4:d0:5a:02:b3:24:74:00:dd:9d:87:11:ab:a2:14:2e:66:
8f:fa:d5:88:9f:59:52:f6:92:5c:48:92:21:1a:87:78:19:ce:
3b:4a:25:c8:ea:5f:13:39:a0:49:99:39:46:6e:55:da:a0:8f:
2a:ac:fa:e3:63:e9:8e:b2:ed:c7:32:3f:83:46:4f:16:e5:11:
bc:b0:0b:52:38:71:43:0c:20:32:9c:c7:da:0b:e6:2a:1a:8a:
3a:14:7b:de:30:f3:91:25:86:39:7b:bd:fb:d8:79:13:5e:b9:
46:0c:39:84:b0:5b:7d:d9:46:00:32:d6:2b:92:05:d8:68:57:
b3:4b:f1:7e:21:be:22:29:0e:d4:87:cf:04:f8:39:44:c3:ed:
f3:36:39:0d:07:73:2f:47:ec:e8:01:98:85:8b:e4:dd:c6:17:
27:3d:e7:b9:dc:c4:62:24:4c:e4:a0:62:46:09:dd:42:0d:d3:
78:be:43:6e:3a:e1:ec:d2:37:b1:96:e1:e5:53:ea:34:5c:13:
1d:8d:5c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz40rGe7NVAon/1KftRD0iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFk
MzUxNDUwHhcNMjUwODA0MDcwMjEyWhcNMjUwODA1MDcwMjEyWjAzMTEwLwYDVQQD
Eyg0MzU5ZTU2Zjg5Y2U0MzI1N2E5MTQ4YWM2ZjEzNzdjYzg3ZGY0MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu09B14E9bx7ifTyDshXLUGPiI79d
uC6JPfiwezz66UeG3XGiKXrxPr4lyEIdaNRWiGR71FeruHe3tdoGZF7M0o3M6HEx
OhFvHSI2tVOLoe591x15gS7LI428XGqAGTquSHiqvbJBP1Xxj/ZacLYipNL2+bZh
ISP5s0r1NbpLQRPuO8K449lFrZbB7iGUJ7liHgH8GdIOITsSmkeimfmI3lYMNs8w
ch9W0uCYy65BYbPhlxjVY3fTTWNGd8rxE1S/Js5CA0Qxhg3u9lvSNCWtAMB48B7i
PYGZ5Lvxc3633V2+62yq1rUOwWbSkCRN/Z7HiULnSEHBm/sMvaQWX/3NswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENZ5W+JzkMlepFIrG8Td8yH30NxMB8GA1UdIwQY
MBaAFKgXx0U/N36ctvrlyJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjct
ZGVjNjgwODNmOGY2LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2
LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjdsKDg5
b0ToWrqn7MIYguZwYzt3CmBFMwSbT+2vi2IcbcRbcZy5/DAo2dK6hB+VbOmbMg0R
w9TQWgKzJHQA3Z2HEauiFC5mj/rViJ9ZUvaSXEiSIRqHeBnOO0olyOpfEzmgSZk5
Rm5V2qCPKqz642PpjrLtxzI/g0ZPFuURvLALUjhxQwwgMpzH2gvmKhqKOhR73jDz
kSWGOXu9+9h5E165Rgw5hLBbfdlGADLWK5IF2GhXs0vxfiG+IikO1IfPBPg5RMPt
8zY5DQdzL0fs6AGYhYvk3cYXJz3nudzEYiRM5KBiRgndQg3TeL5Dbjrh7NI3sZbh
5VPqNFwTHY1cmw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:22 2025 by rpki-client