Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: kgydnpGc6nwNFunTvyg4okHC885SENzdq0kB7JjhcS0=
Subject key identifier: 2C:F6:BA:85:DD:FD:92:66:90:59:BF:74:41:59:D2:60:1E:78:F2:09
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 019873E2A5CF7D4C9548B72DBFF9A3DD2ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 062B
Signing time: Mon 04 Aug 2025 07:01:29 +0000
Manifest this update: Mon 04 Aug 2025 07:01:29 +0000
Manifest next update: Tue 05 Aug 2025 07:01:29 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: SrOXF5hTDTXFzyZ5aPcAPtoo1Dk0E7BNjQf/7JOZ8m4=)
2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:a5:cf:7d:4c:95:48:b7:2d:bf:f9:a3:dd:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Aug 4 07:01:29 2025 GMT
Not After : Aug 5 07:01:29 2025 GMT
Subject: CN=2cf6ba85ddfd92669059bf744159d2601e78f209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:05:4c:21:7f:a7:c2:ea:80:39:2d:ae:11:
a2:31:4b:e1:60:54:59:2c:a4:07:94:ac:ad:e0:5b:
1e:32:20:d6:e9:a4:e7:22:4f:50:4f:82:63:4e:74:
59:62:23:82:43:34:8f:34:62:78:1e:4a:6c:f6:2d:
38:63:75:4f:e5:11:79:3f:84:5a:b1:1a:e8:a6:1d:
6c:2f:20:f7:9a:37:12:cd:a8:7d:fd:dd:97:3b:42:
c7:a6:e7:ea:23:fb:53:49:f0:c6:14:fe:e1:d2:2a:
26:b2:4a:a9:32:30:cd:83:db:f7:5b:56:ab:00:02:
1f:d0:82:cd:ec:f0:90:0e:45:3a:2d:3f:dc:b0:e4:
85:40:28:14:de:45:6b:df:2f:39:bb:0e:67:69:c6:
cf:8c:73:2b:66:62:84:b2:65:bd:8a:6b:aa:f0:71:
7f:7a:08:a2:59:74:99:53:39:52:0b:49:21:86:20:
b2:e0:a7:bc:be:4d:e2:87:e9:09:40:8b:6c:0f:8e:
74:d7:4b:4f:c8:25:0b:07:7f:1d:e2:e9:2f:96:88:
b7:da:f1:04:8d:1d:8c:53:a0:9b:d1:37:32:27:eb:
db:8f:9e:22:ac:71:8c:9c:3f:7f:4a:ce:ac:9d:43:
32:31:3a:cb:85:12:65:a6:d2:fc:c3:4a:fe:41:1a:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:BA:85:DD:FD:92:66:90:59:BF:74:41:59:D2:60:1E:78:F2:09
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c4:0b:42:a1:31:da:c2:49:86:ec:d3:a7:fc:8b:69:aa:b8:
97:b2:3c:2f:c4:1a:9f:12:9b:2e:ab:d0:e3:8c:ec:f8:b3:bf:
e5:ee:db:73:fc:35:87:af:21:7d:21:9d:36:7e:88:2a:32:d2:
8c:48:c5:e7:8f:f0:9b:32:2d:c3:a3:b6:d2:25:0f:1b:2e:03:
b9:53:a0:41:4e:0f:a4:58:a9:19:62:19:5c:e4:c9:78:34:d3:
fa:e5:66:72:1a:b0:c3:bf:c0:d2:c2:36:58:b2:7d:f5:76:af:
f3:0b:7c:94:b5:30:0d:41:d4:18:46:b2:34:0a:ce:bd:41:4a:
7d:31:e9:c3:c1:0e:e9:ca:34:9d:fc:57:65:b1:ab:78:6a:69:
01:7f:56:78:9d:f5:de:4a:ec:f7:e9:fd:b5:f4:96:cd:e2:2c:
5d:4b:08:fb:8d:35:74:29:3d:69:d5:7b:85:6c:2a:91:23:f2:
b9:17:36:d8:24:e7:3d:df:cf:54:d2:8f:45:74:6b:64:4f:a9:
67:55:e4:a1:c3:b6:96:d5:52:1e:cf:6e:ac:16:12:d0:4d:a2:
cb:f9:a3:60:c0:d3:20:8f:a2:0f:fb:8b:92:4e:81:fa:cc:c3:
6f:43:87:3a:4a:eb:5a:96:20:6d:84:04:b2:38:00:73:e7:28:
d6:a1:47:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4qXPfUyVSLctv/mj3S7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYjkyZWMyYjBlMzJjYjdiMmRiMTNlMzc2NTI5OGQ2ZDJl
NTg1Y2QwHhcNMjUwODA0MDcwMTI5WhcNMjUwODA1MDcwMTI5WjAzMTEwLwYDVQQD
EygyY2Y2YmE4NWRkZmQ5MjY2OTA1OWJmNzQ0MTU5ZDI2MDFlNzhmMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjEFTCF/p8LqgDktrhGiMUvhYFRZ
LKQHlKyt4FseMiDW6aTnIk9QT4JjTnRZYiOCQzSPNGJ4Hkps9i04Y3VP5RF5P4Ra
sRroph1sLyD3mjcSzah9/d2XO0LHpufqI/tTSfDGFP7h0iomskqpMjDNg9v3W1ar
AAIf0ILN7PCQDkU6LT/csOSFQCgU3kVr3y85uw5nacbPjHMrZmKEsmW9imuq8HF/
egiiWXSZUzlSC0khhiCy4Ke8vk3ih+kJQItsD45010tPyCULB38d4ukvloi32vEE
jR2MU6Cb0TcyJ+vbj54irHGMnD9/Ss6snUMyMTrLhRJlptL8w0r+QRoGWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz2uoXd/ZJmkFm/dEFZ0mAeePIJMB8GA1UdIwQY
MBaAFEO5LsKw4yy3stsT43ZSmNbS5YXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84OTI4NmYtMGU1OS00NjI2LWE2MTct
NjAyMTUxNTIyYTA5LzEvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84OTI4NmYtMGU1OS00NjI2LWE2MTctNjAyMTUxNTIyYTA5
LzEvUTdrdXdyRGpMTGV5MnhQamRsS1kxdExsaGMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANMQLQqEx
2sJJhuzTp/yLaaq4l7I8L8QanxKbLqvQ44zs+LO/5e7bc/w1h68hfSGdNn6IKjLS
jEjF54/wmzItw6O20iUPGy4DuVOgQU4PpFipGWIZXOTJeDTT+uVmchqww7/A0sI2
WLJ99Xav8wt8lLUwDUHUGEayNArOvUFKfTHpw8EO6co0nfxXZbGreGppAX9WeJ31
3krs9+n9tfSWzeIsXUsI+401dCk9adV7hWwqkSPyuRc22CTnPd/PVNKPRXRrZE+p
Z1XkocO2ltVSHs9urBYS0E2iy/mjYMDTII+iD/uLkk6B+szDb0OHOkrrWpYgbYQE
sjgAc+co1qFHQQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:39:38 2025 by rpki-client