Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: mVulC907dAwOL1GhkQr9tw7Gy9HVBCXUFjE2AJrX/Z0=
Subject key identifier: 54:63:E0:D9:56:A3:73:46:3C:FB:64:37:15:FA:19:85:6A:62:F3:82
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 019874504ECFDC7D887BB0E6954E2C786A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 0A8D
Signing time: Mon 04 Aug 2025 09:01:16 +0000
Manifest this update: Mon 04 Aug 2025 09:01:16 +0000
Manifest next update: Tue 05 Aug 2025 09:01:16 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: tM8vG2emkDqYGo1v7kDRbCUqEngvE97OxzsuoINODiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:4e:cf:dc:7d:88:7b:b0:e6:95:4e:2c:78:6a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Aug 4 09:01:16 2025 GMT
Not After : Aug 5 09:01:16 2025 GMT
Subject: CN=5463e0d956a373463cfb643715fa19856a62f382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:06:c1:65:02:f7:f2:69:d3:47:9b:b9:0d:
76:a8:5c:90:58:5c:4a:4a:b1:00:69:ad:77:eb:e7:
90:ec:b6:40:69:52:14:48:41:22:83:b8:32:2b:8d:
d3:f6:ab:a3:4a:d3:5a:e3:c7:a5:dc:c2:4f:74:ab:
84:da:49:1a:5c:89:c6:22:b8:35:10:c5:03:72:57:
8b:75:84:cf:a2:27:58:00:c0:10:57:c6:39:df:75:
7b:95:17:f3:6a:a8:57:86:71:3b:70:74:fd:b5:c1:
88:e1:39:fc:c2:40:f4:72:ea:fb:4d:ae:40:36:b1:
b9:d7:56:77:06:28:af:aa:3c:88:85:9e:0c:e1:0e:
35:f9:5e:12:47:44:8e:bc:cb:12:2d:99:b5:b4:6c:
35:f3:6f:c6:ab:16:0f:86:bf:77:d1:62:48:2b:65:
a2:cc:99:3e:07:6e:fb:44:95:a1:02:5a:77:5e:fb:
65:c3:31:ed:78:55:ed:88:96:28:7d:6d:2c:b3:dd:
1b:7c:0c:1a:30:29:88:c7:94:16:36:14:0c:c6:94:
52:c7:06:c6:09:2d:83:48:44:a2:08:b5:e9:eb:aa:
08:12:68:b3:e4:9f:4c:af:f5:40:ae:cc:6c:49:94:
cb:72:5d:16:7e:64:f6:67:01:24:67:58:53:9d:89:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:E0:D9:56:A3:73:46:3C:FB:64:37:15:FA:19:85:6A:62:F3:82
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bd:e9:d6:d7:5d:04:70:2d:5c:3b:b1:fb:ce:fe:30:8d:d4:
69:02:7b:b0:08:68:6c:09:36:b9:06:6d:13:64:17:10:d1:59:
3d:c2:40:3c:fd:02:c5:cb:ef:63:43:bd:27:d3:c4:13:49:d4:
25:1c:da:41:7f:49:75:2f:55:27:ed:af:b7:35:51:b8:4a:0a:
99:f5:b8:83:45:18:5f:c2:69:3f:49:b5:a4:e6:04:a3:24:b0:
aa:7b:9e:e2:01:6a:dd:f9:96:fc:e9:10:c1:92:99:44:91:bd:
49:56:9f:d4:d1:ed:82:be:bc:fe:0a:10:91:b7:2c:7f:50:20:
09:ca:8f:8a:29:e7:42:9e:fa:4e:99:9f:ce:0f:d8:82:06:b2:
73:fa:d6:f4:f2:73:8b:6b:fd:fd:32:0e:34:d3:cf:70:20:c8:
48:eb:7e:50:f2:20:01:c0:da:dc:7f:40:0a:7f:37:31:50:e8:
1c:51:a3:b2:06:7c:0d:76:e6:8b:3b:09:24:f0:a1:e4:ad:4e:
6c:23:06:c1:f5:6b:f4:46:78:8a:45:27:5d:fe:8b:aa:de:96:
96:e8:55:62:55:16:52:cb:92:6d:57:36:a0:0e:f8:6a:5d:cb:
e4:59:91:52:f1:ac:32:d6:17:7c:93:0b:e1:ca:9d:f6:30:0f:
03:7f:69:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UE7P3H2Ie7DmlU4seGpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODIzYWRkZGY2YzM1ZjA1YjdjMWNhZTA3OTA0YmZmOWYy
ZjZhY2IwHhcNMjUwODA0MDkwMTE2WhcNMjUwODA1MDkwMTE2WjAzMTEwLwYDVQQD
Eyg1NDYzZTBkOTU2YTM3MzQ2M2NmYjY0MzcxNWZhMTk4NTZhNjJmMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8GwWUC9/Jp00ebuQ12qFyQWFxK
SrEAaa136+eQ7LZAaVIUSEEig7gyK43T9qujStNa48el3MJPdKuE2kkaXInGIrg1
EMUDcleLdYTPoidYAMAQV8Y533V7lRfzaqhXhnE7cHT9tcGI4Tn8wkD0cur7Ta5A
NrG511Z3BiivqjyIhZ4M4Q41+V4SR0SOvMsSLZm1tGw182/GqxYPhr930WJIK2Wi
zJk+B277RJWhAlp3XvtlwzHteFXtiJYofW0ss90bfAwaMCmIx5QWNhQMxpRSxwbG
CS2DSESiCLXp66oIEmiz5J9Mr/VArsxsSZTLcl0WfmT2ZwEkZ1hTnYktvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRj4NlWo3NGPPtkNxX6GYVqYvOCMB8GA1UdIwQY
MBaAFKmCOt3fbDXwW3wcrgeQS/+fL2rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAt
MzZkNGQ3ZjA3YzhhLzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8zNGZkMDgtY2U3Ni00YmMzLTg3YzAtMzZkNGQ3ZjA3Yzhh
LzEvcVlJNjNkOXNOZkJiZkJ5dUI1QkxfNTh2YXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcb3p1tdd
BHAtXDux+87+MI3UaQJ7sAhobAk2uQZtE2QXENFZPcJAPP0CxcvvY0O9J9PEE0nU
JRzaQX9JdS9VJ+2vtzVRuEoKmfW4g0UYX8JpP0m1pOYEoySwqnue4gFq3fmW/OkQ
wZKZRJG9SVaf1NHtgr68/goQkbcsf1AgCcqPiinnQp76Tpmfzg/Yggayc/rW9PJz
i2v9/TIONNPPcCDISOt+UPIgAcDa3H9ACn83MVDoHFGjsgZ8DXbmizsJJPCh5K1O
bCMGwfVr9EZ4ikUnXf6Lqt6WluhVYlUWUsuSbVc2oA74al3L5FmRUvGsMtYXfJML
4cqd9jAPA39pxw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:13 2025 by rpki-client