Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: wRK/SF9jYjpLhfFvz3lFt3INFuUGjjfEMMcPqnlT6Js=
Subject key identifier: 00:67:73:5C:33:1E:C4:72:F9:CE:50:2D:E8:3A:B8:25:FD:35:6F:E5
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019873E2712B694D310B9F6B9103582E2A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 07:01:16 +0000
Manifest this update: Mon 04 Aug 2025 07:01:16 +0000
Manifest next update: Tue 05 Aug 2025 07:01:16 +0000
Files and hashes: 1: CLFvtBlCszPljVNHlNiA9R-sl_c.roa (hash: /Tu6jIruJ01g/a0I0NJoIAi1setevOJy2+jMKtPuHbo=)
2: QDogk9LeixWbk7Okb-SPGo3DZsc.roa (hash: UXsKXqumkYzMjQANzxQvweH31V1wu92CHEL8JuHdFNw=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: fZFtxFci1Tw0Bv3ZsN+6q6X+4xd0jS73Rf7xjzpr1do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:71:2b:69:4d:31:0b:9f:6b:91:03:58:2e:2a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Aug 4 07:01:16 2025 GMT
Not After : Aug 5 07:01:16 2025 GMT
Subject: CN=0067735c331ec472f9ce502de83ab825fd356fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:cb:74:1e:37:1c:0f:38:81:32:58:45:42:75:
81:6b:6c:6f:5d:53:46:02:e2:1b:15:32:eb:ed:90:
61:9c:3e:27:a7:25:a3:d6:8c:41:60:45:41:9e:ce:
26:b2:97:13:e6:e8:b6:dc:02:8e:0c:25:23:b3:e2:
6f:ed:1f:5c:20:db:70:73:9f:af:37:a9:9a:39:f8:
2c:85:38:93:fc:6b:4a:32:36:41:ef:ce:a6:95:56:
fe:eb:4d:8d:67:83:a3:39:7a:25:30:0a:ee:0d:45:
4f:eb:46:eb:7d:97:4b:ad:04:f9:8b:1c:a5:1c:6f:
33:05:e5:02:1a:64:a0:94:b7:ef:da:4c:05:47:75:
ed:18:c9:e0:04:ab:50:00:52:68:d7:44:9b:9d:3a:
43:57:c6:64:c3:98:0f:7f:b5:0c:c3:17:ed:95:ac:
b4:c8:2c:d6:dc:19:d9:21:1b:15:73:fb:70:57:bb:
db:4a:d5:48:03:03:c5:c4:bc:f6:25:6b:e4:0a:26:
70:4e:04:a1:76:02:c2:bb:77:cc:53:c5:bd:9e:5d:
17:be:6b:68:64:e0:b8:58:a6:9c:33:b6:6e:ef:79:
ee:60:32:06:6f:8e:66:15:d2:25:4e:4f:67:27:89:
c8:fa:1e:b4:fe:55:00:0f:5c:cf:ad:67:af:dc:10:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:67:73:5C:33:1E:C4:72:F9:CE:50:2D:E8:3A:B8:25:FD:35:6F:E5
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7c:4e:ff:cb:e6:4e:ba:b0:37:0b:7b:48:3b:1b:20:87:13:
62:94:ee:ed:12:a7:b1:a2:50:4f:7e:20:4a:a8:5a:62:4b:15:
d1:a9:98:33:50:ee:dc:e8:e0:76:f3:d1:1c:96:1b:3b:59:9f:
ee:b7:64:fd:cf:3b:7a:b8:72:0e:53:40:4c:30:c0:0c:41:92:
22:e8:53:c6:cf:28:58:17:a6:64:90:82:75:10:bc:c6:2e:f7:
9c:95:21:61:e5:b9:b6:86:68:08:50:4c:2a:cb:a4:2c:6b:38:
0a:e2:35:df:f2:94:6d:35:b3:8d:40:3e:ec:06:83:af:42:e0:
1f:df:0e:20:62:f5:a7:c5:4f:18:b9:2e:5c:6b:27:fb:3f:33:
5b:df:03:da:a0:18:68:29:f8:44:4d:1b:66:be:9c:f2:e6:46:
56:8f:7b:7b:c0:38:99:5b:f0:29:f3:73:ea:63:10:62:44:db:
ed:bc:59:59:9c:07:c9:08:ff:f0:70:d8:c5:cc:7b:4c:d2:c8:
30:88:b2:1c:ca:ca:c3:1d:48:49:a0:82:7c:73:24:8b:fe:43:
39:a8:32:00:02:9a:1c:76:bc:91:85:08:da:4e:19:bb:4a:9b:
eb:52:bb:3b:54:4f:72:f8:1f:fa:32:a1:91:c0:5d:2e:9e:e7:
f2:9a:09:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4nEraU0xC59rkQNYLipsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk
NTMyYzIwHhcNMjUwODA0MDcwMTE2WhcNMjUwODA1MDcwMTE2WjAzMTEwLwYDVQQD
EygwMDY3NzM1YzMzMWVjNDcyZjljZTUwMmRlODNhYjgyNWZkMzU2ZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Mt0HjccDziBMlhFQnWBa2xvXVNG
AuIbFTLr7ZBhnD4npyWj1oxBYEVBns4mspcT5ui23AKODCUjs+Jv7R9cINtwc5+v
N6maOfgshTiT/GtKMjZB786mlVb+602NZ4OjOXolMAruDUVP60brfZdLrQT5ixyl
HG8zBeUCGmSglLfv2kwFR3XtGMngBKtQAFJo10SbnTpDV8Zkw5gPf7UMwxftlay0
yCzW3BnZIRsVc/twV7vbStVIAwPFxLz2JWvkCiZwTgShdgLCu3fMU8W9nl0Xvmto
ZOC4WKacM7Zu73nuYDIGb45mFdIlTk9nJ4nI+h60/lUAD1zPrWev3BA2CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABnc1wzHsRy+c5QLeg6uCX9NW/lMB8GA1UdIwQY
MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt
MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw
LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3xO/8vm
TrqwNwt7SDsbIIcTYpTu7RKnsaJQT34gSqhaYksV0amYM1Du3OjgdvPRHJYbO1mf
7rdk/c87erhyDlNATDDADEGSIuhTxs8oWBemZJCCdRC8xi73nJUhYeW5toZoCFBM
KsukLGs4CuI13/KUbTWzjUA+7AaDr0LgH98OIGL1p8VPGLkuXGsn+z8zW98D2qAY
aCn4RE0bZr6c8uZGVo97e8A4mVvwKfNz6mMQYkTb7bxZWZwHyQj/8HDYxcx7TNLI
MIiyHMrKwx1ISaCCfHMki/5DOagyAAKaHHa8kYUI2k4Zu0qb61K7O1RPcvgf+jKh
kcBdLp7n8poJLg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:34 2025 by rpki-client