Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: PDNNFZ2xPs491hk4rW4Ez9zdX7ukgHzxGq35GgwvWDk=
Subject key identifier: BF:01:D5:D2:D9:D4:24:C7:5A:8E:89:C3:A1:BD:95:36:2F:42:4D:C6
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 019896DC2992146829E497F6272677168A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 11F2
Signing time: Mon 11 Aug 2025 02:01:07 +0000
Manifest this update: Mon 11 Aug 2025 02:01:07 +0000
Manifest next update: Tue 12 Aug 2025 02:01:07 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: I3e+Q7XbxibPTuXutgT4LT8z67dmQxWcWF7WaewOTmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:29:92:14:68:29:e4:97:f6:27:26:77:16:8a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Aug 11 02:01:07 2025 GMT
Not After : Aug 12 02:01:07 2025 GMT
Subject: CN=bf01d5d2d9d424c75a8e89c3a1bd95362f424dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:c0:1c:4b:99:ff:2b:23:c8:14:1d:b0:8d:
f7:9f:1d:44:ce:99:ab:9a:cb:09:1e:e7:ab:ef:c9:
0e:ad:01:b4:ad:25:69:e8:5e:aa:ff:c1:78:d7:2d:
35:cb:48:21:66:e8:6b:1d:11:2d:fa:ae:9f:34:d2:
86:80:f1:ef:a9:a8:32:88:45:d5:28:ba:d3:76:8e:
c5:da:8a:50:34:70:ca:1f:99:3d:6f:36:13:6f:5d:
08:0f:8d:39:e7:19:8c:01:58:51:0d:8f:1c:03:83:
20:20:d4:9b:32:91:49:1b:3d:cb:49:86:8e:3c:32:
56:91:a4:71:99:2d:03:f1:36:c6:20:d1:a5:69:a8:
56:f0:20:2f:d1:7b:3b:c0:d8:cd:1f:e8:72:bc:e8:
e9:f0:2f:e5:1b:ff:8e:48:33:a9:9c:df:0b:a9:f1:
ba:e2:c0:fe:ca:a9:15:a2:fe:65:a1:f2:9c:82:14:
9a:4e:df:a6:04:44:d9:d6:d5:88:35:00:1c:34:51:
c9:20:cd:f8:bb:44:0c:3f:54:c6:cb:fa:62:44:e9:
54:9a:26:32:5d:4e:2d:bf:6c:f7:85:6c:ca:c1:c4:
46:46:cc:6c:2c:58:f5:a6:81:85:0b:70:79:02:c4:
2a:41:c3:f4:c2:dd:49:ee:83:22:2c:4b:f8:28:b5:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:01:D5:D2:D9:D4:24:C7:5A:8E:89:C3:A1:BD:95:36:2F:42:4D:C6
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:50:70:6f:9b:62:33:bc:75:4c:63:78:e2:72:3a:4a:85:49:
bf:64:aa:59:a8:4e:a0:36:13:16:3f:a3:07:f9:b2:eb:0b:75:
82:4c:a6:1b:c3:1d:f4:85:7e:60:4c:5e:57:d7:22:a9:55:6f:
f6:ef:1f:32:c6:33:e7:0d:73:13:ac:29:ad:2d:1d:cf:e6:b1:
ce:b1:9c:4d:b0:08:4f:ad:3c:45:f6:7d:04:fb:4f:84:0e:22:
b5:2f:ed:3a:53:70:9a:54:46:f2:3e:fa:60:26:7a:a4:73:d7:
ea:fa:04:c9:94:c7:a8:ea:37:71:93:3e:d6:80:c0:a6:a2:2c:
ab:54:d1:ac:66:7f:d6:75:f9:2c:cf:b4:bb:2e:3e:d8:3f:d1:
8b:16:fe:bd:4b:20:e4:ed:05:89:b7:75:4d:79:24:01:76:bb:
06:9f:87:21:32:32:03:0d:04:69:07:0a:f8:a7:d7:a8:d6:5d:
41:40:3d:64:ec:c0:31:16:66:42:5c:86:6b:de:7c:5e:0f:a9:
fa:30:11:d0:ed:25:3e:d7:ca:7e:9a:16:63:92:9c:25:ec:e3:
d8:5f:79:40:60:bf:fb:df:d3:77:9b:4b:e9:5c:98:d6:1f:5d:
c5:c6:c2:0b:e5:ae:de:79:ef:50:c7:a5:6d:55:d4:68:6e:03:
00:24:62:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiW3CmSFGgp5Jf2JyZ3FooVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2E3ZGExZTIyM2IxODMwYTBiOTFiNWQ2MWM4M2FkMjYw
YzExMWIwHhcNMjUwODExMDIwMTA3WhcNMjUwODEyMDIwMTA3WjAzMTEwLwYDVQQD
EyhiZjAxZDVkMmQ5ZDQyNGM3NWE4ZTg5YzNhMWJkOTUzNjJmNDI0ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4/AHEuZ/ysjyBQdsI33nx1Ezpmr
mssJHuer78kOrQG0rSVp6F6q/8F41y01y0ghZuhrHREt+q6fNNKGgPHvqagyiEXV
KLrTdo7F2opQNHDKH5k9bzYTb10ID4055xmMAVhRDY8cA4MgINSbMpFJGz3LSYaO
PDJWkaRxmS0D8TbGINGlaahW8CAv0Xs7wNjNH+hyvOjp8C/lG/+OSDOpnN8LqfG6
4sD+yqkVov5lofKcghSaTt+mBETZ1tWINQAcNFHJIM34u0QMP1TGy/piROlUmiYy
XU4tv2z3hWzKwcRGRsxsLFj1poGFC3B5AsQqQcP0wt1J7oMiLEv4KLWGAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8B1dLZ1CTHWo6Jw6G9lTYvQk3GMB8GA1UdIwQY
MBaAFKp6faHiI7GDCguRtdYcg60mDBEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQt
MGViOGYzN2EwMTc5LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lNTdmYjEtMmQ1YS00NjYxLTgwMWQtMGViOGYzN2EwMTc5
LzEvcW5wOW9lSWpzWU1LQzVHMTFoeURyU1lNRVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlBwb5ti
M7x1TGN44nI6SoVJv2SqWahOoDYTFj+jB/my6wt1gkymG8Md9IV+YExeV9ciqVVv
9u8fMsYz5w1zE6wprS0dz+axzrGcTbAIT608RfZ9BPtPhA4itS/tOlNwmlRG8j76
YCZ6pHPX6voEyZTHqOo3cZM+1oDApqIsq1TRrGZ/1nX5LM+0uy4+2D/Rixb+vUsg
5O0Fibd1TXkkAXa7Bp+HITIyAw0EaQcK+KfXqNZdQUA9ZOzAMRZmQlyGa958Xg+p
+jAR0O0lPtfKfpoWY5KcJezj2F95QGC/+9/Td5tL6VyY1h9dxcbCC+Wu3nnvUMel
bVXUaG4DACRiKQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:34 2025 by rpki-client