Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: mO4oKQTImP1coMTBpPa/R/dUsir2sywabBZKtELCUAg=
Subject key identifier: 84:9C:71:25:77:EC:91:BA:46:2A:FF:D1:80:E6:43:10:74:6A:72:84
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 019883F9DE6CB871FC487725A56FA45E215C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 0652
Signing time: Thu 07 Aug 2025 10:00:47 +0000
Manifest this update: Thu 07 Aug 2025 10:00:47 +0000
Manifest next update: Fri 08 Aug 2025 10:00:47 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: 383hQzlwuO5uCrQab2oppk0A8Z6j1vTjsTGEGbAN6GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:f9:de:6c:b8:71:fc:48:77:25:a5:6f:a4:5e:21:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Aug 7 10:00:47 2025 GMT
Not After : Aug 8 10:00:47 2025 GMT
Subject: CN=849c712577ec91ba462affd180e64310746a7284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:56:71:f4:3c:e6:57:23:c0:b3:c2:ce:fe:
ab:f1:ec:10:2c:0d:72:f0:4b:2e:f1:89:dc:75:d3:
80:e3:1b:1c:9a:4f:64:2e:33:aa:4a:5f:30:08:f9:
a1:c3:a5:2f:3d:76:fa:2c:35:e9:82:30:ed:a4:cd:
26:e0:bf:cc:44:a1:30:dd:5b:fd:0b:1d:b2:36:a2:
c1:c6:6e:fd:b1:8d:34:75:18:b1:c3:00:b1:6b:47:
22:73:cb:94:de:a0:e2:ae:c2:de:65:51:4a:a7:3d:
b6:72:63:99:4a:3d:17:62:43:17:a6:c3:23:a7:da:
76:bb:b7:30:3c:7a:3b:4a:aa:4c:20:1d:c4:f7:68:
ec:0e:20:7b:87:5e:75:36:31:9c:4c:e7:f9:64:81:
42:f7:a5:f0:67:31:57:5a:6d:20:43:30:30:93:8d:
cf:1e:76:8a:ac:27:3b:1b:48:e3:76:b8:a6:a1:42:
93:95:a0:b9:70:30:53:32:44:b1:54:a9:89:96:bb:
5f:f4:5a:a6:51:1c:48:00:58:40:64:11:a5:5b:33:
74:c1:74:be:3c:4b:b5:e6:3e:00:16:9b:85:54:32:
c0:59:02:24:dd:ae:a9:9e:19:7a:fe:00:be:22:30:
6f:f2:dc:4d:00:03:6c:8a:cd:d7:d4:01:4d:6e:30:
d6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:71:25:77:EC:91:BA:46:2A:FF:D1:80:E6:43:10:74:6A:72:84
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:20:8e:93:ce:0c:f8:a6:f7:67:61:0a:32:24:a0:6d:e4:1f:
f8:01:4f:73:1b:47:eb:9c:45:4a:ba:6f:ec:f2:2b:26:9b:0f:
d0:a2:ed:b2:7b:f6:30:ad:bd:dc:99:f6:24:71:87:94:fa:ba:
13:83:b0:c8:d0:73:8b:cd:43:50:b5:a2:0f:0f:ec:fd:98:95:
b8:7e:59:41:c5:12:eb:61:55:62:60:ab:be:a6:df:e7:be:ad:
ec:98:b1:b4:f7:0b:6b:4e:b8:5d:be:47:77:ea:25:3c:99:4c:
63:a5:c6:9f:0a:4d:71:f5:56:7f:ae:40:16:5a:77:5a:7b:bb:
aa:a5:af:ca:39:15:86:d7:9e:ae:3b:fb:94:17:b5:25:71:5f:
89:66:63:aa:65:63:68:82:40:65:7b:50:e7:f2:ae:a7:8d:ab:
49:e8:d3:6c:20:d6:00:88:25:e5:44:d5:73:d3:c1:ef:9b:dc:
74:30:d9:80:2a:f4:f9:93:1d:cb:08:ce:80:e0:d0:0a:cb:91:
27:d9:b8:d3:37:26:5b:18:a4:9b:82:aa:a1:20:f0:a2:1f:3c:
45:a6:30:38:a5:80:5a:6d:6a:50:9c:4e:ee:2e:58:91:e1:20:
92:ec:ab:9a:03:82:4f:2c:55:c5:ea:3f:34:ac:ec:57:fb:d3:
0f:74:ef:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiD+d5suHH8SHclpW+kXiFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YTIzYWNlMmMwNjdmOGUyMTJmZjM1OWRhOTZjMjA1OGI2
NGIzZWEwHhcNMjUwODA3MTAwMDQ3WhcNMjUwODA4MTAwMDQ3WjAzMTEwLwYDVQQD
Eyg4NDljNzEyNTc3ZWM5MWJhNDYyYWZmZDE4MGU2NDMxMDc0NmE3Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/xWcfQ85lcjwLPCzv6r8ewQLA1y
8Esu8YncddOA4xscmk9kLjOqSl8wCPmhw6UvPXb6LDXpgjDtpM0m4L/MRKEw3Vv9
Cx2yNqLBxm79sY00dRixwwCxa0cic8uU3qDirsLeZVFKpz22cmOZSj0XYkMXpsMj
p9p2u7cwPHo7SqpMIB3E92jsDiB7h151NjGcTOf5ZIFC96XwZzFXWm0gQzAwk43P
HnaKrCc7G0jjdrimoUKTlaC5cDBTMkSxVKmJlrtf9FqmURxIAFhAZBGlWzN0wXS+
PEu15j4AFpuFVDLAWQIk3a6pnhl6/gC+IjBv8txNAANsis3X1AFNbjDWCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISccSV37JG6Rir/0YDmQxB0anKEMB8GA1UdIwQY
MBaAFKiiOs4sBn+OIS/zWdqWwgWLZLPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xZTBiYjYtZTQ1Ni00YThkLWI2MGIt
NzUyZDVkZTBhOTBlLzEvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xZTBiYjYtZTQ1Ni00YThkLWI2MGItNzUyZDVkZTBhOTBl
LzEvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSCOk84M
+Kb3Z2EKMiSgbeQf+AFPcxtH65xFSrpv7PIrJpsP0KLtsnv2MK293Jn2JHGHlPq6
E4OwyNBzi81DULWiDw/s/ZiVuH5ZQcUS62FVYmCrvqbf576t7JixtPcLa064Xb5H
d+olPJlMY6XGnwpNcfVWf65AFlp3Wnu7qqWvyjkVhteerjv7lBe1JXFfiWZjqmVj
aIJAZXtQ5/Kup42rSejTbCDWAIgl5UTVc9PB75vcdDDZgCr0+ZMdywjOgODQCsuR
J9m40zcmWxikm4KqoSDwoh88RaYwOKWAWm1qUJxO7i5YkeEgkuyrmgOCTyxVxeo/
NKzsV/vTD3TvxA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:41:46 2025 by rpki-client