Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
File: qafBolN_0DVAh1mXh8qoQv7WC38.mft (raw, json)
Hash identifier: QVJ9F+1uOAJva+hQZYx+rRUV/OrJOmyyWVSOFaIpQm8=
Subject key identifier: 11:E0:35:AA:0D:8D:70:15:17:C1:78:C2:1A:B0:0A:50:3F:37:F6:43
Authority key identifier: A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
Certificate issuer: /CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Certificate serial: 01988168F5DBAEE0A3BAD441EFE5A2F4BFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
Manifest number: 08BD
Signing time: Wed 06 Aug 2025 22:03:16 +0000
Manifest this update: Wed 06 Aug 2025 22:03:16 +0000
Manifest next update: Thu 07 Aug 2025 22:03:16 +0000
Files and hashes: 1: qafBolN_0DVAh1mXh8qoQv7WC38.crl (hash: XAvAidnWCWSYicGy2MEhqdrwsoG0i5BdQI/gzcXocsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:f5:db:ae:e0:a3:ba:d4:41:ef:e5:a2:f4:bf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a7c1a2537fd0354087599787caa842fed60b7f
Validity
Not Before: Aug 6 22:03:16 2025 GMT
Not After : Aug 7 22:03:16 2025 GMT
Subject: CN=11e035aa0d8d701517c178c21ab00a503f37f643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:40:0c:71:59:ad:90:ea:6e:75:3f:af:c9:
8b:e1:91:a2:91:93:2e:a7:6a:3a:92:57:47:56:96:
a9:27:96:74:d2:0c:fd:ca:1d:3b:6d:6e:98:81:e1:
49:96:fa:57:06:d3:94:5e:b6:e0:98:d3:8b:d2:a0:
a4:f3:d1:2c:8f:63:04:e2:07:7a:c6:58:8f:a6:cf:
2d:61:89:22:49:5f:1d:d1:c6:f3:59:53:9b:33:91:
ca:18:c2:a4:3d:56:b7:69:cf:51:4c:29:fc:fb:8c:
31:a4:79:d7:0c:a7:3d:d1:91:9c:4d:f2:27:d7:61:
14:ef:3f:90:1a:5f:7d:74:e8:c9:bd:4e:d8:33:ea:
3d:d6:be:8c:6e:a8:26:fb:ff:27:07:8f:15:2a:68:
e2:e8:c0:83:98:0a:8b:96:48:78:e7:1d:48:56:c6:
63:6d:9c:ad:4a:aa:a4:c9:90:b7:aa:25:b2:13:55:
c4:d8:a4:02:14:1d:c5:1f:23:c7:dc:05:5c:cb:00:
73:45:ff:18:6c:dd:fb:2b:cf:4a:fd:4c:e7:84:8b:
86:29:57:f1:2a:2a:c6:5b:7d:b5:23:4f:c7:97:29:
b3:81:48:af:58:99:2c:3b:50:31:8f:0e:77:71:58:
cc:25:1c:51:2e:78:f7:a3:89:fe:a2:fe:38:dd:20:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:35:AA:0D:8D:70:15:17:C1:78:C2:1A:B0:0A:50:3F:37:F6:43
X509v3 Authority Key Identifier:
keyid:A9:A7:C1:A2:53:7F:D0:35:40:87:59:97:87:CA:A8:42:FE:D6:0B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qafBolN_0DVAh1mXh8qoQv7WC38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f08304-3f78-470c-b6e1-48f1e5109047/1/qafBolN_0DVAh1mXh8qoQv7WC38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3c:a6:a2:93:57:df:a4:83:6e:18:26:e8:5b:42:5c:5d:d6:
b0:c5:14:1b:e5:eb:08:36:99:cf:96:28:c0:fb:35:65:10:e4:
ad:53:dc:7a:4f:e4:06:bc:6b:ad:e3:7d:ed:2b:8d:f1:d5:e7:
a7:a5:95:3b:dc:15:8f:54:f5:09:5c:08:b3:19:5e:b2:6e:38:
ff:d3:cb:35:c2:99:bf:7d:fb:ad:db:73:b5:e9:7d:8b:b8:4c:
27:7c:51:ad:d6:9b:f1:6f:05:2d:2c:04:d9:61:71:02:26:b6:
a2:97:6d:bd:f1:65:ef:7b:8f:de:1c:30:5a:d3:33:f8:e5:2f:
5f:50:c0:76:29:01:d6:44:89:06:00:4a:a5:10:ed:df:e4:7e:
28:04:bd:b5:40:d9:6a:d8:21:02:bc:da:18:0f:e4:31:8f:b2:
34:14:93:44:06:3f:40:7d:5e:04:d7:ae:10:98:be:4c:47:0a:
98:27:c5:0c:12:05:9e:34:bf:3c:d1:03:db:33:30:0c:12:34:
c1:f9:7f:6e:62:b8:c5:86:d1:43:a8:05:20:87:0e:cd:7a:40:
c9:93:38:02:63:37:97:b1:ca:c4:e4:56:e3:08:0a:b3:a0:03:
48:27:ef:4f:a8:c1:81:05:76:3b:73:d5:5f:b4:7f:dc:00:89:
20:dc:da:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaPXbruCjutRB7+Wi9L/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTdjMWEyNTM3ZmQwMzU0MDg3NTk5Nzg3Y2FhODQyZmVk
NjBiN2YwHhcNMjUwODA2MjIwMzE2WhcNMjUwODA3MjIwMzE2WjAzMTEwLwYDVQQD
EygxMWUwMzVhYTBkOGQ3MDE1MTdjMTc4YzIxYWIwMGE1MDNmMzdmNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8BADHFZrZDqbnU/r8mL4ZGikZMu
p2o6kldHVpapJ5Z00gz9yh07bW6YgeFJlvpXBtOUXrbgmNOL0qCk89Esj2ME4gd6
xliPps8tYYkiSV8d0cbzWVObM5HKGMKkPVa3ac9RTCn8+4wxpHnXDKc90ZGcTfIn
12EU7z+QGl99dOjJvU7YM+o91r6Mbqgm+/8nB48VKmji6MCDmAqLlkh45x1IVsZj
bZytSqqkyZC3qiWyE1XE2KQCFB3FHyPH3AVcywBzRf8YbN37K89K/UznhIuGKVfx
KirGW321I0/HlymzgUivWJksO1Axjw53cVjMJRxRLnj3o4n+ov443SDxTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHgNaoNjXAVF8F4whqwClA/N/ZDMB8GA1UdIwQY
MBaAFKmnwaJTf9A1QIdZl4fKqEL+1gt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEt
NDhmMWU1MTA5MDQ3LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mMDgzMDQtM2Y3OC00NzBjLWI2ZTEtNDhmMWU1MTA5MDQ3
LzEvcWFmQm9sTl8wRFZBaDFtWGg4cW9RdjdXQzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjymopNX
36SDbhgm6FtCXF3WsMUUG+XrCDaZz5YowPs1ZRDkrVPcek/kBrxrreN97SuN8dXn
p6WVO9wVj1T1CVwIsxlesm44/9PLNcKZv337rdtztel9i7hMJ3xRrdab8W8FLSwE
2WFxAia2opdtvfFl73uP3hwwWtMz+OUvX1DAdikB1kSJBgBKpRDt3+R+KAS9tUDZ
atghArzaGA/kMY+yNBSTRAY/QH1eBNeuEJi+TEcKmCfFDBIFnjS/PNED2zMwDBI0
wfl/bmK4xYbRQ6gFIIcOzXpAyZM4AmM3l7HKxORW4wgKs6ADSCfvT6jBgQV2O3PV
X7R/3ACJINzaPA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:38:58 2025 by rpki-client