Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: nnD4WfZP9F4rJtGz+twicF7LpfOEQP584R/et3s6L0I=
Subject key identifier: 32:61:D2:A5:9B:06:84:1B:58:5E:DC:BA:47:43:F3:9B:14:DF:BE:76
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 0198744FE0561FB5DB62A34F61C231F2E85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 06DD
Signing time: Mon 04 Aug 2025 09:00:48 +0000
Manifest this update: Mon 04 Aug 2025 09:00:48 +0000
Manifest next update: Tue 05 Aug 2025 09:00:48 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: WduNW+JBZ8M0UVKMtZSVEyQgFHRousLsBS6hzLbDLlw=)
2: t9VupHYPOlXRe5J5x5F4CIePTBk.roa (hash: Fm6IUpzI362dwSd1jnTljFQdqkkno6k0hmV6iA3oMoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e0:56:1f:b5:db:62:a3:4f:61:c2:31:f2:e8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Aug 4 09:00:48 2025 GMT
Not After : Aug 5 09:00:48 2025 GMT
Subject: CN=3261d2a59b06841b585edcba4743f39b14dfbe76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:41:5c:ab:40:d8:dc:df:c4:b0:19:58:de:
33:b4:37:8e:71:21:d2:6f:d3:4c:6a:a8:64:1c:0a:
18:25:1a:2b:f7:dc:6f:a2:a7:69:ad:d5:64:60:35:
52:d1:ff:81:9a:45:15:17:f4:bc:9c:9d:64:26:8b:
83:ab:d1:12:3f:23:40:e7:82:cd:6d:1c:4a:c8:66:
9e:5f:3a:34:ad:4f:d5:72:2e:50:01:8e:59:31:4d:
bb:fa:26:45:c2:94:4b:ec:39:56:24:77:9f:be:29:
91:b2:e9:b0:ea:c8:82:73:29:11:7d:3b:0c:95:88:
90:a2:b9:bb:e3:cd:6e:36:70:ce:ec:67:7b:42:99:
20:4a:34:8b:42:11:b1:04:7b:58:c3:33:64:0b:f9:
3e:14:0b:e0:2c:64:45:e2:8a:d0:61:d8:ad:1f:95:
4d:1f:4b:1c:b6:25:4e:ac:1e:a8:51:97:a3:83:28:
7d:37:95:d7:5b:28:91:de:9e:20:76:3f:56:b8:23:
e0:1a:01:4f:ec:1c:54:8a:4e:cd:b3:a7:65:34:f4:
9d:16:f6:0a:14:cf:03:10:72:9d:86:a3:bf:e4:55:
80:bb:2e:89:04:3b:0f:2e:b8:a2:97:ef:e6:f2:1f:
a7:1c:80:95:62:19:a5:07:a9:d5:78:dc:6f:90:f5:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:61:D2:A5:9B:06:84:1B:58:5E:DC:BA:47:43:F3:9B:14:DF:BE:76
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:34:92:3d:97:f0:cf:36:13:a6:c0:64:34:ab:67:d9:e7:f6:
51:f5:cc:d4:79:52:25:07:55:2b:68:68:4b:45:87:55:26:76:
99:36:6b:6b:8f:c1:f0:df:6f:da:09:1f:84:b9:7c:fe:ec:1d:
94:82:99:6e:df:de:8a:ac:58:10:95:b2:b1:43:9f:c1:6e:ae:
f9:2e:3a:ab:2e:85:ba:bb:b7:be:53:14:7c:70:36:bd:91:6a:
f1:cf:0d:34:2f:87:2f:53:40:65:71:65:48:05:06:3f:a9:87:
bd:ee:6e:b6:f1:b6:80:9f:6d:7f:a6:09:61:fd:96:bc:6c:49:
3d:04:b8:c5:7a:02:f2:41:32:1e:58:17:46:f9:db:f3:73:ff:
7b:7d:48:08:24:fb:c6:27:f6:57:16:13:50:a0:a8:08:a1:83:
46:27:27:5d:40:d8:e6:83:67:08:45:4c:06:4d:68:83:62:8d:
43:77:c2:2c:d8:9f:7c:eb:df:b0:81:fe:f6:d1:24:b7:4b:8b:
0b:59:1b:be:23:f2:33:fa:7a:89:3e:76:6b:d6:56:26:1c:fe:
15:95:d4:e1:69:1f:34:c2:7e:74:d8:1f:00:cd:ee:58:88:77:
dd:1d:4d:39:b0:19:13:5b:56:f0:7d:7d:96:5f:98:85:cd:d9:
b2:84:f2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T+BWH7XbYqNPYcIx8uhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjUxYWVhZjc3NGI2MzNhNDdmOTYwYTcwODliMTViMzVi
MWE0Y2IwHhcNMjUwODA0MDkwMDQ4WhcNMjUwODA1MDkwMDQ4WjAzMTEwLwYDVQQD
EygzMjYxZDJhNTliMDY4NDFiNTg1ZWRjYmE0NzQzZjM5YjE0ZGZiZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7xBXKtA2NzfxLAZWN4ztDeOcSHS
b9NMaqhkHAoYJRor99xvoqdprdVkYDVS0f+BmkUVF/S8nJ1kJouDq9ESPyNA54LN
bRxKyGaeXzo0rU/Vci5QAY5ZMU27+iZFwpRL7DlWJHefvimRsumw6siCcykRfTsM
lYiQorm7481uNnDO7Gd7QpkgSjSLQhGxBHtYwzNkC/k+FAvgLGRF4orQYditH5VN
H0sctiVOrB6oUZejgyh9N5XXWyiR3p4gdj9WuCPgGgFP7BxUik7Ns6dlNPSdFvYK
FM8DEHKdhqO/5FWAuy6JBDsPLriil+/m8h+nHICVYhmlB6nVeNxvkPUwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJh0qWbBoQbWF7cukdD85sU3752MB8GA1UdIwQY
MBaAFEL1Gur3dLYzpH+WCnCJsVs1saTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUt
MWJhNjUxNzRiZDFkLzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMzMxMWEtYWE5YS00OTA0LTg4ZTUtMWJhNjUxNzRiZDFk
LzEvUXZVYTZ2ZDB0ak9rZjVZS2NJbXhXeld4cE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjSSPZfw
zzYTpsBkNKtn2ef2UfXM1HlSJQdVK2hoS0WHVSZ2mTZra4/B8N9v2gkfhLl8/uwd
lIKZbt/eiqxYEJWysUOfwW6u+S46qy6Furu3vlMUfHA2vZFq8c8NNC+HL1NAZXFl
SAUGP6mHve5utvG2gJ9tf6YJYf2WvGxJPQS4xXoC8kEyHlgXRvnb83P/e31ICCT7
xif2VxYTUKCoCKGDRicnXUDY5oNnCEVMBk1og2KNQ3fCLNiffOvfsIH+9tEkt0uL
C1kbviPyM/p6iT52a9ZWJhz+FZXU4WkfNMJ+dNgfAM3uWIh33R1NObAZE1tW8H19
ll+Yhc3ZsoTywQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:23 2025 by rpki-client