Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: aoDXVqfc5qu6+0ziFkO4zqrU2IToUXvqTLtepGI7b3k=
Subject key identifier: 79:EA:92:C4:AD:A6:74:50:3F:04:11:7A:7B:1C:58:4D:F8:AD:E1:69
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 01988C5865C6237C96A3A2BDEBE7E14DC2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 03B4
Signing time: Sat 09 Aug 2025 01:01:00 +0000
Manifest this update: Sat 09 Aug 2025 01:01:00 +0000
Manifest next update: Sun 10 Aug 2025 01:01:00 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: cZrTHrxlCci+wg4Aq8BZGWwd48AhHVjPjnaQVCIc3Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:58:65:c6:23:7c:96:a3:a2:bd:eb:e7:e1:4d:c2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Aug 9 01:01:00 2025 GMT
Not After : Aug 10 01:01:00 2025 GMT
Subject: CN=79ea92c4ada674503f04117a7b1c584df8ade169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:49:0a:f8:54:35:1f:4b:9b:36:08:c9:59:
8f:2f:83:a0:ab:fc:41:6d:a1:f2:c8:0b:d0:8f:ef:
6b:57:e1:1f:bb:a3:40:f2:ee:d6:5e:5c:f2:00:a2:
f3:2f:e0:05:29:1e:e8:71:6f:4e:aa:a9:22:5f:1d:
29:94:f4:33:8b:6e:5c:7c:95:63:d1:a2:09:b9:30:
8f:f1:9d:1d:4c:8b:30:8c:2e:9a:ce:c3:c0:64:e4:
35:66:61:be:22:df:04:12:7d:d5:15:32:06:ef:7e:
e3:65:7d:5b:76:05:18:7f:96:9c:21:16:b1:5e:0c:
82:17:5b:c7:6d:3b:df:d6:d6:6e:6d:00:c0:e5:ab:
94:c9:76:6f:ea:b0:68:e5:b7:54:06:68:53:58:41:
18:da:b3:8c:d5:b0:e4:c4:f1:27:e8:0b:57:32:8a:
f1:1e:4c:09:76:27:07:8b:87:3c:19:1e:54:c8:e5:
99:f5:66:aa:35:8c:73:9f:73:d1:57:0b:11:5e:f3:
fb:11:5e:00:91:79:56:6b:60:65:8d:1b:81:9c:be:
7c:13:6c:1d:b4:e0:b8:aa:a9:df:e4:c2:72:6a:1d:
05:75:00:f8:04:85:13:88:7b:0d:bd:28:e1:a4:75:
5b:42:c8:2f:e4:34:1b:33:57:f9:0e:f7:2b:6a:a6:
5d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EA:92:C4:AD:A6:74:50:3F:04:11:7A:7B:1C:58:4D:F8:AD:E1:69
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ec:f0:85:b9:00:78:c7:3d:41:2a:62:44:98:e2:b4:81:92:
4d:18:57:56:1f:11:cb:d5:06:3d:8a:e6:3e:7c:eb:50:e6:94:
fc:02:7b:89:65:f4:ec:5b:8f:e5:9e:8c:5b:e4:1a:f8:6f:fd:
21:75:ed:71:e0:6a:9e:ba:8a:a2:84:3c:d9:8e:b8:42:52:dc:
32:f1:26:ae:79:22:37:0f:d2:ea:02:76:0a:8a:cb:79:85:6e:
80:a0:7c:f8:ed:5a:d9:4f:20:0a:3f:5a:96:fb:07:65:a8:89:
43:41:ca:8d:53:a8:87:ee:6e:8a:49:c6:20:64:d3:b3:71:c9:
0c:e9:23:2f:06:8c:2a:73:d7:e1:06:62:39:67:2c:16:36:ef:
bc:42:d6:2e:ae:40:9f:a9:65:f6:a1:75:40:f4:2f:70:29:28:
e5:e1:8f:55:b2:28:9c:40:f8:76:63:9c:94:8c:11:42:a8:3d:
2c:2c:e8:65:5a:74:ce:41:cd:68:be:e9:8f:b9:b4:30:aa:d6:
eb:54:17:57:c7:9f:9b:27:05:9f:bc:16:63:30:f9:a1:2a:6d:
c6:90:96:ac:e3:88:29:e9:97:20:1f:f5:cb:83:04:0d:56:c4:
a3:c8:44:0c:cb:71:87:07:18:57:0e:d9:a0:99:49:50:c9:bd:
ac:51:97:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMWGXGI3yWo6K96+fhTcLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzYwOWM4OGYzOGRiYjU0OGExZjAyZjg5ZmYyOWJiNmQx
ODg2NGUwHhcNMjUwODA5MDEwMTAwWhcNMjUwODEwMDEwMTAwWjAzMTEwLwYDVQQD
Eyg3OWVhOTJjNGFkYTY3NDUwM2YwNDExN2E3YjFjNTg0ZGY4YWRlMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLFJCvhUNR9LmzYIyVmPL4Ogq/xB
baHyyAvQj+9rV+Efu6NA8u7WXlzyAKLzL+AFKR7ocW9OqqkiXx0plPQzi25cfJVj
0aIJuTCP8Z0dTIswjC6azsPAZOQ1ZmG+It8EEn3VFTIG737jZX1bdgUYf5acIRax
XgyCF1vHbTvf1tZubQDA5auUyXZv6rBo5bdUBmhTWEEY2rOM1bDkxPEn6AtXMorx
HkwJdicHi4c8GR5UyOWZ9WaqNYxzn3PRVwsRXvP7EV4AkXlWa2BljRuBnL58E2wd
tOC4qqnf5MJyah0FdQD4BIUTiHsNvSjhpHVbQsgv5DQbM1f5DvcraqZdDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnqksStpnRQPwQRenscWE34reFpMB8GA1UdIwQY
MBaAFKg2CciPONu1SKHwL4n/KbttGIZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2Ut
ZTQwZmUwYjA5NGIwLzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2UtZTQwZmUwYjA5NGIw
LzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtuzwhbkA
eMc9QSpiRJjitIGSTRhXVh8Ry9UGPYrmPnzrUOaU/AJ7iWX07FuP5Z6MW+Qa+G/9
IXXtceBqnrqKooQ82Y64QlLcMvEmrnkiNw/S6gJ2CorLeYVugKB8+O1a2U8gCj9a
lvsHZaiJQ0HKjVOoh+5uiknGIGTTs3HJDOkjLwaMKnPX4QZiOWcsFjbvvELWLq5A
n6ll9qF1QPQvcCko5eGPVbIonED4dmOclIwRQqg9LCzoZVp0zkHNaL7pj7m0MKrW
61QXV8efmycFn7wWYzD5oSptxpCWrOOIKemXIB/1y4MEDVbEo8hEDMtxhwcYVw7Z
oJlJUMm9rFGX2A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:39 2025 by rpki-client