Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: vOmOARwcSPQuuQIbtoYzw98mJ+ofOsJDnUYvAPVV+WQ=
Subject key identifier: 6E:BE:1E:14:8E:16:23:F5:04:07:AA:C7:2C:A0:17:F8:73:BE:13:96
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 01988E7D7B4C8361DB688534932CFBEADA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 11:00:44 +0000
Manifest this update: Sat 09 Aug 2025 11:00:44 +0000
Manifest next update: Sun 10 Aug 2025 11:00:44 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: zwb/mcYZUzF/FJgA47qcgZp/9XYp6UZaJpGMHajnxgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:7b:4c:83:61:db:68:85:34:93:2c:fb:ea:da:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Aug 9 11:00:44 2025 GMT
Not After : Aug 10 11:00:44 2025 GMT
Subject: CN=6ebe1e148e1623f50407aac72ca017f873be1396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:bf:e5:bc:e1:17:7f:5e:c3:e8:73:12:83:
c2:ee:7d:44:bf:a5:8f:09:ea:b3:0b:f2:04:0d:08:
90:53:da:d2:46:94:94:74:76:65:b5:58:ac:1d:4f:
f6:67:db:2b:b3:04:8d:3f:12:cd:14:2c:dc:d4:93:
a2:35:b5:c7:d5:5d:21:ac:b0:0d:5f:51:fd:c6:cc:
f2:24:77:45:6a:15:9a:a0:ad:ed:79:d6:ae:f7:47:
57:fc:69:47:01:b8:ec:b3:12:71:1c:9a:4d:ae:48:
4c:87:21:77:7e:a2:f7:b2:c0:be:b9:73:8f:e8:2f:
07:74:ed:0d:90:ad:c8:d2:bc:b2:b7:6b:2c:fe:9f:
b0:3f:85:b8:8f:71:18:3a:ca:6d:84:52:5b:ca:b3:
b9:b6:17:63:a2:c6:d6:18:0e:ef:b8:db:5c:42:36:
4e:1f:e8:99:ab:fe:72:de:b1:fa:68:7f:62:cb:08:
ce:cd:c9:a9:23:41:a6:19:30:a4:42:eb:6b:98:8b:
4b:17:e0:1e:3f:27:7c:0b:6c:aa:d9:4e:de:dd:99:
eb:e5:76:31:53:78:9d:e3:47:7d:72:22:d6:c6:26:
9d:0e:c1:07:9f:59:a0:7f:5d:9d:c9:3b:d9:fb:48:
22:a6:f6:42:f7:0e:5a:eb:8d:57:2d:0b:2a:0f:a0:
bf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BE:1E:14:8E:16:23:F5:04:07:AA:C7:2C:A0:17:F8:73:BE:13:96
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:15:70:02:61:08:09:5b:52:70:a2:cc:0b:03:bd:eb:2c:54:
75:54:5f:4a:10:4a:b0:10:e2:b5:1a:db:da:1c:b2:55:fd:26:
05:b0:7c:85:53:8f:88:38:22:d9:d6:75:54:23:d0:92:1e:4f:
e4:83:71:7c:97:41:47:a4:24:36:34:9a:32:ec:b2:c9:67:61:
81:53:07:a5:ef:83:e7:4f:44:6f:07:5f:c6:64:61:77:fa:d7:
68:8c:20:38:84:79:04:87:4d:9f:34:ad:18:d9:02:85:b9:5b:
e7:7c:58:38:4d:ce:18:c5:1e:ce:85:6b:1f:e8:7a:ce:f7:1e:
67:72:ab:0a:00:7f:d9:43:f9:ef:6d:dd:04:8f:62:ba:27:43:
68:79:4d:a1:94:d5:40:ef:ed:62:f6:a8:20:36:eb:7e:e0:92:
b0:9c:2b:48:f8:30:25:cd:b7:06:dd:dc:b9:4c:6a:0c:e0:aa:
47:ad:47:07:b8:68:5d:c3:8f:1d:dc:f2:3c:48:72:ee:46:51:
3a:b0:7b:af:66:64:9b:9b:08:c4:97:7a:28:80:79:45:3e:37:
94:71:27:ee:22:32:6f:da:66:47:af:e1:3e:a1:08:27:af:9d:
f7:e7:55:76:ba:92:6b:5e:fb:15:5d:eb:f2:b5:40:56:82:5f:
66:df:ec:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiOfXtMg2HbaIU0kyz76tpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NDgwY2YxOGZkNzg1OWRmOWFkOTk3OTQwMDEzYTk5Yjhk
ZWUzNzQwHhcNMjUwODA5MTEwMDQ0WhcNMjUwODEwMTEwMDQ0WjAzMTEwLwYDVQQD
Eyg2ZWJlMWUxNDhlMTYyM2Y1MDQwN2FhYzcyY2EwMTdmODczYmUxMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6e/5bzhF39ew+hzEoPC7n1Ev6WP
CeqzC/IEDQiQU9rSRpSUdHZltVisHU/2Z9srswSNPxLNFCzc1JOiNbXH1V0hrLAN
X1H9xszyJHdFahWaoK3tedau90dX/GlHAbjssxJxHJpNrkhMhyF3fqL3ssC+uXOP
6C8HdO0NkK3I0ryyt2ss/p+wP4W4j3EYOspthFJbyrO5thdjosbWGA7vuNtcQjZO
H+iZq/5y3rH6aH9iywjOzcmpI0GmGTCkQutrmItLF+AePyd8C2yq2U7e3Znr5XYx
U3id40d9ciLWxiadDsEHn1mgf12dyTvZ+0gipvZC9w5a641XLQsqD6C/ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6+HhSOFiP1BAeqxyygF/hzvhOWMB8GA1UdIwQY
MBaAFKlIDPGP14Wd+a2ZeUABOpm43uN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0Yjkt
YWNkODdjNTQ2MDQ4LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hMzkxMzgtZjRmMS00MjU5LWE0YjktYWNkODdjNTQ2MDQ4
LzEvcVVnTThZX1hoWjM1clpsNVFBRTZtYmplNDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhVwAmEI
CVtScKLMCwO96yxUdVRfShBKsBDitRrb2hyyVf0mBbB8hVOPiDgi2dZ1VCPQkh5P
5INxfJdBR6QkNjSaMuyyyWdhgVMHpe+D509EbwdfxmRhd/rXaIwgOIR5BIdNnzSt
GNkChblb53xYOE3OGMUezoVrH+h6zvceZ3KrCgB/2UP5723dBI9iuidDaHlNoZTV
QO/tYvaoIDbrfuCSsJwrSPgwJc23Bt3cuUxqDOCqR61HB7hoXcOPHdzyPEhy7kZR
OrB7r2Zkm5sIxJd6KIB5RT43lHEn7iIyb9pmR6/hPqEIJ6+d9+dVdrqSa177FV3r
8rVAVoJfZt/sGw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:14:23 2025 by rpki-client