Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: YtvjFc3Zz+Q9I2YgG5wiPbrx16QiRygFrQ3/13Q+bQY=
Subject key identifier: 72:FA:A6:2F:8B:8C:B9:9B:83:94:30:EA:12:20:3A:A5:7A:AC:4A:3B
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 019872CF3BA60D072E39C3AA3066FF280552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0CF7
Signing time: Mon 04 Aug 2025 02:00:40 +0000
Manifest this update: Mon 04 Aug 2025 02:00:40 +0000
Manifest next update: Tue 05 Aug 2025 02:00:40 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: l+1NX/mWQazfZSBuld3LfwTM3l460ZlrymbP+tUv5bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:3b:a6:0d:07:2e:39:c3:aa:30:66:ff:28:05:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Aug 4 02:00:40 2025 GMT
Not After : Aug 5 02:00:40 2025 GMT
Subject: CN=72faa62f8b8cb99b839430ea12203aa57aac4a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cf:2e:a9:b7:f0:9d:0d:42:c5:58:54:b4:2a:
58:7a:29:5c:06:1e:0d:1e:57:9e:18:0c:92:00:d5:
4d:e0:6e:1b:e0:75:8d:21:d6:13:da:7b:94:32:dd:
24:24:41:07:01:fc:22:15:d6:66:ca:54:c3:a4:de:
f6:2b:1e:b2:a8:cf:61:6a:4b:5a:bc:a3:11:54:a1:
3b:d5:b4:5b:5f:c5:4a:fa:b1:c3:1f:1a:d6:ea:03:
d6:5c:aa:1a:4a:62:d9:4b:da:58:92:9b:cf:bf:80:
ed:84:8d:d1:2d:f8:1d:05:5c:4c:78:fa:fc:51:93:
7c:78:99:3f:be:36:06:70:14:18:b3:cd:ac:d6:18:
09:87:7f:7d:69:66:aa:29:17:a8:a3:a4:19:c3:93:
91:6d:4f:d5:e7:a6:e7:aa:77:e2:ee:f9:01:89:e7:
15:7e:a4:0d:5f:64:70:e7:1e:c9:d4:00:68:98:64:
41:a8:5c:b3:74:5d:28:8b:89:e9:e2:ca:c7:7e:0b:
9a:6a:cb:95:2f:e1:f8:d5:97:fb:c5:8b:d1:96:74:
1a:66:2f:56:fd:4d:af:21:23:c6:ff:97:80:ab:88:
87:da:7c:89:ed:c1:58:6f:0a:b9:de:91:ae:b3:9b:
af:86:66:cc:a4:d4:dc:10:a3:b7:16:4b:67:64:b0:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FA:A6:2F:8B:8C:B9:9B:83:94:30:EA:12:20:3A:A5:7A:AC:4A:3B
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f0:4c:c0:8a:2e:45:91:38:e9:8e:c7:bd:fb:4e:6a:3c:28:
98:d2:63:74:9a:8c:7e:f9:85:f2:fc:07:e2:33:5d:35:b1:69:
60:4c:89:26:f7:b9:02:3a:20:de:9d:2b:05:24:b2:fc:61:35:
15:69:ca:48:7d:47:99:ba:fa:1a:54:fe:43:7c:5e:8f:0b:11:
f4:2f:a1:04:ba:ab:fe:6e:2e:f2:78:f8:85:e1:e4:f3:f9:ad:
a2:91:66:61:17:f9:be:d5:46:8a:c1:98:4c:61:29:0a:40:0f:
6c:c0:c6:e5:4d:11:c9:83:4b:b9:5f:d7:4d:f2:93:8b:68:ed:
f7:fd:6f:8c:fb:ce:82:6c:b8:4e:58:e4:76:f1:c6:91:c1:fd:
b7:90:fc:ed:40:cc:86:95:0d:97:31:08:31:4c:5e:b9:cc:3d:
ff:b6:cc:53:aa:16:0b:b9:42:f8:51:b9:45:76:d5:46:08:51:
7f:88:37:ca:25:a0:b6:b5:24:37:1a:d7:ca:1f:56:8f:d7:67:
f4:6a:dc:12:2a:a0:d7:ce:d7:60:ce:93:18:72:2e:60:28:b8:
3c:17:66:72:35:de:b5:be:72:43:45:d4:62:5e:27:36:0b:37:
04:3a:33:0c:59:b0:07:b2:fa:e7:a7:74:ae:42:20:95:bd:c9:
52:b1:4f:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyzzumDQcuOcOqMGb/KAVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNDY2ODYwMDhhOGMxMDFlODRlYTg3ODMxOGFlNThlYjcx
Y2VjODIwHhcNMjUwODA0MDIwMDQwWhcNMjUwODA1MDIwMDQwWjAzMTEwLwYDVQQD
Eyg3MmZhYTYyZjhiOGNiOTliODM5NDMwZWExMjIwM2FhNTdhYWM0YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M8uqbfwnQ1CxVhUtCpYeilcBh4N
HleeGAySANVN4G4b4HWNIdYT2nuUMt0kJEEHAfwiFdZmylTDpN72Kx6yqM9hakta
vKMRVKE71bRbX8VK+rHDHxrW6gPWXKoaSmLZS9pYkpvPv4DthI3RLfgdBVxMePr8
UZN8eJk/vjYGcBQYs82s1hgJh399aWaqKReoo6QZw5ORbU/V56bnqnfi7vkBiecV
fqQNX2Rw5x7J1ABomGRBqFyzdF0oi4np4srHfguaasuVL+H41Zf7xYvRlnQaZi9W
/U2vISPG/5eAq4iH2nyJ7cFYbwq53pGus5uvhmbMpNTcEKO3FktnZLCNbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHL6pi+LjLmbg5Qw6hIgOqV6rEo7MB8GA1UdIwQY
MBaAFKtGaGAIqMEB6E6oeDGK5Y63HOyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmIt
ZjMzNjNjYmQ0MjRjLzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi83MjY0ZDYtM2JmZC00ZGU5LThmZmItZjMzNjNjYmQ0MjRj
LzEvcTBab1lBaW93UUhvVHFoNE1ZcmxqcmNjN0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/BMwIou
RZE46Y7HvftOajwomNJjdJqMfvmF8vwH4jNdNbFpYEyJJve5Ajog3p0rBSSy/GE1
FWnKSH1Hmbr6GlT+Q3xejwsR9C+hBLqr/m4u8nj4heHk8/mtopFmYRf5vtVGisGY
TGEpCkAPbMDG5U0RyYNLuV/XTfKTi2jt9/1vjPvOgmy4TljkdvHGkcH9t5D87UDM
hpUNlzEIMUxeucw9/7bMU6oWC7lC+FG5RXbVRghRf4g3yiWgtrUkNxrXyh9Wj9dn
9GrcEiqg187XYM6TGHIuYCi4PBdmcjXetb5yQ0XUYl4nNgs3BDozDFmwB7L656d0
rkIglb3JUrFP3w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:49 2025 by rpki-client