Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
File: Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft (raw, json)
Hash identifier: fSiGiV3JGVaZSqSjHjjcCiV6RqutatjE1/5/pDeNGPo=
Subject key identifier: 85:BC:2C:EF:04:A2:B3:09:35:1C:61:C2:21:06:A0:B6:3C:E1:B2:E9
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial: 019873E25BEDD36BB87B55CA6ADF65AEBC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
Manifest number: 161F
Signing time: Mon 04 Aug 2025 07:01:11 +0000
Manifest this update: Mon 04 Aug 2025 07:01:11 +0000
Manifest next update: Tue 05 Aug 2025 07:01:11 +0000
Files and hashes: 1: Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl (hash: GyjBr4oi2uv5TX6OUp47x0aQU0kQmFQZ3tjhNTPJb/8=)
2: Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa (hash: mWAWf/tUyMqSuERI1NnQLYVJLUvPjig1mh8WLVGNkto=)
3: kJNmbBAcX5VkHV_EqLQCBrY5F0s.roa (hash: qjqDS7zlcVvdFxuRkBahP89SqyWQqIjGQgsXya2h7mY=)
4: nToAqcsYyxwDGsMBzLqBicaltlw.roa (hash: Eac2WLhpsA1YSA5bwyxiOfidCi/tlLgtUwluSQVDo/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5b:ed:d3:6b:b8:7b:55:ca:6a:df:65:ae:bc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Validity
Not Before: Aug 4 07:01:11 2025 GMT
Not After : Aug 5 07:01:11 2025 GMT
Subject: CN=85bc2cef04a2b309351c61c22106a0b63ce1b2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:8e:a1:bc:21:ff:00:0f:52:9b:21:0a:04:
53:19:72:2c:2a:a1:35:46:8f:93:22:23:df:53:6d:
e5:0b:1c:35:5d:a8:03:57:d9:fd:f0:b0:ee:1c:4d:
18:de:be:25:a3:eb:26:a1:d2:89:3a:a5:b8:9f:c5:
94:38:7c:64:09:aa:8d:d8:2f:de:b8:3e:7f:0c:88:
b7:44:04:6a:cb:64:d9:9e:bd:b4:d4:24:1d:32:0f:
e7:54:95:01:88:df:3d:21:1a:c9:ba:69:ea:b2:80:
45:5e:7b:b1:9d:fd:cb:3d:e8:09:9a:db:50:4d:36:
ec:a2:98:d1:64:98:69:98:bb:a6:55:0c:7d:1a:d1:
bd:b0:bf:a8:61:a7:13:3d:0e:46:db:4d:c2:a2:f6:
2f:3a:b4:70:2d:e2:45:6a:b2:95:b9:a8:6b:64:ae:
a6:d8:ce:27:21:2b:e6:8f:e2:db:70:f2:48:31:ac:
15:b8:0f:da:4b:24:0b:5d:1f:7e:a1:40:98:02:fd:
0a:bc:02:24:a6:a8:4c:6c:69:f6:15:c2:cd:11:7b:
25:df:d5:eb:55:ca:4b:36:b0:48:f8:4e:a3:4f:15:
e9:47:56:bf:67:fa:98:fd:93:a2:45:99:98:b7:dd:
b8:39:05:18:56:36:34:f2:b9:3f:96:33:ec:23:3d:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:2C:EF:04:A2:B3:09:35:1C:61:C2:21:06:A0:B6:3C:E1:B2:E9
X509v3 Authority Key Identifier:
keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f1:69:0b:02:08:a4:cb:4e:ec:61:6d:4f:8c:af:04:dd:9f:
e5:07:24:ff:5f:2d:e2:0b:a5:dd:4f:a6:b0:18:3c:8b:ff:32:
e2:75:e6:9e:05:e8:d5:77:c4:0b:9e:d8:95:33:25:1a:96:13:
26:a8:f7:03:50:3b:20:83:c1:a4:12:b4:f7:8f:76:9d:03:60:
59:cb:ec:1e:67:08:67:ae:c2:40:71:28:84:77:83:27:1b:24:
c7:40:60:30:a1:f4:91:62:00:2a:52:a7:25:cb:4f:45:3a:72:
0b:b5:bf:18:da:e9:eb:8b:3e:3a:c8:07:64:e7:e7:4e:ef:c1:
ca:c0:ce:dc:1d:b9:7b:44:26:d3:a8:cd:f9:74:d5:1a:58:d6:
40:fd:c3:ec:60:29:00:9c:43:b9:91:aa:1d:89:72:4b:80:98:
44:c9:00:86:54:5e:28:f9:f6:8c:df:c0:20:c9:54:3a:41:66:
24:aa:2c:f2:de:93:c4:f8:14:a7:0f:5d:9c:3a:70:b0:9d:08:
15:f7:c3:22:af:a4:22:e1:69:2c:67:cc:04:0f:f3:32:cb:6d:
06:83:22:c5:da:b8:c8:e3:b9:1d:de:b5:38:6b:a4:e5:bf:4d:
57:fa:9b:db:c5:3f:14:b2:2c:0d:d6:8a:d7:19:6e:cc:f5:41:
17:cc:61:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4lvt02u4e1XKat9lrrxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYTc3NDI3YzAzNzA5YjMzOWE5NWIwYWQ5YTRhYzlkMmM5
MmM5MDMwHhcNMjUwODA0MDcwMTExWhcNMjUwODA1MDcwMTExWjAzMTEwLwYDVQQD
Eyg4NWJjMmNlZjA0YTJiMzA5MzUxYzYxYzIyMTA2YTBiNjNjZTFiMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFmOobwh/wAPUpshCgRTGXIsKqE1
Ro+TIiPfU23lCxw1XagDV9n98LDuHE0Y3r4lo+smodKJOqW4n8WUOHxkCaqN2C/e
uD5/DIi3RARqy2TZnr201CQdMg/nVJUBiN89IRrJumnqsoBFXnuxnf3LPegJmttQ
TTbsopjRZJhpmLumVQx9GtG9sL+oYacTPQ5G203CovYvOrRwLeJFarKVuahrZK6m
2M4nISvmj+LbcPJIMawVuA/aSyQLXR9+oUCYAv0KvAIkpqhMbGn2FcLNEXsl39Xr
VcpLNrBI+E6jTxXpR1a/Z/qY/ZOiRZmYt924OQUYVjY08rk/ljPsIz2PYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW8LO8EorMJNRxhwiEGoLY84bLpMB8GA1UdIwQY
MBaAFDKndCfANwmzOalbCtmkrJ0skskDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMjUxZWQtNTk2Ny00ZGRkLTkzMmIt
N2Q0MGI3YzhmYjAxLzEvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMjUxZWQtNTk2Ny00ZGRkLTkzMmItN2Q0MGI3YzhmYjAx
LzEvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvFpCwII
pMtO7GFtT4yvBN2f5Qck/18t4gul3U+msBg8i/8y4nXmngXo1XfEC57YlTMlGpYT
Jqj3A1A7IIPBpBK09492nQNgWcvsHmcIZ67CQHEohHeDJxskx0BgMKH0kWIAKlKn
JctPRTpyC7W/GNrp64s+OsgHZOfnTu/BysDO3B25e0Qm06jN+XTVGljWQP3D7GAp
AJxDuZGqHYlyS4CYRMkAhlReKPn2jN/AIMlUOkFmJKos8t6TxPgUpw9dnDpwsJ0I
FffDIq+kIuFpLGfMBA/zMsttBoMixdq4yOO5Hd61OGuk5b9NV/qb28U/FLIsDdaK
1xluzPVBF8xhyg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:29 2025 by rpki-client