Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: es+AmLbzqnastrMmZd0kT90HZNOK3JrUuqXS0cE4jPA=
Subject key identifier: 71:4A:60:79:34:E0:A1:B2:94:DF:3F:DB:BE:74:16:9D:01:27:9A:CD
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 019896DBD1273B9A5C195649FE14063DCD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: B4
Signing time: Mon 11 Aug 2025 02:00:44 +0000
Manifest this update: Mon 11 Aug 2025 02:00:44 +0000
Manifest next update: Tue 12 Aug 2025 02:00:44 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: sO8d8f2KA5pBDC1d5AHp4rkGdsCZtzMeYh1y3vxVBVw=)
2: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (hash: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:d1:27:3b:9a:5c:19:56:49:fe:14:06:3d:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Aug 11 02:00:44 2025 GMT
Not After : Aug 12 02:00:44 2025 GMT
Subject: CN=714a607934e0a1b294df3fdbbe74169d01279acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:5f:de:2f:ea:a1:e6:64:aa:20:77:06:9a:
61:f5:17:ef:21:07:68:9b:40:54:73:f1:9c:56:72:
db:45:e6:ad:3d:30:da:12:a0:6e:02:4e:87:28:ee:
07:bb:c9:47:3a:fe:73:d4:e9:2e:02:86:ea:73:fa:
ce:e5:8d:de:21:87:ac:f2:20:0c:92:be:8b:e4:33:
68:83:ea:50:f2:4c:a0:98:7d:1e:78:46:41:51:a8:
45:a2:69:41:8a:7c:7c:16:aa:ee:77:d4:5c:8f:b5:
9f:be:9c:64:19:f4:17:a1:b5:e2:6e:06:cc:9e:0b:
16:2a:2c:c4:f0:e6:ff:52:44:a9:ab:b9:54:ea:47:
b5:1f:e7:48:51:01:81:26:64:aa:e8:25:76:c7:b5:
b2:b3:6d:ff:9b:f9:45:5a:68:c2:4f:08:09:8f:0b:
a2:54:41:86:34:1c:49:9a:b9:a0:2a:e5:f1:ac:f5:
52:47:f0:92:85:b0:e5:be:8b:c1:1a:ac:ac:85:ac:
5a:9c:b2:08:e1:14:f9:d8:b0:43:cc:41:24:e7:19:
82:e2:47:96:8a:cf:97:79:a9:5f:9f:93:54:10:24:
e8:37:94:72:ab:59:01:10:e5:ae:b5:9a:90:39:33:
16:e2:46:08:8e:ee:b2:14:b1:54:a9:c7:14:2a:f1:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:60:79:34:E0:A1:B2:94:DF:3F:DB:BE:74:16:9D:01:27:9A:CD
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:fb:a1:e5:d8:b6:ae:4f:e3:73:fb:69:52:a5:80:d0:5f:cf:
49:c6:8c:8c:af:7a:99:be:d0:6a:b7:d5:02:1f:67:fc:7b:79:
2f:f3:3e:33:44:2f:aa:81:26:04:98:1f:4c:51:a5:72:ac:42:
a9:ce:06:13:10:4f:02:a7:6d:de:00:d3:47:f8:fb:d6:1d:e2:
d3:85:e0:8e:6e:93:21:24:67:a8:2e:81:46:c9:6e:ae:e2:f4:
4e:46:f1:c9:ce:7e:f6:49:30:36:98:e7:e2:63:88:12:bc:45:
0e:7f:1f:c9:22:66:1d:84:89:a3:77:9c:67:a8:08:db:f7:17:
dd:e9:f1:ac:59:6c:ac:1b:6b:fc:5b:8d:de:67:61:84:4e:8f:
c1:a8:d4:fc:d8:37:2e:20:97:a2:4c:88:f6:ab:08:1c:bc:19:
97:69:c7:5c:01:ae:1b:2f:b7:49:7c:aa:e7:b4:65:3b:df:f4:
2e:ae:88:26:2d:42:39:4e:97:93:1d:94:e0:e9:8e:6d:46:ee:
05:42:56:59:26:7f:d8:1d:5e:c9:58:2d:92:6e:c3:93:12:aa:
16:6a:57:5e:68:15:40:60:f0:3d:39:d3:39:57:19:15:07:4e:
a5:06:af:e4:2b:d4:a4:c7:ae:7a:3c:18:82:e1:17:ff:8c:ac:
22:15:e8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiW29EnO5pcGVZJ/hQGPc11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYWRkMDhkNzUyNDlhMDY3ZGJiYzYzMTdiZTViYTZlM2Y0
ZDVmYzkwHhcNMjUwODExMDIwMDQ0WhcNMjUwODEyMDIwMDQ0WjAzMTEwLwYDVQQD
Eyg3MTRhNjA3OTM0ZTBhMWIyOTRkZjNmZGJiZTc0MTY5ZDAxMjc5YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLZf3i/qoeZkqiB3Bpph9RfvIQdo
m0BUc/GcVnLbReatPTDaEqBuAk6HKO4Hu8lHOv5z1OkuAobqc/rO5Y3eIYes8iAM
kr6L5DNog+pQ8kygmH0eeEZBUahFomlBinx8Fqrud9Rcj7WfvpxkGfQXobXibgbM
ngsWKizE8Ob/UkSpq7lU6ke1H+dIUQGBJmSq6CV2x7Wys23/m/lFWmjCTwgJjwui
VEGGNBxJmrmgKuXxrPVSR/CShbDlvovBGqyshaxanLII4RT52LBDzEEk5xmC4keW
is+Xealfn5NUECToN5Ryq1kBEOWutZqQOTMW4kYIju6yFLFUqccUKvGxwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFKYHk04KGylN8/2750Fp0BJ5rNMB8GA1UdIwQY
MBaAFEKt0I11JJoGfbvGMXvlum4/TV/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTIt
Y2QzYzE2MGE2ZjQ2LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTItY2QzYzE2MGE2ZjQ2
LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/uh5di2
rk/jc/tpUqWA0F/PScaMjK96mb7QarfVAh9n/Ht5L/M+M0QvqoEmBJgfTFGlcqxC
qc4GExBPAqdt3gDTR/j71h3i04Xgjm6TISRnqC6BRsluruL0Tkbxyc5+9kkwNpjn
4mOIErxFDn8fySJmHYSJo3ecZ6gI2/cX3enxrFlsrBtr/FuN3mdhhE6PwajU/Ng3
LiCXokyI9qsIHLwZl2nHXAGuGy+3SXyq57RlO9/0Lq6IJi1COU6Xkx2U4OmObUbu
BUJWWSZ/2B1eyVgtkm7DkxKqFmpXXmgVQGDwPTnTOVcZFQdOpQav5CvUpMeuejwY
guEX/4ysIhXoYg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:48 2025 by rpki-client