Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: P0ykhEGoo9kecQQJgbFgRtsSiChXRc+Xr/XZBfh2ysw=
Subject key identifier: A1:4F:D3:15:1C:DB:F0:CE:4B:64:16:40:09:2B:EB:9C:C5:91:97:8B
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 01988BEB01880B09AB9832DFB64685E8DEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0A30
Signing time: Fri 08 Aug 2025 23:01:31 +0000
Manifest this update: Fri 08 Aug 2025 23:01:31 +0000
Manifest next update: Sat 09 Aug 2025 23:01:31 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: DqaUhxD9eHh+RJYh9UXtklznve131YYQJXI177uJL3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:eb:01:88:0b:09:ab:98:32:df:b6:46:85:e8:de:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Aug 8 23:01:31 2025 GMT
Not After : Aug 9 23:01:31 2025 GMT
Subject: CN=a14fd3151cdbf0ce4b641640092beb9cc591978b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:be:90:d0:f2:17:52:63:10:12:e2:8c:a9:
a5:57:17:11:24:51:05:30:11:8c:4a:62:a0:47:ed:
5a:f4:57:ea:5c:45:53:66:80:9b:1f:bc:6e:c6:92:
b9:bd:c2:f2:25:a5:5f:53:bf:00:7d:5a:e7:79:93:
67:78:d5:fb:60:ed:36:a2:4c:80:b8:15:08:57:f1:
c5:1f:e4:af:ea:fb:c1:89:d8:53:c4:b0:7e:c4:b8:
0a:db:dc:3d:c8:48:e4:85:0b:b4:26:48:ee:09:ad:
17:7f:dd:4c:93:bf:e2:ea:bd:fc:d8:16:14:55:9f:
5d:4c:24:47:2e:6a:ad:d9:d6:98:c9:87:d9:15:f3:
8c:17:fc:a7:a5:e4:fc:62:90:f8:d8:14:ce:c1:d3:
96:6e:61:5c:98:53:5a:7c:45:46:6c:7e:42:37:4e:
17:31:ff:37:7b:97:24:d7:ff:20:de:d8:b4:d7:ca:
c3:15:85:e6:fd:96:fa:3a:8c:43:0a:72:72:53:2c:
ee:f9:97:6b:72:24:57:88:2a:e6:c5:e8:4e:c8:6b:
50:e8:f1:a7:19:62:1a:f8:cb:65:62:05:79:8d:3f:
d2:a5:95:07:d2:50:03:fd:7f:4a:49:c3:27:e0:d5:
0c:37:5a:58:71:d5:0d:c6:ae:be:b9:2a:4b:9d:81:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:D3:15:1C:DB:F0:CE:4B:64:16:40:09:2B:EB:9C:C5:91:97:8B
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1b:f1:49:19:ff:ed:6f:71:42:5d:92:0d:ff:76:2e:61:e6:
4a:5d:8c:87:4b:2c:da:2b:20:3f:5c:69:c4:b0:cb:92:20:9b:
30:10:30:bc:26:43:63:6a:ba:73:a0:08:ca:b7:e5:0e:a0:21:
e5:9a:fa:c0:78:13:d9:ed:34:9d:24:5b:b5:56:db:24:ce:d2:
44:fc:38:26:60:b8:d1:b9:aa:62:89:a6:f0:73:ca:e5:00:b7:
25:be:88:37:ae:db:71:bd:ce:e7:24:8a:5e:d5:91:1e:ea:f1:
6b:49:d1:45:9d:6c:9a:43:66:2d:f9:8b:9a:ce:95:01:0e:be:
25:81:0c:7f:67:98:66:41:85:f7:e8:31:2a:e7:95:57:2f:b3:
3a:db:73:03:d9:a8:2f:3c:8c:58:8c:ba:72:c6:01:2e:d9:ff:
67:9d:3a:0f:92:04:2a:bb:48:8d:a2:e4:08:b0:90:ad:e3:5e:
44:93:ba:71:97:4c:85:01:5b:0f:e3:12:94:39:29:be:61:1b:
7b:5e:ce:69:8d:3e:25:9d:49:1f:d4:99:a5:a9:e6:50:69:ff:
f8:64:f9:89:3c:93:1d:e9:18:12:26:83:24:d4:4e:af:54:f6:
da:28:62:92:d3:04:45:f2:10:97:15:73:0d:51:8d:c8:1b:9a:
04:53:c2:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6wGICwmrmDLftkaF6N7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMTBiZTk5MWYzZGI4OTUwOTcxMGMyMDY3NmRmN2E4YTRi
ZmUxYjQwHhcNMjUwODA4MjMwMTMxWhcNMjUwODA5MjMwMTMxWjAzMTEwLwYDVQQD
EyhhMTRmZDMxNTFjZGJmMGNlNGI2NDE2NDAwOTJiZWI5Y2M1OTE5NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIu+kNDyF1JjEBLijKmlVxcRJFEF
MBGMSmKgR+1a9FfqXEVTZoCbH7xuxpK5vcLyJaVfU78AfVrneZNneNX7YO02okyA
uBUIV/HFH+Sv6vvBidhTxLB+xLgK29w9yEjkhQu0JkjuCa0Xf91Mk7/i6r382BYU
VZ9dTCRHLmqt2daYyYfZFfOMF/ynpeT8YpD42BTOwdOWbmFcmFNafEVGbH5CN04X
Mf83e5ck1/8g3ti018rDFYXm/Zb6OoxDCnJyUyzu+ZdrciRXiCrmxehOyGtQ6PGn
GWIa+MtlYgV5jT/SpZUH0lAD/X9KScMn4NUMN1pYcdUNxq6+uSpLnYGUCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFP0xUc2/DOS2QWQAkr65zFkZeLMB8GA1UdIwQY
MBaAFKoQvpkfPbiVCXEMIGdt96ikv+G0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWhDLW1SODl1SlVKY1F3Z1oyMzNxS1NfNGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzNjUtOGQxNS00MTI1LTkwMTct
MTgzZTJlNzIzMDFiLzEvcWhDLW1SODl1SlVKY1F3Z1oyMzNxS1NfNGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzUzNjUtOGQxNS00MTI1LTkwMTctMTgzZTJlNzIzMDFi
LzEvcWhDLW1SODl1SlVKY1F3Z1oyMzNxS1NfNGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRvxSRn/
7W9xQl2SDf92LmHmSl2Mh0ss2isgP1xpxLDLkiCbMBAwvCZDY2q6c6AIyrflDqAh
5Zr6wHgT2e00nSRbtVbbJM7SRPw4JmC40bmqYomm8HPK5QC3Jb6IN67bcb3O5ySK
XtWRHurxa0nRRZ1smkNmLfmLms6VAQ6+JYEMf2eYZkGF9+gxKueVVy+zOttzA9mo
LzyMWIy6csYBLtn/Z506D5IEKrtIjaLkCLCQreNeRJO6cZdMhQFbD+MSlDkpvmEb
e17OaY0+JZ1JH9SZpanmUGn/+GT5iTyTHekYEiaDJNROr1T22ihiktMERfIQlxVz
DVGNyBuaBFPCAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:15 2025 by rpki-client