Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: JPkjWWk+v7HSda3StF+EetfQj1mc/wPr6rc3jK+OAFA=
Subject key identifier: E9:5B:85:A3:5D:BA:89:92:98:85:35:27:2A:CB:C2:1E:76:9E:38:8E
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 01987ED3E0E9429149B229886F25D129F15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 1452
Signing time: Wed 06 Aug 2025 10:01:11 +0000
Manifest this update: Wed 06 Aug 2025 10:01:11 +0000
Manifest next update: Thu 07 Aug 2025 10:01:11 +0000
Files and hashes: 1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: Npsd9rx5pCTVsm+gw0Zt7HOoMHeJqZ08RRmNHon+Tfg=)
4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:e0:e9:42:91:49:b2:29:88:6f:25:d1:29:f1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Aug 6 10:01:11 2025 GMT
Not After : Aug 7 10:01:11 2025 GMT
Subject: CN=e95b85a35dba8992988535272acbc21e769e388e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:0d:9d:3c:7a:b8:44:30:b1:e1:16:0d:81:
d5:2c:bf:3f:80:82:14:c4:a6:6d:52:8e:58:6b:25:
8f:b1:5f:93:3c:15:b0:80:b6:3d:48:9d:a5:ed:44:
c2:28:45:54:b2:e3:ce:bf:d1:b5:8d:b9:42:63:12:
e9:bb:bc:4f:f9:23:2e:3e:bc:f5:00:24:25:d4:a8:
be:32:ce:32:f1:22:08:c8:fb:be:ac:47:11:c2:1f:
d5:55:5d:a7:58:c4:be:39:3f:e3:55:9c:0f:97:02:
6f:41:83:a0:cb:99:07:fa:ff:68:fa:7e:b5:d9:b0:
fd:3e:7a:e0:46:58:5c:0c:69:be:48:c7:f5:ad:55:
18:52:ab:be:8c:a6:2a:ba:8a:00:cd:65:cd:72:f4:
8d:15:ce:7c:e7:4e:b6:1b:b9:3a:73:19:3a:b5:f4:
6e:ca:81:89:f5:e3:cc:14:c3:91:d8:9e:d0:72:2d:
18:6b:56:61:45:d7:e8:82:42:89:a5:fe:6e:73:f1:
c9:41:4e:a0:55:a3:05:df:50:09:1b:97:77:75:80:
2c:9f:62:65:29:1b:24:4a:8b:65:f6:6e:68:67:ff:
9b:c4:e2:9f:8a:31:0c:0d:97:24:32:93:9b:43:29:
61:f5:bb:eb:88:af:06:c8:cc:7c:6b:0a:97:6e:f5:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5B:85:A3:5D:BA:89:92:98:85:35:27:2A:CB:C2:1E:76:9E:38:8E
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:05:1f:c1:f0:13:43:b1:5f:10:93:0a:b5:ed:ac:48:62:ff:
7d:dd:ce:d1:82:8c:19:55:9b:89:eb:82:8d:c0:da:90:b3:c1:
81:6a:f3:e5:fc:56:5e:d6:cb:52:09:29:65:b7:5c:e5:63:4e:
4a:37:28:39:73:b1:22:7d:bb:3b:2f:96:59:04:48:e2:b5:08:
c5:0d:77:8f:46:96:42:2c:64:16:8d:ac:1a:c6:b8:1f:1d:1b:
db:55:54:5a:97:cc:2c:1e:a2:e4:17:78:40:c3:f7:f0:5b:17:
b9:4d:21:e9:da:81:dc:c0:61:bd:95:a0:08:f3:7e:5c:bd:8c:
15:ee:5e:88:67:73:45:76:6d:3a:af:78:32:f5:e9:66:b1:94:
17:1f:a7:2c:c3:3c:f8:91:9f:01:dc:f8:2d:66:40:a3:27:27:
1a:06:bd:38:b6:6c:8b:ec:a9:2f:9a:b4:f6:b4:a7:72:67:21:
8f:83:e6:0c:8b:0e:28:f2:ba:33:3e:83:f0:fc:77:6d:46:56:
1e:dc:be:b3:72:4a:d5:8e:06:8f:fa:cd:44:cd:d6:4a:70:4c:
45:bf:91:a9:dd:fc:a7:a7:39:5a:ca:7b:cf:2a:59:5c:ec:0b:
85:1a:f9:65:75:dc:c9:4d:71:f4:f1:11:58:1c:89:53:a5:df:
f8:60:e2:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+0+DpQpFJsimIbyXRKfFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTc1ODAyZTdlZmI4NjUzZTNhZjU5Y2JmMWJjMDY1Mzhi
Y2E2NzEwHhcNMjUwODA2MTAwMTExWhcNMjUwODA3MTAwMTExWjAzMTEwLwYDVQQD
EyhlOTViODVhMzVkYmE4OTkyOTg4NTM1MjcyYWNiYzIxZTc2OWUzODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYwNnTx6uEQwseEWDYHVLL8/gIIU
xKZtUo5YayWPsV+TPBWwgLY9SJ2l7UTCKEVUsuPOv9G1jblCYxLpu7xP+SMuPrz1
ACQl1Ki+Ms4y8SIIyPu+rEcRwh/VVV2nWMS+OT/jVZwPlwJvQYOgy5kH+v9o+n61
2bD9PnrgRlhcDGm+SMf1rVUYUqu+jKYquooAzWXNcvSNFc585062G7k6cxk6tfRu
yoGJ9ePMFMOR2J7Qci0Ya1ZhRdfogkKJpf5uc/HJQU6gVaMF31AJG5d3dYAsn2Jl
KRskSotl9m5oZ/+bxOKfijEMDZckMpObQylh9bvriK8GyMx8awqXbvWHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlbhaNduomSmIU1JyrLwh52njiOMB8GA1UdIwQY
MBaAFKjnWALn77hlPjr1nL8bwGU4vKZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjkt
NDExZjU4MzdmZWZhLzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82MjU2YjYtMzZhMS00ZjJmLWEwYjktNDExZjU4MzdmZWZh
LzEvcU9kWUF1ZnZ1R1UtT3ZXY3Z4dkFaVGk4cG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQUfwfAT
Q7FfEJMKte2sSGL/fd3O0YKMGVWbieuCjcDakLPBgWrz5fxWXtbLUgkpZbdc5WNO
SjcoOXOxIn27Oy+WWQRI4rUIxQ13j0aWQixkFo2sGsa4Hx0b21VUWpfMLB6i5Bd4
QMP38FsXuU0h6dqB3MBhvZWgCPN+XL2MFe5eiGdzRXZtOq94MvXpZrGUFx+nLMM8
+JGfAdz4LWZAoycnGga9OLZsi+ypL5q09rSncmchj4PmDIsOKPK6Mz6D8Px3bUZW
Hty+s3JK1Y4Gj/rNRM3WSnBMRb+Rqd38p6c5Wsp7zypZXOwLhRr5ZXXcyU1x9PER
WByJU6Xf+GDiCg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:13 2025 by rpki-client