Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: 8ABs8KYPoT/QQSg8YYRgHjwCzhW5YUubh30N9dx94l0=
Subject key identifier: 26:2E:85:32:D0:F8:90:1A:61:4A:E1:6A:4A:00:6E:72:45:F1:EF:FE
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 0198952419E10C2BF8960A7B30033C071EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 0341
Signing time: Sun 10 Aug 2025 18:00:27 +0000
Manifest this update: Sun 10 Aug 2025 18:00:27 +0000
Manifest next update: Mon 11 Aug 2025 18:00:27 +0000
Files and hashes: 1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=)
2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: NOtygHmgwyvFTiJkui1dAFJgGdtFitg+v5FAVc8ICak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:19:e1:0c:2b:f8:96:0a:7b:30:03:3c:07:1e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Aug 10 18:00:27 2025 GMT
Not After : Aug 11 18:00:27 2025 GMT
Subject: CN=262e8532d0f8901a614ae16a4a006e7245f1effe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:50:7e:e9:bf:81:ec:b5:5b:00:ac:84:09:
c1:8d:cf:c3:93:4a:0f:8a:16:44:34:21:70:8e:af:
fa:10:48:26:6b:f2:a3:b1:cd:67:4f:f9:21:5b:51:
a0:2d:09:05:bb:32:e0:d0:d8:5a:c9:df:ac:44:8f:
b4:03:85:33:27:df:3e:f3:80:eb:67:df:03:43:4a:
f5:1c:76:b6:1c:59:44:d0:e9:ce:21:dc:ea:95:93:
e4:0d:38:ee:72:be:86:7c:4e:5d:8a:40:c0:e0:b6:
05:45:0e:87:d7:19:43:86:db:c4:5f:84:ba:83:9c:
ea:47:ce:69:ac:dc:c7:ac:56:73:c7:78:56:5a:74:
4d:b4:67:2e:54:dd:e7:ee:8b:b3:a5:51:53:43:43:
ea:10:2c:06:09:e0:8e:2e:ff:41:ba:c7:32:1b:77:
90:2c:fb:9e:69:b0:8a:6a:d1:0e:f6:b5:ad:22:7d:
7d:ac:47:9b:29:b9:39:07:1f:9b:41:cf:66:cb:73:
38:a0:80:dd:d1:94:8d:d6:9b:64:d7:b9:92:3c:94:
54:ff:a4:b4:bf:de:6d:ca:62:8d:f6:85:8d:7c:cd:
1a:02:be:f2:92:a4:8c:f6:aa:d6:ec:a5:96:0a:d0:
04:d4:02:7d:69:93:25:07:3d:de:e1:63:1b:bc:6c:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:85:32:D0:F8:90:1A:61:4A:E1:6A:4A:00:6E:72:45:F1:EF:FE
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a4:cf:6d:bf:94:ba:11:09:bd:ec:48:04:23:ac:b0:55:00:
15:4e:03:0f:74:f3:ad:27:f6:ce:3e:a8:87:b9:60:9d:32:a7:
fd:7c:8e:fa:25:e4:4f:98:6c:9d:04:9b:00:66:f7:ca:5e:53:
a9:3b:a0:02:53:c1:ed:b6:51:41:d2:17:2c:34:71:c9:be:07:
32:fb:6e:b3:06:7d:e8:4a:fc:a0:29:fe:38:ab:c0:f2:46:b6:
79:db:be:d9:10:c7:a1:8d:b0:d7:19:95:23:28:89:c9:3c:4c:
cf:10:d8:69:4e:82:ba:6c:e1:a4:ff:b1:2b:ba:27:92:f0:7c:
24:db:3a:0d:d8:38:7f:07:14:b1:28:56:4c:5b:b7:94:dc:38:
6d:99:8b:b0:c7:dc:e2:55:d3:8f:a5:a1:81:60:15:44:0d:c8:
08:b9:d3:7c:dd:60:7b:50:4f:2b:24:52:2a:52:74:82:31:db:
71:a9:1c:eb:cf:6b:75:b1:22:78:a7:1c:93:cd:e8:bf:b7:4e:
3d:8a:7e:bf:fc:b2:69:d0:f5:04:6f:ad:13:a5:18:b9:2a:85:
d5:2b:c9:dd:b5:08:56:2e:64:df:5c:81:ee:c2:31:0c:0d:17:
47:35:d9:84:cc:18:a4:ff:ef:e1:fa:30:77:3e:94:5d:37:77:
97:21:5b:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVJBnhDCv4lgp7MAM8Bx64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YWE2MDY3NmMxMzBjNjQzOGU0NWI1YTYwNzIxMGU5NTY2
YjY4MzIwHhcNMjUwODEwMTgwMDI3WhcNMjUwODExMTgwMDI3WjAzMTEwLwYDVQQD
EygyNjJlODUzMmQwZjg5MDFhNjE0YWUxNmE0YTAwNmU3MjQ1ZjFlZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4hQfum/gey1WwCshAnBjc/Dk0oP
ihZENCFwjq/6EEgma/Kjsc1nT/khW1GgLQkFuzLg0Nhayd+sRI+0A4UzJ98+84Dr
Z98DQ0r1HHa2HFlE0OnOIdzqlZPkDTjucr6GfE5dikDA4LYFRQ6H1xlDhtvEX4S6
g5zqR85prNzHrFZzx3hWWnRNtGcuVN3n7ouzpVFTQ0PqECwGCeCOLv9BuscyG3eQ
LPueabCKatEO9rWtIn19rEebKbk5Bx+bQc9my3M4oIDd0ZSN1ptk17mSPJRU/6S0
v95tymKN9oWNfM0aAr7ykqSM9qrW7KWWCtAE1AJ9aZMlBz3e4WMbvGzRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYuhTLQ+JAaYUrhakoAbnJF8e/+MB8GA1UdIwQY
MBaAFEaqYGdsEwxkOORbWmByEOlWa2gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xNzIxZDgtYWE0Ni00ZmFhLWFlMTUt
YzVlMzJjODI3MmQ3LzEvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xNzIxZDgtYWE0Ni00ZmFhLWFlMTUtYzVlMzJjODI3MmQ3
LzEvUnFwZ1oyd1RER1E0NUZ0YVlISVE2VlpyYURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKTPbb+U
uhEJvexIBCOssFUAFU4DD3TzrSf2zj6oh7lgnTKn/XyO+iXkT5hsnQSbAGb3yl5T
qTugAlPB7bZRQdIXLDRxyb4HMvtuswZ96Er8oCn+OKvA8ka2edu+2RDHoY2w1xmV
IyiJyTxMzxDYaU6CumzhpP+xK7onkvB8JNs6Ddg4fwcUsShWTFu3lNw4bZmLsMfc
4lXTj6WhgWAVRA3ICLnTfN1ge1BPKyRSKlJ0gjHbcakc689rdbEieKcck83ov7dO
PYp+v/yyadD1BG+tE6UYuSqF1SvJ3bUIVi5k31yB7sIxDA0XRzXZhMwYpP/v4fow
dz6UXTd3lyFbGQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:12 2025 by rpki-client