Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: lvOKLgTcqNKJn5ih8FO7dX9Vl/aThBEct0hZeNeFwc8=
Subject key identifier: 53:7E:B6:05:AF:D0:BC:3E:3C:3B:5C:DA:E5:FB:A4:72:C1:A6:B3:39
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 019874BD93790C1B80F87A7CD9A99A51D1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 119F
Signing time: Mon 04 Aug 2025 11:00:37 +0000
Manifest this update: Mon 04 Aug 2025 11:00:37 +0000
Manifest next update: Tue 05 Aug 2025 11:00:37 +0000
Files and hashes: 1: Y_LE7fqvC-DJjpGE04PAiZiS4sM.roa (hash: /iG8f1CjLF+Lu2JxpQ3C4TbNa9Jv5YP2v7PLHqXyCAI=)
2: kBfIeqAeKWivX1BBStYnhq8eQKY.roa (hash: 6hm3q6RVhanYeJb6ZfkoLkT3Ro77DzfwBMRFcvbLBuA=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: LahPImPf7D/GhqozI8wqavigibn5y/hHP6hR5ozgPsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:93:79:0c:1b:80:f8:7a:7c:d9:a9:9a:51:d1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Aug 4 11:00:37 2025 GMT
Not After : Aug 5 11:00:37 2025 GMT
Subject: CN=537eb605afd0bc3e3c3b5cdae5fba472c1a6b339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:88:b3:be:fc:ba:bf:de:37:0a:6b:d5:e3:
69:7d:93:d5:7a:3c:8a:3c:8b:c3:c8:c7:16:4b:2a:
89:b5:57:5a:e5:81:04:2c:03:9d:fa:b6:74:3a:c9:
36:6f:43:cb:f3:60:dc:cc:7d:12:cb:6c:75:34:d3:
09:39:4a:b2:2c:ad:ef:6f:e0:d1:28:59:35:d4:52:
17:56:b5:ab:4a:90:8f:28:f1:25:d0:51:0a:f7:f3:
12:a0:b9:7d:41:78:f6:9c:b5:77:43:1b:b7:55:8a:
a8:88:5f:50:5e:45:4e:71:fc:6f:71:2d:08:37:7b:
fb:65:38:26:84:7c:38:87:51:8f:6d:bd:79:4a:2e:
b5:45:40:ec:7f:4c:d2:b0:d6:94:d1:c0:55:4a:f8:
2d:60:73:91:47:6c:db:40:a9:b8:07:78:5a:29:0e:
8b:dd:a4:6b:85:eb:59:c8:ac:8b:4e:d2:75:52:22:
d1:51:9d:ef:07:61:34:e3:3a:0d:e6:00:08:c7:22:
db:09:ac:06:ad:0f:b3:00:08:2f:db:2d:f1:67:19:
6f:50:1e:82:47:b5:2d:47:89:ee:52:b8:17:f3:9e:
ea:5d:84:41:21:79:fd:32:d4:9a:93:4a:6e:74:f6:
84:c2:35:72:18:67:8c:d2:8f:3f:9e:99:7d:f5:cf:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:B6:05:AF:D0:BC:3E:3C:3B:5C:DA:E5:FB:A4:72:C1:A6:B3:39
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:85:df:41:ac:e8:16:34:43:10:66:47:6b:d1:a8:d7:55:b6:
84:44:38:d4:da:bf:f8:49:78:b8:5f:7d:1e:aa:7c:a5:2a:1b:
1b:c0:46:3c:f1:62:1e:ad:6f:8c:26:f5:4e:1f:ae:97:81:84:
9c:31:e5:23:a9:23:4e:e1:66:d2:4c:f7:a9:aa:ad:e1:1b:7d:
8a:c7:84:7a:b6:06:4c:d6:c8:dd:28:95:5b:87:13:c6:89:d7:
ce:14:c1:f8:d8:69:8d:b9:6c:08:e5:ae:8e:4e:a7:a8:68:53:
da:99:62:b7:76:70:03:5b:a7:88:b5:76:18:cd:ef:01:f3:04:
82:36:5f:5b:09:ad:db:1c:be:a6:0f:f8:3e:da:5c:4d:cd:f5:
37:92:c2:60:62:d0:d2:46:b5:83:ff:58:0c:7f:de:52:2c:92:
6b:5f:55:fe:31:db:46:28:d6:c3:ee:50:13:9c:f6:6e:d9:0f:
e2:1c:0e:8a:5f:d0:c5:2b:be:9e:a1:8e:13:62:87:a4:2c:c7:
b3:e4:dc:f6:11:95:0c:c6:9a:f8:83:c6:6e:74:02:31:c0:3f:
39:5d:b0:a3:7e:68:cc:8a:a1:ce:0d:8f:2a:93:74:c6:65:36:
25:d2:fd:ea:86:1b:ca:1c:6f:7e:68:7e:d8:86:47:04:32:e4:
7e:d6:58:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vZN5DBuA+Hp82amaUdH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OTljZmZhNmU0OGZhMmM0ZjhkMDk4MDMzOTZiNDU3YTYz
MGEzM2QwHhcNMjUwODA0MTEwMDM3WhcNMjUwODA1MTEwMDM3WjAzMTEwLwYDVQQD
Eyg1MzdlYjYwNWFmZDBiYzNlM2MzYjVjZGFlNWZiYTQ3MmMxYTZiMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdWIs778ur/eNwpr1eNpfZPVejyK
PIvDyMcWSyqJtVda5YEELAOd+rZ0Osk2b0PL82DczH0Sy2x1NNMJOUqyLK3vb+DR
KFk11FIXVrWrSpCPKPEl0FEK9/MSoLl9QXj2nLV3Qxu3VYqoiF9QXkVOcfxvcS0I
N3v7ZTgmhHw4h1GPbb15Si61RUDsf0zSsNaU0cBVSvgtYHORR2zbQKm4B3haKQ6L
3aRrhetZyKyLTtJ1UiLRUZ3vB2E04zoN5gAIxyLbCawGrQ+zAAgv2y3xZxlvUB6C
R7UtR4nuUrgX857qXYRBIXn9MtSak0pudPaEwjVyGGeM0o8/npl99c8ZowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN+tgWv0Lw+PDtc2uX7pHLBprM5MB8GA1UdIwQY
MBaAFKmZz/puSPosT40JgDOWtFemMKM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUt
YjNhNTA5MTBjMmE4LzEvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9mMTQzZDAtYWViOC00YjUyLTljMzUtYjNhNTA5MTBjMmE4
LzEvcVpuUC1tNUktaXhQalFtQU01YTBWNll3b3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoXfQazo
FjRDEGZHa9Go11W2hEQ41Nq/+El4uF99Hqp8pSobG8BGPPFiHq1vjCb1Th+ul4GE
nDHlI6kjTuFm0kz3qaqt4Rt9iseEerYGTNbI3SiVW4cTxonXzhTB+NhpjblsCOWu
jk6nqGhT2plit3ZwA1uniLV2GM3vAfMEgjZfWwmt2xy+pg/4PtpcTc31N5LCYGLQ
0ka1g/9YDH/eUiySa19V/jHbRijWw+5QE5z2btkP4hwOil/QxSu+nqGOE2KHpCzH
s+Tc9hGVDMaa+IPGbnQCMcA/OV2wo35ozIqhzg2PKpN0xmU2JdL96oYbyhxvfmh+
2IZHBDLkftZYfg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:55 2025 by rpki-client