Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json)
Hash identifier: yBv+n2cdQXQ2MKA/LOC6tu1Os/7EQxmJfk/7JS7yx84=
Subject key identifier: 39:18:74:00:0A:68:41:7F:72:5E:FD:23:CE:1A:D3:4F:16:12:2F:EC
Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Certificate serial: 01987486FD20189D09E1EFF2140F11F45A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
Manifest number: 0D74
Signing time: Mon 04 Aug 2025 10:01:00 +0000
Manifest this update: Mon 04 Aug 2025 10:01:00 +0000
Manifest next update: Tue 05 Aug 2025 10:01:00 +0000
Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: pub349HEekKYQVB7fBBI+cf5rWyWFONwtdodH9QDdD8=)
2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:fd:20:18:9d:09:e1:ef:f2:14:0f:11:f4:5a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13
Validity
Not Before: Aug 4 10:01:00 2025 GMT
Not After : Aug 5 10:01:00 2025 GMT
Subject: CN=391874000a68417f725efd23ce1ad34f16122fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:67:52:bc:c9:6c:f2:54:fc:f5:58:7a:13:5c:
85:a3:72:8a:b8:cc:ad:c8:7f:fa:72:14:a2:2e:ac:
40:ad:18:37:90:39:4e:0c:ba:fa:83:89:d6:27:b1:
2f:e9:b1:5d:ff:66:c4:32:33:87:05:5d:56:bc:8d:
db:61:3e:59:30:3c:0f:78:b5:da:1d:61:c7:07:7d:
9b:08:5e:49:d4:fa:16:d1:46:21:40:53:9f:ad:f9:
46:9e:32:b2:4e:d2:ab:a4:37:f4:dd:83:0a:72:d4:
5f:e6:e0:2e:39:f1:e3:60:65:7c:58:5b:03:b0:d7:
62:19:20:dc:5c:ca:46:57:7e:8b:92:4b:46:d8:c1:
2b:67:6f:b7:27:8d:f3:f3:8b:c8:55:78:72:8c:d8:
a8:db:f1:e7:c0:3e:97:9d:73:0d:b4:8a:3e:97:67:
32:10:28:16:24:4b:88:45:e3:7e:64:67:a5:fe:01:
0f:dd:b6:38:85:e2:4a:e2:d6:d8:87:75:10:d7:d7:
50:ea:ca:e7:82:1c:b2:35:47:56:1f:17:8d:20:08:
15:21:c9:71:21:cb:3d:3c:86:9b:fc:25:02:bb:e9:
7b:cb:b0:f6:25:eb:7c:3b:6b:4e:dc:1f:73:06:52:
4c:b9:da:17:82:71:91:ea:05:88:4d:8d:6f:71:49:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:18:74:00:0A:68:41:7F:72:5E:FD:23:CE:1A:D3:4F:16:12:2F:EC
X509v3 Authority Key Identifier:
keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:80:c4:57:52:c1:a6:32:df:96:2a:f1:81:8b:b3:0a:20:c4:
41:4a:a7:3e:25:68:e8:8d:7a:da:06:9d:75:f7:b8:1a:6f:ce:
a2:fe:37:ef:69:4c:6b:55:11:fa:85:2d:a6:8d:83:09:59:06:
15:0a:d4:3f:bc:6b:77:16:75:5f:34:5b:eb:8a:e9:36:97:5a:
c9:31:fb:bc:70:8e:30:25:fb:5d:93:1a:c0:7d:6d:7d:eb:53:
f9:a9:21:ff:19:cc:39:09:65:37:d6:71:62:58:bb:2c:ba:aa:
ec:cf:97:1f:01:a1:a7:13:3e:f0:6f:6b:96:1f:73:7e:0e:4e:
c8:4b:21:3a:84:8b:b9:af:46:68:40:aa:1b:8a:17:d8:10:1d:
c3:09:13:be:49:12:37:16:c0:f3:9b:a0:e5:4c:be:99:f2:f2:
a9:ce:13:4b:75:e6:d8:79:fc:16:34:12:40:67:8a:90:d1:04:
76:c6:68:7e:aa:94:ee:9c:c5:a3:24:28:84:48:f1:d9:3b:74:
69:7a:73:c2:e9:3b:d8:08:bd:19:92:cd:c6:59:24:28:72:54:
87:b7:84:2b:45:44:0c:9d:b4:2c:b8:d2:17:7c:fe:eb:9f:ed:
72:34:57:e6:29:a8:b3:72:cb:b1:e7:09:75:a4:25:9f:31:d2:
71:03:e5:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hv0gGJ0J4e/yFA8R9Fp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYTAzZmVkNWRjN2EwYzM0ZTRkODU3NzRmZjcwMDVkMzNl
NmVmMTMwHhcNMjUwODA0MTAwMTAwWhcNMjUwODA1MTAwMTAwWjAzMTEwLwYDVQQD
EygzOTE4NzQwMDBhNjg0MTdmNzI1ZWZkMjNjZTFhZDM0ZjE2MTIyZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mdSvMls8lT89Vh6E1yFo3KKuMyt
yH/6chSiLqxArRg3kDlODLr6g4nWJ7Ev6bFd/2bEMjOHBV1WvI3bYT5ZMDwPeLXa
HWHHB32bCF5J1PoW0UYhQFOfrflGnjKyTtKrpDf03YMKctRf5uAuOfHjYGV8WFsD
sNdiGSDcXMpGV36LkktG2MErZ2+3J43z84vIVXhyjNio2/HnwD6XnXMNtIo+l2cy
ECgWJEuIReN+ZGel/gEP3bY4heJK4tbYh3UQ19dQ6srnghyyNUdWHxeNIAgVIclx
Ics9PIab/CUCu+l7y7D2Jet8O2tO3B9zBlJMudoXgnGR6gWITY1vcUk9JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkYdAAKaEF/cl79I84a008WEi/sMB8GA1UdIwQY
MBaAFDKgP+1dx6DDTk2Fd0/3AF0z5u8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTct
MWFhNTAwYjk5NDhhLzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTctMWFhNTAwYjk5NDhh
LzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoDEV1LB
pjLflirxgYuzCiDEQUqnPiVo6I162gaddfe4Gm/Oov4372lMa1UR+oUtpo2DCVkG
FQrUP7xrdxZ1XzRb64rpNpdayTH7vHCOMCX7XZMawH1tfetT+akh/xnMOQllN9Zx
Yli7LLqq7M+XHwGhpxM+8G9rlh9zfg5OyEshOoSLua9GaECqG4oX2BAdwwkTvkkS
NxbA85ug5Uy+mfLyqc4TS3Xm2Hn8FjQSQGeKkNEEdsZofqqU7pzFoyQohEjx2Tt0
aXpzwuk72Ai9GZLNxlkkKHJUh7eEK0VEDJ20LLjSF3z+65/tcjRX5imos3LLsecJ
daQlnzHScQPlog==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:04:52 2025 by rpki-client