Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: bbugVJyuT9BQYoi0OBPue9D3kQF8IyomGWtRqLBOdII=
Subject key identifier: 3B:38:D4:6E:EC:23:36:BA:BA:08:6F:2D:88:6A:33:2B:D0:BB:E8:57
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 019873E3C2B812F329DECFAC813CE89C45A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 032F
Signing time: Mon 04 Aug 2025 07:02:42 +0000
Manifest this update: Mon 04 Aug 2025 07:02:42 +0000
Manifest next update: Tue 05 Aug 2025 07:02:42 +0000
Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: CJgKMtxx3uh1y4Y0qNMNBuKOF34REknPjHhymwhXivo=)
2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:c2:b8:12:f3:29:de:cf:ac:81:3c:e8:9c:45:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Aug 4 07:02:42 2025 GMT
Not After : Aug 5 07:02:42 2025 GMT
Subject: CN=3b38d46eec2336baba086f2d886a332bd0bbe857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:3f:71:f7:ba:cd:89:25:c3:df:86:1d:3b:
9c:da:f2:de:d0:e4:9d:02:90:39:26:78:22:b0:26:
ed:a4:4c:40:ad:6c:b9:6e:4d:ea:07:81:3b:1c:c5:
ac:21:38:fc:72:84:63:c9:e8:77:13:95:0d:26:14:
a7:59:19:78:7b:d3:41:f7:8f:ab:7a:93:bc:6b:8a:
33:36:b9:5a:d8:bb:d2:f9:8a:dd:38:fe:b5:d8:7a:
58:7b:df:27:43:e9:b9:1a:44:4b:bb:ca:f4:04:34:
3e:ae:2c:dc:e5:6e:39:2d:1c:fa:0a:96:e9:e3:51:
24:36:35:17:44:13:38:98:0b:11:df:59:fa:75:2e:
de:d3:68:be:d0:4d:3b:09:27:18:34:68:6a:84:f4:
59:21:a3:e6:16:c3:64:0e:6c:8d:dc:b0:25:b5:83:
16:5d:53:76:5e:d8:93:d0:d2:2a:4b:96:2a:50:ce:
23:d8:c1:e7:5b:44:28:81:75:88:42:ed:28:1b:c5:
1b:42:dc:0b:68:8b:0b:12:a1:2f:43:8b:92:53:32:
12:76:22:6c:cf:d4:82:2b:ff:b1:3c:6d:ef:b6:fe:
88:42:a5:f8:f2:fb:51:bb:ec:95:59:f8:be:ff:6f:
7d:06:93:62:d4:47:9e:30:7e:68:49:58:04:a0:b1:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:38:D4:6E:EC:23:36:BA:BA:08:6F:2D:88:6A:33:2B:D0:BB:E8:57
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:93:bb:d8:7a:f8:0b:dd:b6:3e:05:aa:c6:28:1b:88:65:db:
2d:e0:fb:ba:0c:57:20:64:d0:34:db:4d:9e:72:e2:59:9c:9a:
4e:88:3e:8a:74:b6:8c:4e:8c:77:ac:a5:da:87:1d:84:c0:31:
cf:f8:35:90:27:5b:01:8b:1d:3c:d1:9c:1c:d1:e8:24:67:83:
e7:bb:8f:67:61:30:43:b7:7e:6a:8f:d8:c3:2e:fd:06:74:c1:
2f:f2:44:b1:61:65:de:a6:88:15:25:85:ac:e7:ec:f5:1e:21:
08:dd:38:f2:16:5a:08:a9:c1:65:7a:9c:6e:4b:e9:3a:f2:9c:
1c:0f:79:f8:c1:45:a9:92:ad:e8:2a:af:47:8d:10:55:a7:60:
00:3a:b6:a0:05:59:7c:06:10:73:1c:82:11:e2:3f:04:46:fe:
51:a8:09:24:1c:a9:a2:8e:9b:7c:b6:e0:ce:99:84:4a:ea:0d:
6c:3b:96:8f:89:69:84:b3:2c:f9:ca:24:a2:8b:17:24:b0:cc:
5d:ee:db:e8:5e:f4:ed:32:dd:7b:90:5e:ce:3e:7f:3e:6f:e7:
fd:cf:cd:fd:01:ea:ec:d1:a6:43:90:ee:5a:9c:4b:b5:c9:b2:
b9:fb:45:ec:50:59:1a:42:7c:50:9a:cb:85:83:08:e5:da:a4:
3f:9d:4d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz48K4EvMp3s+sgTzonEWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWU0MzIxY2YyMThiOTI2NWQ1NjNiNWJlYTUxZGJmMTc2
NmNlYzgwHhcNMjUwODA0MDcwMjQyWhcNMjUwODA1MDcwMjQyWjAzMTEwLwYDVQQD
EygzYjM4ZDQ2ZWVjMjMzNmJhYmEwODZmMmQ4ODZhMzMyYmQwYmJlODU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIw/cfe6zYklw9+GHTuc2vLe0OSd
ApA5JngisCbtpExArWy5bk3qB4E7HMWsITj8coRjyeh3E5UNJhSnWRl4e9NB94+r
epO8a4ozNrla2LvS+YrdOP612HpYe98nQ+m5GkRLu8r0BDQ+rizc5W45LRz6Cpbp
41EkNjUXRBM4mAsR31n6dS7e02i+0E07CScYNGhqhPRZIaPmFsNkDmyN3LAltYMW
XVN2XtiT0NIqS5YqUM4j2MHnW0QogXWIQu0oG8UbQtwLaIsLEqEvQ4uSUzISdiJs
z9SCK/+xPG3vtv6IQqX48vtRu+yVWfi+/299BpNi1EeeMH5oSVgEoLGQIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs41G7sIza6ughvLYhqMyvQu+hXMB8GA1UdIwQY
MBaAFEOeQyHPIYuSZdVjtb6lHb8XZs7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUt
MTU1MTVhZDliNjA1LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUtMTU1MTVhZDliNjA1
LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpO72Hr4
C922PgWqxigbiGXbLeD7ugxXIGTQNNtNnnLiWZyaTog+inS2jE6Md6yl2ocdhMAx
z/g1kCdbAYsdPNGcHNHoJGeD57uPZ2EwQ7d+ao/Ywy79BnTBL/JEsWFl3qaIFSWF
rOfs9R4hCN048hZaCKnBZXqcbkvpOvKcHA95+MFFqZKt6CqvR40QVadgADq2oAVZ
fAYQcxyCEeI/BEb+UagJJBypoo6bfLbgzpmESuoNbDuWj4lphLMs+cokoosXJLDM
Xe7b6F707TLde5Bezj5/Pm/n/c/N/QHq7NGmQ5DuWpxLtcmyuftF7FBZGkJ8UJrL
hYMI5dqkP51NeQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:44:12 2025 by rpki-client