Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: 4SFjRsPFZHGMJ9K8Uq7JnKlVQ79/9atElaqbjqcJNtM=
Subject key identifier: 78:E3:CC:07:A4:3A:EC:ED:E6:D4:42:3B:2A:9D:7D:64:00:AC:07:DB
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 0198933623D89F7B4FBA0A27A0E1EC6C7E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 028C
Signing time: Sun 10 Aug 2025 09:00:55 +0000
Manifest this update: Sun 10 Aug 2025 09:00:55 +0000
Manifest next update: Mon 11 Aug 2025 09:00:55 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: 80WN5y7RjNj3Rcr9VDGRtoDgLo52m1Z6KhXRp8/NAj0=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:23:d8:9f:7b:4f:ba:0a:27:a0:e1:ec:6c:7e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Aug 10 09:00:55 2025 GMT
Not After : Aug 11 09:00:55 2025 GMT
Subject: CN=78e3cc07a43aecede6d4423b2a9d7d6400ac07db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:54:d9:9e:7e:44:86:61:92:3f:74:43:00:
b7:96:d9:28:6d:b1:3f:61:1f:78:6c:5a:f0:eb:ac:
78:86:78:06:97:70:96:17:65:cc:32:bf:95:0c:8e:
71:41:1b:19:1b:86:31:78:de:d8:c1:60:f0:73:58:
7f:ed:3a:71:d8:a5:82:d6:fe:77:71:69:d4:91:1a:
c3:90:82:d5:6f:e9:84:df:d8:aa:b0:50:8c:fe:99:
df:b2:aa:64:78:36:98:dd:53:5a:92:3e:80:5f:8e:
6a:8f:63:19:d2:3d:e6:48:a6:ba:ca:37:44:ba:e8:
96:0b:da:fb:c5:fe:fc:85:2d:e8:5b:28:d8:b8:f4:
a8:3e:4c:5a:d4:bb:e9:67:22:66:cd:a1:40:c7:13:
6d:b2:42:c3:e2:6e:84:d1:ce:07:1b:07:49:ff:9e:
c1:e0:a2:78:c7:72:a0:15:a6:02:90:81:f4:5a:ba:
9b:82:f3:4a:46:f8:92:70:c5:2d:98:e4:76:19:31:
2e:02:5a:18:87:c5:58:fc:78:2b:ed:a2:ba:c0:9b:
50:f4:e9:df:c9:14:60:c9:6c:f4:16:c4:b5:62:75:
b6:bd:a1:dd:d8:e9:79:7c:5a:83:66:ae:61:37:c1:
7a:48:32:1b:6e:e6:20:18:22:03:db:3b:75:4e:07:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E3:CC:07:A4:3A:EC:ED:E6:D4:42:3B:2A:9D:7D:64:00:AC:07:DB
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a9:6d:8c:3a:04:58:63:18:4c:41:3e:b5:dd:e7:76:db:f3:
2d:e4:21:cd:89:b4:7c:d4:cb:cf:db:a4:b9:b6:86:d6:ea:de:
fd:7b:43:11:1f:e5:53:55:de:0c:54:f7:54:78:52:86:4f:7e:
3d:c1:b2:c4:81:77:80:85:0b:32:de:b2:31:b4:2a:13:e5:b8:
42:47:57:70:a2:78:ea:df:e0:0a:be:52:8e:0f:6d:a3:73:23:
7b:28:80:97:4a:02:dd:fd:24:88:40:44:1d:98:e6:74:32:94:
49:83:d4:20:2f:ad:7c:01:80:31:6d:a0:a2:df:dc:bb:5b:b6:
cc:57:e6:d6:b7:98:f4:7f:01:f8:e2:58:26:05:a8:7c:7f:1d:
f4:fc:de:da:f8:ef:28:b8:f9:7b:6e:61:11:5a:78:75:8b:fd:
f6:dd:30:42:f1:c6:18:18:6d:bf:f6:bd:e3:db:85:97:e2:74:
ed:d4:18:82:94:60:a8:b7:35:80:ba:66:38:fc:d2:c6:d6:e2:
e8:f8:da:2f:3d:0d:ed:3c:7a:c3:45:e6:b6:45:74:45:0e:44:
2f:3a:a4:8b:73:ef:f9:19:95:15:dd:74:fc:4e:04:a6:8a:62:
d0:1d:31:77:c6:f1:01:e2:85:f4:0f:bb:dd:6d:88:9d:3d:17:
cf:b0:94:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTNiPYn3tPugonoOHsbH5rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3
NmQ3NGUwHhcNMjUwODEwMDkwMDU1WhcNMjUwODExMDkwMDU1WjAzMTEwLwYDVQQD
Eyg3OGUzY2MwN2E0M2FlY2VkZTZkNDQyM2IyYTlkN2Q2NDAwYWMwN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwJU2Z5+RIZhkj90QwC3ltkobbE/
YR94bFrw66x4hngGl3CWF2XMMr+VDI5xQRsZG4YxeN7YwWDwc1h/7Tpx2KWC1v53
cWnUkRrDkILVb+mE39iqsFCM/pnfsqpkeDaY3VNakj6AX45qj2MZ0j3mSKa6yjdE
uuiWC9r7xf78hS3oWyjYuPSoPkxa1LvpZyJmzaFAxxNtskLD4m6E0c4HGwdJ/57B
4KJ4x3KgFaYCkIH0WrqbgvNKRviScMUtmOR2GTEuAloYh8VY/Hgr7aK6wJtQ9Onf
yRRgyWz0FsS1YnW2vaHd2Ol5fFqDZq5hN8F6SDIbbuYgGCID2zt1TgeCnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjjzAekOuzt5tRCOyqdfWQArAfbMB8GA1UdIwQY
MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt
YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl
LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqltjDoE
WGMYTEE+td3ndtvzLeQhzYm0fNTLz9ukubaG1ure/XtDER/lU1XeDFT3VHhShk9+
PcGyxIF3gIULMt6yMbQqE+W4QkdXcKJ46t/gCr5Sjg9to3MjeyiAl0oC3f0kiEBE
HZjmdDKUSYPUIC+tfAGAMW2got/cu1u2zFfm1reY9H8B+OJYJgWofH8d9Pze2vjv
KLj5e25hEVp4dYv99t0wQvHGGBhtv/a949uFl+J07dQYgpRgqLc1gLpmOPzSxtbi
6PjaLz0N7Tx6w0XmtkV0RQ5ELzqki3Pv+RmVFd10/E4Epopi0B0xd8bxAeKF9A+7
3W2InT0Xz7CUaA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:04 2025 by rpki-client