Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: tG3ilfQkCm7iu4Zfay9fGdH8B4Od9o19utObF5zwnsI=
Subject key identifier: E2:99:0B:F0:CE:C6:54:55:B1:FA:F9:2C:2C:9B:19:4A:38:37:16:BB
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 01987AC028C917E7AAB0F1E9B8877F9DB808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 15:01:10 +0000
Manifest this update: Tue 05 Aug 2025 15:01:10 +0000
Manifest next update: Wed 06 Aug 2025 15:01:10 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: be+Fq1caNuLam1NEwknNBUy5c5cmog9Ts/94fIwitWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:28:c9:17:e7:aa:b0:f1:e9:b8:87:7f:9d:b8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Aug 5 15:01:10 2025 GMT
Not After : Aug 6 15:01:10 2025 GMT
Subject: CN=e2990bf0cec65455b1faf92c2c9b194a383716bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:69:bb:61:12:32:ce:78:c8:cc:3a:49:8d:
f4:82:83:f2:89:9d:67:0c:91:d4:62:90:b6:c3:11:
7d:3a:e2:8a:ab:c7:f9:2d:9b:49:55:ba:cb:84:90:
64:69:1d:1e:1c:28:66:fa:5d:aa:65:b3:10:2d:d5:
df:f9:df:aa:c3:b2:51:c4:dc:a2:ce:e0:3c:53:33:
f6:ef:e3:68:41:8a:34:2b:72:3d:24:b0:ab:b4:e7:
b1:80:fe:33:d1:6f:57:5e:6f:b7:67:80:32:cf:ef:
66:b2:f0:88:4f:c9:ec:9f:71:e4:33:2a:7a:02:fc:
91:b7:ba:0b:82:68:e3:fe:3f:3e:58:b9:d3:2d:0b:
4f:21:5f:c1:82:a3:11:9d:02:7f:2f:bf:28:64:1a:
5d:70:79:c3:86:3c:03:86:da:31:36:70:26:db:2a:
58:52:27:55:c6:2c:2a:17:f0:60:01:25:95:0a:44:
fa:8c:ff:5b:82:16:12:e9:d4:88:11:10:29:bd:53:
20:93:0b:05:eb:c4:1e:c2:27:3a:70:a8:54:f6:4d:
4f:2e:18:96:03:06:8e:b5:cc:6e:54:dd:31:8d:77:
79:56:04:88:4c:55:77:36:e9:74:d1:d2:3c:32:7b:
27:2c:99:e2:5f:6b:3c:49:3b:b7:81:91:b1:eb:4c:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:0B:F0:CE:C6:54:55:B1:FA:F9:2C:2C:9B:19:4A:38:37:16:BB
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d1:eb:65:3e:b5:ea:5e:b7:1b:12:a5:94:2c:e4:fd:57:af:
42:f1:99:78:e1:1d:b9:2f:6e:8b:8a:88:84:cd:7a:c5:ed:87:
07:af:35:e7:1e:ff:09:cd:9d:f0:2f:84:a2:ab:75:42:74:01:
51:63:10:3a:fc:bc:45:35:2d:fa:10:9f:6a:6f:ca:84:70:9c:
83:31:49:ea:55:4a:f0:b9:69:4f:4e:76:fe:84:e6:49:7b:03:
e0:89:3b:b2:2c:79:78:53:c0:60:02:cf:fb:fc:b0:61:cd:b8:
9d:bd:19:cb:6d:7b:58:2d:80:cb:96:8a:91:48:da:0a:50:69:
41:af:2a:9c:93:12:d2:4e:ea:c5:ed:a4:ab:fe:5a:e9:53:ec:
10:f2:34:49:6b:88:3d:3f:de:2e:69:19:a4:81:46:4e:41:72:
43:46:42:4f:ef:84:43:86:af:2e:df:a0:f0:db:14:8f:0b:a4:
c2:35:ef:c4:5d:08:43:e9:c2:46:87:3d:f0:db:ef:5c:ac:25:
c3:9b:9b:f9:1c:6e:47:31:10:06:37:f7:aa:0c:61:e7:af:01:
a9:f0:88:06:45:da:24:b2:81:64:9f:3e:f4:a4:9f:1c:c5:32:
13:e2:b2:33:ee:de:c5:6d:a6:bb:88:56:62:42:bf:69:8a:5f:
cc:9e:07:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6wCjJF+eqsPHpuId/nbgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3
NmFhYTcwHhcNMjUwODA1MTUwMTEwWhcNMjUwODA2MTUwMTEwWjAzMTEwLwYDVQQD
EyhlMjk5MGJmMGNlYzY1NDU1YjFmYWY5MmMyYzliMTk0YTM4MzcxNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MNpu2ESMs54yMw6SY30goPyiZ1n
DJHUYpC2wxF9OuKKq8f5LZtJVbrLhJBkaR0eHChm+l2qZbMQLdXf+d+qw7JRxNyi
zuA8UzP27+NoQYo0K3I9JLCrtOexgP4z0W9XXm+3Z4Ayz+9msvCIT8nsn3HkMyp6
AvyRt7oLgmjj/j8+WLnTLQtPIV/BgqMRnQJ/L78oZBpdcHnDhjwDhtoxNnAm2ypY
UidVxiwqF/BgASWVCkT6jP9bghYS6dSIERApvVMgkwsF68Qewic6cKhU9k1PLhiW
AwaOtcxuVN0xjXd5VgSITFV3Nul00dI8MnsnLJniX2s8STu3gZGx60ws2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKZC/DOxlRVsfr5LCybGUo4Nxa7MB8GA1UdIwQY
MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt
Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2
LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9HrZT61
6l63GxKllCzk/VevQvGZeOEduS9ui4qIhM16xe2HB6815x7/Cc2d8C+Eoqt1QnQB
UWMQOvy8RTUt+hCfam/KhHCcgzFJ6lVK8LlpT052/oTmSXsD4Ik7six5eFPAYALP
+/ywYc24nb0Zy217WC2Ay5aKkUjaClBpQa8qnJMS0k7qxe2kq/5a6VPsEPI0SWuI
PT/eLmkZpIFGTkFyQ0ZCT++EQ4avLt+g8NsUjwukwjXvxF0IQ+nCRoc98NvvXKwl
w5ub+RxuRzEQBjf3qgxh568BqfCIBkXaJLKBZJ8+9KSfHMUyE+KyM+7exW2mu4hW
YkK/aYpfzJ4Htw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:25:13 2025 by rpki-client