Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: 1MwFtSBdi1eiHWKKFpt3X2dJFXa1omk7KuOhe4uHWzk=
Subject key identifier: 72:A9:7B:14:1F:8B:9F:13:F7:4D:54:49:5E:DF:97:77:F6:0B:54:62
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 019883574A301890075292BB10DA79266938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 02CD
Signing time: Thu 07 Aug 2025 07:03:12 +0000
Manifest this update: Thu 07 Aug 2025 07:03:12 +0000
Manifest next update: Fri 08 Aug 2025 07:03:12 +0000
Files and hashes: 1: Fg4gfGthOyzcFXfxEYyjwrss7as.roa (hash: mWUv12QovIjIHXpuDNAMlgedx6+BQ3vMWaiHrsA7+3A=)
2: Q5e6g1WUMRG4cL4aNZtJqqD_-yo.roa (hash: T3aZ91YVxRUkDJ96e4vMqo7oCynEMTZ2Xb8h0pZbGMo=)
3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: 4kUaqSJXfLfUlkfQCVcpNIb6TPwFWWE9v9A6f8Ij7sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:4a:30:18:90:07:52:92:bb:10:da:79:26:69:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Aug 7 07:03:12 2025 GMT
Not After : Aug 8 07:03:12 2025 GMT
Subject: CN=72a97b141f8b9f13f74d54495edf9777f60b5462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:ff:3f:a1:2f:e8:d3:3c:8a:a7:16:85:30:
ea:67:88:8d:14:09:e7:e6:02:85:ac:fd:da:d8:11:
67:01:87:f3:4c:e6:0d:08:61:dc:0b:86:63:fc:d8:
5b:de:57:8f:e4:3d:e8:01:0c:a4:21:96:b7:cc:07:
9e:c6:96:e7:29:92:c5:81:8b:ec:41:68:7f:42:aa:
7e:9f:ae:58:f7:71:b8:47:c8:66:b8:d0:51:9f:8a:
39:06:42:90:d8:4d:b8:b3:72:6a:86:e5:ca:01:3c:
24:0c:25:07:23:5e:99:21:3a:c1:53:8a:4f:4e:9b:
79:fc:8f:dc:76:14:33:bd:e9:58:3a:ca:f5:19:4d:
6a:38:bf:79:90:ff:0e:a4:cb:c1:03:01:ef:82:d1:
75:90:29:63:78:2f:eb:5f:00:da:dd:99:a4:e1:61:
a7:e5:11:19:42:c6:b7:ca:d3:67:fd:3d:24:87:81:
59:6d:11:20:ce:03:20:db:07:51:4d:1d:a5:22:fe:
b9:81:8a:3a:a3:de:ce:ca:ed:f5:07:ac:fb:28:70:
a1:7d:44:1e:8b:a0:54:3f:35:74:05:c4:ea:c8:20:
96:ce:c6:6a:4f:4d:e9:a9:e1:27:a2:ff:db:f7:bb:
db:b8:37:70:e4:86:78:29:0c:b3:b5:c6:b3:6c:6f:
5c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:7B:14:1F:8B:9F:13:F7:4D:54:49:5E:DF:97:77:F6:0B:54:62
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3d:8c:e5:d3:af:a1:ff:6a:01:c9:11:18:23:4a:de:47:1f:
66:11:bb:0c:9f:07:93:97:09:16:5d:ef:68:49:01:6d:44:51:
ee:ac:92:fe:41:c9:c3:b1:59:0a:b9:2d:7e:44:88:07:fe:3a:
4f:d8:61:a1:ff:26:9b:c8:17:ec:38:e8:20:76:2b:87:60:c3:
eb:a3:7b:d1:86:7c:76:5c:ca:b2:6a:5c:e1:37:7d:07:7a:06:
d8:5f:37:b6:ab:63:81:16:86:a9:d8:20:1a:3c:97:12:0d:75:
c1:9b:d4:16:01:bc:fa:fa:06:f3:c5:ec:92:bd:75:ec:b0:a5:
cd:a3:5c:1b:00:93:78:8e:90:f3:09:89:81:b2:6d:86:52:69:
8b:73:6b:aa:5a:b0:94:0b:e8:dd:16:51:b5:29:78:54:bf:da:
96:42:98:fb:a8:85:97:32:fe:66:89:99:19:ca:57:45:d9:14:
18:85:b3:13:4c:34:a9:a5:17:0e:4c:02:8a:6a:b9:95:a3:74:
c5:49:72:72:35:dc:40:64:4a:c1:38:90:1d:6d:c8:a5:14:94:
11:1b:84:45:9c:01:cb:5c:3e:cf:f5:91:5f:dc:c3:55:96:3a:
d0:f7:0d:07:fb:38:c8:8d:78:7a:03:09:11:0d:f1:d0:f3:01:
a3:51:15:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDV0owGJAHUpK7ENp5Jmk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw
YzE1YjIwHhcNMjUwODA3MDcwMzEyWhcNMjUwODA4MDcwMzEyWjAzMTEwLwYDVQQD
Eyg3MmE5N2IxNDFmOGI5ZjEzZjc0ZDU0NDk1ZWRmOTc3N2Y2MGI1NDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNT/P6Ev6NM8iqcWhTDqZ4iNFAnn
5gKFrP3a2BFnAYfzTOYNCGHcC4Zj/Nhb3leP5D3oAQykIZa3zAeexpbnKZLFgYvs
QWh/Qqp+n65Y93G4R8hmuNBRn4o5BkKQ2E24s3JqhuXKATwkDCUHI16ZITrBU4pP
Tpt5/I/cdhQzvelYOsr1GU1qOL95kP8OpMvBAwHvgtF1kCljeC/rXwDa3Zmk4WGn
5REZQsa3ytNn/T0kh4FZbREgzgMg2wdRTR2lIv65gYo6o97Oyu31B6z7KHChfUQe
i6BUPzV0BcTqyCCWzsZqT03pqeEnov/b97vbuDdw5IZ4KQyztcazbG9cbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKpexQfi58T901USV7fl3f2C1RiMB8GA1UdIwQY
MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt
MTMxZGMyYmEyZWM4LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4
LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJD2M5dOv
of9qAckRGCNK3kcfZhG7DJ8Hk5cJFl3vaEkBbURR7qyS/kHJw7FZCrktfkSIB/46
T9hhof8mm8gX7DjoIHYrh2DD66N70YZ8dlzKsmpc4Td9B3oG2F83tqtjgRaGqdgg
GjyXEg11wZvUFgG8+voG88Xskr117LClzaNcGwCTeI6Q8wmJgbJthlJpi3Nrqlqw
lAvo3RZRtSl4VL/alkKY+6iFlzL+ZomZGcpXRdkUGIWzE0w0qaUXDkwCimq5laN0
xUlycjXcQGRKwTiQHW3IpRSUERuERZwBy1w+z/WRX9zDVZY60PcNB/s4yI14egMJ
EQ3x0PMBo1EV3Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:23:14 2025 by rpki-client