
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: vY+wVWfZZdDO5Fs+71Eskw0V3/6NC3mowuO/RA4F/EY=
Subject key identifier: 11:67:46:71:14:61:A1:6D:A2:67:88:AF:AC:0D:40:98:02:3B:12:C2
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 0198744F9ABFFA8443C0102CA7461001E2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 0857
Signing time: Mon 04 Aug 2025 09:00:30 +0000
Manifest this update: Mon 04 Aug 2025 09:00:30 +0000
Manifest next update: Tue 05 Aug 2025 09:00:30 +0000
Files and hashes: 1: W0dMAnO6aF0Yx6O8KQpDYw42KzU.roa (hash: hYKeaXsd87cAB8WiR9boDz94K2aYD6Hd49egFLgXH3M=)
2: aC_hdK5CbbWAdY5r2a47t0lmkv0.roa (hash: OC741thwNdbktYi4ltIPLb7G2UMVurZWZKeSAWhRUXM=)
3: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: SZYZ2eDNAjLxHmzUUpcqJC75RzWQDnPefRVPV/hARzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9a:bf:fa:84:43:c0:10:2c:a7:46:10:01:e2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Aug 4 09:00:30 2025 GMT
Not After : Aug 5 09:00:30 2025 GMT
Subject: CN=116746711461a16da26788afac0d4098023b12c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:04:57:d8:4f:64:93:34:40:d6:96:73:42:
de:fc:9b:26:be:26:c1:13:24:a3:03:fd:d1:c3:e3:
47:cd:39:23:4d:ea:c1:07:4c:fc:2f:cf:ec:95:82:
5b:98:f5:4b:4d:b5:dd:60:5a:0f:b9:11:d4:92:56:
0a:11:b8:b6:e1:b3:eb:ee:52:25:0c:7b:74:7e:c1:
ad:40:d0:42:62:9e:1f:91:81:df:45:a6:ce:38:05:
67:e1:8b:fc:47:a8:04:de:df:af:b4:33:78:ec:84:
03:2a:88:86:47:72:c0:6f:6e:3b:96:fa:66:e5:52:
03:d3:63:7a:4e:a7:6c:37:de:f6:ac:e4:ac:e2:16:
ea:79:a2:01:fc:a8:a0:1c:d5:32:b1:b1:4e:54:78:
81:e9:7e:65:f7:2e:3f:2c:5b:3c:04:aa:c6:f4:e6:
d1:b6:de:29:5f:7c:8c:c4:1d:78:94:85:f8:93:97:
67:18:07:d9:90:89:25:55:59:54:8e:80:fe:1b:e9:
46:5e:08:25:f5:bc:b9:58:f1:a8:c8:d9:f0:22:5c:
8f:92:15:d2:a6:b0:19:18:94:90:21:9e:5b:08:fd:
41:64:2c:be:80:da:89:2f:f7:39:60:11:eb:bd:87:
fd:ca:e0:f4:b9:8d:dd:f2:0b:9f:a2:ba:f0:be:cc:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:67:46:71:14:61:A1:6D:A2:67:88:AF:AC:0D:40:98:02:3B:12:C2
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:10:c8:c7:e8:83:b2:98:06:3d:06:b2:c5:4e:8a:44:b0:74:
e2:de:0e:e4:42:5e:4d:23:50:52:ee:2d:1f:87:4e:c3:fc:e1:
00:75:be:5d:52:51:4a:fe:bd:c8:e8:9f:eb:d3:4d:8a:4a:62:
51:5d:a9:74:9e:b7:4a:02:43:a6:d8:02:a5:8d:55:bc:6e:9c:
c2:07:39:f8:1d:bb:89:5b:f7:11:9d:53:20:f5:8d:c5:39:28:
33:f0:83:7c:26:97:cb:0d:c0:10:5b:d2:c8:85:b6:38:39:0b:
ea:4b:4c:53:9d:5a:dc:63:d1:60:0a:34:b7:df:c0:22:64:98:
d1:4e:06:ac:ec:36:e6:11:39:dc:84:e4:be:93:52:1f:5a:ba:
2a:80:0d:76:8f:b2:48:f6:10:97:50:38:79:db:be:d1:d9:f7:
86:c0:f0:0b:75:3a:fc:0f:8a:bb:63:c5:7b:7b:46:b6:c0:7c:
ba:83:6f:39:c1:1e:02:a8:07:c5:6a:f8:31:41:3e:e1:23:3a:
17:73:89:30:38:6e:75:9f:61:73:7c:fd:11:6e:e7:8b:2a:50:
9b:3b:21:5c:7d:72:87:8f:01:96:90:54:04:19:80:bc:63:21:
78:f2:51:16:7f:42:d8:5f:44:7d:c8:7b:1c:55:1a:df:81:64:
4f:ac:39:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T5q/+oRDwBAsp0YQAeLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MDA4MmE4NTk0NjcyMmM3ZmMxYzg2NGYwZmJkODBkYzU0
ZGNkMjkwHhcNMjUwODA0MDkwMDMwWhcNMjUwODA1MDkwMDMwWjAzMTEwLwYDVQQD
EygxMTY3NDY3MTE0NjFhMTZkYTI2Nzg4YWZhYzBkNDA5ODAyM2IxMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS8EV9hPZJM0QNaWc0Le/JsmvibB
EySjA/3Rw+NHzTkjTerBB0z8L8/slYJbmPVLTbXdYFoPuRHUklYKEbi24bPr7lIl
DHt0fsGtQNBCYp4fkYHfRabOOAVn4Yv8R6gE3t+vtDN47IQDKoiGR3LAb247lvpm
5VID02N6TqdsN972rOSs4hbqeaIB/KigHNUysbFOVHiB6X5l9y4/LFs8BKrG9ObR
tt4pX3yMxB14lIX4k5dnGAfZkIklVVlUjoD+G+lGXggl9by5WPGoyNnwIlyPkhXS
prAZGJSQIZ5bCP1BZCy+gNqJL/c5YBHrvYf9yuD0uY3d8guforrwvswDdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFnRnEUYaFtomeIr6wNQJgCOxLCMB8GA1UdIwQY
MBaAFJUAgqhZRnIsf8HIZPD72A3FTc0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUt
YzY5YTdmMDNlMThmLzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zNGU0MGYtZTFkMi00ZDI5LTg5YzUtYzY5YTdmMDNlMThm
LzEvbFFDQ3FGbEdjaXhfd2NoazhQdllEY1ZOelNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxDIx+iD
spgGPQayxU6KRLB04t4O5EJeTSNQUu4tH4dOw/zhAHW+XVJRSv69yOif69NNikpi
UV2pdJ63SgJDptgCpY1VvG6cwgc5+B27iVv3EZ1TIPWNxTkoM/CDfCaXyw3AEFvS
yIW2ODkL6ktMU51a3GPRYAo0t9/AImSY0U4GrOw25hE53ITkvpNSH1q6KoANdo+y
SPYQl1A4edu+0dn3hsDwC3U6/A+Ku2PFe3tGtsB8uoNvOcEeAqgHxWr4MUE+4SM6
F3OJMDhudZ9hc3z9EW7niypQmzshXH1yh48BlpBUBBmAvGMhePJRFn9C2F9Efch7
HFUa34FkT6w5uw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:20 2025 by rpki-client