Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: RqXGHgjBdLEjm8JLRHjUMFoKMA3oEqKhdHNBMvcbxZw=
Subject key identifier: 8D:54:B1:10:60:E4:F3:F8:51:AC:FC:AF:24:6C:C2:8B:20:11:F6:12
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 01987486EF96134B903932614E01DBCB26C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0CCE
Signing time: Mon 04 Aug 2025 10:00:56 +0000
Manifest this update: Mon 04 Aug 2025 10:00:56 +0000
Manifest next update: Tue 05 Aug 2025 10:00:56 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: VCGVwmqSXD5FN/G0HyChicQKj1rUTGVYAmznhF9Iq7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:ef:96:13:4b:90:39:32:61:4e:01:db:cb:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Aug 4 10:00:56 2025 GMT
Not After : Aug 5 10:00:56 2025 GMT
Subject: CN=8d54b11060e4f3f851acfcaf246cc28b2011f612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:9a:1b:07:02:1c:99:dd:46:e7:f2:f7:7c:
8d:54:9d:43:19:79:7b:eb:bd:69:5e:54:3a:9d:b2:
d4:1c:32:ac:0f:5a:2d:a6:91:5d:00:19:6f:ab:ee:
5e:9b:13:d5:f1:46:c0:ea:47:10:85:54:e7:2e:22:
a7:38:b8:09:e6:19:d1:69:b4:c6:f0:a0:58:a3:ab:
27:fe:95:7d:e5:95:e7:dc:b8:a6:c6:b7:7c:f3:e1:
00:a8:2e:78:d7:95:07:75:d0:a2:e0:bf:70:aa:d0:
a7:41:47:9b:14:b2:4f:5f:e0:50:4d:03:95:8e:5d:
ad:d8:2b:53:16:74:cc:8d:6b:9f:6d:ae:da:49:d1:
c4:72:21:da:22:ac:54:0d:06:f7:6e:62:d7:42:a3:
34:4a:26:12:d3:a5:d7:3f:e0:9e:59:12:9f:f5:92:
c3:0c:bf:0a:a7:1c:43:b6:e4:f7:21:20:c3:72:d2:
a1:ab:90:5a:69:6d:86:ed:03:bd:25:11:2f:bb:51:
ec:bf:2b:d8:c9:a6:55:b2:2e:bf:b9:bc:01:34:aa:
3d:ab:07:4d:7e:f8:ce:b8:f3:8a:3b:d3:7d:d5:35:
d3:31:96:e1:b2:68:5e:a7:a3:e3:8d:69:4e:7b:bf:
34:5a:03:a3:6f:ec:27:ed:db:23:64:8c:06:f4:db:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:B1:10:60:E4:F3:F8:51:AC:FC:AF:24:6C:C2:8B:20:11:F6:12
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:81:1e:f4:dc:47:97:c4:be:c3:64:4b:57:b0:6e:a9:c0:ce:
6b:c6:b7:70:aa:82:80:e5:06:bb:6a:b4:ad:0f:a7:32:2b:b3:
7f:be:a0:3e:9d:68:b1:12:ce:2b:b2:80:38:dc:e8:af:30:e8:
24:05:38:69:8c:cd:71:4b:79:ef:08:2f:b7:13:80:e2:bb:13:
01:5e:a9:66:41:89:aa:cb:f5:e4:cc:28:57:80:ab:83:67:94:
82:28:39:af:32:f1:c6:56:94:92:d1:76:0d:08:59:ee:c9:50:
05:ad:39:c4:96:6d:5d:31:bc:b4:b6:7a:28:a8:8a:17:18:d3:
6a:8f:ba:8e:48:1a:91:79:87:77:9b:28:7c:4f:26:65:9f:d9:
0d:19:95:91:d2:ef:b0:53:45:c3:c1:7d:b9:a4:96:03:39:7c:
2c:ec:10:21:66:59:83:96:e8:ef:27:97:83:7b:40:16:2c:79:
83:10:e2:18:2e:31:21:27:85:f6:e9:36:cf:a1:1b:46:45:ed:
c9:52:d8:cf:23:ef:d6:3e:83:53:12:9a:04:8a:c8:b8:b8:09:
8a:6c:9d:49:c5:7e:8f:82:61:bb:d1:3d:f7:9a:99:31:7b:93:
bc:f7:94:d6:d5:bf:83:1d:10:ec:d7:5a:e9:b6:e8:39:2a:6f:
b4:00:ef:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0hu+WE0uQOTJhTgHbyybAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTFlNjM4YTJjYjk1YzY4YmJjNTRhMjcyODYwNWIyN2Y1
NzA2ODEwHhcNMjUwODA0MTAwMDU2WhcNMjUwODA1MTAwMDU2WjAzMTEwLwYDVQQD
Eyg4ZDU0YjExMDYwZTRmM2Y4NTFhY2ZjYWYyNDZjYzI4YjIwMTFmNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYqaGwcCHJndRufy93yNVJ1DGXl7
671pXlQ6nbLUHDKsD1otppFdABlvq+5emxPV8UbA6kcQhVTnLiKnOLgJ5hnRabTG
8KBYo6sn/pV95ZXn3Limxrd88+EAqC5415UHddCi4L9wqtCnQUebFLJPX+BQTQOV
jl2t2CtTFnTMjWufba7aSdHEciHaIqxUDQb3bmLXQqM0SiYS06XXP+CeWRKf9ZLD
DL8KpxxDtuT3ISDDctKhq5BaaW2G7QO9JREvu1HsvyvYyaZVsi6/ubwBNKo9qwdN
fvjOuPOKO9N91TXTMZbhsmhep6PjjWlOe780WgOjb+wn7dsjZIwG9NuJ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1UsRBg5PP4Uaz8ryRswosgEfYSMB8GA1UdIwQY
MBaAFKlR5jiiy5XGi7xUonKGBbJ/VwaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEt
YWJkZjkwNmM1YWRlLzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEtYWJkZjkwNmM1YWRl
LzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIEe9NxH
l8S+w2RLV7BuqcDOa8a3cKqCgOUGu2q0rQ+nMiuzf76gPp1osRLOK7KAONzorzDo
JAU4aYzNcUt57wgvtxOA4rsTAV6pZkGJqsv15MwoV4Crg2eUgig5rzLxxlaUktF2
DQhZ7slQBa05xJZtXTG8tLZ6KKiKFxjTao+6jkgakXmHd5sofE8mZZ/ZDRmVkdLv
sFNFw8F9uaSWAzl8LOwQIWZZg5bo7yeXg3tAFix5gxDiGC4xISeF9uk2z6EbRkXt
yVLYzyPv1j6DUxKaBIrIuLgJimydScV+j4Jhu9E995qZMXuTvPeU1tW/gx0Q7Nda
6bboOSpvtADvZA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:41 2025 by rpki-client