Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
File: qF7VXxRNceZz5j9LdnDEE0TAlYA.mft (raw, json)
Hash identifier: UyrKY40olf5V+/DTEo3/o3NsGtw4INkybueoWolWVps=
Subject key identifier: 5A:2A:94:5C:55:7C:A6:9A:D3:60:FE:BC:63:E6:D5:1B:D9:64:7C:41
Authority key identifier: A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80
Certificate issuer: /CN=a85ed55f144d71e673e63f4b7670c41344c09580
Certificate serial: 0198D5BBCBB875B7AA115EA956627235D7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
Manifest number: 01D7
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: cT2eGd63Px5rG_L6GRT2XCwHH8E.roa (hash: +Vm6cesMvrKle1O+NFaMGbBUxTSdI75W5YWzhqJGopE=)
2: qF7VXxRNceZz5j9LdnDEE0TAlYA.crl (hash: dRKPAjQL1y4Akc+xjECuV5AJrSL7m2MMgxWsbyHlm/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cb:b8:75:b7:aa:11:5e:a9:56:62:72:35:d7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85ed55f144d71e673e63f4b7670c41344c09580
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=5a2a945c557ca69ad360febc63e6d51bd9647c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:8c:f9:b0:35:63:b0:a9:d2:b4:8d:a3:35:
be:91:e8:ca:9f:0c:44:9c:1c:dd:c9:9f:9c:4c:0f:
e5:95:64:7e:71:8d:21:90:e3:7a:ac:e6:93:33:72:
b6:cb:e0:6c:87:1c:29:2b:4f:0a:67:ef:57:dc:9e:
ab:71:c2:97:d8:8a:b1:58:b8:eb:40:89:02:ee:4e:
2b:c8:87:22:8d:64:6b:a7:1a:cd:c3:7c:c8:23:9b:
aa:75:5e:e6:c8:f0:c1:44:36:f8:86:63:1c:2e:cd:
3b:77:d5:32:20:a8:7b:95:19:e1:42:ff:3a:5a:95:
3f:6c:7f:2b:55:b2:f5:96:f5:ec:f2:82:50:ea:75:
ac:53:60:db:cb:a7:d3:38:0c:60:7c:44:d0:27:03:
71:d3:3f:28:f9:07:c0:19:cb:18:f2:99:31:08:f0:
a4:61:d6:56:18:79:09:93:d2:f8:48:f4:bc:4b:d2:
fd:e4:27:7e:34:9d:2f:8c:4b:ee:d6:f6:60:50:46:
46:27:06:f4:e4:3b:7f:23:5e:13:b1:41:fa:88:51:
b6:54:3f:46:98:1e:de:22:d3:25:2d:83:0b:e9:68:
1f:f9:eb:b0:36:71:b8:d6:cf:47:76:e7:72:bb:fd:
56:c6:19:43:be:a6:54:38:f2:21:55:30:aa:f7:d3:
04:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:94:5C:55:7C:A6:9A:D3:60:FE:BC:63:E6:D5:1B:D9:64:7C:41
X509v3 Authority Key Identifier:
keyid:A8:5E:D5:5F:14:4D:71:E6:73:E6:3F:4B:76:70:C4:13:44:C0:95:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF7VXxRNceZz5j9LdnDEE0TAlYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/749d77-e995-489a-87e0-d00a13aae540/1/qF7VXxRNceZz5j9LdnDEE0TAlYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7c:14:89:35:a6:e7:60:7a:c6:53:ab:1c:fa:9f:fa:6e:12:
3b:bc:17:ae:1f:84:6b:19:82:06:ca:c4:3e:a2:98:0a:bc:d4:
40:2e:29:93:66:c5:1d:96:28:f7:01:f5:80:9c:93:46:27:0c:
17:33:e6:53:79:95:c3:f0:99:25:5e:d9:03:3f:0a:6d:43:d8:
0e:10:33:10:d6:b9:bf:f1:ea:dc:51:38:d7:7f:65:72:53:c8:
da:b6:0e:e5:1b:73:b6:63:6d:19:86:1c:6d:40:91:3f:4f:07:
96:f4:ec:f4:3c:b7:51:57:35:04:8d:15:d5:cc:bb:0a:97:59:
0e:ee:9f:e9:a8:53:34:d6:06:bc:e4:4b:fb:fc:0c:75:ef:a5:
db:f4:f3:5d:fe:f2:bc:6c:9d:33:da:ea:49:f1:99:06:e0:ba:
54:b2:e6:f1:e0:a6:2b:a6:99:e3:ca:3a:68:f5:17:62:83:8b:
e6:36:0e:13:db:ab:d2:21:76:cf:12:b8:2c:9a:7b:63:df:36:
3f:1b:e6:d7:76:9a:b2:d2:43:3f:f7:50:2b:db:60:2d:9d:34:
2e:ab:18:f3:2b:10:ec:24:24:cd:fa:74:df:2e:18:95:72:5b:
ee:d6:6b:82:98:50:f4:34:c6:4d:7f:27:8a:49:15:93:9c:b7:
25:2b:73:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8u4dbeqEV6pVmJyNdfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWVkNTVmMTQ0ZDcxZTY3M2U2M2Y0Yjc2NzBjNDEzNDRj
MDk1ODAwHhcNMjUwODIzMDcwMTUwWhcNMjUwODI0MDcwMTUwWjAzMTEwLwYDVQQD
Eyg1YTJhOTQ1YzU1N2NhNjlhZDM2MGZlYmM2M2U2ZDUxYmQ5NjQ3YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CmM+bA1Y7Cp0rSNozW+kejKnwxE
nBzdyZ+cTA/llWR+cY0hkON6rOaTM3K2y+BshxwpK08KZ+9X3J6rccKX2IqxWLjr
QIkC7k4ryIcijWRrpxrNw3zII5uqdV7myPDBRDb4hmMcLs07d9UyIKh7lRnhQv86
WpU/bH8rVbL1lvXs8oJQ6nWsU2Dby6fTOAxgfETQJwNx0z8o+QfAGcsY8pkxCPCk
YdZWGHkJk9L4SPS8S9L95Cd+NJ0vjEvu1vZgUEZGJwb05Dt/I14TsUH6iFG2VD9G
mB7eItMlLYML6Wgf+euwNnG41s9Hdudyu/1WxhlDvqZUOPIhVTCq99MErwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoqlFxVfKaa02D+vGPm1RvZZHxBMB8GA1UdIwQY
MBaAFKhe1V8UTXHmc+Y/S3ZwxBNEwJWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUY3Vlh4Uk5jZVp6NWo5TGRuREVFMFRBbFlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83NDlkNzctZTk5NS00ODlhLTg3ZTAt
ZDAwYTEzYWFlNTQwLzEvcUY3Vlh4Uk5jZVp6NWo5TGRuREVFMFRBbFlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83NDlkNzctZTk5NS00ODlhLTg3ZTAtZDAwYTEzYWFlNTQw
LzEvcUY3Vlh4Uk5jZVp6NWo5TGRuREVFMFRBbFlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXwUiTWm
52B6xlOrHPqf+m4SO7wXrh+EaxmCBsrEPqKYCrzUQC4pk2bFHZYo9wH1gJyTRicM
FzPmU3mVw/CZJV7ZAz8KbUPYDhAzENa5v/Hq3FE4139lclPI2rYO5RtztmNtGYYc
bUCRP08HlvTs9Dy3UVc1BI0V1cy7CpdZDu6f6ahTNNYGvORL+/wMde+l2/TzXf7y
vGydM9rqSfGZBuC6VLLm8eCmK6aZ48o6aPUXYoOL5jYOE9ur0iF2zxK4LJp7Y982
Pxvm13aastJDP/dQK9tgLZ00LqsY8ysQ7CQkzfp03y4YlXJb7tZrgphQ9DTGTX8n
ikkVk5y3JStzYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:09 2025 by rpki-client