Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: opd4KKrgW7F4NLqb7zK5K/GWbjKgt99/O2c6lgIUaN8=
Subject key identifier: A9:04:2E:3A:E4:05:56:04:E7:06:81:10:CF:A1:48:53:5C:B4:62:65
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 0198D4A7A93B70E335EF3059B8D4DA74CCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 08C4
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: Eax-YG047Te5n0m45RUjhbrR1oI.roa (hash: iDlk1T+vVuMTMOmIBdx2Kl0rk1EldiQCxibfcQYd5i0=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: 1eCUFIQ64POxHaXbPsuki6VzxrjFnbL71FFzDXk7zdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a9:3b:70:e3:35:ef:30:59:b8:d4:da:74:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=a9042e3ae4055604e7068110cfa148535cb46265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:a8:c3:59:18:dd:ad:c3:54:a9:04:4b:ca:
68:76:a6:14:b4:74:d7:ae:d4:24:85:ea:49:85:70:
b8:62:22:24:fe:0e:06:1b:a0:9b:36:bf:ff:10:79:
09:b2:71:26:92:81:37:8c:c7:be:de:a2:03:74:2c:
16:5e:30:6e:3a:95:e2:f8:6a:51:60:0a:ea:69:45:
9b:9a:af:4c:63:7e:35:c8:56:7d:f2:2a:1f:8d:8b:
cb:f7:ca:c0:bc:8e:c8:f4:4f:e9:dc:33:e0:1c:18:
75:c1:bd:68:21:fc:d7:cb:1a:88:34:ea:a9:68:54:
94:cc:a7:ad:13:07:b8:a8:e9:17:4e:c5:4c:b1:09:
e5:fe:45:18:9c:0b:76:2f:57:62:3f:c9:d2:0e:c4:
9d:68:b9:4e:a8:45:81:f7:6a:c1:df:56:fd:7f:6b:
12:b6:af:ff:9c:4c:71:4e:81:63:de:94:bc:57:0f:
57:80:dc:2d:af:46:15:2a:05:43:ca:57:3f:15:0f:
bf:5d:bd:2b:85:19:d1:c4:e0:76:4e:80:20:1f:e1:
4e:7c:12:e8:8a:06:92:17:d2:d5:31:97:28:a0:30:
e7:c2:b0:2d:3d:f8:e1:07:2f:25:b8:4e:80:e4:a3:
73:34:b8:f7:94:64:9e:e7:0a:02:3a:b9:fb:4a:58:
54:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:2E:3A:E4:05:56:04:E7:06:81:10:CF:A1:48:53:5C:B4:62:65
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9a:2e:c3:ef:a3:93:72:68:36:72:47:df:75:08:5f:e9:c9:
ef:94:45:87:39:f9:42:02:49:b1:4b:2e:63:b4:91:5d:3a:15:
7e:94:0b:b9:ce:bb:11:02:67:af:a5:ea:66:53:ee:8b:f5:41:
38:77:43:af:4c:c8:c2:23:50:e8:4b:19:31:bd:f9:a0:00:d0:
7b:80:31:e3:f5:ae:06:43:12:e9:8e:6f:e8:f8:b3:a6:71:b2:
09:6d:28:e5:71:c1:5a:d5:ac:28:b1:44:07:12:85:e0:b5:90:
31:a8:d8:cf:7d:34:bc:65:87:d4:0c:bf:55:02:e0:f5:ac:55:
f7:40:35:dc:f7:89:6f:aa:fc:db:3c:7c:cf:02:c9:87:e9:be:
54:eb:7b:0c:4d:2a:51:f3:0f:44:4e:de:f7:09:1f:ab:6a:74:
51:07:2d:a4:48:fd:bb:39:7a:80:cb:51:93:24:8d:fc:ff:52:
c8:ff:d1:3e:8d:fd:19:76:43:34:b7:a5:b7:01:c0:fb:eb:3c:
16:c3:fd:03:c9:b0:80:30:49:8e:8c:21:1c:05:fd:72:a8:29:
4f:af:e5:37:bb:e6:81:46:92:7b:bb:4a:1f:b7:8d:21:a3:2b:
5f:04:a1:61:94:2f:70:a4:d0:90:03:bc:73:6f:4a:52:f3:2c:
e1:fc:47:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp6k7cOM17zBZuNTadMz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4N2M2NzNmMzVhN2I3MDVhNmI0MjRkMzM5MTRmYTM5MmQz
Yjk2MmUwHhcNMjUwODIzMDIwMDE0WhcNMjUwODI0MDIwMDE0WjAzMTEwLwYDVQQD
EyhhOTA0MmUzYWU0MDU1NjA0ZTcwNjgxMTBjZmExNDg1MzVjYjQ2MjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHuow1kY3a3DVKkES8podqYUtHTX
rtQkhepJhXC4YiIk/g4GG6CbNr//EHkJsnEmkoE3jMe+3qIDdCwWXjBuOpXi+GpR
YArqaUWbmq9MY341yFZ98iofjYvL98rAvI7I9E/p3DPgHBh1wb1oIfzXyxqINOqp
aFSUzKetEwe4qOkXTsVMsQnl/kUYnAt2L1diP8nSDsSdaLlOqEWB92rB31b9f2sS
tq//nExxToFj3pS8Vw9XgNwtr0YVKgVDylc/FQ+/Xb0rhRnRxOB2ToAgH+FOfBLo
igaSF9LVMZcooDDnwrAtPfjhBy8luE6A5KNzNLj3lGSe5woCOrn7SlhUHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkELjrkBVYE5waBEM+hSFNctGJlMB8GA1UdIwQY
MBaAFKh8Zz81p7cFprQk0zkU+jktO5YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYTFhZjQtOTI1Ni00NmM4LWFiMDIt
OTRlNjQ3MjYyMTYwLzEvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hYTFhZjQtOTI1Ni00NmM4LWFiMDItOTRlNjQ3MjYyMTYw
LzEvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJouw++j
k3JoNnJH33UIX+nJ75RFhzn5QgJJsUsuY7SRXToVfpQLuc67EQJnr6XqZlPui/VB
OHdDr0zIwiNQ6EsZMb35oADQe4Ax4/WuBkMS6Y5v6PizpnGyCW0o5XHBWtWsKLFE
BxKF4LWQMajYz300vGWH1Ay/VQLg9axV90A13PeJb6r82zx8zwLJh+m+VOt7DE0q
UfMPRE7e9wkfq2p0UQctpEj9uzl6gMtRkySN/P9SyP/RPo39GXZDNLeltwHA++s8
FsP9A8mwgDBJjowhHAX9cqgpT6/lN7vmgUaSe7tKH7eNIaMrXwShYZQvcKTQkAO8
c29KUvMs4fxHJw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:18 2025 by rpki-client