Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: EE+pHaeXGc9dqnamcMNStD2L96daNDwT8X4nsfUfmYc=
Subject key identifier: 04:7C:52:02:AB:DF:9A:D3:DA:73:1D:74:97:CA:FB:B6:09:86:85:03
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 0198D5838EDA5956C0FD6110B6943D650380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: E9
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: du9Q9bL5BOWedJK9qhvdrfuTC6E.roa (hash: yMHVcCfWCQ3tfd7XRi0bmpwcyLFeWTkztgI3BA0HK6Y=)
2: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: 58Nzr3TVUCwipKe66xlbPFVwiaZHqWpnhhZafSZ03TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8e:da:59:56:c0:fd:61:10:b6:94:3d:65:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=047c5202abdf9ad3da731d7497cafbb609868503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:a9:54:10:69:a6:ba:28:50:8f:27:a7:50:
f7:99:de:ed:8b:ae:b4:dd:69:dc:13:34:5c:e1:5e:
39:a0:3f:1d:b6:9d:00:b2:4a:19:40:34:b4:06:f7:
33:4b:5f:3b:30:5b:c4:45:55:55:9c:38:12:9a:94:
36:fa:73:60:cb:8b:14:ee:e1:15:dc:37:82:12:02:
c7:d0:28:01:1a:f1:40:47:2b:79:4d:52:18:4a:81:
0f:d1:82:f7:2a:4c:0e:0e:ee:51:ee:3c:c4:54:2a:
71:5d:c4:e0:cd:a1:6e:21:db:2b:2d:93:17:f6:2a:
8a:98:21:1c:0a:79:0c:04:19:21:1f:ec:bb:ce:92:
9b:68:9e:b6:53:1b:95:ce:5e:8a:86:41:ab:89:10:
47:e9:c0:e9:a3:11:f7:61:6f:24:41:ee:b4:a8:62:
41:b1:ec:3e:34:68:d2:93:3b:13:09:cd:20:eb:98:
ae:93:bd:a4:6b:ba:3f:4a:2f:9c:16:45:19:9f:56:
50:73:14:74:fe:ac:f5:07:80:ba:12:b3:4e:e9:8d:
d9:cd:40:68:b3:50:a0:0d:27:96:7a:44:d0:13:c0:
b7:99:0d:2e:4d:c6:9a:92:9f:6b:c2:9c:57:47:fc:
12:24:6d:6e:8e:4a:15:f0:ef:76:b7:58:52:ab:38:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7C:52:02:AB:DF:9A:D3:DA:73:1D:74:97:CA:FB:B6:09:86:85:03
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5d:5c:83:f1:06:13:ad:64:f7:c9:f5:04:bf:eb:e2:67:52:
83:2c:e4:9e:da:df:a5:c5:d3:b0:91:60:65:20:f5:d9:3c:38:
92:92:5e:49:e5:33:74:7e:68:08:40:8d:25:57:9f:b0:9b:e1:
00:0f:b4:76:7c:92:70:cb:a5:dd:55:ed:1c:3d:e7:63:ad:09:
a5:48:0f:28:5d:6c:85:a2:a9:37:37:28:ca:5a:6b:c8:34:19:
fd:02:89:4d:ba:fd:32:a3:28:00:06:b2:a7:17:f0:5d:37:74:
b0:90:cf:4c:b0:e6:13:a0:8a:30:df:ed:70:10:4a:97:fe:bb:
e1:30:10:7a:ce:85:a4:76:d1:bf:f9:fb:74:ec:f5:0e:2b:22:
f0:9e:13:91:a9:9e:9b:03:41:13:69:c9:18:c0:ef:bc:97:33:
63:31:b0:32:f6:37:d6:37:7c:60:a1:4b:54:4f:ea:37:30:19:
ab:93:f3:b6:38:79:78:eb:d0:2f:ee:ec:40:aa:87:e0:7d:bc:
8d:b3:67:88:7e:2a:e6:48:6b:42:37:f8:2f:70:32:f0:74:50:
ca:7e:8a:8a:37:4b:67:72:54:a2:28:15:f9:d5:b6:2e:a3:d9:
4a:a2:83:35:fd:f4:3e:25:53:73:22:65:4d:f5:57:d1:38:6a:
e8:57:91:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg47aWVbA/WEQtpQ9ZQOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhN2JmZDQyMGRiNWNhZWJhZGExYTIwNTVkODdiYzdkYTJi
MDljMDcwHhcNMjUwODIzMDYwMDI1WhcNMjUwODI0MDYwMDI1WjAzMTEwLwYDVQQD
EygwNDdjNTIwMmFiZGY5YWQzZGE3MzFkNzQ5N2NhZmJiNjA5ODY4NTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/GpVBBpprooUI8np1D3md7ti660
3WncEzRc4V45oD8dtp0AskoZQDS0BvczS187MFvERVVVnDgSmpQ2+nNgy4sU7uEV
3DeCEgLH0CgBGvFARyt5TVIYSoEP0YL3KkwODu5R7jzEVCpxXcTgzaFuIdsrLZMX
9iqKmCEcCnkMBBkhH+y7zpKbaJ62UxuVzl6KhkGriRBH6cDpoxH3YW8kQe60qGJB
sew+NGjSkzsTCc0g65iuk72ka7o/Si+cFkUZn1ZQcxR0/qz1B4C6ErNO6Y3ZzUBo
s1CgDSeWekTQE8C3mQ0uTcaakp9rwpxXR/wSJG1ujkoV8O92t1hSqzhrjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAR8UgKr35rT2nMddJfK+7YJhoUDMB8GA1UdIwQY
MBaAFKp7/UINtcrrraGiBV2HvH2isJwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2Mt
NzliNDA5YzFiZDM4LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS81NWJkOTUtYzYzNy00NTFiLWIwN2MtNzliNDA5YzFiZDM4
LzEvcW52OVFnMjF5dXV0b2FJRlhZZThmYUt3bkFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil1cg/EG
E61k98n1BL/r4mdSgyzkntrfpcXTsJFgZSD12Tw4kpJeSeUzdH5oCECNJVefsJvh
AA+0dnyScMul3VXtHD3nY60JpUgPKF1shaKpNzcoylpryDQZ/QKJTbr9MqMoAAay
pxfwXTd0sJDPTLDmE6CKMN/tcBBKl/674TAQes6FpHbRv/n7dOz1Disi8J4Tkame
mwNBE2nJGMDvvJczYzGwMvY31jd8YKFLVE/qNzAZq5Pztjh5eOvQL+7sQKqH4H28
jbNniH4q5khrQjf4L3Ay8HRQyn6KijdLZ3JUoigV+dW2LqPZSqKDNf30PiVTcyJl
TfVX0Thq6FeRmA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:21 2025 by rpki-client