Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: 8ptp/N1y5CK+hRKi7X3rz4UmUbTKzjAN7EKhll3TdbQ=
Subject key identifier: 13:29:D5:17:B0:BD:3C:32:48:D1:2F:57:48:72:4F:C4:90:94:FE:81
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 0198D5162C6AD9790DF3E3F37F81D2667ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0BBE
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: XJO5ScJqtAkI+By/d/7N9NhuSu64pKjt90gf7+6Ok4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2c:6a:d9:79:0d:f3:e3:f3:7f:81:d2:66:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=1329d517b0bd3c3248d12f5748724fc49094fe81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:eb:f6:df:ba:62:12:0a:bc:54:71:0b:d1:5e:
26:18:db:64:99:9c:4a:0e:f6:31:1d:bf:a3:b7:a6:
6a:e1:4d:96:2b:02:de:31:5c:2e:36:bb:be:b8:34:
d5:af:59:bc:c9:56:32:0a:b5:d7:ee:ad:bc:dc:c1:
49:9f:4b:cc:2f:1c:ab:fb:4e:06:e1:3e:9c:de:78:
82:c3:32:a1:0d:a7:ab:11:86:1f:c1:6f:09:34:01:
a9:e2:3a:69:da:ce:b1:36:b3:59:a4:85:e5:e5:c0:
3a:2e:ed:8d:cc:fc:70:05:39:51:8e:a2:a9:9f:71:
38:0d:4e:29:e0:8f:75:d5:30:0e:29:f1:2f:1e:b8:
21:2f:04:39:39:b7:f6:ca:8c:20:77:10:5b:ce:39:
df:0a:ca:3e:2a:d8:1d:19:8b:76:b3:b2:45:07:e9:
c9:9b:9a:b1:39:38:17:d2:90:40:fa:28:9d:6d:eb:
2a:ba:d9:df:d7:4a:7f:05:6b:35:db:43:1a:1a:bb:
8a:54:ba:3a:56:30:07:87:d9:de:26:7c:3b:ee:8a:
9f:ba:89:49:fd:96:4e:41:69:b0:e6:64:10:17:01:
4e:55:67:f4:1e:5b:c2:f0:cb:ad:c7:4f:b0:8e:2f:
07:c9:ba:b6:05:a1:f1:c9:28:ca:3c:00:ea:b2:5f:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:D5:17:B0:BD:3C:32:48:D1:2F:57:48:72:4F:C4:90:94:FE:81
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:e1:81:68:9f:38:a7:db:57:d8:ac:4f:3c:d9:e2:3a:ec:
13:8f:32:95:0a:d9:32:95:92:4b:97:b3:38:cc:b0:69:60:78:
bd:8d:db:38:49:25:89:d8:db:c4:cf:54:e6:90:2e:0e:dd:d6:
a9:1d:ca:d5:4f:f8:80:49:69:d9:4d:16:6f:b6:b4:ac:d8:c9:
2c:7b:87:bc:4a:b7:1f:a8:87:4b:76:1b:80:17:36:7c:36:a2:
09:13:82:f7:56:2b:e6:4c:29:75:a9:d2:97:6e:e3:17:6f:88:
cd:17:f7:69:a2:cc:b2:c7:c2:40:16:c3:11:c0:7a:c6:4d:f6:
2d:97:92:43:48:59:89:b6:e5:7a:65:b2:2e:89:e6:94:b3:e5:
f5:93:13:43:f3:b6:56:94:71:fc:a7:b3:87:6f:58:e3:9f:da:
72:df:c5:5e:ef:e2:15:98:a3:d5:1a:97:b2:02:5c:53:29:a1:
1a:a7:10:ca:22:64:4a:56:b6:5f:5e:73:de:21:2f:44:aa:95:
1e:fe:75:15:53:21:38:20:f7:71:00:04:a6:e5:12:89:37:02:
a6:17:59:1b:9c:ba:81:46:e2:4a:cd:55:3c:6e:2a:34:c0:69:
ab:02:99:7c:9e:cc:84:7d:e0:6f:e1:27:1b:5c:09:4d:11:66:
cf:ac:72:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFixq2XkN8+Pzf4HSZn7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTI5Y2IzNDNiZGYzY2YyMDRjNDA1YWYwYTU1MzNlYTRi
MDkzM2MwHhcNMjUwODIzMDQwMDU2WhcNMjUwODI0MDQwMDU2WjAzMTEwLwYDVQQD
EygxMzI5ZDUxN2IwYmQzYzMyNDhkMTJmNTc0ODcyNGZjNDkwOTRmZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ev237piEgq8VHEL0V4mGNtkmZxK
DvYxHb+jt6Zq4U2WKwLeMVwuNru+uDTVr1m8yVYyCrXX7q283MFJn0vMLxyr+04G
4T6c3niCwzKhDaerEYYfwW8JNAGp4jpp2s6xNrNZpIXl5cA6Lu2NzPxwBTlRjqKp
n3E4DU4p4I911TAOKfEvHrghLwQ5Obf2yowgdxBbzjnfCso+KtgdGYt2s7JFB+nJ
m5qxOTgX0pBA+iidbesqutnf10p/BWs120MaGruKVLo6VjAHh9neJnw77oqfuolJ
/ZZOQWmw5mQQFwFOVWf0HlvC8Mutx0+wji8Hybq2BaHxySjKPADqsl/TQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMp1RewvTwySNEvV0hyT8SQlP6BMB8GA1UdIwQY
MBaAFKiSnLNDvfPPIExAWvClUz6ksJM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjIt
NTlkNDRlZjdlNGZmLzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjItNTlkNDRlZjdlNGZm
LzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdc/hgWif
OKfbV9isTzzZ4jrsE48ylQrZMpWSS5ezOMywaWB4vY3bOEklidjbxM9U5pAuDt3W
qR3K1U/4gElp2U0Wb7a0rNjJLHuHvEq3H6iHS3YbgBc2fDaiCROC91Yr5kwpdanS
l27jF2+IzRf3aaLMssfCQBbDEcB6xk32LZeSQ0hZibblemWyLonmlLPl9ZMTQ/O2
VpRx/Kezh29Y45/act/FXu/iFZij1RqXsgJcUymhGqcQyiJkSla2X15z3iEvRKqV
Hv51FVMhOCD3cQAEpuUSiTcCphdZG5y6gUbiSs1VPG4qNMBpqwKZfJ7MhH3gb+En
G1wJTRFmz6xy8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:08 2025 by rpki-client