Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: lAFLA6AigpngC3tQwDKeI383QP5YUzsPiWRKVkBhO9A=
Subject key identifier: A1:16:5E:67:6A:05:CB:20:D3:32:E7:6A:4A:AC:A5:8F:55:50:F0:79
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 0198D5163B986A294E28B0D87F28B63C2206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 035A
Signing time: Sat 23 Aug 2025 04:01:00 +0000
Manifest this update: Sat 23 Aug 2025 04:01:00 +0000
Manifest next update: Sun 24 Aug 2025 04:01:00 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: UMgHHl+JGRcXGo4PQaG8doYRUeJm3MnG4a/Jhqb1Ol4=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:3b:98:6a:29:4e:28:b0:d8:7f:28:b6:3c:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Aug 23 04:01:00 2025 GMT
Not After : Aug 24 04:01:00 2025 GMT
Subject: CN=a1165e676a05cb20d332e76a4aaca58f5550f079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1f:9e:6d:cd:a6:d7:d4:fa:a5:de:21:08:a9:
20:ec:0b:ae:ce:c1:9b:cf:89:43:e2:be:5e:56:93:
4a:d3:26:18:f0:30:ca:e6:1b:4d:10:ef:d3:38:0b:
fb:73:12:c2:27:da:b1:a6:99:c0:b8:36:a3:f1:3f:
90:af:cb:e9:31:83:e1:a3:a2:e4:08:ad:4b:b7:de:
16:15:6b:d3:93:97:8a:ee:c9:80:a9:83:6c:c5:e3:
56:75:ce:56:7c:f4:70:95:05:1e:0e:d5:c7:58:1a:
af:64:86:87:a2:78:b6:7c:b1:b5:45:7b:29:37:cd:
2a:05:06:4a:7c:cd:0f:07:67:5b:c5:8e:02:d0:b4:
3b:c8:2a:f5:c9:ab:f0:0f:86:7c:0f:7b:3d:3d:fa:
4b:ef:54:e4:1c:4f:38:1d:d2:90:f8:97:2d:df:ab:
82:20:f4:ff:bc:66:58:90:81:4e:4e:3d:e7:c9:8a:
4d:f0:df:49:c7:d2:37:1e:50:93:b5:46:04:ac:75:
78:18:72:b2:33:4d:af:49:ed:1c:0b:fb:86:d7:28:
0c:7e:6f:c0:e3:4a:78:f7:22:2c:e5:b0:fe:2e:42:
bc:90:a1:66:cc:da:16:5d:37:64:73:e2:fd:00:0d:
e5:b0:bf:4d:45:34:55:6a:e1:f6:8f:0e:96:77:93:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:5E:67:6A:05:CB:20:D3:32:E7:6A:4A:AC:A5:8F:55:50:F0:79
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:b6:55:f2:66:41:21:ca:cf:80:b7:cb:a2:55:80:d1:a8:
bc:3b:eb:d4:22:d7:c7:45:79:65:4a:91:97:75:d7:a9:c3:43:
ea:86:2e:79:cc:c2:6a:8a:89:cf:a1:3f:1d:9e:48:45:d6:9b:
32:1d:58:39:18:53:37:9e:35:af:9c:84:60:28:b6:f3:01:a8:
9a:cb:ea:0a:f8:cf:79:0b:d1:a6:ab:5e:47:df:36:53:cd:46:
25:36:5a:06:80:f7:9a:ff:a7:64:3b:0a:2b:38:c2:97:c4:35:
f8:4f:c1:ad:54:f3:77:08:4f:63:f5:10:c5:72:d3:55:aa:36:
7f:88:75:38:b4:a0:5f:40:c2:db:ec:0e:8a:6a:e5:16:8c:15:
79:17:ff:74:bd:fc:2f:4b:09:14:71:57:07:d3:35:ac:68:bd:
17:1c:fe:d2:d8:03:13:16:e6:cf:35:5b:7b:09:1c:5e:d9:0e:
99:37:15:12:d8:42:cc:30:85:cc:5d:42:9b:f8:12:2a:28:85:
d1:a6:5b:bd:aa:dc:99:14:32:86:0b:6a:de:f0:41:c4:c6:c5:
34:14:eb:14:95:a2:fb:26:d1:88:6c:c0:08:cc:d1:f8:40:45:
54:94:a7:d9:68:68:cf:59:da:f6:50:d5:fa:69:5a:42:47:73:
7b:9b:db:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFjuYailOKLDYfyi2PCIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMTQyZGYyZjY3MDk0MGNjZjVhNGIyN2EwZDBjOTg3ZWNj
ODg2NTYwHhcNMjUwODIzMDQwMTAwWhcNMjUwODI0MDQwMTAwWjAzMTEwLwYDVQQD
EyhhMTE2NWU2NzZhMDVjYjIwZDMzMmU3NmE0YWFjYTU4ZjU1NTBmMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+B+ebc2m19T6pd4hCKkg7AuuzsGb
z4lD4r5eVpNK0yYY8DDK5htNEO/TOAv7cxLCJ9qxppnAuDaj8T+Qr8vpMYPho6Lk
CK1Lt94WFWvTk5eK7smAqYNsxeNWdc5WfPRwlQUeDtXHWBqvZIaHoni2fLG1RXsp
N80qBQZKfM0PB2dbxY4C0LQ7yCr1yavwD4Z8D3s9PfpL71TkHE84HdKQ+Jct36uC
IPT/vGZYkIFOTj3nyYpN8N9Jx9I3HlCTtUYErHV4GHKyM02vSe0cC/uG1ygMfm/A
40p49yIs5bD+LkK8kKFmzNoWXTdkc+L9AA3lsL9NRTRVauH2jw6Wd5NZoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEWXmdqBcsg0zLnakqspY9VUPB5MB8GA1UdIwQY
MBaAFNMULfL2cJQMz1pLJ6DQyYfsyIZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjIt
NjMyY2FlZWY0NTg0LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjItNjMyY2FlZWY0NTg0
LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonC2VfJm
QSHKz4C3y6JVgNGovDvr1CLXx0V5ZUqRl3XXqcND6oYueczCaoqJz6E/HZ5IRdab
Mh1YORhTN541r5yEYCi28wGomsvqCvjPeQvRpqteR982U81GJTZaBoD3mv+nZDsK
KzjCl8Q1+E/BrVTzdwhPY/UQxXLTVao2f4h1OLSgX0DC2+wOimrlFowVeRf/dL38
L0sJFHFXB9M1rGi9Fxz+0tgDExbmzzVbewkcXtkOmTcVEthCzDCFzF1Cm/gSKiiF
0aZbvarcmRQyhgtq3vBBxMbFNBTrFJWi+ybRiGzACMzR+EBFVJSn2Whoz1na9lDV
+mlaQkdze5vbqw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:51 2025 by rpki-client