Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: npbv0DUPzhZ1wt+TGD3ifuXVNV3HpKfPP4M9Z44GDYM=
Subject key identifier: 25:4C:5C:48:54:95:2F:C8:FC:18:4D:A7:BA:86:B4:31:48:D3:01:D9
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 0198D5F13730B5240F067A67FCA92D4F1300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0DD7
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: Bh0ayFxM97e1YYlRJqMFcS3m0Nzr4/+FGHVo35ZSD00=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:37:30:b5:24:0f:06:7a:67:fc:a9:2d:4f:13:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=254c5c4854952fc8fc184da7ba86b43148d301d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:27:af:7c:16:00:7a:8d:aa:cc:a5:56:88:
d9:7a:5e:3f:98:f0:11:fd:9a:25:be:40:a4:ba:84:
e5:f9:cb:57:96:34:31:57:5c:ed:27:25:87:87:0f:
f0:64:a3:d0:e2:d9:09:96:31:0f:b3:a9:09:82:11:
ff:8b:59:4b:7b:ed:49:20:2e:44:f0:67:71:11:be:
ab:ef:ef:52:af:3e:88:27:3b:4e:d0:ed:20:ca:63:
8c:a3:d3:52:07:49:0b:a0:49:20:be:d3:3e:fa:61:
d3:a8:dc:54:59:25:e3:b7:31:14:64:ee:87:f7:5c:
6c:b3:0b:5a:26:7f:fc:bc:7e:be:05:77:59:59:0a:
30:e9:b3:d1:db:c2:bb:f2:88:fa:e4:bc:14:83:d6:
4e:a2:13:6f:21:4d:16:c0:d2:b1:3e:5b:80:03:74:
6e:1d:bd:55:da:e3:85:05:61:1e:98:f2:d3:23:7e:
ca:25:8f:34:eb:55:e6:0d:03:5f:05:00:3e:9c:0a:
70:05:43:d7:79:3e:de:c0:3a:c5:d7:e2:b7:38:9a:
41:f3:28:c8:9d:fb:60:68:6c:b6:07:2c:66:b4:de:
ec:25:0c:cc:d3:3c:b3:89:f2:5d:c7:df:e9:ac:54:
51:d2:5e:6d:1c:46:16:1e:ce:49:15:9a:8b:c0:34:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:5C:48:54:95:2F:C8:FC:18:4D:A7:BA:86:B4:31:48:D3:01:D9
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4d:56:0a:d4:39:e2:c7:cd:0d:bb:08:30:a7:a6:bc:a1:87:
73:c0:9a:71:5c:e4:c1:71:ff:75:8a:13:75:33:35:01:8b:ae:
66:a4:ce:d7:4f:86:e1:7a:41:32:38:47:89:aa:5e:82:50:d7:
04:d3:3c:de:57:06:01:6f:c5:e8:1d:f4:c4:55:61:67:d1:f9:
d4:57:8d:7f:a0:bf:14:51:d7:1d:e2:7d:f2:7f:6b:cd:59:9b:
32:21:01:c0:01:ec:70:49:1d:6e:09:4a:e0:c1:ec:ab:bf:91:
cb:fc:3c:5f:00:ba:be:c6:52:8c:83:e4:70:e2:ea:dd:bd:50:
b0:f1:17:a7:dc:d7:14:bd:db:d9:52:cf:2f:5c:da:b3:f6:3e:
d3:ac:95:32:09:a0:23:3a:c4:14:79:a8:fc:e2:2a:c8:5d:fb:
b6:2d:dc:14:f8:02:6c:7d:7c:c6:10:a6:cc:de:db:ad:f6:5b:
9a:32:2b:a5:b5:0b:af:d3:59:21:8a:db:30:04:53:12:79:ad:
e3:66:01:65:dd:9c:02:e9:e4:cd:bf:50:32:c5:4e:5f:43:b1:
d2:ff:de:77:bc:db:12:bd:28:c4:34:e7:98:6a:c1:eb:b3:ec:
b8:bd:7c:12:63:96:74:48:43:ad:d4:39:62:cc:1f:9a:a5:0e:
ae:6f:29:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8TcwtSQPBnpn/KktTxMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw
OTMwMjcwHhcNMjUwODIzMDgwMDExWhcNMjUwODI0MDgwMDExWjAzMTEwLwYDVQQD
EygyNTRjNWM0ODU0OTUyZmM4ZmMxODRkYTdiYTg2YjQzMTQ4ZDMwMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ8nr3wWAHqNqsylVojZel4/mPAR
/ZolvkCkuoTl+ctXljQxV1ztJyWHhw/wZKPQ4tkJljEPs6kJghH/i1lLe+1JIC5E
8GdxEb6r7+9Srz6IJztO0O0gymOMo9NSB0kLoEkgvtM++mHTqNxUWSXjtzEUZO6H
91xsswtaJn/8vH6+BXdZWQow6bPR28K78oj65LwUg9ZOohNvIU0WwNKxPluAA3Ru
Hb1V2uOFBWEemPLTI37KJY8061XmDQNfBQA+nApwBUPXeT7ewDrF1+K3OJpB8yjI
nftgaGy2ByxmtN7sJQzM0zyzifJdx9/prFRR0l5tHEYWHs5JFZqLwDRaRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVMXEhUlS/I/BhNp7qGtDFI0wHZMB8GA1UdIwQY
MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt
NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0
LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM01WCtQ5
4sfNDbsIMKemvKGHc8CacVzkwXH/dYoTdTM1AYuuZqTO10+G4XpBMjhHiapeglDX
BNM83lcGAW/F6B30xFVhZ9H51FeNf6C/FFHXHeJ98n9rzVmbMiEBwAHscEkdbglK
4MHsq7+Ry/w8XwC6vsZSjIPkcOLq3b1QsPEXp9zXFL3b2VLPL1zas/Y+06yVMgmg
IzrEFHmo/OIqyF37ti3cFPgCbH18xhCmzN7brfZbmjIrpbULr9NZIYrbMARTEnmt
42YBZd2cAunkzb9QMsVOX0Ox0v/ed7zbEr0oxDTnmGrB67PsuL18EmOWdEhDrdQ5
YswfmqUOrm8p3g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:03 2025 by rpki-client