Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: LCJve4FbcKHZqPscnuP0D++JTkU+xgO+Rprk4WhmIGA=
Subject key identifier: 2A:A9:1F:20:13:5A:45:2C:9E:A4:E5:C9:D3:FF:4A:F7:79:B9:D7:E1
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 0198D473D0E1019485ADC7FDEF91BF341CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 01:03:36 +0000
Manifest this update: Sat 23 Aug 2025 01:03:36 +0000
Manifest next update: Sun 24 Aug 2025 01:03:36 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: 9f5K3ptMFZE+csr7VOL4ZGNdnoEZDTY+gLvc1wTkbxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d0:e1:01:94:85:ad:c7:fd:ef:91:bf:34:1c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Aug 23 01:03:36 2025 GMT
Not After : Aug 24 01:03:36 2025 GMT
Subject: CN=2aa91f20135a452c9ea4e5c9d3ff4af779b9d7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:fb:ff:c6:84:60:c3:06:52:a4:c6:68:f8:
ab:2a:8e:99:70:0d:83:ad:af:fa:10:c0:a7:5a:58:
0c:0a:91:7e:c9:64:d2:0e:e5:44:27:45:6c:18:4d:
d2:23:93:ad:0f:ff:62:c8:61:5f:fe:68:71:f0:9d:
b5:52:2b:ec:47:b5:84:18:2e:76:42:88:0d:21:f0:
9f:47:0f:33:de:c2:a1:a3:fe:53:25:9d:c1:7f:dc:
c5:5c:58:9d:c8:db:7e:64:87:d2:76:74:a7:7e:cc:
ac:14:d1:ac:37:f7:d8:59:3d:cc:28:a5:16:a8:b1:
37:7a:72:d9:ff:63:54:bb:a3:7b:ef:b2:f8:af:14:
f2:14:c3:31:7c:c4:0d:27:3d:30:ff:25:68:60:f0:
b4:e3:ad:e9:30:84:a2:58:32:de:0c:86:da:83:e8:
bf:5c:85:db:a5:bb:99:1b:3d:43:59:ad:7f:48:68:
2b:e3:bd:a0:b6:f1:6f:80:83:11:58:3c:90:40:11:
a2:0f:4b:64:2d:b4:25:52:da:bc:0a:fa:a2:a2:4d:
d4:da:5d:04:6f:35:42:05:52:7d:9a:1d:8f:41:ab:
f7:98:ee:b7:56:cc:6d:e8:3b:77:d6:e5:0b:86:b8:
ba:ad:5a:57:2c:c7:bc:66:50:27:73:a3:47:c8:24:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A9:1F:20:13:5A:45:2C:9E:A4:E5:C9:D3:FF:4A:F7:79:B9:D7:E1
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:86:00:31:d1:d5:6a:2a:58:52:e6:1a:43:8d:9a:fa:31:68:
49:29:fa:9e:6f:05:5a:95:cb:22:4b:19:5e:ff:b3:8c:0e:85:
53:17:06:ed:e2:60:b1:2b:25:e7:22:18:58:e9:75:57:10:bd:
fa:0e:7f:b3:a9:66:dd:14:6f:61:d9:e9:14:5e:0f:21:2f:6b:
ad:3e:a1:d7:1e:5d:fa:3e:a9:71:84:e2:cb:b0:01:87:85:7f:
23:f3:2f:9b:be:2f:a5:29:53:ef:9f:c5:13:20:e8:77:83:62:
1c:e3:a5:0e:8d:f9:0d:97:24:26:0e:0f:e0:3a:12:74:95:74:
8a:04:6f:f6:67:81:58:66:47:b1:9b:9c:58:4f:d8:5c:09:17:
8e:cd:b5:0a:72:4d:26:7b:d0:43:a1:87:a2:0b:d6:f3:54:5f:
3c:ce:ee:36:6a:77:c7:85:61:db:c6:b3:06:8b:d5:78:09:d4:
83:af:30:01:83:e8:6e:ab:cd:68:3d:db:b5:16:a2:72:72:43:
df:bb:3c:1f:84:e3:d2:09:33:04:04:17:6f:1e:f3:cc:47:36:
4a:d1:de:70:7b:4d:bc:c4:92:f7:b8:e3:af:67:cd:2f:3e:04:
77:fc:0a:dc:89:bf:8d:0a:fc:f2:7d:20:a3:44:f7:40:6f:93:
2a:89:e7:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9DhAZSFrcf975G/NBy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NWQ0ZDBmY2M1ODYxYTM0NzE2ZjEwYTBhNDQ5N2FhNDI4
MWFiM2EwHhcNMjUwODIzMDEwMzM2WhcNMjUwODI0MDEwMzM2WjAzMTEwLwYDVQQD
EygyYWE5MWYyMDEzNWE0NTJjOWVhNGU1YzlkM2ZmNGFmNzc5YjlkN2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK77/8aEYMMGUqTGaPirKo6ZcA2D
ra/6EMCnWlgMCpF+yWTSDuVEJ0VsGE3SI5OtD/9iyGFf/mhx8J21UivsR7WEGC52
QogNIfCfRw8z3sKho/5TJZ3Bf9zFXFidyNt+ZIfSdnSnfsysFNGsN/fYWT3MKKUW
qLE3enLZ/2NUu6N777L4rxTyFMMxfMQNJz0w/yVoYPC0463pMISiWDLeDIbag+i/
XIXbpbuZGz1DWa1/SGgr472gtvFvgIMRWDyQQBGiD0tkLbQlUtq8Cvqiok3U2l0E
bzVCBVJ9mh2PQav3mO63Vsxt6Dt31uULhri6rVpXLMe8ZlAnc6NHyCQNUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqpHyATWkUsnqTlydP/Svd5udfhMB8GA1UdIwQY
MBaAFKhdTQ/MWGGjRxbxCgpEl6pCgas6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMt
MDg4NTc4NWJkMTJmLzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lZjYyODMtMGYzYy00NzM4LWI4YWMtMDg4NTc4NWJkMTJm
LzEvcUYxTkQ4eFlZYU5IRnZFS0NrU1hxa0tCcXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIYAMdHV
aipYUuYaQ42a+jFoSSn6nm8FWpXLIksZXv+zjA6FUxcG7eJgsSsl5yIYWOl1VxC9
+g5/s6lm3RRvYdnpFF4PIS9rrT6h1x5d+j6pcYTiy7ABh4V/I/Mvm74vpSlT75/F
EyDod4NiHOOlDo35DZckJg4P4DoSdJV0igRv9meBWGZHsZucWE/YXAkXjs21CnJN
JnvQQ6GHogvW81RfPM7uNmp3x4Vh28azBovVeAnUg68wAYPobqvNaD3btRaicnJD
37s8H4Tj0gkzBAQXbx7zzEc2StHecHtNvMSS97jjr2fNLz4Ed/wK3Im/jQr88n0g
o0T3QG+TKonnyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:58 2025 by rpki-client