Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier: yg+aXE169tIkXc66CeQxeDy9DPm9aEJyIpP+Ke5NNh4=
Subject key identifier: D8:FC:BA:92:40:A0:9F:9B:4C:E2:D6:C0:BB:CD:B8:F3:F0:CF:0A:66
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial: 0198D84FF28C9D446C83C0B58DAC04F81A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number: 03DE
Signing time: Sat 23 Aug 2025 19:02:54 +0000
Manifest this update: Sat 23 Aug 2025 19:02:54 +0000
Manifest next update: Sun 24 Aug 2025 19:02:54 +0000
Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: ozpKcHZ6AiOnJueW/fCHFP2rJnx29mKAjLPisALugrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:f2:8c:9d:44:6c:83:c0:b5:8d:ac:04:f8:1a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Validity
Not Before: Aug 23 19:02:54 2025 GMT
Not After : Aug 24 19:02:54 2025 GMT
Subject: CN=d8fcba9240a09f9b4ce2d6c0bbcdb8f3f0cf0a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:d7:af:59:bd:5f:02:5a:f8:d4:ab:d5:97:
c5:35:00:c9:0a:db:4a:a3:34:9b:23:57:56:e8:e1:
b0:cd:41:47:fc:ac:a0:79:7d:5b:35:ab:5c:27:9f:
cb:56:b8:e5:c5:0f:dd:0f:d0:af:20:7f:96:3e:20:
cc:15:ec:b8:f9:91:68:b8:c2:74:7e:6b:a9:cd:d3:
c1:e6:0d:55:02:d1:a0:92:89:b6:51:94:3b:ff:25:
25:c9:71:62:a3:7c:ac:08:5c:bf:e1:c9:62:7c:a5:
b1:32:5e:f4:90:77:db:16:a5:a6:fb:0c:b3:73:23:
fa:a2:b7:7e:34:d9:d6:7c:68:c8:d0:9b:38:6f:83:
7b:83:f5:59:2e:61:ac:db:1d:61:38:a1:fe:d6:92:
ef:16:cd:e0:2f:f0:4f:d8:1c:77:93:03:43:3e:cd:
a7:69:54:18:e5:23:8c:aa:e2:77:1a:81:19:74:74:
35:61:61:c4:94:74:8b:d8:ab:36:5e:26:c5:5b:0c:
80:a6:4d:de:2d:e8:5f:e4:dc:85:eb:ab:bb:0d:f9:
70:1b:94:c4:06:b8:b4:40:44:22:c2:b7:57:f5:34:
6f:df:b3:d9:94:62:93:d3:89:55:c3:b1:49:43:cd:
4c:c4:08:5d:70:68:6d:67:b0:ef:fa:74:b3:13:09:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FC:BA:92:40:A0:9F:9B:4C:E2:D6:C0:BB:CD:B8:F3:F0:CF:0A:66
X509v3 Authority Key Identifier:
keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c0:31:9d:f5:08:7d:9a:b7:bd:b8:bc:07:fd:a8:e4:ea:22:
67:f0:33:04:18:7a:ae:f2:9b:cd:32:3f:f7:3e:1c:52:0e:29:
55:28:ed:06:3a:d0:28:43:ae:0a:4d:98:34:b1:24:d2:41:9a:
c4:c2:05:77:b9:89:1d:01:33:d0:e8:df:19:fa:a4:d2:77:f0:
4f:39:05:ef:d2:74:83:a7:97:40:80:97:79:e7:c5:37:70:9a:
99:db:2f:85:03:f4:e3:ff:43:14:14:f8:8c:cc:c1:26:f0:96:
62:6d:75:ba:04:87:e4:e6:14:86:80:6b:73:68:d3:39:2c:f8:
10:b2:59:1d:1a:4b:7e:7f:0e:2b:67:59:16:3c:6e:c2:f5:77:
6d:a8:fc:6f:f2:93:0d:3d:6a:1a:dd:12:d8:5b:fd:47:e7:ab:
15:3f:90:d5:f9:83:ff:14:16:90:69:94:39:c3:49:04:ae:35:
a3:0e:6b:f8:16:1d:37:b8:fe:ff:98:b5:d6:5a:5e:44:d2:99:
25:27:1d:fd:97:b8:1d:ab:2a:cb:f7:01:51:73:48:67:c8:93:
97:8d:f9:e1:36:40:f4:3b:40:44:1a:c6:a4:d9:66:75:80:ef:
dd:ca:7f:f9:22:e0:81:40:99:91:de:0c:6d:01:72:c5:c6:ac:
47:df:27:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT/KMnURsg8C1jawE+BqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWY0YzBhMzcyZDAxNDU1NWY3ZDRkN2M4OWNmOTk2ZjA1
MTQyZjUwHhcNMjUwODIzMTkwMjU0WhcNMjUwODI0MTkwMjU0WjAzMTEwLwYDVQQD
EyhkOGZjYmE5MjQwYTA5ZjliNGNlMmQ2YzBiYmNkYjhmM2YwY2YwYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXLXr1m9XwJa+NSr1ZfFNQDJCttK
ozSbI1dW6OGwzUFH/KygeX1bNatcJ5/LVrjlxQ/dD9CvIH+WPiDMFey4+ZFouMJ0
fmupzdPB5g1VAtGgkom2UZQ7/yUlyXFio3ysCFy/4clifKWxMl70kHfbFqWm+wyz
cyP6ord+NNnWfGjI0Js4b4N7g/VZLmGs2x1hOKH+1pLvFs3gL/BP2Bx3kwNDPs2n
aVQY5SOMquJ3GoEZdHQ1YWHElHSL2Ks2XibFWwyApk3eLehf5NyF66u7DflwG5TE
Bri0QEQiwrdX9TRv37PZlGKT04lVw7FJQ81MxAhdcGhtZ7Dv+nSzEwmUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj8upJAoJ+bTOLWwLvNuPPwzwpmMB8GA1UdIwQY
MBaAFKivTAo3LQFFVffU18ic+ZbwUUL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84YjJiYmQtYWYxMi00NmFlLWE1MGYt
ZGFiMzhmZDNjNzg2LzEvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84YjJiYmQtYWYxMi00NmFlLWE1MGYtZGFiMzhmZDNjNzg2
LzEvcUs5TUNqY3RBVVZWOTlUWHlKejVsdkJSUXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8AxnfUI
fZq3vbi8B/2o5OoiZ/AzBBh6rvKbzTI/9z4cUg4pVSjtBjrQKEOuCk2YNLEk0kGa
xMIFd7mJHQEz0OjfGfqk0nfwTzkF79J0g6eXQICXeefFN3CamdsvhQP04/9DFBT4
jMzBJvCWYm11ugSH5OYUhoBrc2jTOSz4ELJZHRpLfn8OK2dZFjxuwvV3baj8b/KT
DT1qGt0S2Fv9R+erFT+Q1fmD/xQWkGmUOcNJBK41ow5r+BYdN7j+/5i11lpeRNKZ
JScd/Ze4Hasqy/cBUXNIZ8iTl4354TZA9DtARBrGpNlmdYDv3cp/+SLggUCZkd4M
bQFyxcasR98n0A==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:00 2025 by rpki-client