Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: 0BCKyAmVBq8bgwulWXjZX9c6Qw8/Ngurmi7GW97zzQQ=
Subject key identifier: 6F:AE:99:20:A3:B3:3D:64:64:43:66:AF:E6:AC:88:C6:A7:15:AD:EA
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 0198D5BB86CAA4C47540D23FD4DFD76F9DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1622
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: iZNdH2uygC5lJgxGaj8MMvlUB4scOW2lwNxK/LrtxI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:86:ca:a4:c4:75:40:d2:3f:d4:df:d7:6f:9d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=6fae9920a3b33d64644366afe6ac88c6a715adea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:a6:83:10:bf:7e:aa:71:62:65:e4:73:66:
0a:49:4b:52:63:a3:39:4c:e1:6e:f6:d2:86:e8:10:
c6:84:a8:46:d6:1b:5c:bc:37:10:d7:5a:1f:ce:f6:
ce:54:5c:6e:18:f6:0d:78:92:85:a8:62:b5:8c:e7:
28:01:f9:00:e9:01:9f:51:b5:83:02:9d:0d:3d:e4:
57:20:e3:7d:78:1b:b4:eb:65:25:d5:c4:32:d1:b2:
b4:4e:fd:af:37:ad:e3:9a:99:ca:5d:c2:83:77:49:
83:61:5b:7c:6a:fc:e1:d0:0f:26:f0:e9:c1:17:26:
4e:ad:0d:ae:ce:a8:52:c4:e4:2d:e0:78:6d:0b:0c:
e0:08:bf:44:67:a9:e3:a9:0c:02:55:ec:8d:2d:f6:
cf:ec:d0:8d:f2:26:40:0e:69:f3:19:29:76:4f:02:
c0:89:91:5a:2e:e7:49:83:6f:0a:8f:b4:d0:33:5c:
6a:60:e2:6f:44:f0:10:c0:18:f7:3a:1e:7b:7a:dd:
02:a8:1c:cf:54:1b:aa:af:5d:62:76:e0:f0:11:8a:
9f:55:68:33:09:23:4d:3a:e3:40:e4:cf:a2:66:72:
45:bd:a8:32:e7:ee:5d:c0:ef:78:aa:25:10:d9:2c:
c3:ef:31:fa:49:9c:47:7e:ba:00:c3:94:b7:bb:f9:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AE:99:20:A3:B3:3D:64:64:43:66:AF:E6:AC:88:C6:A7:15:AD:EA
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0f:95:bd:a9:1c:24:ee:6d:dc:85:42:18:d3:02:3c:07:28:
38:6f:91:8f:b0:33:ce:76:fe:da:93:58:66:ce:31:1f:d8:b1:
ef:77:4c:42:e2:c8:d5:2c:78:6d:d9:05:2b:af:32:3b:37:96:
5b:1e:c2:89:cf:17:fa:e8:89:6a:bc:38:25:de:72:2a:46:40:
32:3a:19:b9:b6:da:b6:ac:7c:0c:87:e9:5c:3e:c2:3e:e9:9a:
b2:d6:de:48:c3:91:93:79:c1:db:23:31:30:b5:88:99:0d:dd:
a4:1c:78:d4:2b:ae:21:45:1a:f8:84:f9:94:89:2d:3b:d8:3b:
75:60:dc:76:02:ed:56:85:f1:62:a6:a9:02:c4:c9:19:fc:33:
86:ef:02:df:a4:bb:f3:5c:6c:fe:09:d9:67:ee:1a:d1:6b:d5:
38:61:99:40:bc:88:d4:03:36:1f:3c:80:20:c9:05:4f:f0:9b:
a1:7e:9c:d9:9d:c7:3c:a4:a1:4f:c3:c2:41:81:7e:43:a8:a1:
cd:49:9f:b9:e2:ce:a8:af:43:5d:5e:40:5e:1b:17:6c:0b:f0:
18:c4:38:98:dd:00:0f:e7:7e:69:c2:1f:f9:54:82:e2:37:18:
44:5e:dc:ce:48:a8:bf:ae:2b:d7:18:c4:79:95:2d:e7:21:1a:
38:4d:92:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4bKpMR1QNI/1N/Xb52yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2
MGFjN2UwHhcNMjUwODIzMDcwMTMzWhcNMjUwODI0MDcwMTMzWjAzMTEwLwYDVQQD
Eyg2ZmFlOTkyMGEzYjMzZDY0NjQ0MzY2YWZlNmFjODhjNmE3MTVhZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8+mgxC/fqpxYmXkc2YKSUtSY6M5
TOFu9tKG6BDGhKhG1htcvDcQ11ofzvbOVFxuGPYNeJKFqGK1jOcoAfkA6QGfUbWD
Ap0NPeRXION9eBu062Ul1cQy0bK0Tv2vN63jmpnKXcKDd0mDYVt8avzh0A8m8OnB
FyZOrQ2uzqhSxOQt4HhtCwzgCL9EZ6njqQwCVeyNLfbP7NCN8iZADmnzGSl2TwLA
iZFaLudJg28Kj7TQM1xqYOJvRPAQwBj3Oh57et0CqBzPVBuqr11iduDwEYqfVWgz
CSNNOuNA5M+iZnJFvagy5+5dwO94qiUQ2SzD7zH6SZxHfroAw5S3u/meoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+umSCjsz1kZENmr+asiManFa3qMB8GA1UdIwQY
MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct
MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm
LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFg+Vvakc
JO5t3IVCGNMCPAcoOG+Rj7Azznb+2pNYZs4xH9ix73dMQuLI1Sx4bdkFK68yOzeW
Wx7Cic8X+uiJarw4Jd5yKkZAMjoZubbatqx8DIfpXD7CPumastbeSMORk3nB2yMx
MLWImQ3dpBx41CuuIUUa+IT5lIktO9g7dWDcdgLtVoXxYqapAsTJGfwzhu8C36S7
81xs/gnZZ+4a0WvVOGGZQLyI1AM2HzyAIMkFT/CboX6c2Z3HPKShT8PCQYF+Q6ih
zUmfueLOqK9DXV5AXhsXbAvwGMQ4mN0AD+d+acIf+VSC4jcYRF7czkiov64r1xjE
eZUt5yEaOE2SYg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:35 2025 by rpki-client