Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: 80v/quxe6ISiLHeRLvOEb7eBsyuH9HCAZjqn2mOCxa4=
Subject key identifier: 37:CE:C3:44:CA:79:1A:29:F2:BC:6F:8B:18:8A:0D:75:6C:D0:67:6F
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 0198D884C12673EE56314F0F9CE5A8DF419C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 20:00:35 +0000
Manifest this update: Sat 23 Aug 2025 20:00:35 +0000
Manifest next update: Sun 24 Aug 2025 20:00:35 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: PYSEecfrg2hzcTDi/JNNLc2VLzN750SIdR+0DtxjwRg=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:c1:26:73:ee:56:31:4f:0f:9c:e5:a8:df:41:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Aug 23 20:00:35 2025 GMT
Not After : Aug 24 20:00:35 2025 GMT
Subject: CN=37cec344ca791a29f2bc6f8b188a0d756cd0676f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:3b:22:d9:50:d2:9e:64:b9:62:de:fa:0e:
bf:75:c1:16:1c:47:32:21:e9:ea:bb:74:35:a3:49:
54:e9:27:cc:48:2f:1e:53:cf:19:f5:96:0f:a5:77:
dc:76:cd:4c:28:37:ae:91:2a:95:1a:83:97:4c:ce:
06:fe:fe:78:c3:f3:67:8c:69:a9:ce:df:15:45:93:
46:b4:be:ab:e7:66:ce:62:cf:f0:ac:38:3b:ed:0d:
69:2e:f2:ec:8a:5b:00:d2:b0:96:81:39:97:63:a5:
42:d1:37:f8:31:b1:73:75:13:00:fe:d1:e6:2b:94:
35:bc:f2:e3:b5:cc:48:fc:78:54:e9:32:dc:cf:64:
2d:7d:b6:15:b7:c5:df:9d:7d:17:c6:f1:82:00:19:
7d:2c:26:99:7f:f4:d2:dc:3e:fa:6a:53:71:7c:90:
be:28:27:c0:c4:f3:24:c9:43:23:9c:a0:bd:64:fd:
b1:38:ee:b9:ae:7b:65:de:0d:5f:71:3b:f4:8b:37:
fa:dc:ae:1b:f2:79:05:92:ba:d0:77:38:e9:07:60:
dd:b6:16:ed:d3:1b:7c:77:cf:50:bb:3f:ea:9e:82:
92:c3:ca:4b:e6:bb:24:73:09:18:67:31:fb:2b:ed:
39:f3:5c:0e:ef:d8:b6:0a:2c:d6:7d:1b:37:b5:80:
f5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CE:C3:44:CA:79:1A:29:F2:BC:6F:8B:18:8A:0D:75:6C:D0:67:6F
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:46:c7:61:d4:06:93:2c:3d:fc:b5:9a:cf:c5:eb:40:95:c5:
55:12:bc:c5:f5:25:9b:58:b9:9f:63:12:f1:bd:ba:b8:eb:2a:
e7:f7:85:53:74:d0:5b:93:25:ba:25:a4:5b:af:8f:61:97:a2:
4b:5d:73:9e:d9:34:77:be:e1:7d:0a:57:3b:95:d5:33:fc:0b:
bd:fe:89:9f:58:92:50:56:dd:58:82:58:ac:42:d2:da:f5:76:
3b:8b:f5:13:5e:e3:9e:35:30:02:ed:84:46:8b:db:8e:7a:1c:
75:5b:3b:8b:7a:2f:29:de:b2:a7:f1:d2:0a:ce:09:d6:9a:15:
33:bc:60:c7:5f:27:8e:44:dc:52:bf:03:92:a2:90:cb:8d:89:
fc:42:0e:6c:2c:c4:75:ee:0c:15:07:ab:c8:d5:57:b1:cc:ee:
52:78:31:e9:36:29:f1:6e:c7:78:3f:bd:62:1f:c3:99:af:d0:
0a:44:a4:11:68:c9:45:c8:17:31:2d:76:f3:ab:f6:ac:0e:69:
1b:82:8d:b0:d5:8d:07:b7:58:71:62:69:4c:2e:56:55:2a:f9:
86:7d:0e:59:a5:88:10:82:a7:b5:77:34:46:eb:55:4f:b8:77:
3b:47:7a:28:53:26:84:6b:aa:49:2b:30:98:a6:78:e0:f1:49:
05:39:a0:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhMEmc+5WMU8PnOWo30GcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzA1YzZlNTgyOTRhZDBlZDUxNjJmYTg0MjlkYTUxNjU2
NTM5MzAwHhcNMjUwODIzMjAwMDM1WhcNMjUwODI0MjAwMDM1WjAzMTEwLwYDVQQD
EygzN2NlYzM0NGNhNzkxYTI5ZjJiYzZmOGIxODhhMGQ3NTZjZDA2NzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMA7ItlQ0p5kuWLe+g6/dcEWHEcy
Ienqu3Q1o0lU6SfMSC8eU88Z9ZYPpXfcds1MKDeukSqVGoOXTM4G/v54w/NnjGmp
zt8VRZNGtL6r52bOYs/wrDg77Q1pLvLsilsA0rCWgTmXY6VC0Tf4MbFzdRMA/tHm
K5Q1vPLjtcxI/HhU6TLcz2QtfbYVt8XfnX0XxvGCABl9LCaZf/TS3D76alNxfJC+
KCfAxPMkyUMjnKC9ZP2xOO65rntl3g1fcTv0izf63K4b8nkFkrrQdzjpB2Ddthbt
0xt8d89Quz/qnoKSw8pL5rskcwkYZzH7K+0581wO79i2CizWfRs3tYD1PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfOw0TKeRop8rxvixiKDXVs0GdvMB8GA1UdIwQY
MBaAFKgwXG5YKUrQ7VFi+oQp2lFlZTkwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzIt
MDJkYjhiNzdkMDg3LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzItMDJkYjhiNzdkMDg3
LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUbHYdQG
kyw9/LWaz8XrQJXFVRK8xfUlm1i5n2MS8b26uOsq5/eFU3TQW5MluiWkW6+PYZei
S11zntk0d77hfQpXO5XVM/wLvf6Jn1iSUFbdWIJYrELS2vV2O4v1E17jnjUwAu2E
RovbjnocdVs7i3ovKd6yp/HSCs4J1poVM7xgx18njkTcUr8DkqKQy42J/EIObCzE
de4MFQeryNVXsczuUngx6TYp8W7HeD+9Yh/Dma/QCkSkEWjJRcgXMS1286v2rA5p
G4KNsNWNB7dYcWJpTC5WVSr5hn0OWaWIEIKntXc0RutVT7h3O0d6KFMmhGuqSSsw
mKZ44PFJBTmgwQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:50 2025 by rpki-client