Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: 8Phb2P3on2K5ey7tWWGR5qFMB8STLyXqKB7KPwAWJTs=
Subject key identifier: D5:C3:DF:40:0E:C9:25:6A:83:69:FE:7E:67:85:14:67:BF:F5:2F:8E
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 0198D7A96E6CE01507D860D7DCD51ABD3046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 07AF
Signing time: Sat 23 Aug 2025 16:01:01 +0000
Manifest this update: Sat 23 Aug 2025 16:01:01 +0000
Manifest next update: Sun 24 Aug 2025 16:01:01 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: aA5MGcTxf3alkgClcQNjC3oOX5e1j6M/PQRn36lnOwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:6e:6c:e0:15:07:d8:60:d7:dc:d5:1a:bd:30:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Aug 23 16:01:01 2025 GMT
Not After : Aug 24 16:01:01 2025 GMT
Subject: CN=d5c3df400ec9256a8369fe7e67851467bff52f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:10:18:43:46:88:5f:c9:23:fe:76:1c:9a:
79:95:b2:2e:68:90:23:c6:67:e7:62:76:96:46:28:
62:2c:a9:ee:63:c1:17:2f:60:2b:0a:56:47:30:42:
5a:b2:55:7a:45:0a:99:b3:ef:d8:c7:56:d1:56:a1:
9a:ea:62:7b:b4:55:1c:c4:ce:5f:e1:52:d2:87:71:
60:42:1b:cb:a2:64:ed:be:94:44:2d:99:8d:6f:fe:
c5:5a:f4:c7:a5:00:5b:e6:ae:24:a4:c2:41:90:fc:
18:a6:fa:9c:9f:dd:9c:75:9e:41:e8:68:4d:a7:5b:
3b:62:da:3b:09:03:e6:36:67:12:40:a9:57:88:47:
7a:50:a8:06:74:52:01:bc:76:b6:1e:40:47:da:b8:
64:dd:c8:23:36:c6:57:98:f3:f2:c5:ff:9c:42:fa:
ad:92:ad:25:e7:fd:d6:52:40:f9:4d:1f:cd:95:9d:
90:ee:aa:d7:ad:56:8b:c1:c7:67:d6:f4:1a:67:30:
fe:9e:10:48:6a:61:31:94:b5:44:c1:fa:06:9e:79:
e8:1b:a2:75:01:40:b2:67:86:ea:18:d7:00:56:b6:
61:57:49:15:5e:a3:74:09:f5:8c:68:f0:25:33:68:
9c:8d:c6:58:44:99:20:29:7c:63:a4:74:f5:23:cf:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C3:DF:40:0E:C9:25:6A:83:69:FE:7E:67:85:14:67:BF:F5:2F:8E
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:64:1d:69:18:39:a8:fe:76:63:91:37:23:11:87:48:bd:6b:
d1:7d:1c:ec:43:3e:67:14:23:18:b1:f2:3f:32:85:3d:a1:3b:
c9:84:96:46:81:eb:64:01:61:bf:74:93:56:ff:b7:37:e7:f9:
2c:f7:bf:36:56:20:39:34:95:5e:90:90:66:9c:dc:3a:a1:4b:
49:cb:f2:f0:f7:3a:89:99:cc:26:f8:41:d8:f3:30:a1:26:99:
eb:b8:7e:2b:63:2d:ab:38:38:71:aa:0c:97:1b:1e:f6:7c:61:
be:ce:bd:fd:21:3f:a5:0f:99:20:57:77:25:93:ad:d9:17:85:
15:40:c8:17:43:4f:b3:05:1c:97:3a:87:74:72:4f:91:b6:e9:
e0:62:b4:b4:12:a3:48:ff:d6:01:62:c9:9c:59:d6:26:09:06:
0a:5d:46:10:1a:04:00:90:2f:15:88:02:a2:9d:58:de:8d:f8:
26:69:21:a4:88:3b:55:3c:ab:8b:3f:4c:ba:d5:70:fe:91:1a:
7f:bd:db:70:1c:d7:02:fb:cb:06:50:a6:8f:da:77:7d:1b:7c:
e0:57:ce:1b:85:af:20:71:9d:57:52:e8:e9:a5:70:a2:53:12:
b2:16:21:91:ba:7a:de:e9:ee:33:5c:ab:24:e3:7e:94:2e:9b:
f1:c4:bc:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqW5s4BUH2GDX3NUavTBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OGQ1OGM4MDdjOTQ5ZGIyYzFmNWYyNzNmMWVmYzRkZjFh
NWM1NTMwHhcNMjUwODIzMTYwMTAxWhcNMjUwODI0MTYwMTAxWjAzMTEwLwYDVQQD
EyhkNWMzZGY0MDBlYzkyNTZhODM2OWZlN2U2Nzg1MTQ2N2JmZjUyZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjygQGENGiF/JI/52HJp5lbIuaJAj
xmfnYnaWRihiLKnuY8EXL2ArClZHMEJaslV6RQqZs+/Yx1bRVqGa6mJ7tFUcxM5f
4VLSh3FgQhvLomTtvpRELZmNb/7FWvTHpQBb5q4kpMJBkPwYpvqcn92cdZ5B6GhN
p1s7Yto7CQPmNmcSQKlXiEd6UKgGdFIBvHa2HkBH2rhk3cgjNsZXmPPyxf+cQvqt
kq0l5/3WUkD5TR/NlZ2Q7qrXrVaLwcdn1vQaZzD+nhBIamExlLVEwfoGnnnoG6J1
AUCyZ4bqGNcAVrZhV0kVXqN0CfWMaPAlM2icjcZYRJkgKXxjpHT1I88uAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXD30AOySVqg2n+fmeFFGe/9S+OMB8GA1UdIwQY
MBaAFKiNWMgHyUnbLB9fJz8e/E3xpcVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYt
NmMyNGIwMmEwMjJkLzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYtNmMyNGIwMmEwMjJk
LzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGQdaRg5
qP52Y5E3IxGHSL1r0X0c7EM+ZxQjGLHyPzKFPaE7yYSWRoHrZAFhv3STVv+3N+f5
LPe/NlYgOTSVXpCQZpzcOqFLScvy8Pc6iZnMJvhB2PMwoSaZ67h+K2Mtqzg4caoM
lxse9nxhvs69/SE/pQ+ZIFd3JZOt2ReFFUDIF0NPswUclzqHdHJPkbbp4GK0tBKj
SP/WAWLJnFnWJgkGCl1GEBoEAJAvFYgCop1Y3o34JmkhpIg7VTyriz9MutVw/pEa
f73bcBzXAvvLBlCmj9p3fRt84FfOG4WvIHGdV1Lo6aVwolMSshYhkbp63unuM1yr
JON+lC6b8cS8bg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:47:13 2025 by rpki-client