Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: mTb1fldKYUCiUzuuu94KUqCQ5Y0NwyLerSaGGbF7FgI=
Subject key identifier: 4D:0A:63:02:CD:03:1D:FB:8E:64:67:F3:7D:2A:5E:30:B1:DC:8F:AB
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 0198D73BA252E9A2720C677B011104A928D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 131D
Signing time: Sat 23 Aug 2025 14:01:06 +0000
Manifest this update: Sat 23 Aug 2025 14:01:06 +0000
Manifest next update: Sun 24 Aug 2025 14:01:06 +0000
Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=)
2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: ws8+49kqwHBQ2UyCvh3QW+Y/lWtWzKBnMmw0VT9uFIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:a2:52:e9:a2:72:0c:67:7b:01:11:04:a9:28:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Aug 23 14:01:06 2025 GMT
Not After : Aug 24 14:01:06 2025 GMT
Subject: CN=4d0a6302cd031dfb8e6467f37d2a5e30b1dc8fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:06:8d:b3:04:c6:b1:0d:2d:d1:8b:d6:d3:
00:10:c4:5b:9a:9e:d9:ba:4f:b8:e7:6b:35:6c:07:
c2:5a:c2:66:a5:30:20:0f:bd:01:47:55:f0:53:4c:
d7:ed:0d:3d:17:a0:8d:26:15:1e:7b:14:dd:f3:d7:
d7:f0:4c:ac:b0:71:29:af:4c:c1:0d:9e:03:6c:80:
36:bf:a6:51:88:69:3b:ec:c9:86:09:78:07:6b:9f:
f4:d2:76:c7:7c:bd:62:c8:fb:13:ee:92:c5:01:0e:
4f:0c:ca:43:ad:11:35:40:b5:ff:f0:72:67:7d:52:
0f:c6:cc:d3:5b:ad:1e:3e:de:e7:35:7b:0c:5b:9e:
13:27:a8:ea:42:36:9d:1e:9e:9d:67:0f:07:e3:98:
0e:c5:e2:1b:38:f8:a1:7b:d6:df:42:5c:59:54:bd:
83:53:aa:2f:41:d5:dd:a6:6b:36:b8:c4:db:60:71:
88:de:eb:b6:85:cc:41:f7:81:24:3f:74:cb:0b:19:
51:87:b9:57:de:6f:2b:ac:fe:7e:80:49:11:4b:ea:
57:fe:ec:45:83:e4:a1:fb:d2:b1:e7:d3:2c:c7:f9:
51:9a:ff:80:de:81:e9:99:6a:36:b1:d6:77:93:30:
59:b1:da:8e:47:12:f9:43:b2:6d:80:8c:08:44:0c:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:63:02:CD:03:1D:FB:8E:64:67:F3:7D:2A:5E:30:B1:DC:8F:AB
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2d:22:9b:17:fd:9f:6e:06:07:12:47:5c:55:ed:dc:ad:be:
2e:6c:d8:e1:b8:4e:0c:e0:c0:9c:1d:92:37:8b:f5:49:07:b5:
3d:ef:d9:8e:fb:03:74:d6:71:e6:5d:c3:46:ac:7d:bc:9c:5a:
52:29:64:c8:f1:52:fd:6a:1a:74:20:29:68:a7:6f:e7:4f:ad:
33:a3:0e:e6:46:e2:a4:2c:ff:aa:a2:1a:31:66:ff:a4:ac:ff:
cf:cf:85:04:0e:64:ea:a2:22:24:6f:ee:e4:47:b9:e6:ed:5a:
db:6b:58:8a:83:db:5b:db:d5:7f:80:56:20:66:bc:2e:57:2d:
22:3a:b8:df:9b:59:e0:0e:11:e6:df:4a:f7:88:f9:4f:58:79:
c4:27:2c:f3:f5:e6:1e:07:5f:9e:5b:f1:8d:e7:c3:ce:aa:5d:
8b:55:a3:52:11:32:c4:70:1a:8d:d2:8e:7e:fd:15:55:ad:20:
0c:4d:b2:30:0d:d1:3d:1f:ca:e7:33:c7:03:4d:d4:bb:be:cc:
bc:ac:bb:8f:2e:7b:c2:e2:93:ce:ef:c0:f6:cf:6b:cb:1c:b5:
74:50:84:ee:d6:27:c5:aa:2b:25:61:54:c7:a3:32:ff:41:cf:
6d:42:38:5f:a0:c1:aa:1d:18:80:f8:5e:f4:b1:78:ab:c0:81:
13:95:a9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO6JS6aJyDGd7AREEqSjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzcyYjk5OTkzYjA2MDhkMjc4MmFmNDVhMjJlYjkzYzdm
ZGE2M2IwHhcNMjUwODIzMTQwMTA2WhcNMjUwODI0MTQwMTA2WjAzMTEwLwYDVQQD
Eyg0ZDBhNjMwMmNkMDMxZGZiOGU2NDY3ZjM3ZDJhNWUzMGIxZGM4ZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRIGjbMExrENLdGL1tMAEMRbmp7Z
uk+452s1bAfCWsJmpTAgD70BR1XwU0zX7Q09F6CNJhUeexTd89fX8EyssHEpr0zB
DZ4DbIA2v6ZRiGk77MmGCXgHa5/00nbHfL1iyPsT7pLFAQ5PDMpDrRE1QLX/8HJn
fVIPxszTW60ePt7nNXsMW54TJ6jqQjadHp6dZw8H45gOxeIbOPihe9bfQlxZVL2D
U6ovQdXdpms2uMTbYHGI3uu2hcxB94EkP3TLCxlRh7lX3m8rrP5+gEkRS+pX/uxF
g+Sh+9Kx59Msx/lRmv+A3oHpmWo2sdZ3kzBZsdqORxL5Q7JtgIwIRAwGrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0KYwLNAx37jmRn830qXjCx3I+rMB8GA1UdIwQY
MBaAFEN3K5mZOwYI0ngq9Foi65PH/aY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMt
YTE2ZDk3YWZhNjQzLzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMtYTE2ZDk3YWZhNjQz
LzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjC0imxf9
n24GBxJHXFXt3K2+LmzY4bhODODAnB2SN4v1SQe1Pe/ZjvsDdNZx5l3DRqx9vJxa
UilkyPFS/WoadCApaKdv50+tM6MO5kbipCz/qqIaMWb/pKz/z8+FBA5k6qIiJG/u
5Ee55u1a22tYioPbW9vVf4BWIGa8LlctIjq435tZ4A4R5t9K94j5T1h5xCcs8/Xm
HgdfnlvxjefDzqpdi1WjUhEyxHAajdKOfv0VVa0gDE2yMA3RPR/K5zPHA03Uu77M
vKy7jy57wuKTzu/A9s9ryxy1dFCE7tYnxaorJWFUx6My/0HPbUI4X6DBqh0YgPhe
9LF4q8CBE5Wpxw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:15 2025 by rpki-client