Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
File: qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json)
Hash identifier: zQnGUXaWRDynYD+bnNAetFsuz7r9PPBwjkCDJLb+PkY=
Subject key identifier: A1:D2:0B:AE:2F:E7:FE:5C:53:A3:BD:40:27:89:86:A4:BE:5E:45:91
Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
Certificate issuer: /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Certificate serial: 0198D4DFCCC887ADF288DF3C1B0B1CD495E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
Manifest number: 0502
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: dr0aQwlMd5wprYGuM-4A6wgZRyk.roa (hash: 5kfUYUIepAA22bF94//hZe6cokijIGlywb6OIAlIy1Y=)
2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: Y1BgBB27kbS+MzOoDzEZUnOwAWdZLtEfbzqOltAngWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cc:c8:87:ad:f2:88:df:3c:1b:0b:1c:d4:95:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=a1d20bae2fe7fe5c53a3bd40278986a4be5e4591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:88:3f:0b:8e:2b:91:3b:63:e5:f7:98:3c:
e6:45:bd:ed:1e:cf:ec:76:11:d6:9b:8e:39:4f:36:
70:21:91:9b:fa:c4:b1:33:ea:ae:70:1d:c6:c6:09:
3d:87:ef:9e:cb:17:79:77:3d:b0:8e:5b:30:25:a2:
8c:18:c8:ac:cb:de:50:dd:53:c9:84:c5:4e:ad:86:
fa:b3:48:4a:7c:66:22:18:57:b6:99:41:89:fd:94:
47:42:eb:a0:57:eb:93:de:f7:f2:56:b1:0d:98:8f:
5f:a2:43:2f:ec:18:9b:cb:a8:ec:07:da:e4:0b:42:
97:38:ed:36:2d:67:6a:cc:e1:26:bc:01:19:b3:7d:
38:97:9c:5a:ae:34:ef:b8:0d:98:7b:1e:d9:fb:51:
af:b0:cc:9c:c3:ad:5d:75:e2:13:b3:a7:4b:1e:fa:
29:ab:76:27:7c:60:08:a1:c9:0b:cf:a3:3e:93:78:
0a:62:a2:99:3b:12:cd:b6:6c:b1:4d:6d:94:04:a9:
fc:c2:43:c0:fd:b0:2d:2a:b9:9a:f6:a9:3a:5d:e6:
ad:d9:7c:2c:81:80:8a:04:d0:4e:e3:8f:75:0b:5f:
49:99:a9:4a:ed:20:dc:63:dc:0d:0e:90:a7:80:64:
64:1f:d1:04:96:b2:37:9a:47:a8:7d:c9:2f:3e:1e:
f6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:0B:AE:2F:E7:FE:5C:53:A3:BD:40:27:89:86:A4:BE:5E:45:91
X509v3 Authority Key Identifier:
keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cb:d3:1f:ff:2b:07:16:96:7c:97:ea:ec:e7:a9:fd:bb:0d:
8b:05:71:87:f5:4c:34:a7:8a:0a:91:2f:1f:f5:bd:2f:8d:42:
7a:9a:b3:ee:5d:b7:4a:1b:54:f4:b2:d3:e2:f4:61:64:08:29:
05:58:33:b5:9e:55:ba:bc:fd:40:5f:37:60:0f:94:24:fb:46:
67:1e:14:c1:8b:f9:a9:b2:fe:81:44:a3:a6:fc:10:a2:f8:9f:
c1:6c:f6:5d:ea:ad:09:5a:ea:33:2d:d9:e1:27:44:aa:40:cc:
de:ca:ec:c7:a0:41:38:07:24:0f:c9:85:9f:42:c1:b6:95:1a:
2f:72:f8:05:c8:05:a7:35:30:6c:aa:1a:e0:07:6b:f1:9d:d9:
29:96:49:ba:47:b3:e9:6e:0f:04:35:51:4d:ed:80:54:f0:27:
b4:b2:8a:1b:9a:70:71:b2:58:91:9e:be:51:ac:25:09:63:27:
39:a1:d4:53:92:2c:4a:e1:7f:8b:96:c0:ee:db:66:9e:fd:86:
49:f9:1b:a2:4f:31:74:1d:78:e8:97:fc:50:58:05:8e:f0:4c:
1e:ee:4c:30:f6:24:c3:aa:e6:cd:17:3c:95:66:bc:5a:3d:ce:
f7:ee:55:7d:62:2a:f0:c2:d3:93:a4:85:d3:6e:b4:e8:3f:6f:
66:7d:83:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU38zIh63yiN88Gwsc1JXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNGQ3MmVjZGMxNTM3OGJlNzE3YmI0Y2EwOTcxMDcwZDU3
NjQ5YTMwHhcNMjUwODIzMDMwMTMzWhcNMjUwODI0MDMwMTMzWjAzMTEwLwYDVQQD
EyhhMWQyMGJhZTJmZTdmZTVjNTNhM2JkNDAyNzg5ODZhNGJlNWU0NTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5uIPwuOK5E7Y+X3mDzmRb3tHs/s
dhHWm445TzZwIZGb+sSxM+qucB3Gxgk9h++eyxd5dz2wjlswJaKMGMisy95Q3VPJ
hMVOrYb6s0hKfGYiGFe2mUGJ/ZRHQuugV+uT3vfyVrENmI9fokMv7Biby6jsB9rk
C0KXOO02LWdqzOEmvAEZs304l5xarjTvuA2Yex7Z+1GvsMycw61ddeITs6dLHvop
q3YnfGAIockLz6M+k3gKYqKZOxLNtmyxTW2UBKn8wkPA/bAtKrma9qk6Xeat2Xws
gYCKBNBO4491C19JmalK7SDcY9wNDpCngGRkH9EElrI3mkeofckvPh729wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHSC64v5/5cU6O9QCeJhqS+XkWRMB8GA1UdIwQY
MBaAFKpNcuzcFTeL5xe7TKCXEHDVdkmjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWsxeTdOd1ZONHZuRjd0TW9KY1FjTlYyU2FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81MDdhNTctNGE2Mi00Yjk1LWIxYTMt
YjQwNTc2MjFiYmE2LzEvcWsxeTdOd1ZONHZuRjd0TW9KY1FjTlYyU2FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC81MDdhNTctNGE2Mi00Yjk1LWIxYTMtYjQwNTc2MjFiYmE2
LzEvcWsxeTdOd1ZONHZuRjd0TW9KY1FjTlYyU2FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMvTH/8r
BxaWfJfq7Oep/bsNiwVxh/VMNKeKCpEvH/W9L41Cepqz7l23ShtU9LLT4vRhZAgp
BVgztZ5Vurz9QF83YA+UJPtGZx4UwYv5qbL+gUSjpvwQovifwWz2XeqtCVrqMy3Z
4SdEqkDM3srsx6BBOAckD8mFn0LBtpUaL3L4BcgFpzUwbKoa4Adr8Z3ZKZZJukez
6W4PBDVRTe2AVPAntLKKG5pwcbJYkZ6+UawlCWMnOaHUU5IsSuF/i5bA7ttmnv2G
Sfkbok8xdB146Jf8UFgFjvBMHu5MMPYkw6rmzRc8lWa8Wj3O9+5VfWIq8MLTk6SF
02606D9vZn2D+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:59 2025 by rpki-client