Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: oxSPcUChBEvj2tJ96EihBcKBzTbiuHz1ONMjSewIGPU=
Subject key identifier: 78:C6:B8:3F:6A:C0:AA:3C:5B:10:37:1D:CB:C8:46:7E:06:81:FA:DA
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 0198D54E4103F9715F180C07AB05E592DB31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 09E2
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: +OOuDLTOWdLAJb2xuyE0ADEqitRuD5HS6GQHAvYMvj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:41:03:f9:71:5f:18:0c:07:ab:05:e5:92:db:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=78c6b83f6ac0aa3c5b10371dcbc8467e0681fada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:35:6b:24:1c:c3:1a:32:5d:41:59:57:06:
0d:96:77:85:36:fe:61:40:05:1f:fa:22:69:dc:c1:
6f:ef:c0:d7:ff:21:2b:90:39:5a:36:ba:25:5c:e4:
f9:50:12:06:98:12:f0:37:37:36:d6:59:b0:18:f7:
e9:76:3c:d0:f6:3f:54:6e:dc:7d:aa:7e:2d:77:32:
1d:92:91:21:49:bd:5c:3c:0a:d5:14:0a:43:4a:0e:
1c:a5:b7:fb:05:e3:d2:62:2b:af:46:f0:cb:07:98:
1f:5e:18:9d:0d:ef:b0:0a:8f:0d:82:20:2b:dd:ab:
9c:e5:5f:66:bf:82:19:3f:93:16:42:6f:1a:38:aa:
4c:76:16:e7:aa:c3:35:65:da:3c:7c:9a:c2:43:27:
15:34:a6:96:92:2e:53:12:cd:ff:2c:32:ff:29:39:
3b:a8:5e:23:0d:b9:96:33:8b:1e:04:08:5e:1f:4f:
83:69:d7:5e:33:0b:4d:1e:1a:a2:78:d4:05:4d:9a:
d0:cd:9d:12:6c:a2:e0:e8:6c:f6:dc:fc:9e:d9:ba:
f2:e9:cc:38:bc:56:f4:3c:a6:25:33:6e:16:8b:94:
14:9d:15:1a:58:4e:08:db:1f:80:7e:d5:c6:68:e0:
c1:07:7b:23:20:37:9a:5d:19:99:67:8d:71:76:c5:
f3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C6:B8:3F:6A:C0:AA:3C:5B:10:37:1D:CB:C8:46:7E:06:81:FA:DA
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:e8:0a:52:0b:a7:5d:ad:1f:71:6a:01:ce:1c:71:9c:3e:
73:ca:8e:17:c3:17:05:48:de:a7:a8:52:10:94:d9:a3:bc:b2:
58:b9:67:2e:71:cf:b7:64:58:5d:2c:8e:f3:3b:dc:fd:97:36:
e8:71:10:fe:ec:a5:ae:93:c3:f7:d1:9e:d1:76:8a:23:79:03:
69:77:a8:2a:6e:d0:7d:08:c4:5c:b5:ae:20:50:ba:83:39:6f:
b6:bc:a0:fb:dd:8c:86:ab:cd:e3:43:71:76:3b:9d:94:68:cc:
82:54:f0:e0:71:66:9e:1b:67:d9:92:81:db:e3:fd:25:b3:83:
90:98:c5:2f:ab:08:30:a9:3e:38:9d:6a:95:10:9a:f9:28:0f:
67:3f:28:d1:62:14:4a:70:1c:da:03:1c:f9:da:b1:0f:d1:71:
28:ce:7f:2d:9f:a6:4b:c0:cc:7e:bf:3d:16:3a:9f:bd:96:63:
33:48:cd:92:d6:a8:08:5a:22:0d:45:d5:78:08:1b:9b:45:9a:
64:e0:b8:90:3d:a8:20:30:22:a0:c1:d4:84:d1:c1:02:36:ed:
32:b0:7f:1c:67:65:81:31:9c:16:89:3b:a6:f5:4f:bb:aa:5f:
13:e1:38:2b:ef:74:8d:4d:34:3c:09:d7:b2:e1:aa:d1:6b:84:
20:e7:86:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTkED+XFfGAwHqwXlktsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3
ZDliMzkwHhcNMjUwODIzMDUwMjEyWhcNMjUwODI0MDUwMjEyWjAzMTEwLwYDVQQD
Eyg3OGM2YjgzZjZhYzBhYTNjNWIxMDM3MWRjYmM4NDY3ZTA2ODFmYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpo1ayQcwxoyXUFZVwYNlneFNv5h
QAUf+iJp3MFv78DX/yErkDlaNrolXOT5UBIGmBLwNzc21lmwGPfpdjzQ9j9Ubtx9
qn4tdzIdkpEhSb1cPArVFApDSg4cpbf7BePSYiuvRvDLB5gfXhidDe+wCo8NgiAr
3auc5V9mv4IZP5MWQm8aOKpMdhbnqsM1Zdo8fJrCQycVNKaWki5TEs3/LDL/KTk7
qF4jDbmWM4seBAheH0+DaddeMwtNHhqieNQFTZrQzZ0SbKLg6Gz23Pye2bry6cw4
vFb0PKYlM24Wi5QUnRUaWE4I2x+AftXGaODBB3sjIDeaXRmZZ41xdsXzpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjGuD9qwKo8WxA3HcvIRn4GgfraMB8GA1UdIwQY
MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt
N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi
LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4XoClIL
p12tH3FqAc4ccZw+c8qOF8MXBUjep6hSEJTZo7yyWLlnLnHPt2RYXSyO8zvc/Zc2
6HEQ/uylrpPD99Ge0XaKI3kDaXeoKm7QfQjEXLWuIFC6gzlvtryg+92MhqvN40Nx
djudlGjMglTw4HFmnhtn2ZKB2+P9JbODkJjFL6sIMKk+OJ1qlRCa+SgPZz8o0WIU
SnAc2gMc+dqxD9FxKM5/LZ+mS8DMfr89FjqfvZZjM0jNktaoCFoiDUXVeAgbm0Wa
ZOC4kD2oIDAioMHUhNHBAjbtMrB/HGdlgTGcFok7pvVPu6pfE+E4K+90jU00PAnX
suGq0WuEIOeG4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:42 2025 by rpki-client