Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: KAt4mbfrWFvCz3jeEht4uxUzRGDhrnSP2BCcAlPEcls=
Subject key identifier: 37:A7:34:5B:32:D0:6F:88:53:8D:2C:FF:31:EC:BE:80:DE:A7:E4:E4
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 0198D4A807DA75122ABBF06AAE0D54853133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: D4
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: 8yJYfJ4++pQ7urZ04CrTNaT0VjSJiTs+Fl386s57YPM=)
2: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (hash: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:07:da:75:12:2a:bb:f0:6a:ae:0d:54:85:31:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=37a7345b32d06f88538d2cff31ecbe80dea7e4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:48:f6:6e:ba:b8:3c:38:52:8a:4e:cc:4a:
23:ba:21:01:63:03:d5:09:9d:34:17:f8:f1:44:f4:
97:66:c5:c4:fa:7a:cc:54:2f:38:17:83:f5:1e:ea:
fd:58:89:56:29:bb:dc:04:80:30:98:92:df:4a:70:
94:27:f8:85:80:79:d3:b2:90:4a:91:69:ed:91:6b:
dc:62:52:ca:a8:3d:be:0f:d2:7f:21:e7:4c:2b:a1:
1b:72:84:89:ca:72:a2:4b:4d:bb:98:b3:21:37:d5:
a0:49:12:75:d5:17:c4:ed:9b:14:5b:f5:4d:1c:0c:
b7:f3:e9:58:76:d4:53:f2:26:8a:95:70:d8:c2:52:
85:13:ae:30:36:01:a6:59:d6:2e:ba:b1:d7:aa:52:
cc:23:51:de:4f:f9:2d:6e:68:7c:4a:3d:1e:06:45:
98:de:af:56:7b:33:91:dc:3a:59:34:53:10:e3:c0:
37:bb:c8:a8:76:cf:05:0c:7e:da:5c:49:6d:82:b4:
fa:e4:7d:a9:21:97:f4:76:a8:5c:a1:df:40:58:c3:
e5:6c:67:49:ac:c4:47:4e:b4:a0:f5:36:d3:bb:dc:
5a:11:96:94:97:0a:29:bc:1e:0b:d6:5e:08:18:1e:
3d:0e:6b:9a:9d:8a:a7:dd:d7:39:9c:b8:25:e9:5f:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A7:34:5B:32:D0:6F:88:53:8D:2C:FF:31:EC:BE:80:DE:A7:E4:E4
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:76:e4:28:d4:30:4a:57:02:db:de:2a:4c:84:32:18:1d:e9:
66:84:17:9f:de:26:83:d1:64:b6:8b:c3:3b:8a:b1:da:52:a3:
76:d6:7b:e9:81:66:08:0f:99:d0:2f:1c:bf:31:54:6c:5d:e2:
44:4f:92:63:4b:18:10:ed:17:e9:13:65:0f:16:ce:fa:8f:c8:
15:20:0e:5e:3e:1b:cc:9a:da:11:11:1e:75:97:25:7e:09:dd:
f8:b1:86:2b:df:fd:19:d6:e2:80:64:8b:91:06:7b:d5:3b:d7:
8f:4b:bf:d8:76:a7:77:df:f2:c9:7d:04:17:c1:c9:f0:be:6c:
e7:39:08:2e:75:a7:29:89:05:db:e7:db:25:49:f6:2e:c9:e4:
8f:60:8a:a6:1b:1c:31:27:8a:fa:92:2a:fa:6d:9a:88:c0:c9:
84:bb:b2:7a:43:4a:a3:8b:5c:f8:ff:2d:2c:8a:9a:d7:84:27:
31:3d:f6:8d:6d:84:ad:6d:fb:77:45:a3:d4:50:f6:29:7d:6c:
aa:a5:ac:5c:78:ca:38:4a:bf:33:6a:2e:00:de:2a:2a:72:04:
62:3b:a9:db:e7:7e:c0:bd:4f:e3:7e:6d:1a:97:dd:f3:a9:26:
e2:6d:7d:5b:0e:d1:f9:b5:02:28:f5:08:16:33:f6:0c:32:f2:
a1:d0:a3:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqAfadRIqu/Bqrg1UhTEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYWRkMDhkNzUyNDlhMDY3ZGJiYzYzMTdiZTViYTZlM2Y0
ZDVmYzkwHhcNMjUwODIzMDIwMDM4WhcNMjUwODI0MDIwMDM4WjAzMTEwLwYDVQQD
EygzN2E3MzQ1YjMyZDA2Zjg4NTM4ZDJjZmYzMWVjYmU4MGRlYTdlNGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDRI9m66uDw4UopOzEojuiEBYwPV
CZ00F/jxRPSXZsXE+nrMVC84F4P1Hur9WIlWKbvcBIAwmJLfSnCUJ/iFgHnTspBK
kWntkWvcYlLKqD2+D9J/IedMK6EbcoSJynKiS027mLMhN9WgSRJ11RfE7ZsUW/VN
HAy38+lYdtRT8iaKlXDYwlKFE64wNgGmWdYuurHXqlLMI1HeT/ktbmh8Sj0eBkWY
3q9WezOR3DpZNFMQ48A3u8iods8FDH7aXEltgrT65H2pIZf0dqhcod9AWMPlbGdJ
rMRHTrSg9TbTu9xaEZaUlwopvB4L1l4IGB49DmuanYqn3dc5nLgl6V+y0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDenNFsy0G+IU40s/zHsvoDep+TkMB8GA1UdIwQY
MBaAFEKt0I11JJoGfbvGMXvlum4/TV/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTIt
Y2QzYzE2MGE2ZjQ2LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84OTc2ZTItMTRmNS00Y2VmLTk5MTItY2QzYzE2MGE2ZjQ2
LzEvUXEzUWpYVWttZ1o5dThZeGUtVzZiajlOWDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnbkKNQw
SlcC294qTIQyGB3pZoQXn94mg9FktovDO4qx2lKjdtZ76YFmCA+Z0C8cvzFUbF3i
RE+SY0sYEO0X6RNlDxbO+o/IFSAOXj4bzJraEREedZclfgnd+LGGK9/9GdbigGSL
kQZ71TvXj0u/2Hand9/yyX0EF8HJ8L5s5zkILnWnKYkF2+fbJUn2Lsnkj2CKphsc
MSeK+pIq+m2aiMDJhLuyekNKo4tc+P8tLIqa14QnMT32jW2ErW37d0Wj1FD2KX1s
qqWsXHjKOEq/M2ouAN4qKnIEYjup2+d+wL1P435tGpfd86km4m19Ww7R+bUCKPUI
FjP2DDLyodCjnw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:27 2025 by rpki-client