Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: f/yK9FN3EDr9hmI5A88E3lxfDDgwI+n0w8pfn5pxTNo=
Subject key identifier: 39:86:DD:43:73:BA:36:26:35:22:EE:72:6B:1E:59:D2:41:5D:E5:C6
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 0198D404AA72100F8F853AEEF5663F2FD3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 0823
Signing time: Fri 22 Aug 2025 23:02:12 +0000
Manifest this update: Fri 22 Aug 2025 23:02:12 +0000
Manifest next update: Sat 23 Aug 2025 23:02:12 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: FfePoHXFtAY5+RhYMCIOGnnYWwrhOFH77jzH4LQJShk=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:aa:72:10:0f:8f:85:3a:ee:f5:66:3f:2f:d3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Aug 22 23:02:12 2025 GMT
Not After : Aug 23 23:02:12 2025 GMT
Subject: CN=3986dd4373ba36263522ee726b1e59d2415de5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:bb:bb:57:f3:cd:a3:31:54:e3:60:55:be:
a6:95:a8:18:84:16:d4:75:ac:3e:99:1a:ae:2f:93:
83:8e:98:6e:be:55:58:e5:88:32:01:74:fb:bc:09:
13:b9:12:d5:e6:13:e8:3e:bd:60:ed:82:d2:22:58:
db:46:0d:94:c5:3a:75:13:7c:b2:d1:44:3a:a2:d4:
ca:3a:47:92:0a:6a:dd:9c:42:7c:be:92:be:93:53:
a3:81:01:7e:69:6a:af:67:f5:20:a4:5d:99:d2:28:
87:c7:10:df:d5:50:e1:f5:35:cf:cf:81:c4:2e:de:
96:7e:e0:d7:1b:08:40:fa:10:41:26:17:1b:ee:bb:
26:5c:4f:dc:e0:94:11:5d:5f:73:ac:82:b7:de:a4:
fc:f9:a2:ff:47:49:8a:2c:a9:fa:b3:ca:1b:1c:1a:
73:7f:34:04:34:e8:c4:55:53:73:33:68:1e:2c:e0:
2c:fb:41:cb:03:67:de:65:41:de:6f:14:4d:f7:18:
32:8e:92:ed:a7:ae:f2:b2:0b:01:d3:99:7b:72:61:
eb:31:e7:65:71:30:e6:c6:65:98:a5:32:22:37:8c:
a0:89:fd:2f:95:78:e9:40:75:95:d5:b4:3b:cd:92:
5c:12:35:e3:71:76:4d:80:c6:11:5d:1e:ee:65:d1:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:86:DD:43:73:BA:36:26:35:22:EE:72:6B:1E:59:D2:41:5D:E5:C6
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:4c:5e:36:20:30:d8:b9:d8:7d:71:f8:0b:6d:23:e6:c9:
ab:40:4f:d0:d9:4d:d9:b5:ea:93:89:4c:e2:ed:fe:5a:b0:9f:
e8:ec:ac:0e:8c:b2:47:0c:88:c2:d6:14:66:9d:3b:76:be:ef:
0d:b3:32:2f:7f:94:ca:5b:e1:f2:26:6c:ca:c9:19:de:37:3a:
d3:6e:25:98:0f:c7:bf:4b:51:48:9d:b2:74:21:6a:cd:46:f1:
d0:b9:db:bb:f3:a6:98:09:26:78:6a:53:8b:f5:a1:26:52:30:
3d:ec:cf:f2:16:e2:a4:51:5b:eb:0d:80:54:20:a4:bd:9e:67:
4c:df:f6:ad:e2:44:0a:34:61:4a:e3:dc:9a:ba:f3:8f:43:65:
4c:ee:60:f2:5b:b4:c1:2d:fc:b1:f8:00:1d:5f:ed:53:f9:b4:
ce:61:7a:aa:77:67:d7:54:e9:67:c8:bd:d6:81:59:e1:ad:db:
ec:be:81:a4:7e:8c:13:4d:0c:45:12:a5:8e:89:b7:e4:ec:64:
13:64:21:5d:bd:91:b8:92:7f:90:6d:a2:d5:06:b8:4e:85:5a:
9e:81:5a:78:7d:4e:28:fe:a2:6a:6e:d5:5f:3b:5a:c1:02:ed:
03:97:0e:75:cf:78:61:38:c9:0c:38:fb:9f:9c:8c:4d:de:dd:
2e:e3:fd:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBKpyEA+PhTru9WY/L9PfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw
NmMxNDUwHhcNMjUwODIyMjMwMjEyWhcNMjUwODIzMjMwMjEyWjAzMTEwLwYDVQQD
EygzOTg2ZGQ0MzczYmEzNjI2MzUyMmVlNzI2YjFlNTlkMjQxNWRlNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpS7u1fzzaMxVONgVb6mlagYhBbU
daw+mRquL5ODjphuvlVY5YgyAXT7vAkTuRLV5hPoPr1g7YLSIljbRg2UxTp1E3yy
0UQ6otTKOkeSCmrdnEJ8vpK+k1OjgQF+aWqvZ/UgpF2Z0iiHxxDf1VDh9TXPz4HE
Lt6WfuDXGwhA+hBBJhcb7rsmXE/c4JQRXV9zrIK33qT8+aL/R0mKLKn6s8obHBpz
fzQENOjEVVNzM2geLOAs+0HLA2feZUHebxRN9xgyjpLtp67ysgsB05l7cmHrMedl
cTDmxmWYpTIiN4ygif0vlXjpQHWV1bQ7zZJcEjXjcXZNgMYRXR7uZdElgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmG3UNzujYmNSLucmseWdJBXeXGMB8GA1UdIwQY
MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt
Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz
LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcylMXjYg
MNi52H1x+AttI+bJq0BP0NlN2bXqk4lM4u3+WrCf6OysDoyyRwyIwtYUZp07dr7v
DbMyL3+Uylvh8iZsyskZ3jc6024lmA/Hv0tRSJ2ydCFqzUbx0Lnbu/OmmAkmeGpT
i/WhJlIwPezP8hbipFFb6w2AVCCkvZ5nTN/2reJECjRhSuPcmrrzj0NlTO5g8lu0
wS38sfgAHV/tU/m0zmF6qndn11TpZ8i91oFZ4a3b7L6BpH6ME00MRRKljom35Oxk
E2QhXb2RuJJ/kG2i1Qa4ToVanoFaeH1OKP6iam7VXztawQLtA5cOdc94YTjJDDj7
n5yMTd7dLuP9Bw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:34 2025 by rpki-client