Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json)
Hash identifier: y2CrzXVqB8xrfcXUbkkfpVdVFPGP6kw5XrxDMIkrUEw=
Subject key identifier: 02:BA:70:66:17:5F:04:3E:49:18:03:5A:56:53:99:A1:DE:11:A8:B8
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Certificate issuer: /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial: 0198D4E018CFD03D4A8AA8AB2BBD6006FEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: 1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa (hash: oLjRdDjCa874D2Ohi+4lYwxZSVZ663VZAUA47G0Sbic=)
2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: zZGX718BW6Dfp0vfV3rzzu1aoDALGbtnrVPuekY/SUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:18:cf:d0:3d:4a:8a:a8:ab:2b:bd:60:06:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=02ba7066175f043e4918035a565399a1de11a8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:84:ac:40:dc:33:22:2e:b7:de:c4:f9:b8:
73:75:7f:be:51:bf:4d:cb:19:ce:af:91:b6:d1:7c:
0c:31:fa:18:7c:68:58:98:e0:12:0f:59:32:27:21:
87:9a:b9:e4:68:fc:27:3f:67:bc:0f:08:73:c3:ff:
94:9f:55:09:83:05:81:03:c2:df:cc:3a:e8:56:cd:
87:cb:68:70:b6:35:af:ce:cf:7d:d9:bf:b3:01:b5:
dc:fc:15:26:33:8e:e0:1d:68:04:fe:41:ab:16:14:
1b:bd:d4:53:79:e3:d3:f7:3b:9e:5a:4c:78:8d:47:
be:c9:a9:8b:40:ea:42:75:32:1b:9a:c3:97:3e:27:
8b:e3:e8:b8:42:24:b4:90:cc:cf:76:5c:3f:ee:58:
c5:e5:3f:dc:71:77:06:71:eb:ac:2d:02:f9:4b:69:
ff:61:d7:b9:c0:41:55:6f:37:e8:5c:72:08:c4:5a:
45:3e:23:27:f7:89:31:94:c4:89:c5:e7:ef:6c:08:
86:ab:85:65:47:95:0e:2b:26:ac:81:cf:49:57:1f:
f3:df:b0:bd:9e:6e:b1:92:6b:7d:1b:e6:60:dd:6f:
98:35:d2:9c:ef:f9:88:39:81:91:37:d8:ce:81:43:
fe:eb:73:68:e5:f9:c0:71:a0:c0:6d:56:1c:a8:ab:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:70:66:17:5F:04:3E:49:18:03:5A:56:53:99:A1:DE:11:A8:B8
X509v3 Authority Key Identifier:
keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:57:60:f7:b2:8c:63:52:d5:80:ba:d0:67:1c:99:d4:2f:c4:
1c:80:be:cb:d9:dc:ee:ec:23:27:5d:be:72:3c:d0:b7:68:b0:
03:6d:70:2f:c2:80:38:ca:ed:e7:c1:bb:28:a7:d2:60:33:a0:
77:93:c9:cd:c8:d7:e8:8e:01:7f:56:eb:3c:db:fd:f8:77:d0:
55:f9:0a:2a:24:94:56:66:c1:dd:25:6c:90:e7:7c:69:e3:ff:
32:8f:99:39:cb:9f:7a:20:75:d8:94:5a:cd:14:c6:7a:d8:11:
17:d9:f8:5e:16:b3:36:53:15:74:bd:49:b0:6f:a5:11:c2:1c:
d2:38:18:49:d1:23:50:95:7c:1b:c2:0d:8d:8f:01:a2:b5:72:
4f:68:b8:f1:7e:03:d5:b4:f3:81:8d:c6:e6:05:31:5c:2e:a4:
3d:3f:cb:c5:4b:a2:dc:65:19:ad:ff:1c:31:7c:fe:a7:4c:02:
9d:c4:54:7a:1c:9e:82:ea:0a:98:13:60:c4:db:74:af:1e:ab:
1d:29:30:c0:98:cd:9f:e3:d4:e0:db:2a:d7:30:2d:1a:60:6e:
b4:ca:a1:d4:dc:ec:94:c8:11:e9:e2:92:ce:1a:0b:6c:43:c2:
90:0a:d7:ad:62:89:0f:35:9c:14:1b:9e:de:c6:a0:f5:a9:61:
7e:d2:14:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4BjP0D1KiqirK71gBv6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTg0ZDdlNjRiYTNlODViNTcwMzZjNzMxOGY5M2NjM2Q5
NGQxODcwHhcNMjUwODIzMDMwMTUyWhcNMjUwODI0MDMwMTUyWjAzMTEwLwYDVQQD
EygwMmJhNzA2NjE3NWYwNDNlNDkxODAzNWE1NjUzOTlhMWRlMTFhOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPOErEDcMyIut97E+bhzdX++Ub9N
yxnOr5G20XwMMfoYfGhYmOASD1kyJyGHmrnkaPwnP2e8Dwhzw/+Un1UJgwWBA8Lf
zDroVs2Hy2hwtjWvzs992b+zAbXc/BUmM47gHWgE/kGrFhQbvdRTeePT9zueWkx4
jUe+yamLQOpCdTIbmsOXPieL4+i4QiS0kMzPdlw/7ljF5T/ccXcGceusLQL5S2n/
Yde5wEFVbzfoXHIIxFpFPiMn94kxlMSJxefvbAiGq4VlR5UOKyasgc9JVx/z37C9
nm6xkmt9G+Zg3W+YNdKc7/mIOYGRN9jOgUP+63No5fnAcaDAbVYcqKvRqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK6cGYXXwQ+SRgDWlZTmaHeEai4MB8GA1UdIwQY
MBaAFK6oTX5kuj6FtXA2xzGPk8w9lNGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xNTdmMWUtN2NmOC00ZDk4LWE5MjQt
OTdjMzMyZjcyMzlkLzEvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xNTdmMWUtN2NmOC00ZDk4LWE5MjQtOTdjMzMyZjcyMzlk
LzEvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKldg97KM
Y1LVgLrQZxyZ1C/EHIC+y9nc7uwjJ12+cjzQt2iwA21wL8KAOMrt58G7KKfSYDOg
d5PJzcjX6I4Bf1brPNv9+HfQVfkKKiSUVmbB3SVskOd8aeP/Mo+ZOcufeiB12JRa
zRTGetgRF9n4XhazNlMVdL1JsG+lEcIc0jgYSdEjUJV8G8INjY8BorVyT2i48X4D
1bTzgY3G5gUxXC6kPT/LxUui3GUZrf8cMXz+p0wCncRUehyeguoKmBNgxNt0rx6r
HSkwwJjNn+PU4Nsq1zAtGmButMqh1NzslMgR6eKSzhoLbEPCkArXrWKJDzWcFBue
3sag9alhftIUoQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:13 2025 by rpki-client