Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: W332iQSb12pESmFFdlbWQZ0A4a0osxX1Q6tdVhvaqMo=
Subject key identifier: 4D:B0:2A:E8:DC:D1:C1:86:CD:4A:B3:C4:1A:2A:02:69:22:44:E0:6E
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 0198D6CD3B27A3BB19C37E71EFA85B0D98DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 0513
Signing time: Sat 23 Aug 2025 12:00:30 +0000
Manifest this update: Sat 23 Aug 2025 12:00:30 +0000
Manifest next update: Sun 24 Aug 2025 12:00:30 +0000
Files and hashes: 1: 49r3EiPqYIwA3FVnQ3pruyaEeaY.roa (hash: S4fah+Hi++9D/Vhg9/JWPzVOXskqt4CfJ/0z6MaI0ok=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: Q3m5pYtmcDMLcMeSsGZ6UNjxr3SuTRq4sOYjEgeo9N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:3b:27:a3:bb:19:c3:7e:71:ef:a8:5b:0d:98:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Aug 23 12:00:30 2025 GMT
Not After : Aug 24 12:00:30 2025 GMT
Subject: CN=4db02ae8dcd1c186cd4ab3c41a2a02692244e06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:0e:98:eb:7d:1b:85:ce:da:b1:f9:88:5c:
03:ec:16:96:17:dc:d7:8d:40:f0:e6:63:e7:fb:4b:
52:07:70:6a:15:1f:15:ea:07:88:be:49:e8:ca:e3:
76:89:70:cf:12:6f:ab:4e:82:a6:1e:33:0d:c5:45:
df:4e:39:0e:e4:66:98:92:c3:e1:5f:ae:6b:7b:55:
7b:7f:3c:12:eb:a0:dc:01:6b:89:b2:64:85:61:e2:
03:51:2c:38:ba:2a:41:dd:c2:16:f5:1e:36:ba:ce:
28:30:32:aa:01:84:f3:d9:70:78:0d:29:86:73:d5:
20:b7:da:fb:9b:ea:91:50:ce:5d:c3:0f:3e:b5:ec:
c2:d4:e2:4d:26:58:20:f9:3a:c2:c4:ee:78:d0:6b:
b9:1c:ca:41:d1:a1:12:7f:80:29:36:90:4f:8e:b5:
67:a5:74:18:08:73:86:f2:c9:26:33:08:63:42:76:
12:7a:bc:af:d4:22:eb:d1:93:5a:ff:ba:6a:c2:94:
c5:0f:20:66:19:64:7f:db:f2:9f:87:a6:28:87:43:
07:a1:5d:e4:c4:b9:cb:27:e7:b9:91:34:43:7a:00:
bd:35:3e:be:2d:e5:cc:b1:80:db:a3:b6:65:52:9c:
5c:b1:3a:94:f0:90:d0:fb:5d:94:c8:90:69:4d:3f:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B0:2A:E8:DC:D1:C1:86:CD:4A:B3:C4:1A:2A:02:69:22:44:E0:6E
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ef:53:4b:43:49:55:34:2a:85:20:17:53:bc:99:12:eb:b6:
cf:42:7a:0e:95:5f:38:df:e5:a1:51:21:ae:8f:5e:c9:48:60:
ee:f9:6c:80:3d:66:71:14:74:12:40:55:d1:6a:e9:5a:d8:9a:
12:16:29:0d:60:0c:be:20:2b:d1:cf:a6:64:8e:62:8a:f8:7f:
75:fa:2d:af:2f:63:27:2d:90:28:6e:ae:0f:c6:68:77:35:52:
7b:99:43:fb:ff:31:0a:88:85:e9:dd:a2:7c:43:c8:de:a9:46:
3e:0b:cd:21:bd:ef:da:44:df:7f:4a:fa:1a:d4:ca:3a:ce:cc:
62:fc:a8:0a:22:78:33:60:4b:81:1f:93:e0:09:03:c6:a8:b9:
62:65:0d:50:ef:4f:61:9a:c4:53:bc:96:26:0c:b0:c0:e3:c1:
41:ac:e3:ba:1c:f4:09:c4:f6:9d:c7:55:66:9e:df:ca:92:92:
9b:b2:9e:04:72:24:e6:6a:81:5a:50:20:4e:f5:a6:8b:b4:fd:
25:31:e8:58:6a:29:d9:db:b3:2c:f8:93:d7:7c:c8:a8:ec:03:
d1:8c:9d:b2:f1:94:3a:84:9b:11:97:f2:ca:8e:fd:eb:a4:4b:
ff:a0:e3:61:c5:4f:21:6c:2c:95:ee:b7:79:42:06:d5:86:bf:
78:8a:d8:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzTsno7sZw35x76hbDZjeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMGJkNzhjYTJjYWE1ZWI4ZmYzYjllODIzNzc0ZGMxYjc0
ZGViZWIwHhcNMjUwODIzMTIwMDMwWhcNMjUwODI0MTIwMDMwWjAzMTEwLwYDVQQD
Eyg0ZGIwMmFlOGRjZDFjMTg2Y2Q0YWIzYzQxYTJhMDI2OTIyNDRlMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuQOmOt9G4XO2rH5iFwD7BaWF9zX
jUDw5mPn+0tSB3BqFR8V6geIvknoyuN2iXDPEm+rToKmHjMNxUXfTjkO5GaYksPh
X65re1V7fzwS66DcAWuJsmSFYeIDUSw4uipB3cIW9R42us4oMDKqAYTz2XB4DSmG
c9Ugt9r7m+qRUM5dww8+tezC1OJNJlgg+TrCxO540Gu5HMpB0aESf4ApNpBPjrVn
pXQYCHOG8skmMwhjQnYSeryv1CLr0ZNa/7pqwpTFDyBmGWR/2/Kfh6Yoh0MHoV3k
xLnLJ+e5kTRDegC9NT6+LeXMsYDbo7ZlUpxcsTqU8JDQ+12UyJBpTT9+wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2wKujc0cGGzUqzxBoqAmkiROBuMB8GA1UdIwQY
MBaAFKoL14yiyqXrj/O56CN3TcG3TevrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzct
YTEwOGRiZTBmZDFmLzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzctYTEwOGRiZTBmZDFm
LzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFu9TS0NJ
VTQqhSAXU7yZEuu2z0J6DpVfON/loVEhro9eyUhg7vlsgD1mcRR0EkBV0WrpWtia
EhYpDWAMviAr0c+mZI5iivh/dfotry9jJy2QKG6uD8ZodzVSe5lD+/8xCoiF6d2i
fEPI3qlGPgvNIb3v2kTff0r6GtTKOs7MYvyoCiJ4M2BLgR+T4AkDxqi5YmUNUO9P
YZrEU7yWJgywwOPBQazjuhz0CcT2ncdVZp7fypKSm7KeBHIk5mqBWlAgTvWmi7T9
JTHoWGop2duzLPiT13zIqOwD0YydsvGUOoSbEZfyyo7966RL/6DjYcVPIWwsle63
eUIG1Ya/eIrYAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:44:58 2025 by rpki-client