Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: /RXklF25/ftQZ8VngxakIS1APoHhr/cXLVwLhUAQLoM=
Subject key identifier: 1B:85:60:33:1E:AE:E5:92:B4:05:6E:FF:30:F0:A7:08:17:1F:CD:94
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 0198D4724CF3FF5823902F6D9998EDD3ACBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0706
Signing time: Sat 23 Aug 2025 01:01:57 +0000
Manifest this update: Sat 23 Aug 2025 01:01:57 +0000
Manifest next update: Sun 24 Aug 2025 01:01:57 +0000
Files and hashes: 1: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: waFYBizZa2DHQF/NCQBj5cJZRSS/i30qUGJxGrQkWSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:4c:f3:ff:58:23:90:2f:6d:99:98:ed:d3:ac:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Aug 23 01:01:57 2025 GMT
Not After : Aug 24 01:01:57 2025 GMT
Subject: CN=1b8560331eaee592b4056eff30f0a708171fcd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:1e:15:cc:07:62:e2:65:50:39:20:bc:02:
02:cb:4b:ef:59:51:69:8a:20:09:e1:15:6c:29:1a:
f2:7a:67:3c:fc:02:b4:a1:22:66:2b:dd:a6:73:14:
62:a6:c1:d8:f5:90:56:a3:ef:32:28:fa:00:fc:84:
c2:17:02:6b:e1:06:ec:06:c8:3b:97:a8:3d:23:05:
94:ca:67:68:a1:29:9e:9b:d2:0e:04:5c:27:c2:97:
8f:19:64:7c:a3:bc:a0:b5:5b:30:f2:d2:e7:8b:f7:
64:79:f3:cf:50:ac:e0:54:1b:76:70:57:1a:4d:d7:
ed:5a:f6:ac:32:ed:5c:c0:bc:92:53:12:e7:d6:de:
91:a3:37:c6:c6:33:e4:b8:c2:06:94:5c:e7:ba:20:
31:b3:21:6a:bd:3f:97:71:74:3b:ce:71:68:47:0a:
ea:77:92:a0:4e:75:c9:22:f4:67:14:3f:9c:44:f3:
af:b0:31:3e:df:e1:54:5f:0e:d5:8a:9c:3a:72:f5:
19:56:79:25:bc:58:02:cf:68:f0:91:2b:a5:7f:b9:
31:26:d5:8b:08:d7:e4:95:71:ce:ec:cf:d5:9b:8d:
f0:e9:a3:22:80:f8:e0:f8:fa:56:8b:c5:5a:9b:89:
42:5b:d4:4c:37:3d:e9:72:4d:36:b9:a2:26:be:8d:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:60:33:1E:AE:E5:92:B4:05:6E:FF:30:F0:A7:08:17:1F:CD:94
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ce:3b:70:d0:ae:44:26:09:a2:98:5b:5f:23:3d:40:68:1d:
b0:d1:71:0a:0a:51:ee:25:82:20:32:36:83:19:34:0e:a8:e2:
c1:b5:ec:0d:88:37:88:d5:ef:5d:dc:6d:aa:e7:f2:57:c2:a4:
43:23:4d:5b:35:bb:37:dd:4b:27:ab:ac:68:bf:99:4d:68:b7:
af:b1:66:1e:47:df:e1:19:93:01:f6:fa:78:ef:93:bc:82:43:
b6:32:98:a2:2f:c6:71:63:33:49:dc:a7:da:2d:73:07:a5:48:
b5:7e:6c:33:8a:22:64:01:94:76:c4:33:14:23:2c:da:2a:47:
8c:df:c8:1f:ef:0e:a9:71:90:a4:90:87:3c:8b:b7:d3:1c:93:
6a:14:5b:64:fc:36:e5:bc:f7:a3:23:ea:79:74:2d:55:f6:8d:
e1:ae:8a:c0:d4:c7:84:f2:8f:89:d5:09:0d:5a:15:71:33:5d:
d5:f9:ee:f5:9a:35:7f:95:9b:14:5f:3d:6f:9b:3e:0f:aa:f6:
8f:ff:6f:55:24:1c:39:22:3a:b3:84:d6:52:0d:48:c3:1e:67:
31:56:56:c7:17:0c:7c:55:5b:53:8a:28:35:d6:40:d7:31:2c:
bb:de:0c:47:da:36:ee:ee:f5:24:7c:f7:ad:73:f3:b4:e6:09:
79:89:37:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUckzz/1gjkC9tmZjt06y6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj
MTE2M2IwHhcNMjUwODIzMDEwMTU3WhcNMjUwODI0MDEwMTU3WjAzMTEwLwYDVQQD
EygxYjg1NjAzMzFlYWVlNTkyYjQwNTZlZmYzMGYwYTcwODE3MWZjZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP0eFcwHYuJlUDkgvAICy0vvWVFp
iiAJ4RVsKRryemc8/AK0oSJmK92mcxRipsHY9ZBWo+8yKPoA/ITCFwJr4QbsBsg7
l6g9IwWUymdooSmem9IOBFwnwpePGWR8o7ygtVsw8tLni/dkefPPUKzgVBt2cFca
TdftWvasMu1cwLySUxLn1t6RozfGxjPkuMIGlFznuiAxsyFqvT+XcXQ7znFoRwrq
d5KgTnXJIvRnFD+cRPOvsDE+3+FUXw7Vipw6cvUZVnklvFgCz2jwkSulf7kxJtWL
CNfklXHO7M/Vm43w6aMigPjg+PpWi8Vam4lCW9RMNz3pck02uaImvo1pQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuFYDMeruWStAVu/zDwpwgXH82UMB8GA1UdIwQY
MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt
N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw
LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdc47cNCu
RCYJophbXyM9QGgdsNFxCgpR7iWCIDI2gxk0DqjiwbXsDYg3iNXvXdxtqufyV8Kk
QyNNWzW7N91LJ6usaL+ZTWi3r7FmHkff4RmTAfb6eO+TvIJDtjKYoi/GcWMzSdyn
2i1zB6VItX5sM4oiZAGUdsQzFCMs2ipHjN/IH+8OqXGQpJCHPIu30xyTahRbZPw2
5bz3oyPqeXQtVfaN4a6KwNTHhPKPidUJDVoVcTNd1fnu9Zo1f5WbFF89b5s+D6r2
j/9vVSQcOSI6s4TWUg1Iwx5nMVZWxxcMfFVbU4ooNdZA1zEsu94MR9o27u71JHz3
rXPztOYJeYk3cg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:00 2025 by rpki-client