Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: C5RVWtrzKFNzlaD+Za2/AZxS4vH5BVq6l4HvmQjHjSQ=
Subject key identifier: 09:92:A0:8A:1B:C5:CD:E9:F7:EE:4D:87:76:58:A2:BC:3B:8D:28:0F
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 0198D4E030278E1703DD4CA46C6D4D984C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 092A
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: 7+S/kp1T0ADhxJHAnviR398AwsHtZuB0bRUVfaUHD40=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:30:27:8e:17:03:dd:4c:a4:6c:6d:4d:98:4c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=0992a08a1bc5cde9f7ee4d877658a2bc3b8d280f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e0:40:8b:b0:bc:f5:f4:b0:41:96:a3:f9:88:
dd:97:2b:50:f0:b3:e9:09:08:25:a4:5a:00:7b:15:
bf:f1:43:28:f8:e6:cc:c4:0e:e7:20:9f:39:b7:1e:
f3:f7:00:0b:83:63:18:68:d6:a3:a8:44:c1:94:55:
6b:10:a7:34:96:02:68:13:c2:1c:02:d6:3e:13:ce:
ab:30:66:e9:94:5a:90:af:34:f4:23:c5:e4:cf:52:
1e:15:77:98:55:d5:48:fa:bc:f3:c6:8c:3b:a3:eb:
b5:47:2b:de:8f:47:50:4d:1c:72:fc:37:ce:df:a8:
e9:90:19:11:04:8f:19:ee:3f:31:50:78:de:b9:21:
d3:fb:da:cd:2d:fb:e7:d4:7a:6e:27:86:25:e0:63:
e0:7e:ca:5a:ac:51:05:d1:3b:5c:39:57:e9:29:6e:
4d:71:b8:7f:49:4b:79:ca:21:d5:ef:56:b7:85:2e:
02:eb:23:23:8a:bf:d3:fe:8c:cd:24:94:75:d1:aa:
e8:75:82:fe:53:d1:46:b4:0c:2c:3c:c7:ac:98:c7:
0c:2c:36:4c:34:fc:70:56:ab:4c:75:b1:34:ea:a7:
8d:1a:14:c6:74:62:ac:b8:43:76:a8:5f:bb:3d:ab:
2a:89:cf:ce:a3:07:20:71:4e:f1:8e:79:86:6e:86:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:92:A0:8A:1B:C5:CD:E9:F7:EE:4D:87:76:58:A2:BC:3B:8D:28:0F
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ec:1c:fa:f3:2e:25:73:6c:7b:c8:11:63:0d:17:a1:4c:cc:
11:21:5f:b3:f1:6c:36:3c:d2:c8:c0:6b:c2:db:98:7b:7a:b2:
ed:49:40:ec:c7:aa:cf:b4:79:02:ec:74:ea:69:9f:ee:3c:68:
3e:5d:1f:6b:93:7a:54:87:35:50:ff:fd:34:68:93:6a:7c:4c:
f1:f6:ec:cd:ae:01:1e:b2:f1:31:0c:4a:79:c6:8d:06:a7:cf:
92:9d:fa:6d:14:78:5b:7a:ea:e7:fe:df:02:76:c4:2f:6e:0a:
89:25:d5:cf:3a:73:f4:50:bc:73:17:aa:cc:99:99:65:5e:51:
1e:21:43:ab:4b:20:08:66:4e:71:6a:ad:cc:75:29:f5:a2:8b:
20:59:65:c2:f1:00:09:2f:a0:c9:54:14:38:de:c9:34:dc:a8:
95:d5:7a:d7:81:f2:8a:4e:e6:0a:95:4c:02:93:a7:c2:b7:79:
4d:bd:5d:95:d5:88:3c:45:3a:f6:31:5d:39:d5:a2:0a:a9:cf:
f9:6f:6e:be:cf:37:a9:78:2f:08:2f:e2:04:7a:b6:de:00:42:
7a:2b:3e:9c:40:58:b8:22:22:30:bf:c6:62:39:17:01:f8:42:
e9:fd:30:11:52:83:14:22:d5:0c:d2:6a:77:35:48:16:31:5a:
71:13:e5:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4DAnjhcD3UykbG1NmEx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZGJjZjliOGViMDM2MDQzYmI3ZjdiOGQzMzg2YmNlMjRk
NWRkNmUwHhcNMjUwODIzMDMwMTU4WhcNMjUwODI0MDMwMTU4WjAzMTEwLwYDVQQD
EygwOTkyYTA4YTFiYzVjZGU5ZjdlZTRkODc3NjU4YTJiYzNiOGQyODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+BAi7C89fSwQZaj+YjdlytQ8LPp
CQglpFoAexW/8UMo+ObMxA7nIJ85tx7z9wALg2MYaNajqETBlFVrEKc0lgJoE8Ic
AtY+E86rMGbplFqQrzT0I8Xkz1IeFXeYVdVI+rzzxow7o+u1Ryvej0dQTRxy/DfO
36jpkBkRBI8Z7j8xUHjeuSHT+9rNLfvn1HpuJ4Yl4GPgfsparFEF0TtcOVfpKW5N
cbh/SUt5yiHV71a3hS4C6yMjir/T/ozNJJR10arodYL+U9FGtAwsPMesmMcMLDZM
NPxwVqtMdbE06qeNGhTGdGKsuEN2qF+7Pasqic/OowcgcU7xjnmGboZRqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmSoIobxc3p9+5Nh3ZYorw7jSgPMB8GA1UdIwQY
MBaAFELbz5uOsDYEO7f3uNM4a84k1d1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUt
NDhhZTcwMTYxZTc5LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84MDg0MWEtODhhZS00YjBlLThlMjUtNDhhZTcwMTYxZTc5
LzEvUXR2UG00NndOZ1E3dF9lNDB6aHJ6aVRWM1c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbewc+vMu
JXNse8gRYw0XoUzMESFfs/FsNjzSyMBrwtuYe3qy7UlA7Meqz7R5Aux06mmf7jxo
Pl0fa5N6VIc1UP/9NGiTanxM8fbsza4BHrLxMQxKecaNBqfPkp36bRR4W3rq5/7f
AnbEL24KiSXVzzpz9FC8cxeqzJmZZV5RHiFDq0sgCGZOcWqtzHUp9aKLIFllwvEA
CS+gyVQUON7JNNyoldV614Hyik7mCpVMApOnwrd5Tb1dldWIPEU69jFdOdWiCqnP
+W9uvs83qXgvCC/iBHq23gBCeis+nEBYuCIiML/GYjkXAfhC6f0wEVKDFCLVDNJq
dzVIFjFacRPlzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:02 2025 by rpki-client