Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json)
Hash identifier: DAM1CiQg0VlCLzA+S8Wjz5DnKd5IJ2gxCxRqMLLBbVo=
Subject key identifier: 01:D1:92:68:06:67:E2:FC:26:0C:3D:12:26:AC:C7:03:20:2F:4C:A3
Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Certificate serial: 0198D84F51ECE1DFA0149222BBC0DD0679FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 19:02:13 +0000
Manifest this update: Sat 23 Aug 2025 19:02:13 +0000
Manifest next update: Sun 24 Aug 2025 19:02:13 +0000
Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: cJdIdEpwTz4bzmhTOjfRBfHEgZFZDjuQje721PUOy/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:51:ec:e1:df:a0:14:92:22:bb:c0:dd:06:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Validity
Not Before: Aug 23 19:02:13 2025 GMT
Not After : Aug 24 19:02:13 2025 GMT
Subject: CN=01d192680667e2fc260c3d1226acc703202f4ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:2f:7c:de:c7:ab:51:01:1b:ea:88:f1:14:
a1:74:e9:dc:0c:dc:7d:96:43:1f:a7:65:ce:bf:8f:
40:70:3c:b0:e9:aa:6b:98:b4:b6:10:55:bc:6e:c7:
a8:18:b1:93:33:ec:d1:4c:ca:2c:69:75:57:b3:17:
96:10:17:82:68:45:46:b1:be:ee:8c:6c:05:6e:4a:
90:f1:cd:38:ae:42:33:b0:eb:95:e2:e0:e1:8b:c2:
a1:55:a5:bd:db:39:3e:f9:ca:31:92:d0:c5:03:ad:
09:10:63:53:07:ad:91:35:52:f1:ff:1b:d3:41:49:
89:12:7e:da:93:36:63:9f:1b:aa:e5:c8:45:e0:e1:
46:63:13:3b:77:0c:fc:ed:c3:84:9d:21:0c:a3:7b:
1a:87:71:78:b4:a0:ae:d5:07:e3:1e:cb:0d:45:d1:
e3:1b:a0:08:52:a7:47:f0:dd:99:6e:f4:65:2a:aa:
d7:82:17:c8:ac:42:bf:ae:85:38:99:44:d2:00:e9:
ac:d0:26:40:58:07:b0:0a:89:c3:dc:50:03:af:7a:
96:3e:88:c1:3f:4d:0e:61:05:96:1a:d9:34:60:1c:
b0:52:22:1b:b3:20:77:01:cb:33:ed:94:1c:d6:d1:
56:b4:3e:f8:be:60:22:43:8c:c6:1e:2f:c8:7a:39:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:92:68:06:67:E2:FC:26:0C:3D:12:26:AC:C7:03:20:2F:4C:A3
X509v3 Authority Key Identifier:
keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:27:25:57:13:d0:2e:7c:19:1f:db:0d:1b:de:36:f8:a0:67:
39:0a:d7:bd:77:da:13:2e:d1:01:41:3e:80:fc:83:93:55:f3:
a8:f7:a9:cd:71:f8:da:5c:e4:ff:2a:3e:d7:36:b5:73:f6:10:
51:43:e6:0d:f4:5e:cc:bf:1e:97:34:47:44:74:13:67:61:2c:
f6:39:ed:43:c9:1d:27:81:ce:46:03:b5:fc:f9:56:60:11:1a:
c4:c4:b3:d3:1d:d3:a0:67:ae:5c:9f:38:4e:3d:70:b5:4a:98:
66:c2:40:7a:59:79:d4:c6:8b:f3:8c:53:94:77:c5:00:1e:91:
18:4b:b9:21:9f:83:9e:c4:71:44:fe:cf:da:20:0f:27:7c:5a:
7d:3e:48:c7:67:5e:cb:16:35:c6:de:a1:8f:b2:a2:f5:35:1a:
6f:82:5d:8d:26:89:c1:94:6c:51:ba:db:ca:6b:c6:44:c1:e7:
34:ce:cc:ef:33:c2:87:4e:bf:92:64:e7:b4:82:05:29:30:33:
50:33:75:4d:db:ab:06:17:93:a6:fb:22:0f:5b:59:d0:04:a3:
85:aa:72:4e:49:95:3b:24:28:e8:6b:57:a2:ac:60:6a:3a:92:
66:c4:2b:a2:c5:28:05:04:82:35:ce:ff:fa:22:f6:9c:4d:e4:
f7:97:18:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT1Hs4d+gFJIiu8DdBnn9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NmE1MzYxMGQ4ZWY2NjRhMTI3NWI3MWFhZWFiYjI4NTEw
NGMyNGYwHhcNMjUwODIzMTkwMjEzWhcNMjUwODI0MTkwMjEzWjAzMTEwLwYDVQQD
EygwMWQxOTI2ODA2NjdlMmZjMjYwYzNkMTIyNmFjYzcwMzIwMmY0Y2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8UvfN7Hq1EBG+qI8RShdOncDNx9
lkMfp2XOv49AcDyw6aprmLS2EFW8bseoGLGTM+zRTMosaXVXsxeWEBeCaEVGsb7u
jGwFbkqQ8c04rkIzsOuV4uDhi8KhVaW92zk++coxktDFA60JEGNTB62RNVLx/xvT
QUmJEn7akzZjnxuq5chF4OFGYxM7dwz87cOEnSEMo3sah3F4tKCu1QfjHssNRdHj
G6AIUqdH8N2ZbvRlKqrXghfIrEK/roU4mUTSAOms0CZAWAewConD3FADr3qWPojB
P00OYQWWGtk0YBywUiIbsyB3Acsz7ZQc1tFWtD74vmAiQ4zGHi/IejntLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHRkmgGZ+L8Jgw9EiasxwMgL0yjMB8GA1UdIwQY
MBaAFKlqU2ENjvZkoSdbcarquyhRBMJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81YTAxN2MtYTNkYy00NGNmLWI4MGUt
YTIxMTE3NWMwNWUwLzEvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81YTAxN2MtYTNkYy00NGNmLWI4MGUtYTIxMTE3NWMwNWUw
LzEvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiclVxPQ
LnwZH9sNG942+KBnOQrXvXfaEy7RAUE+gPyDk1XzqPepzXH42lzk/yo+1za1c/YQ
UUPmDfRezL8elzRHRHQTZ2Es9jntQ8kdJ4HORgO1/PlWYBEaxMSz0x3ToGeuXJ84
Tj1wtUqYZsJAell51MaL84xTlHfFAB6RGEu5IZ+DnsRxRP7P2iAPJ3xafT5Ix2de
yxY1xt6hj7Ki9TUab4JdjSaJwZRsUbrbymvGRMHnNM7M7zPCh06/kmTntIIFKTAz
UDN1TdurBheTpvsiD1tZ0ASjhapyTkmVOyQo6GtXoqxgajqSZsQrosUoBQSCNc7/
+iL2nE3k95cYPA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:07 2025 by rpki-client