Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: Hmdka3dBjVsw59ukzpYX37E/BsEr7qPs4UfB4CrUHrM=
Subject key identifier: AA:F9:4C:76:5E:62:E3:0C:91:FF:19:89:1D:E4:E1:3B:A4:AA:DB:61
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 0198D5837D74825C78A5CBECAC515E3FEF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 91
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: FeEiiWjAdJKymNjox7n7zCUc9Wk.roa (hash: dzt2dxmN6m2Hyo/H9hlkWWL7XeHHBgERvBsbJJztvYI=)
2: XBjHbo-JikUirnDC9mDO-NUnYF0.roa (hash: Kq6nw7oAp8kgVGJWvOFausntjkcQVXP1uvqCb3Bz6XI=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: lda84qkjRgAD+dnKR+aJBRsixaDWbYFZj3tsUr0Wr2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7d:74:82:5c:78:a5:cb:ec:ac:51:5e:3f:ef:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=aaf94c765e62e30c91ff19891de4e13ba4aadb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:32:77:7b:38:d6:bf:7d:22:53:3c:b0:ed:
8e:b4:f7:8e:38:21:16:7f:a0:e5:e6:fb:97:b9:fa:
b4:02:77:68:08:f8:e1:4c:3e:b6:9e:d0:da:c5:e0:
fc:d8:c6:8f:48:f5:c6:97:b0:29:cb:19:b3:08:5b:
35:31:6f:3b:47:3f:4f:4e:f9:b7:b1:a7:4d:73:6c:
a7:84:aa:e8:e2:0b:3f:4d:b5:ae:b9:71:3b:f7:c9:
49:3b:0d:de:8c:5e:6a:4c:02:51:3f:8b:90:e9:2c:
6b:8f:b1:e8:3e:bc:87:71:22:d8:a2:86:ad:0f:71:
08:79:f7:ac:a6:9e:8d:38:c5:aa:da:39:6b:de:13:
70:ec:a5:1d:55:fc:85:32:55:6b:d3:0e:ce:64:ec:
dc:00:b9:90:bd:ab:60:e2:7c:72:47:ff:19:9b:22:
27:2a:e3:58:9d:35:72:81:78:32:2c:1e:79:70:06:
33:8d:c2:cc:84:e9:51:c1:d4:07:1b:d8:c9:26:f8:
7c:83:01:22:aa:5d:00:fe:31:04:e7:1b:be:16:b8:
ad:1c:6f:70:61:82:f4:ce:58:62:ad:bc:9d:ef:72:
c9:b4:ef:aa:db:0b:9f:8a:d6:01:ba:be:42:1c:f6:
08:8e:f2:a2:9c:9e:39:84:27:93:d7:1b:58:6d:88:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F9:4C:76:5E:62:E3:0C:91:FF:19:89:1D:E4:E1:3B:A4:AA:DB:61
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:05:49:59:61:29:57:0d:da:5f:6d:07:bc:24:c8:61:5e:ef:
52:ea:42:26:f2:f1:e7:bd:8b:04:59:dc:2b:10:e4:d6:cd:be:
da:23:fc:c6:b8:ac:51:ff:45:0a:76:fe:4f:b4:dd:4b:4c:09:
fc:fa:41:05:28:a0:28:f2:21:9c:6e:08:b1:dd:35:10:12:68:
ac:bd:46:88:00:ce:29:5e:9d:83:2c:39:eb:0d:b5:a9:02:e1:
56:24:07:3a:48:72:e7:b0:60:7a:db:98:5a:da:21:17:57:66:
2e:9f:59:a5:9a:3e:a6:42:05:7c:95:c4:97:b3:88:d5:c9:a0:
77:67:84:5c:88:ca:08:0b:fa:43:24:5b:20:de:30:b8:e8:67:
6f:9c:b8:4d:1c:32:42:6e:c7:db:2a:1d:a5:8a:ea:13:43:04:
cb:03:c2:ad:48:30:59:82:dc:32:55:4e:f5:28:4d:35:f5:07:
f2:94:6f:2b:7f:8e:01:0a:82:d7:e5:a5:6d:7d:f7:e5:86:db:
cf:43:27:22:53:bc:46:e4:92:28:1c:79:5a:23:4f:c4:04:76:
10:a1:88:46:c2:63:27:08:fc:de:d0:51:10:24:b7:77:07:3f:
0f:e0:8e:93:d0:ea:29:7d:74:9a:df:b0:5e:df:07:10:13:f4:
b3:a0:1a:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg310glx4pcvsrFFeP+9gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTIxMjk1OGQ4ZTFiYWExNDRhODJhODIxZjkzYTg5MGRj
YmE0OWEwHhcNMjUwODIzMDYwMDIwWhcNMjUwODI0MDYwMDIwWjAzMTEwLwYDVQQD
EyhhYWY5NGM3NjVlNjJlMzBjOTFmZjE5ODkxZGU0ZTEzYmE0YWFkYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X4yd3s41r99IlM8sO2OtPeOOCEW
f6Dl5vuXufq0AndoCPjhTD62ntDaxeD82MaPSPXGl7ApyxmzCFs1MW87Rz9PTvm3
sadNc2ynhKro4gs/TbWuuXE798lJOw3ejF5qTAJRP4uQ6Sxrj7HoPryHcSLYooat
D3EIefespp6NOMWq2jlr3hNw7KUdVfyFMlVr0w7OZOzcALmQvatg4nxyR/8ZmyIn
KuNYnTVygXgyLB55cAYzjcLMhOlRwdQHG9jJJvh8gwEiql0A/jEE5xu+FritHG9w
YYL0zlhirbyd73LJtO+q2wufitYBur5CHPYIjvKinJ45hCeT1xtYbYj0mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKr5THZeYuMMkf8ZiR3k4TukqtthMB8GA1UdIwQY
MBaAFKpSEpWNjhuqFEqCqCH5OokNy6SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYt
YjQwMWE0YTA0NDkyLzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kOGU1ZTMtZjg5Ny00ZGEyLTlkZjYtYjQwMWE0YTA0NDky
LzEvcWxJU2xZMk9HNm9VU29Lb0lmazZpUTNMcEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgVJWWEp
Vw3aX20HvCTIYV7vUupCJvLx572LBFncKxDk1s2+2iP8xrisUf9FCnb+T7TdS0wJ
/PpBBSigKPIhnG4Isd01EBJorL1GiADOKV6dgyw56w21qQLhViQHOkhy57BgetuY
WtohF1dmLp9ZpZo+pkIFfJXEl7OI1cmgd2eEXIjKCAv6QyRbIN4wuOhnb5y4TRwy
Qm7H2yodpYrqE0MEywPCrUgwWYLcMlVO9ShNNfUH8pRvK3+OAQqC1+WlbX335Ybb
z0MnIlO8RuSSKBx5WiNPxAR2EKGIRsJjJwj83tBRECS3dwc/D+COk9DqKX10mt+w
Xt8HEBP0s6AaWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:20 2025 by rpki-client