
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
File: qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json)
Hash identifier: jS6kWV8WhVq6pGW8Ha8AB/SvMS1Asv4TMX8g/dRyNBk=
Subject key identifier: 10:E4:8D:26:0E:A1:72:E7:D3:8C:A1:43:23:0C:40:B4:84:11:B3:27
Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
Certificate issuer: /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Certificate serial: 0198D705C4825C03846EF32783387088D536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
Manifest number: 0586
Signing time: Sat 23 Aug 2025 13:02:16 +0000
Manifest this update: Sat 23 Aug 2025 13:02:16 +0000
Manifest next update: Sun 24 Aug 2025 13:02:16 +0000
Files and hashes: 1: gHCDIdhOuUpwW3kY6kopG285_k0.roa (hash: 5xiT0kgNZs49N5lk+a3OABaCYPVOiGuQ90iKWrfQblE=)
2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: POpzsuAqh3+NHgv261jdYTu+uUr4L6OLyXnOsH90qEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c4:82:5c:03:84:6e:f3:27:83:38:70:88:d5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Validity
Not Before: Aug 23 13:02:16 2025 GMT
Not After : Aug 24 13:02:16 2025 GMT
Subject: CN=10e48d260ea172e7d38ca143230c40b48411b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:ba:ba:2b:9a:2e:ec:61:28:db:ce:57:fb:
8a:b4:aa:0a:98:aa:b0:bd:d8:03:a0:28:bb:07:29:
0c:f3:d0:c8:df:74:a8:5f:69:c3:36:0f:10:bd:5c:
fc:e4:73:bf:b2:27:5e:41:9a:3a:83:1b:ca:9d:11:
5e:93:7f:b0:df:26:b6:13:ec:cf:dc:35:ab:7f:82:
17:0f:93:fb:d4:dd:41:fa:df:53:33:c6:f3:2e:98:
7b:4f:54:db:9c:e1:29:3d:3d:dc:6b:fb:75:ef:a6:
cf:00:7d:a3:93:42:e2:73:92:7d:47:db:fd:0b:4b:
d2:62:12:8d:3c:61:80:1e:11:bc:95:d9:f7:48:e8:
2a:5e:87:b2:b1:1b:54:f2:2d:2a:dc:e5:82:ef:a1:
a9:f7:81:ad:06:f9:ca:5c:2a:45:f6:da:6b:65:47:
7e:c5:c8:07:76:d1:de:48:58:d2:3b:f0:6a:88:fe:
1f:77:1f:cc:d5:05:00:60:b7:59:6b:41:0c:72:59:
19:39:13:c7:9b:29:25:e0:be:7b:98:42:ab:8c:27:
cc:e3:df:f6:dd:7e:c9:53:4f:79:39:9c:8b:6f:8b:
11:66:7f:d1:1f:b5:e6:58:9f:78:af:85:95:ab:06:
a8:bb:a8:05:f3:82:28:09:74:85:5c:03:f3:b2:41:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:8D:26:0E:A1:72:E7:D3:8C:A1:43:23:0C:40:B4:84:11:B3:27
X509v3 Authority Key Identifier:
keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ee:3c:fb:38:43:43:8a:d9:6a:bb:00:12:03:36:45:06:7d:
4c:61:40:6c:22:f7:ae:61:50:38:4a:13:49:ef:7d:41:1d:e2:
ab:e5:1f:29:f7:34:ab:92:e4:42:8d:00:a1:41:a1:14:45:12:
c1:e3:72:59:f8:c8:93:d5:40:5a:ca:98:1b:34:86:cb:c7:f8:
3f:23:83:81:37:eb:b4:cf:54:1a:5d:77:cf:e2:94:a8:c4:cf:
79:ca:5b:19:4e:c7:f8:4f:eb:14:da:19:0b:d7:98:e2:43:ea:
05:c8:5d:67:87:56:5c:b0:7a:e1:df:f5:4f:f2:e5:c4:77:a1:
65:41:a8:3b:2c:fb:b2:dc:50:12:a7:69:72:58:d3:72:ad:bf:
19:09:af:74:65:a2:fc:91:55:6b:64:ff:9e:20:13:e6:15:d5:
09:9a:7b:ac:9a:04:42:35:05:35:2f:30:6c:21:42:bf:db:7f:
5d:80:c4:a4:9d:94:bb:db:ce:ee:ff:2d:62:c3:9d:df:00:b7:
f4:14:e4:2c:46:12:df:ba:e2:39:c4:eb:e3:93:98:37:10:ba:
68:07:d9:cf:9c:85:16:18:b5:c7:35:8f:65:42:7f:a0:21:e3:
d2:25:25:a6:5c:4a:d9:bb:0b:b5:75:c1:63:90:d3:25:67:c0:
d4:f1:ce:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBcSCXAOEbvMngzhwiNU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjIwN2ZkNTBjNDVlOTZmMjgyNWVjNzcyY2Y2YjhkZWEz
ZGZjYjAwHhcNMjUwODIzMTMwMjE2WhcNMjUwODI0MTMwMjE2WjAzMTEwLwYDVQQD
EygxMGU0OGQyNjBlYTE3MmU3ZDM4Y2ExNDMyMzBjNDBiNDg0MTFiMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6G6uiuaLuxhKNvOV/uKtKoKmKqw
vdgDoCi7BykM89DI33SoX2nDNg8QvVz85HO/sideQZo6gxvKnRFek3+w3ya2E+zP
3DWrf4IXD5P71N1B+t9TM8bzLph7T1TbnOEpPT3ca/t176bPAH2jk0Lic5J9R9v9
C0vSYhKNPGGAHhG8ldn3SOgqXoeysRtU8i0q3OWC76Gp94GtBvnKXCpF9tprZUd+
xcgHdtHeSFjSO/BqiP4fdx/M1QUAYLdZa0EMclkZORPHmykl4L57mEKrjCfM49/2
3X7JU095OZyLb4sRZn/RH7XmWJ94r4WVqwaou6gF84IoCXSFXAPzskFcowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDkjSYOoXLn04yhQyMMQLSEEbMnMB8GA1UdIwQY
MBaAFKgiB/1QxF6W8oJex3LPa43qPfywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUt
MzBiZGQyZmUwNWIxLzEvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hYThlNDMtNmRmMC00N2VmLWFkYzUtMzBiZGQyZmUwNWIx
LzEvcUNJSF9WREVYcGJ5Z2w3SGNzOXJqZW85X0xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe48+zhD
Q4rZarsAEgM2RQZ9TGFAbCL3rmFQOEoTSe99QR3iq+UfKfc0q5LkQo0AoUGhFEUS
weNyWfjIk9VAWsqYGzSGy8f4PyODgTfrtM9UGl13z+KUqMTPecpbGU7H+E/rFNoZ
C9eY4kPqBchdZ4dWXLB64d/1T/LlxHehZUGoOyz7stxQEqdpcljTcq2/GQmvdGWi
/JFVa2T/niAT5hXVCZp7rJoEQjUFNS8wbCFCv9t/XYDEpJ2Uu9vO7v8tYsOd3wC3
9BTkLEYS37riOcTr45OYNxC6aAfZz5yFFhi1xzWPZUJ/oCHj0iUlplxK2bsLtXXB
Y5DTJWfA1PHODA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:19 2025 by rpki-client