Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: RElFU72wQJnJ/mvpOZ1t+UkTPjuWJEJ3Rc/8PnMLkR4=
Subject key identifier: 96:A5:2F:16:2B:94:B1:93:95:19:7F:BB:C5:81:79:38:E5:95:A0:67
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 0198D51640716DDBBB5AD315C9EA179A9ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0D00
Signing time: Sat 23 Aug 2025 04:01:01 +0000
Manifest this update: Sat 23 Aug 2025 04:01:01 +0000
Manifest next update: Sun 24 Aug 2025 04:01:01 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: jTNuBHz1EqZIJPuBry7tRw21omxKpKYD9BPtz5reF80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:40:71:6d:db:bb:5a:d3:15:c9:ea:17:9a:9e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Aug 23 04:01:01 2025 GMT
Not After : Aug 24 04:01:01 2025 GMT
Subject: CN=96a52f162b94b19395197fbbc5817938e595a067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:57:5c:24:dc:3a:e5:77:04:3e:55:36:59:
09:e4:3b:83:b3:0a:8c:47:09:57:0a:13:ec:48:42:
03:39:e5:b0:9b:a1:41:cc:40:99:1e:92:31:d6:2c:
74:dc:fe:20:e8:49:94:1d:59:aa:bd:60:34:1d:92:
d4:44:d6:c3:f9:bb:9b:40:57:68:39:f8:4b:cf:e4:
97:05:c0:df:d2:8d:76:02:ae:f9:c8:84:5f:4a:8a:
7b:97:65:89:1f:11:14:55:af:eb:b0:f3:63:d8:40:
3d:74:ac:0b:9f:40:89:59:40:27:fd:d3:41:5b:9d:
cf:0b:d8:f3:39:ff:c6:2d:1a:94:73:99:7a:14:0a:
f2:42:ae:a2:f1:d7:e0:34:1a:76:25:58:9e:6e:a5:
e3:4e:d7:00:94:0e:a6:9e:bd:ab:d9:da:3a:46:73:
b8:f8:fc:78:bc:2d:16:b0:17:4e:a4:e4:7b:79:fa:
77:bc:88:86:7e:9e:ba:4e:c8:86:de:8c:6a:de:ce:
54:2f:5f:ef:58:8f:78:bd:11:0f:7e:66:71:46:b6:
4c:d1:1c:fd:0e:c3:00:e8:14:6a:af:94:7f:d6:f9:
78:98:37:a7:31:1e:46:c0:43:95:0e:38:ea:1a:80:
47:b9:e2:1b:70:1a:8c:46:e2:6a:9b:58:dd:bd:bb:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:2F:16:2B:94:B1:93:95:19:7F:BB:C5:81:79:38:E5:95:A0:67
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8a:d0:98:c2:ef:5c:1e:80:21:c7:87:4a:c0:72:ee:be:21:
32:81:b8:50:87:c5:09:25:ba:06:9e:e1:81:97:52:b2:be:99:
8e:08:69:c0:f1:d8:d2:7f:53:75:5d:cf:78:bd:07:7f:07:ab:
ca:48:19:b3:f5:de:f8:01:94:a5:7e:27:c7:0d:34:e0:7f:38:
d9:79:7b:38:2d:69:dc:5f:c5:72:78:3f:f2:4b:d9:e8:ca:de:
33:03:56:1f:9e:76:e7:49:1c:ec:50:b8:0c:9f:f1:7c:58:af:
cd:26:82:d1:62:9c:0a:c0:4b:0f:83:b3:80:09:4d:99:3e:8f:
c1:f6:fa:3e:e5:d0:34:d3:f8:a2:53:54:48:9b:c0:af:74:41:
6e:b8:fa:55:09:84:ac:1e:e2:b6:45:86:69:00:bc:cb:1a:97:
e2:62:18:f7:1e:41:30:1a:51:3b:c6:62:06:f8:6b:e8:5b:f1:
2c:16:ad:02:b5:da:5b:e0:5d:40:f4:50:e6:d5:03:62:ac:50:
97:4a:6e:0e:56:1e:79:6d:ec:5b:9c:d2:9b:39:d0:87:6b:9b:
cc:70:1e:3b:93:2d:55:f1:9c:95:db:f0:c5:dc:ff:09:4e:4f:
f4:52:7a:c9:e7:2e:2e:df:24:4e:1c:d8:59:bc:99:e5:af:57:
2e:13:03:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFkBxbdu7WtMVyeoXmp7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTFlNjM4YTJjYjk1YzY4YmJjNTRhMjcyODYwNWIyN2Y1
NzA2ODEwHhcNMjUwODIzMDQwMTAxWhcNMjUwODI0MDQwMTAxWjAzMTEwLwYDVQQD
Eyg5NmE1MmYxNjJiOTRiMTkzOTUxOTdmYmJjNTgxNzkzOGU1OTVhMDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5tXXCTcOuV3BD5VNlkJ5DuDswqM
RwlXChPsSEIDOeWwm6FBzECZHpIx1ix03P4g6EmUHVmqvWA0HZLURNbD+bubQFdo
OfhLz+SXBcDf0o12Aq75yIRfSop7l2WJHxEUVa/rsPNj2EA9dKwLn0CJWUAn/dNB
W53PC9jzOf/GLRqUc5l6FAryQq6i8dfgNBp2JViebqXjTtcAlA6mnr2r2do6RnO4
+Px4vC0WsBdOpOR7efp3vIiGfp66TsiG3oxq3s5UL1/vWI94vREPfmZxRrZM0Rz9
DsMA6BRqr5R/1vl4mDenMR5GwEOVDjjqGoBHueIbcBqMRuJqm1jdvbt69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJalLxYrlLGTlRl/u8WBeTjllaBnMB8GA1UdIwQY
MBaAFKlR5jiiy5XGi7xUonKGBbJ/VwaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEt
YWJkZjkwNmM1YWRlLzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDZlNzktZWQyYi00M2Q1LWI0YzEtYWJkZjkwNmM1YWRl
LzEvcVZIbU9LTExsY2FMdkZTaWNvWUZzbjlYQm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYrQmMLv
XB6AIceHSsBy7r4hMoG4UIfFCSW6Bp7hgZdSsr6ZjghpwPHY0n9TdV3PeL0Hfwer
ykgZs/Xe+AGUpX4nxw004H842Xl7OC1p3F/Fcng/8kvZ6MreMwNWH55250kc7FC4
DJ/xfFivzSaC0WKcCsBLD4OzgAlNmT6Pwfb6PuXQNNP4olNUSJvAr3RBbrj6VQmE
rB7itkWGaQC8yxqX4mIY9x5BMBpRO8ZiBvhr6FvxLBatArXaW+BdQPRQ5tUDYqxQ
l0puDlYeeW3sW5zSmznQh2ubzHAeO5MtVfGcldvwxdz/CU5P9FJ6yecuLt8kThzY
WbyZ5a9XLhMDqg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:26 2025 by rpki-client