Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: ySr/VguA6SnYzXpZpwVAdwkQ81dhmONgu++dMZ/LcoI=
Subject key identifier: B4:94:38:9E:04:65:98:A9:2E:02:A3:AB:79:1C:5A:98:DE:02:87:28
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 0198D660292ADEF8B2C02FFE8FD815E66E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 078D
Signing time: Sat 23 Aug 2025 10:01:22 +0000
Manifest this update: Sat 23 Aug 2025 10:01:22 +0000
Manifest next update: Sun 24 Aug 2025 10:01:22 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: G+hlocgi+p+78kHCQyD4tk1g/c/taTXchQGEI9bpDaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:29:2a:de:f8:b2:c0:2f:fe:8f:d8:15:e6:6e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Aug 23 10:01:22 2025 GMT
Not After : Aug 24 10:01:22 2025 GMT
Subject: CN=b494389e046598a92e02a3ab791c5a98de028728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:ba:0b:ad:45:b6:94:4a:66:b6:6f:97:4f:
c4:de:32:af:c0:4b:00:c1:ed:1d:cb:d3:bc:11:51:
37:bc:02:3a:27:cf:af:47:50:70:4e:24:2a:61:ac:
71:a4:08:1c:4a:b6:11:13:5d:d3:3e:d3:c0:b8:b0:
3e:47:a4:34:7b:79:eb:29:40:a9:a6:fe:2e:52:c4:
33:d2:f5:82:34:6d:88:f6:1e:c0:bb:6e:e0:ad:6c:
62:b4:74:ab:59:19:5e:95:c6:1f:20:ff:3e:fe:0d:
33:e6:68:a7:88:59:f1:81:9b:39:32:3a:54:54:58:
ef:8f:29:78:50:ce:c7:77:34:ed:e5:fb:f4:0b:4e:
7c:62:f6:db:e6:03:f3:f1:e5:31:18:77:ba:f8:54:
0e:00:30:ca:65:b4:f1:d2:93:e9:09:3f:cd:a8:f3:
11:c8:a7:f4:de:07:64:97:d2:f4:1a:73:92:34:98:
d3:f8:d5:11:c5:67:85:9c:56:3e:a2:32:96:41:ba:
9f:00:84:4c:8e:c5:50:83:b3:09:07:c1:b8:22:fb:
c7:d3:1e:5d:2b:e1:92:53:1b:01:6e:ef:f8:40:c1:
88:29:ed:e4:72:c4:15:62:cd:db:21:7b:03:a8:95:
ed:89:c6:c5:19:30:5d:58:e9:85:a7:15:94:e8:70:
c6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:38:9E:04:65:98:A9:2E:02:A3:AB:79:1C:5A:98:DE:02:87:28
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:c0:1d:19:f3:13:84:64:81:41:98:35:bd:69:e2:9b:4f:
25:5a:46:7b:fe:70:1d:33:e0:05:cb:7d:62:fa:87:20:5d:dc:
86:25:d8:ce:11:7c:0e:6f:cd:41:37:31:53:8a:b2:94:71:2f:
0d:23:4f:fc:76:91:ee:37:0c:a4:e8:73:d4:b4:b6:fc:2a:94:
dd:d4:e6:72:38:b0:98:74:6b:5c:c2:db:40:3c:42:19:c2:1f:
80:73:be:19:d4:4c:01:49:ea:4b:4e:42:9c:93:ad:dd:83:f1:
55:9e:ab:66:b5:2d:e3:ca:1e:e8:c7:c6:19:f9:05:04:c6:56:
9c:c9:c4:eb:3c:58:51:a7:a2:2d:0e:ac:7e:7a:59:e7:74:05:
3c:e1:ed:7f:83:d2:a6:fc:d7:f7:7e:b8:fa:44:4b:0c:93:91:
08:7b:bd:81:a2:c1:7f:10:f9:78:1d:3a:73:5c:64:0c:b4:9c:
1c:78:58:29:18:4f:09:76:38:c6:01:b1:1a:82:59:d6:ed:f3:
89:37:dd:e4:38:ab:15:10:d6:f6:63:e8:93:ab:0d:80:b3:16:
07:8a:1b:e1:93:0d:26:ba:d0:75:01:e2:37:0e:a6:7f:4a:52:
25:f4:69:db:65:f5:7e:8c:39:43:e7:b3:49:ae:b5:6b:e2:00:
59:00:88:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCkq3viywC/+j9gV5m5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUzNGJhM2NiNDI0Y2Y1YzVlM2JhMjU0YmEyMzI1MDgw
NjU4YjAwHhcNMjUwODIzMTAwMTIyWhcNMjUwODI0MTAwMTIyWjAzMTEwLwYDVQQD
EyhiNDk0Mzg5ZTA0NjU5OGE5MmUwMmEzYWI3OTFjNWE5OGRlMDI4NzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EG6C61FtpRKZrZvl0/E3jKvwEsA
we0dy9O8EVE3vAI6J8+vR1BwTiQqYaxxpAgcSrYRE13TPtPAuLA+R6Q0e3nrKUCp
pv4uUsQz0vWCNG2I9h7Au27grWxitHSrWRlelcYfIP8+/g0z5miniFnxgZs5MjpU
VFjvjyl4UM7HdzTt5fv0C058Yvbb5gPz8eUxGHe6+FQOADDKZbTx0pPpCT/NqPMR
yKf03gdkl9L0GnOSNJjT+NURxWeFnFY+ojKWQbqfAIRMjsVQg7MJB8G4IvvH0x5d
K+GSUxsBbu/4QMGIKe3kcsQVYs3bIXsDqJXticbFGTBdWOmFpxWU6HDGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSUOJ4EZZipLgKjq3kcWpjeAocoMB8GA1UdIwQY
MBaAFKjVNLo8tCTPXF47olS6IyUIBliwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83MzcyNGEtMWQwYS00OWMzLWFjNjct
ZTc3YWVkNmY2ZTNhLzEvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83MzcyNGEtMWQwYS00OWMzLWFjNjctZTc3YWVkNmY2ZTNh
LzEvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYrAHRnz
E4RkgUGYNb1p4ptPJVpGe/5wHTPgBct9YvqHIF3chiXYzhF8Dm/NQTcxU4qylHEv
DSNP/HaR7jcMpOhz1LS2/CqU3dTmcjiwmHRrXMLbQDxCGcIfgHO+GdRMAUnqS05C
nJOt3YPxVZ6rZrUt48oe6MfGGfkFBMZWnMnE6zxYUaeiLQ6sfnpZ53QFPOHtf4PS
pvzX9364+kRLDJORCHu9gaLBfxD5eB06c1xkDLScHHhYKRhPCXY4xgGxGoJZ1u3z
iTfd5DirFRDW9mPok6sNgLMWB4ob4ZMNJrrQdQHiNw6mf0pSJfRp22X1fow5Q+ez
Sa61a+IAWQCIaw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:40:54 2025 by rpki-client