Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File: qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier: +pzVio7Gj3YNnvkNBacj4cfCb6reS5FlaGZlRpdzOAs=
Subject key identifier: 61:F9:1C:FF:CD:66:B2:B1:28:82:B3:AC:73:67:40:4C:F9:5F:22:51
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial: 0198D583ABB810C9FE190F088CB87F2E2529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number: 0900
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: GdFyzn154kHkAJaJaVpPif7+4JV4X5toZn7tYOwx6Io=)
2: tDo_atpT6VLkLCUrGS5di7JdOpY.roa (hash: 34FZjfIchoZn3cBM50GZegDU3woCBReTpheCA5hB7FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ab:b8:10:c9:fe:19:0f:08:8c:b8:7f:2e:25:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=61f91cffcd66b2b12882b3ac7367404cf95f2251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:71:a0:b2:4e:31:67:d8:19:12:52:63:61:
b4:79:98:cc:6f:3b:34:42:89:72:42:da:79:72:39:
ea:6e:ae:a4:d7:e4:67:db:69:b4:99:5f:16:ed:b2:
a7:e9:5a:88:19:bf:1c:fd:70:c0:6e:ee:db:ee:13:
b2:50:c8:b9:54:a8:85:63:ad:a7:58:aa:63:13:a8:
4a:de:22:72:08:5d:2f:f9:bf:62:de:6c:b2:4e:ef:
0e:c6:ca:04:a5:51:b7:ba:2d:ec:a1:37:4f:3b:84:
5e:ba:44:0e:91:ed:49:c7:13:88:28:51:af:eb:2d:
fc:8d:e8:c7:2b:97:e1:06:a6:03:e0:a5:f0:ee:a2:
57:ec:ba:79:ac:ae:65:35:f4:e4:4b:cc:fe:75:52:
4d:f3:95:de:86:14:68:a1:f3:f3:90:28:a6:99:f3:
07:f8:6f:f8:59:52:bf:9a:fd:de:ff:85:56:ed:4a:
f5:14:22:76:f9:04:c8:93:bb:ac:c8:27:cb:08:82:
de:fd:da:72:73:b0:26:03:0a:2b:43:f9:9a:86:1c:
ce:08:d4:62:4d:b8:35:45:9f:7d:25:ed:84:ef:f5:
cc:a3:f5:e3:95:04:b5:b8:aa:66:62:76:1d:3e:e8:
2f:bc:6c:7c:a6:92:f4:01:43:08:b1:2c:e3:e6:e5:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F9:1C:FF:CD:66:B2:B1:28:82:B3:AC:73:67:40:4C:F9:5F:22:51
X509v3 Authority Key Identifier:
keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:51:24:a1:7d:d9:79:da:12:7b:1c:64:c0:a5:d9:7f:8b:99:
fd:fb:fa:cd:16:f8:b8:e3:81:a0:11:0c:44:90:3f:7f:db:ab:
4e:97:0a:41:95:f8:68:cb:20:d8:b0:6a:76:52:ad:72:f1:d1:
f9:22:d0:e4:52:e2:9d:1f:51:88:fd:b3:aa:9c:53:64:f0:d0:
7c:19:09:37:4b:d9:c3:ed:e3:52:27:86:f8:c2:5b:3f:61:9a:
8d:17:22:1c:95:09:4c:c8:67:dc:2e:2b:42:78:48:63:45:88:
8f:21:aa:e7:04:08:82:ac:3c:2a:3d:ca:34:29:a6:5d:b3:e2:
b0:f8:fe:f8:c0:37:d7:e1:03:0b:05:fa:e2:28:4a:0d:d1:5e:
d8:4d:e0:32:18:77:a4:4d:f6:0b:e5:25:6d:1b:8e:8a:75:24:
95:1d:6d:c2:b9:aa:de:b4:ba:db:42:a6:6a:07:97:09:a7:e2:
fe:8a:22:66:9d:fa:00:11:5a:e5:6d:f3:62:d7:b7:54:eb:02:
57:0f:9f:e2:0e:f8:a3:ca:5e:ae:ed:90:03:5e:bd:2e:6c:7b:
0f:12:9e:18:e1:fd:ee:ce:d8:f2:fd:0d:5f:74:56:ae:e4:27:
ee:d3:0f:55:a6:6c:a5:87:f7:79:40:bc:ad:9d:e3:51:5f:98:
88:d4:95:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg6u4EMn+GQ8IjLh/LiUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NjhhZGYxMjBhNzRhNWQxMDgwOWNmZDNjYjY4MTRmYzg5
YjFmNDYwHhcNMjUwODIzMDYwMDMyWhcNMjUwODI0MDYwMDMyWjAzMTEwLwYDVQQD
Eyg2MWY5MWNmZmNkNjZiMmIxMjg4MmIzYWM3MzY3NDA0Y2Y5NWYyMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk29xoLJOMWfYGRJSY2G0eZjMbzs0
QolyQtp5cjnqbq6k1+Rn22m0mV8W7bKn6VqIGb8c/XDAbu7b7hOyUMi5VKiFY62n
WKpjE6hK3iJyCF0v+b9i3myyTu8OxsoEpVG3ui3soTdPO4ReukQOke1JxxOIKFGv
6y38jejHK5fhBqYD4KXw7qJX7Lp5rK5lNfTkS8z+dVJN85XehhRoofPzkCimmfMH
+G/4WVK/mv3e/4VW7Ur1FCJ2+QTIk7usyCfLCILe/dpyc7AmAworQ/mahhzOCNRi
Tbg1RZ99Je2E7/XMo/XjlQS1uKpmYnYdPugvvGx8ppL0AUMIsSzj5uU13QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH5HP/NZrKxKIKzrHNnQEz5XyJRMB8GA1UdIwQY
MBaAFKlorfEgp0pdEICc/Ty2gU/Imx9GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2It
ODBjZTQ1ODYxMjM5LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jNGIyMTEtYzA4OS00YzA1LTgwM2ItODBjZTQ1ODYxMjM5
LzEvcVdpdDhTQ25TbDBRZ0p6OVBMYUJUOGliSDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVEkoX3Z
edoSexxkwKXZf4uZ/fv6zRb4uOOBoBEMRJA/f9urTpcKQZX4aMsg2LBqdlKtcvHR
+SLQ5FLinR9RiP2zqpxTZPDQfBkJN0vZw+3jUieG+MJbP2GajRciHJUJTMhn3C4r
QnhIY0WIjyGq5wQIgqw8Kj3KNCmmXbPisPj++MA31+EDCwX64ihKDdFe2E3gMhh3
pE32C+UlbRuOinUklR1twrmq3rS620KmageXCafi/ooiZp36ABFa5W3zYte3VOsC
Vw+f4g74o8peru2QA169Lmx7DxKeGOH97s7Y8v0NX3RWruQn7tMPVaZspYf3eUC8
rZ3jUV+YiNSVqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:08 2025 by rpki-client