Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: Q13lDe/rcQZ1adSJNSrR6DNDDARj/H40v0mdeWcQIW4=
Subject key identifier: BA:6E:8F:52:44:29:15:E2:A2:EE:31:F4:3B:2F:D9:0D:2D:C1:87:DB
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 019853E8ABDB30A30898DC9E76BAB28BF99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 160B
Signing time: Tue 29 Jul 2025 02:00:13 +0000
Manifest this update: Tue 29 Jul 2025 02:00:13 +0000
Manifest next update: Wed 30 Jul 2025 02:00:13 +0000
Files and hashes: 1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: 9QutPs9mVzfO5cM0CzZi1yLOdYZEVdLY4pBr2ayONR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:ab:db:30:a3:08:98:dc:9e:76:ba:b2:8b:f9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Jul 29 02:00:13 2025 GMT
Not After : Jul 30 02:00:13 2025 GMT
Subject: CN=ba6e8f52442915e2a2ee31f43b2fd90d2dc187db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:51:c8:62:c0:5c:a0:e6:b4:fd:e3:e5:8b:
c2:eb:dd:71:41:84:fa:50:e7:43:80:f8:8d:b6:3b:
19:07:25:32:d5:32:70:0f:2e:19:d1:63:b8:ed:ad:
40:2d:63:5a:a8:e1:fd:e1:65:20:df:57:a6:5a:3e:
22:a1:90:08:d7:97:d9:17:00:e9:c8:04:db:58:e2:
86:ac:24:d0:2e:5e:0b:45:f6:55:c3:47:dd:43:3f:
fa:8e:dc:23:6d:ae:5e:36:fb:96:78:bb:a3:f1:17:
01:a4:31:34:04:e5:e5:34:06:37:a7:e8:da:35:53:
cf:e9:a9:94:29:cc:c6:3c:de:fa:31:43:3f:49:a3:
0e:78:05:35:19:e1:1e:8f:87:90:ff:d7:e6:b2:72:
88:fc:bc:03:e2:43:75:21:54:5a:35:a8:01:6c:5c:
50:84:0b:20:80:88:61:c1:e9:ff:c9:24:ed:5d:43:
78:c2:57:bf:05:9c:d5:0e:77:0b:80:a8:f7:bb:64:
77:88:94:3e:9e:4d:c4:df:5d:20:6f:68:88:e5:89:
b2:b9:7b:cc:fa:9e:cd:ab:1a:ae:b9:29:39:57:97:
e4:a9:49:a1:8d:70:80:f9:f7:14:32:3f:06:86:35:
58:4f:ae:f9:12:15:80:bb:22:b3:50:4a:9a:86:6e:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:8F:52:44:29:15:E2:A2:EE:31:F4:3B:2F:D9:0D:2D:C1:87:DB
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:20:72:50:85:49:0b:3a:d7:48:ee:21:c6:ea:8a:69:a1:27:
47:88:b1:14:d5:0e:cc:7a:3e:43:12:00:90:a0:1d:5b:52:d9:
ed:c2:e0:1b:e1:65:38:bd:76:ee:00:f9:f0:62:a4:75:65:fc:
d2:48:80:71:e5:5f:35:a9:bf:88:0f:ff:c2:e0:f9:8d:6b:36:
c9:9f:af:60:12:bf:f9:ea:da:7b:c1:9c:2d:ae:ca:a9:0d:4f:
f8:c6:ea:2d:c0:b1:dd:46:9a:ce:2c:0f:91:de:5f:c2:9c:58:
1b:c3:a6:b8:1c:85:e1:84:6f:2a:f7:e9:55:c5:52:a3:66:44:
c5:78:bd:da:de:38:7e:19:a9:7c:51:f0:37:ed:01:49:e2:55:
6b:60:61:41:b0:90:6f:11:a9:77:3c:c8:84:75:7f:be:1e:03:
09:58:ca:bc:60:d5:d7:f5:d8:b8:28:e5:fa:b5:1d:d8:6d:c0:
9c:4a:dc:6e:4c:52:ba:6e:ce:9c:7e:58:e3:da:2f:75:7b:b2:
02:52:04:4b:e2:ba:aa:89:48:1c:73:84:35:33:f1:e8:55:7d:
74:dd:4d:7e:77:83:95:95:c0:5f:32:36:55:aa:e6:1a:a8:b8:
56:d4:9f:7d:22:95:90:61:fa:ee:dc:43:62:da:38:d6:af:f5:
14:e5:85:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhT6KvbMKMImNyedrqyi/mdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMmU1YjY3ZjI1Y2JkODgyY2E0ZDAyM2QyMWVmOThkNDgz
NzM1ZGIwHhcNMjUwNzI5MDIwMDEzWhcNMjUwNzMwMDIwMDEzWjAzMTEwLwYDVQQD
EyhiYTZlOGY1MjQ0MjkxNWUyYTJlZTMxZjQzYjJmZDkwZDJkYzE4N2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKNRyGLAXKDmtP3j5YvC691xQYT6
UOdDgPiNtjsZByUy1TJwDy4Z0WO47a1ALWNaqOH94WUg31emWj4ioZAI15fZFwDp
yATbWOKGrCTQLl4LRfZVw0fdQz/6jtwjba5eNvuWeLuj8RcBpDE0BOXlNAY3p+ja
NVPP6amUKczGPN76MUM/SaMOeAU1GeEej4eQ/9fmsnKI/LwD4kN1IVRaNagBbFxQ
hAsggIhhwen/ySTtXUN4wle/BZzVDncLgKj3u2R3iJQ+nk3E310gb2iI5YmyuXvM
+p7NqxquuSk5V5fkqUmhjXCA+fcUMj8GhjVYT675EhWAuyKzUEqahm4S+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpuj1JEKRXiou4x9Dsv2Q0twYfbMB8GA1UdIwQY
MBaAFKsuW2fyXL2ILKTQI9Ie+Y1INzXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEt
M2Y2ZWMyNDk3MTdjLzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEtM2Y2ZWMyNDk3MTdj
LzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiByUIVJ
CzrXSO4hxuqKaaEnR4ixFNUOzHo+QxIAkKAdW1LZ7cLgG+FlOL127gD58GKkdWX8
0kiAceVfNam/iA//wuD5jWs2yZ+vYBK/+erae8GcLa7KqQ1P+MbqLcCx3UaaziwP
kd5fwpxYG8OmuByF4YRvKvfpVcVSo2ZExXi92t44fhmpfFHwN+0BSeJVa2BhQbCQ
bxGpdzzIhHV/vh4DCVjKvGDV1/XYuCjl+rUd2G3AnErcbkxSum7OnH5Y49ovdXuy
AlIES+K6qolIHHOENTPx6FV9dN1NfneDlZXAXzI2VarmGqi4VtSffSKVkGH67txD
Yto41q/1FOWFgA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:31:37 2025 by rpki-client