Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: FJeATxaJXQ8c5JePUXopqchFTzlRIeoIs8wW3mPQLW8=
Subject key identifier: 68:E1:9D:86:0E:0A:15:93:4B:BE:0B:C0:7B:DC:C0:39:DF:BB:33:AA
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 01985645807046C89A0EB62C1FC9C779998D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0F0B
Signing time: Tue 29 Jul 2025 13:00:52 +0000
Manifest this update: Tue 29 Jul 2025 13:00:52 +0000
Manifest next update: Wed 30 Jul 2025 13:00:52 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: UHtQnTC6iDFSQDO7b8fkrDAqHJUJLZeX8l88Fw2gkx4=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:45:80:70:46:c8:9a:0e:b6:2c:1f:c9:c7:79:99:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jul 29 13:00:52 2025 GMT
Not After : Jul 30 13:00:52 2025 GMT
Subject: CN=68e19d860e0a15934bbe0bc07bdcc039dfbb33aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:0b:d3:49:63:2b:41:a7:26:64:bd:df:0b:
6d:c9:7c:97:96:38:d1:1f:3c:6d:aa:36:a2:a3:cf:
25:c8:fa:6c:06:97:58:e3:77:f1:71:f0:df:62:83:
26:83:fe:c1:5d:e2:06:f0:b5:4b:ec:4d:0e:79:a7:
ad:24:b7:00:d9:ad:e2:61:b0:c8:24:c8:d3:ce:68:
8d:7a:0c:dc:c9:76:6a:86:99:8a:cc:8c:09:d9:32:
da:a0:b7:3f:fc:00:0a:51:2b:10:9b:63:c7:ca:61:
c2:1f:68:a9:04:d3:dd:8c:6d:45:92:35:bc:55:5a:
bb:a2:c6:37:35:7d:62:2f:13:2d:c1:40:63:09:0e:
cc:81:ab:60:bc:2b:45:df:22:c2:6d:0a:b2:b7:82:
9d:db:d8:4d:bc:1b:26:87:8a:ea:1f:31:14:e3:cf:
9f:db:fc:c7:63:9f:59:db:70:76:55:f0:be:a4:fe:
84:51:aa:5e:99:28:5b:69:00:1e:c6:5a:b8:e9:ec:
ba:63:1e:e7:59:e3:f5:d3:a3:d1:2b:3c:c0:1c:31:
c3:48:00:d2:63:a0:11:45:07:4c:52:0d:9a:01:d0:
ee:f2:0d:68:cd:04:f6:25:38:fa:59:d3:4f:dd:7e:
f5:a0:fa:5a:36:55:e6:3e:10:d1:29:1e:9f:76:50:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:9D:86:0E:0A:15:93:4B:BE:0B:C0:7B:DC:C0:39:DF:BB:33:AA
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:69:c8:af:a6:57:e5:3f:56:64:d6:37:99:78:89:25:96:6d:
cf:f5:a1:4b:d1:53:1e:a2:8e:b3:3d:e4:b3:c5:91:42:e6:74:
5f:15:7f:f1:0d:d0:31:cd:3f:62:53:2d:47:4e:d4:bf:b3:d8:
c6:e7:f6:de:aa:5c:d9:50:bf:f9:18:45:df:20:4f:90:1a:cf:
40:74:04:16:27:af:44:80:3d:a4:bf:19:58:d0:74:cf:5f:71:
be:3d:05:31:cb:e3:7d:92:40:bb:0f:2f:68:00:3f:d7:a2:09:
9c:a3:99:7e:60:3d:a8:91:2b:b3:d8:d4:80:3d:c8:47:e7:8b:
81:8e:1c:f4:94:4a:6b:e6:f0:85:48:ed:0d:0f:88:43:2f:a4:
5d:76:15:e9:c5:f9:4a:8f:be:a4:cc:92:c0:3f:a9:07:68:55:
cc:9b:2d:cb:fa:a5:59:60:eb:78:a7:9c:c4:75:ec:8e:0e:21:
27:69:46:b6:0b:2f:24:4b:71:0b:ef:12:2c:f6:32:be:af:70:
87:08:88:01:9c:91:fd:48:fd:17:1d:ce:7f:75:3c:71:1c:98:
de:4f:60:ac:99:b2:58:65:ca:dd:73:d0:f9:fc:45:b4:9a:5d:
9d:bc:d0:6d:d3:0a:e8:46:96:d4:f5:80:e1:09:da:26:4c:eb:
2e:6e:f0:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhWRYBwRsiaDrYsH8nHeZmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3
NmM1YTgwHhcNMjUwNzI5MTMwMDUyWhcNMjUwNzMwMTMwMDUyWjAzMTEwLwYDVQQD
Eyg2OGUxOWQ4NjBlMGExNTkzNGJiZTBiYzA3YmRjYzAzOWRmYmIzM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhkL00ljK0GnJmS93wttyXyXljjR
Hzxtqjaio88lyPpsBpdY43fxcfDfYoMmg/7BXeIG8LVL7E0OeaetJLcA2a3iYbDI
JMjTzmiNegzcyXZqhpmKzIwJ2TLaoLc//AAKUSsQm2PHymHCH2ipBNPdjG1FkjW8
VVq7osY3NX1iLxMtwUBjCQ7MgatgvCtF3yLCbQqyt4Kd29hNvBsmh4rqHzEU48+f
2/zHY59Z23B2VfC+pP6EUapemShbaQAexlq46ey6Yx7nWeP106PRKzzAHDHDSADS
Y6ARRQdMUg2aAdDu8g1ozQT2JTj6WdNP3X71oPpaNlXmPhDRKR6fdlD4XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjhnYYOChWTS74LwHvcwDnfuzOqMB8GA1UdIwQY
MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt
NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4
LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWnIr6ZX
5T9WZNY3mXiJJZZtz/WhS9FTHqKOsz3ks8WRQuZ0XxV/8Q3QMc0/YlMtR07Uv7PY
xuf23qpc2VC/+RhF3yBPkBrPQHQEFievRIA9pL8ZWNB0z19xvj0FMcvjfZJAuw8v
aAA/16IJnKOZfmA9qJErs9jUgD3IR+eLgY4c9JRKa+bwhUjtDQ+IQy+kXXYV6cX5
So++pMySwD+pB2hVzJsty/qlWWDreKecxHXsjg4hJ2lGtgsvJEtxC+8SLPYyvq9w
hwiIAZyR/Uj9Fx3Of3U8cRyY3k9grJmyWGXK3XPQ+fxFtJpdnbzQbdMK6EaW1PWA
4QnaJkzrLm7wpw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:40:18 2025 by rpki-client