Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: 3kQ4s2xzH7b5/RZ6KLM/LSrI4UPNDkyNHGlId9Lf4Ac=
Subject key identifier: 8B:50:80:44:93:B5:7C:9B:DC:7B:35:F2:54:01:D7:F6:E4:70:41:01
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 01984965B6038D4E8FAA6B97FAF3944D8945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 04AA
Signing time: Sun 27 Jul 2025 01:00:59 +0000
Manifest this update: Sun 27 Jul 2025 01:00:59 +0000
Manifest next update: Mon 28 Jul 2025 01:00:59 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: tMlKPFTe72N/UIOajNIi2U1GdymwdM9cw5i/nzWkDKI=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b6:03:8d:4e:8f:aa:6b:97:fa:f3:94:4d:89:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Jul 27 01:00:59 2025 GMT
Not After : Jul 28 01:00:59 2025 GMT
Subject: CN=8b50804493b57c9bdc7b35f25401d7f6e4704101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:94:4b:13:8e:89:a1:61:14:a8:bd:7a:a0:
cf:c7:7d:8a:48:ec:13:a6:52:36:0c:65:93:da:01:
22:ec:ec:32:0e:b8:96:23:89:ed:a0:d1:3a:64:87:
48:78:f5:29:60:e9:44:b1:72:2d:47:6e:5e:98:6a:
3d:bc:d9:15:98:a8:ee:89:7a:75:1f:4b:60:d3:b9:
03:13:82:75:6d:ef:b8:71:0d:61:2e:9c:bd:24:4f:
ff:e7:b5:94:11:94:9d:2f:ef:b9:8b:10:6a:f1:4f:
71:48:a3:e0:55:96:b8:14:24:80:ee:6f:41:57:ed:
da:d9:b3:2a:7a:5a:51:75:a8:84:ad:c7:50:bb:81:
a3:88:71:4e:2e:d8:7f:44:6c:5b:52:cd:29:17:82:
47:00:2e:4a:a3:c4:af:e6:0e:59:83:35:00:a1:b4:
2a:b1:8e:2c:dc:b7:c3:12:f8:b8:c4:75:fa:e9:2b:
c6:b3:09:93:dd:36:52:25:ad:5d:e0:d8:c4:59:03:
55:9e:e9:09:6b:75:74:91:30:6f:72:56:aa:88:a2:
60:49:b3:6f:22:0d:ba:98:64:cb:cd:b8:c3:54:f6:
b0:e3:f6:37:f2:8a:49:72:0c:41:21:d9:46:e5:19:
62:7a:4f:21:11:16:d1:39:5b:47:9d:45:35:5b:d8:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:80:44:93:B5:7C:9B:DC:7B:35:F2:54:01:D7:F6:E4:70:41:01
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:42:b0:47:a9:86:50:55:f1:70:06:a1:17:37:11:21:58:d4:
23:94:0d:99:e4:da:b5:a2:e8:43:74:cc:2e:c8:fc:f5:ef:b7:
24:82:ee:a3:bd:f4:1f:1a:19:9d:14:49:9c:cc:21:c5:19:b6:
ed:67:44:47:67:39:3a:ca:ca:68:15:4a:43:ee:5d:e0:3f:cd:
4f:e5:42:d1:63:ff:3b:5e:50:ad:51:e8:72:ad:25:ce:21:01:
44:ea:17:ce:5f:d0:a9:8a:76:24:e0:76:cc:d1:a0:b6:22:60:
67:77:8c:d5:06:88:31:e0:4d:45:ab:87:d3:27:ef:6d:de:77:
62:f0:3f:86:43:78:6e:97:21:78:fd:5c:a5:6f:14:0c:bf:7b:
56:d0:b2:7a:81:dd:d9:a3:1b:98:3b:1c:cc:e4:02:97:ec:6c:
1b:c5:25:60:84:95:c0:c0:bf:29:a0:19:e1:7b:fc:01:24:b4:
f7:1b:2a:3e:5e:3d:61:75:8a:76:b4:1b:11:76:06:a3:d3:5d:
49:b9:f6:44:1c:55:85:9e:5d:9d:d0:03:a5:41:3a:d6:38:7a:
0e:f7:67:aa:23:fc:db:a6:44:bc:2a:18:29:7f:d7:3f:9a:84:
3b:5d:6d:15:3e:c0:66:6f:b9:e4:e4:f5:a4:4d:91:eb:e5:0e:
23:97:a5:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZbYDjU6PqmuX+vOUTYlFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmZlNzBmNGNlZjEwMzc2ODM2MTUyZjM4ZTRlMDg1MzJj
YzdiOWYwHhcNMjUwNzI3MDEwMDU5WhcNMjUwNzI4MDEwMDU5WjAzMTEwLwYDVQQD
Eyg4YjUwODA0NDkzYjU3YzliZGM3YjM1ZjI1NDAxZDdmNmU0NzA0MTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsaUSxOOiaFhFKi9eqDPx32KSOwT
plI2DGWT2gEi7OwyDriWI4ntoNE6ZIdIePUpYOlEsXItR25emGo9vNkVmKjuiXp1
H0tg07kDE4J1be+4cQ1hLpy9JE//57WUEZSdL++5ixBq8U9xSKPgVZa4FCSA7m9B
V+3a2bMqelpRdaiErcdQu4GjiHFOLth/RGxbUs0pF4JHAC5Ko8Sv5g5ZgzUAobQq
sY4s3LfDEvi4xHX66SvGswmT3TZSJa1d4NjEWQNVnukJa3V0kTBvclaqiKJgSbNv
Ig26mGTLzbjDVPaw4/Y38opJcgxBIdlG5Rliek8hERbROVtHnUU1W9jKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItQgESTtXyb3Hs18lQB1/bkcEEBMB8GA1UdIwQY
MBaAFEMv5w9M7xA3aDYVLzjk4IUyzHufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUt
MTg5ZDAwYTMzM2VlLzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUtMTg5ZDAwYTMzM2Vl
LzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0KwR6mG
UFXxcAahFzcRIVjUI5QNmeTataLoQ3TMLsj89e+3JILuo730HxoZnRRJnMwhxRm2
7WdER2c5OsrKaBVKQ+5d4D/NT+VC0WP/O15QrVHocq0lziEBROoXzl/QqYp2JOB2
zNGgtiJgZ3eM1QaIMeBNRauH0yfvbd53YvA/hkN4bpcheP1cpW8UDL97VtCyeoHd
2aMbmDsczOQCl+xsG8UlYISVwMC/KaAZ4Xv8ASS09xsqPl49YXWKdrQbEXYGo9Nd
Sbn2RBxVhZ5dndADpUE61jh6DvdnqiP826ZEvCoYKX/XP5qEO11tFT7AZm+55OT1
pE2R6+UOI5elkQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:47:47 2025 by rpki-client