Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
File: q53IX5TKZH3g22TXTTE5lHzESbo.mft (raw, json)
Hash identifier: LikHTqfSWA6jOc6TM4Q0+1lDcdOo9ocTatA2X1WKV6s=
Subject key identifier: E2:FE:D4:CF:85:3E:42:20:65:00:67:85:55:C3:3F:0D:6E:D0:CF:45
Authority key identifier: AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
Certificate issuer: /CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Certificate serial: 01984BC1ACF8EA75BD5CE4B9E5AA3DAB6EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
Manifest number: 12EF
Signing time: Sun 27 Jul 2025 12:00:40 +0000
Manifest this update: Sun 27 Jul 2025 12:00:40 +0000
Manifest next update: Mon 28 Jul 2025 12:00:40 +0000
Files and hashes: 1: 3U4MivbAgZFFTzpri9v9qzr-9Dg.roa (hash: OpxoqQJPTPV/7nPesTeS09o0jfmFmQcqEJLqODzVTIM=)
2: q53IX5TKZH3g22TXTTE5lHzESbo.crl (hash: 9zYoiuDEejx5BWrAz0t0lBJt6U1KXoBJsDFHHXJwKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:ac:f8:ea:75:bd:5c:e4:b9:e5:aa:3d:ab:6e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9dc85f94ca647de0db64d74d3139947cc449ba
Validity
Not Before: Jul 27 12:00:40 2025 GMT
Not After : Jul 28 12:00:40 2025 GMT
Subject: CN=e2fed4cf853e42206500678555c33f0d6ed0cf45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5b:03:99:49:63:60:67:84:1b:bd:48:b9:43:
19:ee:aa:56:92:7e:25:aa:17:99:cd:1e:ee:0c:ad:
ee:bc:98:82:29:10:0a:d4:c0:91:ef:18:d2:44:30:
6b:ea:4c:8d:bf:b9:94:83:03:24:62:64:f2:06:35:
b2:39:68:78:67:f8:b0:fd:10:6e:33:96:61:8b:76:
c3:29:66:1b:9b:02:a5:52:54:0d:72:89:d4:c9:c3:
2e:8f:69:b6:8f:8b:8e:f0:8d:b4:05:c5:c6:0c:cd:
09:60:55:a2:58:c3:a6:d7:24:ae:55:21:3a:92:41:
e8:26:ef:e3:d1:36:2b:91:e1:8a:06:9c:88:2f:cd:
f9:11:64:dd:39:bb:a0:7b:ba:6b:ca:d7:3e:2d:c9:
29:f6:58:c2:ad:85:4a:4d:85:cf:b3:14:1c:00:e3:
1e:93:3d:06:1d:55:12:82:c0:bb:97:98:f6:c5:43:
f1:a8:fb:09:1a:13:4d:95:a6:a0:96:32:62:12:4e:
7e:e4:5f:d6:ea:70:08:37:4c:ac:e8:f0:9d:f7:44:
d6:5d:2a:61:ad:e6:98:37:13:e8:e0:55:3c:b1:2b:
b7:0d:65:c0:73:48:e0:38:ae:1e:4f:f4:06:92:8f:
b6:f6:ab:d8:f5:df:96:7c:f4:31:b8:20:cd:1e:37:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FE:D4:CF:85:3E:42:20:65:00:67:85:55:C3:3F:0D:6E:D0:CF:45
X509v3 Authority Key Identifier:
keyid:AB:9D:C8:5F:94:CA:64:7D:E0:DB:64:D7:4D:31:39:94:7C:C4:49:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q53IX5TKZH3g22TXTTE5lHzESbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/9c83a5-3a9a-4715-9b16-4046324970af/1/q53IX5TKZH3g22TXTTE5lHzESbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:74:b1:6f:76:9c:c7:7b:d0:52:46:af:66:96:e2:77:22:4e:
54:b6:0d:48:0f:ac:5f:cd:10:77:4b:04:5e:b4:21:9d:12:ea:
31:d8:38:d2:e7:bd:bc:fb:ea:74:dd:11:59:93:b4:32:70:63:
db:14:46:c0:f2:31:de:4f:65:de:39:30:1e:0e:d7:32:5f:f2:
5c:b5:00:47:e5:95:e7:05:8e:b0:fb:75:06:c7:ba:48:77:12:
63:2f:18:88:3c:4e:5b:5b:92:d3:b4:8c:d5:1d:91:33:ce:3c:
90:7c:e2:f2:1c:c4:d7:01:2d:a9:d6:1f:c8:ea:cf:24:52:a7:
f4:99:b1:28:98:30:3d:41:a0:25:fb:6d:8c:36:d3:43:f5:35:
6e:d6:47:55:2b:06:82:ba:99:58:32:a4:0a:36:17:8a:1f:3a:
18:f7:0e:01:9c:f9:40:73:fb:66:c4:09:a3:cd:7d:96:08:72:
d7:b4:f4:56:ec:b7:a3:a2:1c:b2:81:d7:77:78:51:07:ea:c9:
66:a8:92:66:90:8f:de:d6:60:82:fd:47:7f:ec:63:6b:8d:e2:
ae:7c:49:b7:b8:1f:54:66:b7:55:12:33:f5:a8:17:48:2e:5b:
d3:bf:c5:9a:83:82:23:50:98:4a:ea:9d:60:bb:bc:f9:44:f5:
cf:05:84:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLwaz46nW9XOS55ao9q275MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWRjODVmOTRjYTY0N2RlMGRiNjRkNzRkMzEzOTk0N2Nj
NDQ5YmEwHhcNMjUwNzI3MTIwMDQwWhcNMjUwNzI4MTIwMDQwWjAzMTEwLwYDVQQD
EyhlMmZlZDRjZjg1M2U0MjIwNjUwMDY3ODU1NWMzM2YwZDZlZDBjZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1sDmUljYGeEG71IuUMZ7qpWkn4l
qheZzR7uDK3uvJiCKRAK1MCR7xjSRDBr6kyNv7mUgwMkYmTyBjWyOWh4Z/iw/RBu
M5Zhi3bDKWYbmwKlUlQNconUycMuj2m2j4uO8I20BcXGDM0JYFWiWMOm1ySuVSE6
kkHoJu/j0TYrkeGKBpyIL835EWTdObuge7prytc+Lckp9ljCrYVKTYXPsxQcAOMe
kz0GHVUSgsC7l5j2xUPxqPsJGhNNlaagljJiEk5+5F/W6nAIN0ys6PCd90TWXSph
reaYNxPo4FU8sSu3DWXAc0jgOK4eT/QGko+29qvY9d+WfPQxuCDNHjdBtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOL+1M+FPkIgZQBnhVXDPw1u0M9FMB8GA1UdIwQY
MBaAFKudyF+UymR94Ntk100xOZR8xEm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTUzSVg1VEtaSDNnMjJUWFRURTVsSHpFU2JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85YzgzYTUtM2E5YS00NzE1LTliMTYt
NDA0NjMyNDk3MGFmLzEvcTUzSVg1VEtaSDNnMjJUWFRURTVsSHpFU2JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy85YzgzYTUtM2E5YS00NzE1LTliMTYtNDA0NjMyNDk3MGFm
LzEvcTUzSVg1VEtaSDNnMjJUWFRURTVsSHpFU2JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3Sxb3ac
x3vQUkavZpbidyJOVLYNSA+sX80Qd0sEXrQhnRLqMdg40ue9vPvqdN0RWZO0MnBj
2xRGwPIx3k9l3jkwHg7XMl/yXLUAR+WV5wWOsPt1Bse6SHcSYy8YiDxOW1uS07SM
1R2RM848kHzi8hzE1wEtqdYfyOrPJFKn9JmxKJgwPUGgJfttjDbTQ/U1btZHVSsG
grqZWDKkCjYXih86GPcOAZz5QHP7ZsQJo819lghy17T0Vuy3o6IcsoHXd3hRB+rJ
ZqiSZpCP3tZggv1Hf+xja43irnxJt7gfVGa3VRIz9agXSC5b07/FmoOCI1CYSuqd
YLu8+UT1zwWEMg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:10:20 2025 by rpki-client