Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json)
Hash identifier: ZPbOvuMp3ahR5lamgAZxafwbwspWJTVL/EhVTn9vfC8=
Subject key identifier: 6C:13:63:61:A1:CA:FC:23:31:D0:5B:87:52:10:0E:56:11:8A:77:D9
Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Certificate serial: 0198537AD0B54B165516C3BCADD856EC8389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 00:00:14 +0000
Manifest this update: Tue 29 Jul 2025 00:00:14 +0000
Manifest next update: Wed 30 Jul 2025 00:00:14 +0000
Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=)
2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=)
3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: C9bc1/4ld6oI98ddYMPf/IuqX2N8KVljotrcYJHHKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:d0:b5:4b:16:55:16:c3:bc:ad:d8:56:ec:83:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf
Validity
Not Before: Jul 29 00:00:14 2025 GMT
Not After : Jul 30 00:00:14 2025 GMT
Subject: CN=6c136361a1cafc2331d05b8752100e56118a77d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:9d:cf:4d:a3:14:0d:0f:ea:3a:f3:4b:cf:
cb:12:d3:49:85:6c:3f:5e:25:69:0d:56:fc:8e:16:
2d:e2:1f:19:ac:e6:3b:89:d5:5f:4a:f7:ec:1e:e2:
60:5a:f3:d3:e7:79:ab:14:d2:b3:3c:c4:5a:93:ec:
bd:6d:9c:62:be:e6:e3:5b:93:43:78:38:4f:15:33:
e0:71:e3:ba:33:2b:c9:ef:65:16:07:f5:0f:dc:c9:
07:ab:18:3e:ce:dc:5e:98:39:2a:ca:af:80:75:55:
55:76:70:9d:35:ed:aa:d2:6d:72:53:fe:75:02:c3:
b3:56:9e:45:e4:ca:3a:e1:ff:22:d5:db:3a:1f:c0:
f2:ed:c9:45:52:31:5a:6f:d5:6c:0f:4a:37:a1:60:
c5:92:78:99:fa:4d:54:a9:be:fe:a4:59:de:0f:9e:
bb:20:f9:82:ce:4f:91:e0:30:4c:7e:97:18:55:f5:
63:9b:28:ab:2a:72:d4:f0:31:d8:1e:cc:00:31:18:
ec:6c:19:0d:cb:13:00:ea:a1:d6:4f:21:16:a8:b2:
0d:eb:2a:ba:d6:f7:dd:02:73:da:8a:8d:cd:c7:31:
a9:4b:cc:19:60:71:85:19:00:ef:bd:40:55:84:80:
29:4a:b6:ce:39:fa:92:64:7e:0d:5d:87:39:1d:64:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:63:61:A1:CA:FC:23:31:D0:5B:87:52:10:0E:56:11:8A:77:D9
X509v3 Authority Key Identifier:
keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:11:82:b3:af:7f:23:4b:13:bc:5e:3e:b0:64:20:41:08:
69:d5:d9:2d:50:3d:6a:4f:5c:a2:be:8f:65:9a:48:91:72:ff:
7c:a6:d0:d0:55:26:aa:0c:89:6a:bb:15:1e:d1:a0:5b:52:21:
71:e3:fc:f4:b2:7f:ec:67:c6:d5:1a:00:98:f8:9e:a0:93:8a:
6c:ea:81:ee:01:41:a4:d8:78:00:ce:4b:c6:e6:ac:6f:dc:67:
0b:14:d8:95:f2:0f:c7:2c:8c:8e:4b:9b:04:08:9c:ce:cb:ef:
9d:da:92:d2:8b:a1:89:4f:c8:ff:f5:f9:97:f4:e2:fd:32:93:
a3:ec:d6:d9:27:d8:fb:c6:d3:fb:9b:70:94:58:f6:11:e6:bb:
62:0a:84:44:74:d9:ad:fa:7a:00:51:73:d1:8c:d6:cc:d4:92:
62:ec:0e:2b:bd:88:39:8b:70:21:de:73:89:af:8a:b2:ae:89:
34:1b:9c:3c:77:1d:6f:72:40:5c:8f:1e:e4:b0:8c:39:cc:6c:
d9:7b:41:8b:b2:05:05:44:93:5c:f4:e5:66:6e:d2:57:fc:cc:
2b:54:9f:5f:39:70:ac:b8:de:b0:cc:a1:43:a3:ad:56:d5:7f:
f7:26:27:10:e4:a0:36:b4:9d:c7:2f:f7:15:0b:1b:b7:5a:5b:
25:84:53:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTetC1SxZVFsO8rdhW7IOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4
ZjNkYmYwHhcNMjUwNzI5MDAwMDE0WhcNMjUwNzMwMDAwMDE0WjAzMTEwLwYDVQQD
Eyg2YzEzNjM2MWExY2FmYzIzMzFkMDViODc1MjEwMGU1NjExOGE3N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVKdz02jFA0P6jrzS8/LEtNJhWw/
XiVpDVb8jhYt4h8ZrOY7idVfSvfsHuJgWvPT53mrFNKzPMRak+y9bZxivubjW5ND
eDhPFTPgceO6MyvJ72UWB/UP3MkHqxg+ztxemDkqyq+AdVVVdnCdNe2q0m1yU/51
AsOzVp5F5Mo64f8i1ds6H8Dy7clFUjFab9VsD0o3oWDFkniZ+k1Uqb7+pFneD567
IPmCzk+R4DBMfpcYVfVjmyirKnLU8DHYHswAMRjsbBkNyxMA6qHWTyEWqLIN6yq6
1vfdAnPaio3NxzGpS8wZYHGFGQDvvUBVhIApSrbOOfqSZH4NXYc5HWSQvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwTY2GhyvwjMdBbh1IQDlYRinfZMB8GA1UdIwQY
MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt
OGZlZDUwOTA5NzcwLzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw
LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8oRgrOv
fyNLE7xePrBkIEEIadXZLVA9ak9cor6PZZpIkXL/fKbQ0FUmqgyJarsVHtGgW1Ih
ceP89LJ/7GfG1RoAmPieoJOKbOqB7gFBpNh4AM5Lxuasb9xnCxTYlfIPxyyMjkub
BAiczsvvndqS0ouhiU/I//X5l/Ti/TKTo+zW2SfY+8bT+5twlFj2Eea7YgqERHTZ
rfp6AFFz0YzWzNSSYuwOK72IOYtwId5zia+Ksq6JNBucPHcdb3JAXI8e5LCMOcxs
2XtBi7IFBUSTXPTlZm7SV/zMK1SfXzlwrLjesMyhQ6OtVtV/9yYnEOSgNrSdxy/3
FQsbt1pbJYRTqA==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:00 2025 by rpki-client