Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: MgUZGzEOOYTkt1r6SIURRUoPys9faPlW+6NteA4tF6I=
Subject key identifier: A1:F0:FC:36:E3:03:0B:FF:71:5A:06:3D:50:FB:81:36:DB:2E:C6:02
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 01983A29058DA80FB2A57FB4775679267F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0685
Signing time: Thu 24 Jul 2025 02:00:23 +0000
Manifest this update: Thu 24 Jul 2025 02:00:23 +0000
Manifest next update: Fri 25 Jul 2025 02:00:23 +0000
Files and hashes: 1: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
2: Np6VPO8za4y-5v0it7csNncXkyo.roa (hash: mi8HH/21UxHGDxLKhYzJVf0/T3jJHi/D1SQLyFOEVNU=)
3: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: tMXQBpDTUtI/CAs9JFPXimCUXGqUpNpEB5uLWp/5vuA=)
5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:29:05:8d:a8:0f:b2:a5:7f:b4:77:56:79:26:7f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Jul 24 02:00:23 2025 GMT
Not After : Jul 25 02:00:23 2025 GMT
Subject: CN=a1f0fc36e3030bff715a063d50fb8136db2ec602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:57:3d:58:3d:61:aa:1c:ba:b9:70:f6:88:
0a:55:69:c9:f7:11:97:be:9d:00:e0:7b:e1:ef:5a:
22:1c:cf:26:66:97:cc:07:d8:ff:d3:58:a2:c6:c9:
b5:76:68:9a:1e:d0:e9:7c:0d:43:90:3b:d0:52:a2:
0f:d9:74:b3:b7:a4:98:29:af:0c:0e:fb:16:bb:26:
bb:40:43:3b:75:4f:a9:2b:48:db:18:64:15:2b:5c:
e1:71:94:1c:14:ed:68:98:30:90:43:c9:20:80:a8:
73:7f:54:6a:ac:e0:5a:68:ad:42:bb:6f:5b:32:ea:
b7:5d:c8:b8:b0:4b:7f:62:e4:fb:72:a8:bf:35:49:
af:fe:93:4e:33:41:d8:98:5a:31:d2:c6:5b:42:12:
79:31:16:07:c9:79:8e:f2:44:ea:41:94:eb:be:ba:
9c:4f:6d:91:98:9a:4a:27:8f:e6:1d:68:45:f3:ed:
ba:96:2f:ea:0e:dc:4f:d9:83:80:b5:cb:d6:91:de:
ff:63:91:3b:81:cd:a8:41:d0:19:6f:db:97:ce:57:
8e:9d:8a:de:1d:82:cc:da:d4:17:cc:91:d1:2a:4e:
3a:b8:fa:ea:14:ea:74:a4:32:77:3b:db:2c:b6:73:
49:c8:88:ea:88:f5:af:e3:16:fa:64:0b:1b:08:b2:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:FC:36:E3:03:0B:FF:71:5A:06:3D:50:FB:81:36:DB:2E:C6:02
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6e:f2:e7:fe:e8:e5:f5:55:0c:27:2d:80:c6:31:49:d3:7f:
0d:01:04:bc:07:d7:59:b5:5f:85:5f:3a:e9:1e:af:29:00:69:
ef:63:ca:1a:2d:b5:d2:ab:98:0c:81:bc:df:44:43:17:c5:53:
2e:ae:e1:8a:cd:52:cc:2d:ee:a8:e3:b6:d3:10:b0:82:3e:30:
e7:75:d5:11:85:f8:05:27:cb:2d:31:d8:2a:e6:60:c6:9f:07:
02:76:51:e0:16:23:31:c8:00:06:0e:dd:c6:0c:95:a9:0f:7b:
54:96:79:85:f8:58:e3:73:61:15:95:a3:0b:d4:92:e8:87:4e:
ff:a6:28:f0:26:20:fd:80:98:6e:41:98:96:20:c5:96:2d:dc:
ec:10:ef:e1:e1:d7:dc:87:f2:b9:c3:7c:cd:77:58:bf:a1:1d:
5d:33:70:dd:0b:94:3f:26:ff:2d:54:52:30:80:f9:69:f6:51:
66:33:c7:b1:e9:f0:a7:56:2b:d5:ba:6d:5e:69:f1:3d:5e:39:
42:8d:4f:d3:37:a4:9f:6a:b0:6a:c6:68:6c:ec:e9:a6:f1:c6:
0d:d6:18:8c:b1:7e:91:da:72:22:c9:2b:7b:83:22:3d:f3:84:
a4:92:0c:15:d0:af:38:46:4f:2d:90:0b:a2:4c:c6:37:31:f9:
85:10:fd:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg6KQWNqA+ypX+0d1Z5Jn9NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTQ5MThmYzdmZGZiNzNiYmE4Y2Y1OGQ0Y2I1ZmU0NDlj
ZjgzZjYwHhcNMjUwNzI0MDIwMDIzWhcNMjUwNzI1MDIwMDIzWjAzMTEwLwYDVQQD
EyhhMWYwZmMzNmUzMDMwYmZmNzE1YTA2M2Q1MGZiODEzNmRiMmVjNjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fhXPVg9Yaocurlw9ogKVWnJ9xGX
vp0A4Hvh71oiHM8mZpfMB9j/01iixsm1dmiaHtDpfA1DkDvQUqIP2XSzt6SYKa8M
DvsWuya7QEM7dU+pK0jbGGQVK1zhcZQcFO1omDCQQ8kggKhzf1RqrOBaaK1Cu29b
Muq3Xci4sEt/YuT7cqi/NUmv/pNOM0HYmFox0sZbQhJ5MRYHyXmO8kTqQZTrvrqc
T22RmJpKJ4/mHWhF8+26li/qDtxP2YOAtcvWkd7/Y5E7gc2oQdAZb9uXzleOnYre
HYLM2tQXzJHRKk46uPrqFOp0pDJ3O9sstnNJyIjqiPWv4xb6ZAsbCLLRXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHw/DbjAwv/cVoGPVD7gTbbLsYCMB8GA1UdIwQY
MBaAFKjkkY/H/ftzu6jPWNTLX+RJz4P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMt
MDE1ZWE1MDE5NTIwLzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMtMDE1ZWE1MDE5NTIw
LzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARG7y5/7o
5fVVDCctgMYxSdN/DQEEvAfXWbVfhV866R6vKQBp72PKGi210quYDIG830RDF8VT
Lq7his1SzC3uqOO20xCwgj4w53XVEYX4BSfLLTHYKuZgxp8HAnZR4BYjMcgABg7d
xgyVqQ97VJZ5hfhY43NhFZWjC9SS6IdO/6Yo8CYg/YCYbkGYliDFli3c7BDv4eHX
3IfyucN8zXdYv6EdXTNw3QuUPyb/LVRSMID5afZRZjPHsenwp1Yr1bptXmnxPV45
Qo1P0zekn2qwasZobOzppvHGDdYYjLF+kdpyIskre4MiPfOEpJIMFdCvOEZPLZAL
okzGNzH5hRD9Gg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 08:23:38 2025 by rpki-client