
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: fSDHiembLUwkZnZaZmJzuZNhzA4rdkitA+PLzZA/3R8=
Subject key identifier: 6A:3A:6B:47:DB:C0:E6:BB:0B:47:D2:A4:7D:44:E2:61:8B:E0:36:28
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 01984AAF280075EE71EDE54B0FBB7531C39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1344
Signing time: Sun 27 Jul 2025 07:00:49 +0000
Manifest this update: Sun 27 Jul 2025 07:00:49 +0000
Manifest next update: Mon 28 Jul 2025 07:00:49 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: w1knviKjpOoAFjUoJ41L+zjDUxX9XsEYrZ8XexD3SGI=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:28:00:75:ee:71:ed:e5:4b:0f:bb:75:31:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Jul 27 07:00:49 2025 GMT
Not After : Jul 28 07:00:49 2025 GMT
Subject: CN=6a3a6b47dbc0e6bb0b47d2a47d44e2618be03628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0e:26:0b:cd:0d:d8:bd:59:a0:aa:00:be:e5:
35:1f:f4:59:74:9d:a3:e0:a0:55:ba:eb:88:85:7e:
32:93:6c:21:1f:fd:c1:6e:3a:4a:3f:eb:c5:36:c0:
19:0b:bc:0a:43:5d:d6:af:82:d3:cd:9c:01:ea:38:
52:9b:9c:4c:22:66:c7:79:30:78:7d:52:7d:c4:76:
54:1b:3b:3a:6f:8f:09:17:92:18:d8:ec:cd:53:93:
bd:b5:cb:68:4c:51:5a:cf:49:9e:28:5f:61:ea:6d:
3b:15:0c:ad:14:f2:04:de:41:7f:58:1d:a4:bb:f9:
8a:a3:cf:39:b0:24:6b:74:c4:c5:b1:0e:93:be:0c:
87:fc:60:4b:aa:8a:a9:da:35:fa:6c:93:66:2c:59:
b7:5f:b5:10:9e:16:99:35:96:07:7b:41:89:30:21:
fc:8f:f5:64:bc:85:be:39:b1:48:c1:3b:e1:98:e6:
e5:d1:cb:9e:54:02:77:d4:a2:10:2e:c3:9f:2a:5b:
65:9e:70:14:99:96:07:e6:b9:fd:2f:15:c2:ba:5c:
8a:db:a1:37:a2:20:d2:2d:32:da:11:f4:59:b5:52:
eb:62:33:03:ef:a5:76:9f:7c:83:53:6f:06:ca:3a:
56:7c:a4:d1:2f:ba:6c:7a:22:f8:19:b9:46:cb:e7:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:6B:47:DB:C0:E6:BB:0B:47:D2:A4:7D:44:E2:61:8B:E0:36:28
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:29:fe:3b:d6:f9:a6:30:69:69:38:58:9e:5d:35:e9:86:d3:
ad:f8:d0:64:ee:02:e5:d4:2b:7b:68:cb:0d:87:ad:db:ab:d1:
c5:09:cf:52:bd:96:f8:03:57:fc:58:98:9f:63:39:36:8a:9f:
6e:dc:8b:cb:0f:d0:d5:7b:a9:50:07:02:25:90:20:47:cd:77:
0a:43:36:9a:35:38:bf:b1:75:e3:0b:9e:bf:87:93:8c:31:4f:
56:ba:66:b0:11:15:1f:39:5e:ef:05:5b:ce:af:6e:37:b4:06:
01:ed:35:c6:0a:e0:dd:a7:ab:e7:6a:fc:e6:dc:f6:5f:46:11:
52:08:52:df:3a:78:05:3b:50:f3:43:e0:c3:43:29:2b:39:a9:
b6:ab:f8:1a:01:72:50:ca:de:b4:e8:87:5e:37:29:00:60:3d:
e3:87:e7:67:1b:0b:fe:b0:dd:60:4d:a9:0f:52:b7:ac:47:d1:
b3:78:10:a7:a6:3f:81:2c:d9:81:07:fa:34:34:e6:0a:e3:75:
97:78:6d:c8:a6:f5:82:e7:24:29:2c:b7:a3:89:d9:c4:6b:e3:
59:04:7b:93:68:29:b5:6c:9c:08:28:29:07:0e:03:eb:20:da:
f3:d6:37:03:aa:b7:29:b1:ac:8b:6e:92:06:75:f6:82:ea:3c:
ac:62:eb:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrygAde5x7eVLD7t1McOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODVjZGJkZGZkN2QxMzE2ODQ1YmViNGY3Mzk4ZjNjZTY0
ZmFjZDAwHhcNMjUwNzI3MDcwMDQ5WhcNMjUwNzI4MDcwMDQ5WjAzMTEwLwYDVQQD
Eyg2YTNhNmI0N2RiYzBlNmJiMGI0N2QyYTQ3ZDQ0ZTI2MThiZTAzNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg4mC80N2L1ZoKoAvuU1H/RZdJ2j
4KBVuuuIhX4yk2whH/3BbjpKP+vFNsAZC7wKQ13Wr4LTzZwB6jhSm5xMImbHeTB4
fVJ9xHZUGzs6b48JF5IY2OzNU5O9tctoTFFaz0meKF9h6m07FQytFPIE3kF/WB2k
u/mKo885sCRrdMTFsQ6TvgyH/GBLqoqp2jX6bJNmLFm3X7UQnhaZNZYHe0GJMCH8
j/VkvIW+ObFIwTvhmObl0cueVAJ31KIQLsOfKltlnnAUmZYH5rn9LxXCulyK26E3
oiDSLTLaEfRZtVLrYjMD76V2n3yDU28GyjpWfKTRL7pseiL4GblGy+ea6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo6a0fbwOa7C0fSpH1E4mGL4DYoMB8GA1UdIwQY
MBaAFKiFzb3f19ExaEW+tPc5jzzmT6zQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEt
ZjQ4Mjc4MDBiMGM4LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEtZjQ4Mjc4MDBiMGM4
LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyn+O9b5
pjBpaThYnl016YbTrfjQZO4C5dQre2jLDYet26vRxQnPUr2W+ANX/FiYn2M5Noqf
btyLyw/Q1XupUAcCJZAgR813CkM2mjU4v7F14wuev4eTjDFPVrpmsBEVHzle7wVb
zq9uN7QGAe01xgrg3aer52r85tz2X0YRUghS3zp4BTtQ80Pgw0MpKzmptqv4GgFy
UMretOiHXjcpAGA944fnZxsL/rDdYE2pD1K3rEfRs3gQp6Y/gSzZgQf6NDTmCuN1
l3htyKb1guckKSy3o4nZxGvjWQR7k2gptWycCCgpBw4D6yDa89Y3A6q3KbGsi26S
BnX2guo8rGLrVA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:40:47 2025 by rpki-client