Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: 3BKtrbFb0T4YKIWz3wnSPvQwiUrDc9g9soLCYDqMKMo=
Subject key identifier: EF:C7:D5:B0:8F:6D:D2:0D:DB:68:C9:7B:E9:1F:BA:5C:CC:34:9C:53
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 01985834696040906CD77FA7C6A102CE7041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 0399
Signing time: Tue 29 Jul 2025 22:01:26 +0000
Manifest this update: Tue 29 Jul 2025 22:01:26 +0000
Manifest next update: Wed 30 Jul 2025 22:01:26 +0000
Files and hashes: 1: _aJQ6oyDSsBM9CQBM0bENVTAfYk.roa (hash: TGsiDKL9QYKUEyLtO8kxrwWDCHZz/h4CK165UgZMbZA=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: EM4IMu6Rg8UA2psSTfsGbw6JuQl2Uxe4KchVIQtOYkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:34:69:60:40:90:6c:d7:7f:a7:c6:a1:02:ce:70:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Jul 29 22:01:26 2025 GMT
Not After : Jul 30 22:01:26 2025 GMT
Subject: CN=efc7d5b08f6dd20ddb68c97be91fba5ccc349c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:88:1c:5e:ed:52:1e:89:d3:fc:e1:b7:89:e9:
15:ce:d2:33:08:53:73:06:e0:96:9c:38:70:39:f5:
e3:13:e2:01:cb:9b:8b:86:36:3c:a0:b9:69:4c:0f:
3e:fe:8a:84:8e:66:23:46:fc:bf:ad:2f:31:a7:51:
72:49:0a:14:87:b2:95:6c:3f:2e:a3:0b:8f:30:d2:
f2:42:70:00:9f:73:57:54:66:9b:56:5d:d6:33:b5:
ee:57:26:dd:92:f3:5e:ea:da:c2:8d:a2:e0:f0:2d:
94:bf:97:e1:7e:95:71:0f:c2:9f:97:ee:04:53:a8:
6f:a6:39:02:44:3b:d2:08:a8:b4:ac:f7:26:d4:b3:
ba:f0:39:b3:c5:b5:82:bb:bf:18:af:2b:6d:58:0f:
01:1a:da:31:fc:79:c3:6e:18:6b:01:2a:ca:64:46:
14:0b:e4:26:59:e6:71:85:a8:02:9f:e9:25:6f:56:
0b:91:d0:70:a9:7f:59:b2:c1:5e:af:23:0c:f7:dc:
74:2d:a2:f3:f3:b7:81:0f:fd:ca:ca:2b:a6:6b:70:
d5:a3:e0:df:ee:83:88:b8:99:81:7e:d6:77:bf:2d:
91:3f:f6:8c:71:91:1b:ca:9c:8c:b4:05:d0:cf:0e:
28:ef:b1:08:ad:89:19:bc:0b:d9:a2:e5:55:15:8b:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C7:D5:B0:8F:6D:D2:0D:DB:68:C9:7B:E9:1F:BA:5C:CC:34:9C:53
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:78:8f:ee:c5:98:25:6d:5a:f4:c4:d3:2f:98:44:e5:ba:79:
ed:fc:c8:77:70:73:b6:c5:c4:6a:15:c1:2a:7a:aa:31:dd:c8:
ca:09:2e:64:d2:1b:c5:b6:05:b1:88:1c:b7:3c:23:47:f9:0c:
db:d7:7a:25:82:50:fc:f5:03:10:fa:a2:bd:56:24:80:d0:0d:
ab:bc:99:b2:a8:73:c3:ca:de:51:f4:26:04:39:36:ce:1e:d6:
ec:07:7e:fb:11:0a:b5:43:4b:52:8b:f1:4c:85:51:5e:13:35:
18:c8:2a:7e:5c:13:a6:d2:69:8e:e9:9a:f9:a8:f2:b6:14:ac:
d8:0f:a8:47:06:9d:90:a8:1e:f3:fb:44:a5:1b:14:f6:5c:be:
1d:c2:cc:a6:63:cd:98:e6:f1:51:e2:85:01:0f:ed:97:68:5c:
32:b2:f5:36:36:01:26:24:5c:6a:2d:57:3b:35:91:7b:78:5a:
c9:73:c2:3f:24:b6:b5:43:ee:8d:14:11:ac:91:f6:bf:d0:20:
17:1f:bb:ec:c3:52:91:42:88:92:9c:9e:ab:91:b7:53:65:2a:
e1:6e:ac:ba:ba:95:cb:e4:b2:16:42:0e:c3:fe:ee:c0:0c:45:
c1:03:69:64:c2:d0:cb:a3:00:3a:c3:76:3d:c9:ff:f6:01:02:
cf:0d:1b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhYNGlgQJBs13+nxqECznBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzYwOWM4OGYzOGRiYjU0OGExZjAyZjg5ZmYyOWJiNmQx
ODg2NGUwHhcNMjUwNzI5MjIwMTI2WhcNMjUwNzMwMjIwMTI2WjAzMTEwLwYDVQQD
EyhlZmM3ZDViMDhmNmRkMjBkZGI2OGM5N2JlOTFmYmE1Y2NjMzQ5YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IgcXu1SHonT/OG3iekVztIzCFNz
BuCWnDhwOfXjE+IBy5uLhjY8oLlpTA8+/oqEjmYjRvy/rS8xp1FySQoUh7KVbD8u
owuPMNLyQnAAn3NXVGabVl3WM7XuVybdkvNe6trCjaLg8C2Uv5fhfpVxD8Kfl+4E
U6hvpjkCRDvSCKi0rPcm1LO68DmzxbWCu78YryttWA8BGtox/HnDbhhrASrKZEYU
C+QmWeZxhagCn+klb1YLkdBwqX9ZssFeryMM99x0LaLz87eBD/3Kyiuma3DVo+Df
7oOIuJmBftZ3vy2RP/aMcZEbypyMtAXQzw4o77EIrYkZvAvZouVVFYuO4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/H1bCPbdIN22jJe+kfulzMNJxTMB8GA1UdIwQY
MBaAFKg2CciPONu1SKHwL4n/KbttGIZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2Ut
ZTQwZmUwYjA5NGIwLzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lMTRmZTEtNjJhYi00NDE1LTliY2UtZTQwZmUwYjA5NGIw
LzEvcURZSnlJODQyN1ZJb2ZBdmlmOHB1MjBZaGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXiP7sWY
JW1a9MTTL5hE5bp57fzId3BztsXEahXBKnqqMd3IygkuZNIbxbYFsYgctzwjR/kM
29d6JYJQ/PUDEPqivVYkgNANq7yZsqhzw8reUfQmBDk2zh7W7Ad++xEKtUNLUovx
TIVRXhM1GMgqflwTptJpjuma+ajythSs2A+oRwadkKge8/tEpRsU9ly+HcLMpmPN
mObxUeKFAQ/tl2hcMrL1NjYBJiRcai1XOzWRe3hayXPCPyS2tUPujRQRrJH2v9Ag
Fx+77MNSkUKIkpyeq5G3U2Uq4W6surqVy+SyFkIOw/7uwAxFwQNpZMLQy6MAOsN2
Pcn/9gECzw0beQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 05:26:30 2025 by rpki-client