Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: mUK1KRutOTYXyTN4rhcn9tsDoARHiB+JFqXX5tuysBA=
Subject key identifier: D4:BF:CB:60:65:DB:51:4D:03:78:4D:2C:40:9D:B3:D5:F2:8E:09:FD
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 019848C069B7F31B465752E8B909D124A265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 0765
Signing time: Sat 26 Jul 2025 22:00:26 +0000
Manifest this update: Sat 26 Jul 2025 22:00:26 +0000
Manifest next update: Sun 27 Jul 2025 22:00:26 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: CPqUQHeQZwrMqCpIjE7QsMpoYhgkqTttV50DBSLbtN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:69:b7:f3:1b:46:57:52:e8:b9:09:d1:24:a2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Jul 26 22:00:26 2025 GMT
Not After : Jul 27 22:00:26 2025 GMT
Subject: CN=d4bfcb6065db514d03784d2c409db3d5f28e09fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:c9:1d:a3:11:1a:c5:ab:b9:d0:e8:6f:42:
66:e3:ad:05:8f:92:8f:6b:c2:76:2d:e5:6d:2d:85:
94:1e:3e:6c:31:7b:9c:2d:54:a0:2a:a2:18:d4:8b:
7c:5c:9e:dd:e7:a2:46:62:4c:5b:75:fd:ee:87:d4:
d3:48:16:a7:f0:62:6f:19:b2:89:24:dc:9b:69:2a:
7d:53:01:a1:a4:66:1e:45:16:f8:99:54:1a:ca:b9:
59:05:8b:43:80:e4:e2:58:71:a7:f9:83:75:9e:da:
23:c7:23:6a:34:9a:6f:6d:a4:08:b6:59:ed:22:75:
08:e1:e0:ab:4d:96:b3:bc:fe:9c:2c:00:1f:ac:6a:
da:e8:f4:27:da:b0:56:4d:c7:ed:71:3a:b9:8a:a7:
02:ca:86:1c:3d:e0:99:fd:db:d9:8d:ab:0b:86:5e:
6f:5b:ee:6f:38:cc:e8:ed:cb:d9:35:29:b3:d3:a4:
84:f4:ed:5e:a1:a5:4e:03:e9:1a:70:8a:02:13:e6:
13:c6:db:72:54:44:bc:fb:3b:11:ff:53:94:5c:69:
38:58:13:09:0f:76:87:e6:cd:ec:71:81:bb:22:39:
ae:d4:b3:7f:3b:61:28:04:8a:3a:b9:34:ec:e9:51:
73:20:cd:90:b1:7c:92:86:32:17:87:30:0b:b0:3d:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:CB:60:65:DB:51:4D:03:78:4D:2C:40:9D:B3:D5:F2:8E:09:FD
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bb:82:8f:01:ca:e1:5d:57:51:01:11:20:8a:17:0c:b4:d5:
51:2e:4c:e4:6d:b8:57:d6:a7:1d:ec:38:1f:27:ef:b9:b8:d9:
9d:2d:20:bb:8c:3f:76:b8:7d:65:2b:6b:2e:d5:4d:d2:6d:58:
27:71:4e:7c:89:89:3b:89:45:73:5f:b9:b4:17:50:39:d8:ce:
60:ce:c9:06:2b:3a:ca:89:e2:40:ea:8e:9a:7b:61:a2:3d:29:
5f:64:69:18:60:f3:11:a4:7d:57:c0:6f:ed:d1:eb:30:14:ae:
0d:23:1c:fe:43:fa:79:91:7f:c2:53:6d:92:63:6d:08:dd:72:
6a:1d:01:95:08:60:d7:1b:ea:d1:08:23:ff:43:dd:58:0c:bb:
03:f1:68:dd:a1:c2:6f:5c:e9:82:08:d3:66:09:f4:31:3d:e2:
5e:2c:dc:ce:61:55:ad:72:c2:bd:e2:94:85:6a:3c:2c:56:4e:
e9:e3:da:fe:d5:1f:d5:9f:f0:aa:7d:b2:a4:52:9a:a8:39:35:
ef:4f:7d:cc:41:a9:a9:35:32:e3:e1:66:0c:63:04:9b:82:54:
02:b1:a8:4e:82:dd:3e:c3:92:31:f7:c8:a5:5b:df:61:83:d6:
91:02:b0:87:0d:7d:af:9e:20:47:61:08:14:9e:15:ff:52:31:
f0:67:15:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwGm38xtGV1LouQnRJKJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OGQ1OGM4MDdjOTQ5ZGIyYzFmNWYyNzNmMWVmYzRkZjFh
NWM1NTMwHhcNMjUwNzI2MjIwMDI2WhcNMjUwNzI3MjIwMDI2WjAzMTEwLwYDVQQD
EyhkNGJmY2I2MDY1ZGI1MTRkMDM3ODRkMmM0MDlkYjNkNWYyOGUwOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5HJHaMRGsWrudDob0Jm460Fj5KP
a8J2LeVtLYWUHj5sMXucLVSgKqIY1It8XJ7d56JGYkxbdf3uh9TTSBan8GJvGbKJ
JNybaSp9UwGhpGYeRRb4mVQayrlZBYtDgOTiWHGn+YN1ntojxyNqNJpvbaQItlnt
InUI4eCrTZazvP6cLAAfrGra6PQn2rBWTcftcTq5iqcCyoYcPeCZ/dvZjasLhl5v
W+5vOMzo7cvZNSmz06SE9O1eoaVOA+kacIoCE+YTxttyVES8+zsR/1OUXGk4WBMJ
D3aH5s3scYG7Ijmu1LN/O2EoBIo6uTTs6VFzIM2QsXyShjIXhzALsD2bxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS/y2Bl21FNA3hNLECds9Xyjgn9MB8GA1UdIwQY
MBaAFKiNWMgHyUnbLB9fJz8e/E3xpcVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYt
NmMyNGIwMmEwMjJkLzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYtNmMyNGIwMmEwMjJk
LzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7uCjwHK
4V1XUQERIIoXDLTVUS5M5G24V9anHew4HyfvubjZnS0gu4w/drh9ZStrLtVN0m1Y
J3FOfImJO4lFc1+5tBdQOdjOYM7JBis6yoniQOqOmnthoj0pX2RpGGDzEaR9V8Bv
7dHrMBSuDSMc/kP6eZF/wlNtkmNtCN1yah0BlQhg1xvq0Qgj/0PdWAy7A/Fo3aHC
b1zpggjTZgn0MT3iXizczmFVrXLCveKUhWo8LFZO6ePa/tUf1Z/wqn2ypFKaqDk1
7099zEGpqTUy4+FmDGMEm4JUArGoToLdPsOSMffIpVvfYYPWkQKwhw19r54gR2EI
FJ4V/1Ix8GcVhw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:47:40 2025 by rpki-client