Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: EfOBVTQxiDOW1/VIWyaVrMocueZcgmJsU9MxDMb5t3A=
Subject key identifier: C0:4A:71:E7:1D:C4:C0:72:5C:42:E0:7F:39:02:CF:CB:F9:6E:64:18
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 01985532DF0E350ED855BE528850D45BA0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 1000
Signing time: Tue 29 Jul 2025 08:00:53 +0000
Manifest this update: Tue 29 Jul 2025 08:00:53 +0000
Manifest next update: Wed 30 Jul 2025 08:00:53 +0000
Files and hashes: 1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: dER/Br8jkfDh6j7rYSi50ljBcNIEE9xk3rK/U+UNd+U=)
2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:df:0e:35:0e:d8:55:be:52:88:50:d4:5b:a0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Jul 29 08:00:53 2025 GMT
Not After : Jul 30 08:00:53 2025 GMT
Subject: CN=c04a71e71dc4c0725c42e07f3902cfcbf96e6418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:c9:98:90:38:61:49:21:50:a6:24:2a:e1:
30:85:a6:f9:a4:67:48:82:c3:56:24:9c:1b:92:85:
d2:38:20:4b:33:00:6f:88:71:fc:53:1e:5f:2e:37:
4d:30:b4:04:d4:78:21:dc:89:d8:2b:9f:b2:e5:7b:
33:db:9f:30:aa:7d:6e:d4:54:13:d7:8d:21:83:09:
d5:4b:ca:17:eb:31:aa:1a:51:06:71:98:2c:4c:f0:
f3:bd:5c:40:43:d6:d5:cb:a6:cf:dc:54:23:4f:3b:
30:7e:f7:5d:b1:c3:ae:44:01:eb:87:60:9d:78:5c:
1b:1d:04:04:94:96:18:4f:0f:62:f3:c2:45:87:e3:
3a:e6:a4:0b:d7:19:64:3b:a9:be:ba:55:ab:1d:48:
3b:3d:39:ad:d0:01:ff:0e:20:24:1f:ab:8e:d0:76:
a6:4a:31:66:16:94:66:e2:91:10:86:c1:1c:f9:d0:
da:3f:11:95:16:18:2d:c7:e0:89:b2:7e:2d:1c:42:
c5:3b:1e:40:d3:d0:49:56:3d:a2:fc:d0:69:37:0c:
3d:e6:a0:8e:d8:cc:e7:e8:50:01:b5:0f:ef:04:01:
46:6d:c8:14:af:51:e2:d4:6e:5d:9a:c3:65:e9:96:
3f:98:19:a9:2d:13:f6:71:43:d6:f9:90:9d:56:89:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:71:E7:1D:C4:C0:72:5C:42:E0:7F:39:02:CF:CB:F9:6E:64:18
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:49:23:9a:b8:98:2b:19:8c:23:fb:70:c8:87:aa:3d:07:7e:
47:57:ac:b7:a7:56:8c:d8:43:26:ae:32:af:ce:e2:c5:3a:5a:
57:1c:e2:8f:c7:96:38:9a:4d:99:5a:46:e3:f7:77:23:bd:5a:
6b:c6:2d:e9:bd:03:7a:14:db:17:a6:36:ca:44:3d:c0:8f:0d:
de:36:97:bd:f2:8e:b9:e6:75:86:d4:26:cd:92:08:3a:7a:dd:
78:63:5c:01:75:9c:b0:c6:05:6c:22:fe:86:5a:30:74:ee:df:
bf:2a:1f:5d:1a:c8:82:ea:6e:6c:73:b5:9c:61:32:e7:b6:4c:
06:cd:fd:10:fe:e8:e9:68:a1:49:6e:d5:88:54:63:e7:16:b6:
e3:21:5c:94:93:0a:f4:cd:7f:33:ed:93:30:33:85:a4:29:76:
f9:48:da:60:88:79:59:96:a6:0d:e5:f8:01:ce:0e:bb:85:1f:
51:9b:c5:56:a9:b7:89:49:c3:b6:25:9d:36:7e:63:d7:d1:87:
3a:d4:62:a5:f2:af:80:ad:e4:3d:7e:94:fc:a3:68:21:9e:9a:
ec:f5:fb:33:ca:2c:f1:a5:f9:79:ac:48:19:da:6d:2d:74:52:
04:ae:8c:7a:bf:5c:96:f5:9f:35:c9:07:60:0e:0f:86:57:76:
2e:86:63:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhVMt8ONQ7YVb5SiFDUW6DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYWMwZGEzNTEwMDY2ODA2MGQzMGYxNzNkNjEwMmUxODJk
MWI5ZWEwHhcNMjUwNzI5MDgwMDUzWhcNMjUwNzMwMDgwMDUzWjAzMTEwLwYDVQQD
EyhjMDRhNzFlNzFkYzRjMDcyNWM0MmUwN2YzOTAyY2ZjYmY5NmU2NDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFbJmJA4YUkhUKYkKuEwhab5pGdI
gsNWJJwbkoXSOCBLMwBviHH8Ux5fLjdNMLQE1Hgh3InYK5+y5Xsz258wqn1u1FQT
140hgwnVS8oX6zGqGlEGcZgsTPDzvVxAQ9bVy6bP3FQjTzswfvddscOuRAHrh2Cd
eFwbHQQElJYYTw9i88JFh+M65qQL1xlkO6m+ulWrHUg7PTmt0AH/DiAkH6uO0Ham
SjFmFpRm4pEQhsEc+dDaPxGVFhgtx+CJsn4tHELFOx5A09BJVj2i/NBpNww95qCO
2Mzn6FABtQ/vBAFGbcgUr1Hi1G5dmsNl6ZY/mBmpLRP2cUPW+ZCdVomLgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBKcecdxMByXELgfzkCz8v5bmQYMB8GA1UdIwQY
MBaAFJqsDaNRAGaAYNMPFz1hAuGC0bnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUt
NTFiMTA3ZGM5ZjM5LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUtNTFiMTA3ZGM5ZjM5
LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUkjmriY
KxmMI/twyIeqPQd+R1est6dWjNhDJq4yr87ixTpaVxzij8eWOJpNmVpG4/d3I71a
a8Yt6b0DehTbF6Y2ykQ9wI8N3jaXvfKOueZ1htQmzZIIOnrdeGNcAXWcsMYFbCL+
hlowdO7fvyofXRrIgupubHO1nGEy57ZMBs39EP7o6WihSW7ViFRj5xa24yFclJMK
9M1/M+2TMDOFpCl2+UjaYIh5WZamDeX4Ac4Ou4UfUZvFVqm3iUnDtiWdNn5j19GH
OtRipfKvgK3kPX6U/KNoIZ6a7PX7M8os8aX5eaxIGdptLXRSBK6Mer9clvWfNckH
YA4Phld2LoZjpg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 12:05:13 2025 by rpki-client