Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: Qg9uCwSKCS6c/qE1cqFDuCsgJoh0U1tc+jqZzlpNizg=
Subject key identifier: F0:23:27:BD:9B:7E:E2:D0:54:37:1C:FF:60:01:D0:B5:B0:68:DD:EC
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 019826D9CB03FD8B63E6F57AB72807B7B6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0CD1
Signing time: Sun 20 Jul 2025 08:01:04 +0000
Manifest this update: Sun 20 Jul 2025 08:01:04 +0000
Manifest next update: Mon 21 Jul 2025 08:01:04 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: hWLer8QOjT2FT2Md2SJIQGCmWzSKziu8LhQRyQMMn8Y=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:cb:03:fd:8b:63:e6:f5:7a:b7:28:07:b7:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Jul 20 08:01:04 2025 GMT
Not After : Jul 21 08:01:04 2025 GMT
Subject: CN=f02327bd9b7ee2d054371cff6001d0b5b068ddec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:30:2f:86:db:f6:0b:95:88:94:c7:e9:e5:
d7:2e:ac:08:9e:b8:b2:69:3d:52:46:09:a2:0a:22:
86:63:5e:03:bd:86:5b:c4:fa:08:08:ed:6e:f5:16:
f3:7e:74:b1:48:00:d5:71:02:c2:01:bf:34:dd:d5:
c9:c7:ad:dc:ee:30:41:0e:83:e3:e0:39:74:b0:5d:
b9:06:ca:9e:c8:f1:6e:14:3f:8a:fc:5c:e2:58:e1:
d5:97:fb:e8:f4:17:f4:ae:0a:6a:9e:96:5e:3a:40:
08:f1:97:df:fc:25:cb:49:fc:a5:4a:db:20:b8:ad:
0c:a4:be:0f:80:d7:1d:7e:32:d8:e8:6c:c3:13:5f:
2e:b8:09:5b:05:a2:08:3b:8e:77:1e:3d:e2:48:57:
dc:86:be:b5:23:a3:ce:5a:89:9b:f5:6e:45:a2:24:
72:13:cd:10:7e:ce:bf:81:32:e2:4b:30:7c:20:25:
1c:96:3e:c7:20:fb:91:38:4d:c1:a0:db:00:d5:a9:
a9:1a:6e:93:90:e4:98:88:f6:41:84:6e:ef:8f:8e:
11:cb:df:0d:6c:51:5f:b2:98:a7:51:e6:12:05:6f:
f6:c2:c2:b7:b6:6c:ef:b7:92:5e:a4:81:1e:bb:5f:
e3:7a:08:ef:58:a3:e3:10:30:e3:f8:14:c5:fc:18:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:23:27:BD:9B:7E:E2:D0:54:37:1C:FF:60:01:D0:B5:B0:68:DD:EC
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ee:0b:8c:db:bf:fe:93:7b:11:00:9c:d0:e5:f4:50:a2:0a:
3a:fc:3b:7f:b1:31:df:63:9c:88:08:69:52:dd:13:eb:85:e2:
6f:57:09:3c:e8:a7:ae:15:f5:80:cf:c2:7b:fb:c5:04:c6:57:
9b:2e:7d:73:4a:ac:1a:6d:79:65:22:99:d6:21:43:89:61:07:
e7:07:a1:08:e9:f5:3c:9f:c3:c6:2a:a8:92:8c:6e:06:a7:3c:
76:5f:fc:3f:ed:69:fe:75:ab:21:78:2a:bb:08:20:79:7a:ef:
25:49:d1:9d:ca:da:93:4c:13:34:91:09:82:37:0a:61:ba:e2:
a3:9e:4f:76:c6:5b:a2:35:25:ec:93:dd:c6:bb:63:d3:da:26:
ed:54:e8:13:b0:6b:7d:b3:b2:59:5a:67:aa:dd:ac:ce:b8:26:
97:27:3a:3b:9e:b8:c6:d3:4e:97:c8:39:2c:7f:2d:fc:27:7a:
a6:ca:0a:98:31:8f:56:4a:42:96:ca:20:9d:f3:a5:80:a6:22:
bc:66:d6:8a:ec:80:b5:5d:9e:34:d8:2b:83:1a:63:65:e6:6c:
90:00:85:e5:80:39:a1:bc:f4:b3:ae:4d:cf:d4:e3:58:6b:9e:
58:d8:61:3e:c8:ef:e2:1a:68:a6:ba:be:96:63:50:17:ba:31:
42:3f:53:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgm2csD/Ytj5vV6tygHt7boMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmFiZGE5MDM0NmQwY2FkMjVkY2E2Zjc0NTBiY2NmOGQw
OGU3NzEwHhcNMjUwNzIwMDgwMTA0WhcNMjUwNzIxMDgwMTA0WjAzMTEwLwYDVQQD
EyhmMDIzMjdiZDliN2VlMmQwNTQzNzFjZmY2MDAxZDBiNWIwNjhkZGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yswL4bb9guViJTH6eXXLqwInriy
aT1SRgmiCiKGY14DvYZbxPoICO1u9RbzfnSxSADVcQLCAb803dXJx63c7jBBDoPj
4Dl0sF25BsqeyPFuFD+K/FziWOHVl/vo9Bf0rgpqnpZeOkAI8Zff/CXLSfylStsg
uK0MpL4PgNcdfjLY6GzDE18uuAlbBaIIO453Hj3iSFfchr61I6POWomb9W5FoiRy
E80Qfs6/gTLiSzB8ICUclj7HIPuROE3BoNsA1ampGm6TkOSYiPZBhG7vj44Ry98N
bFFfspinUeYSBW/2wsK3tmzvt5JepIEeu1/jegjvWKPjEDDj+BTF/BjZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAjJ72bfuLQVDcc/2AB0LWwaN3sMB8GA1UdIwQY
MBaAFKdqvakDRtDK0l3Kb3RQvM+NCOdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAt
NGQzMDE2ODRjM2JjLzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNDVjOWItN2I0YS00YjIxLTliMDAtNGQzMDE2ODRjM2Jj
LzEvcDJxOXFRTkcwTXJTWGNwdmRGQzh6NDBJNTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtu4LjNu/
/pN7EQCc0OX0UKIKOvw7f7Ex32OciAhpUt0T64Xib1cJPOinrhX1gM/Ce/vFBMZX
my59c0qsGm15ZSKZ1iFDiWEH5wehCOn1PJ/DxiqokoxuBqc8dl/8P+1p/nWrIXgq
uwggeXrvJUnRncrak0wTNJEJgjcKYbrio55PdsZbojUl7JPdxrtj09om7VToE7Br
fbOyWVpnqt2szrgmlyc6O564xtNOl8g5LH8t/Cd6psoKmDGPVkpClsognfOlgKYi
vGbWiuyAtV2eNNgrgxpjZeZskACF5YA5obz0s65Nz9TjWGueWNhhPsjv4hpoprq+
lmNQF7oxQj9TtA==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:28:21 2025 by rpki-client