Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: WaHjrymC54LTEJV63s26i0aNBUJrklbar7zgHVeuvaI=
Subject key identifier: 2F:10:6A:E8:4A:70:B3:CE:D3:25:09:26:9A:C4:F4:A9:26:96:04:43
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 01984964E3C1F6185FE14C5722B7B7A63C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 1461
Signing time: Sun 27 Jul 2025 01:00:05 +0000
Manifest this update: Sun 27 Jul 2025 01:00:05 +0000
Manifest next update: Mon 28 Jul 2025 01:00:05 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: uy7jK0scEOQSVvx5v/cK611nWG46oftPm2nxot3JNLM=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:e3:c1:f6:18:5f:e1:4c:57:22:b7:b7:a6:3c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Jul 27 01:00:05 2025 GMT
Not After : Jul 28 01:00:05 2025 GMT
Subject: CN=2f106ae84a70b3ced32509269ac4f4a926960443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:57:f5:07:54:1d:5a:2c:af:22:33:68:12:
60:69:c1:dc:a4:23:52:27:ea:8f:37:1f:da:83:5d:
fa:ed:90:1b:bd:3e:3e:f0:08:e9:12:f0:52:fd:cf:
c5:09:18:76:d6:49:42:4e:40:f6:8e:b2:2a:db:b6:
e9:09:a0:9f:03:9a:1c:69:18:e8:8c:be:9a:47:45:
77:24:de:51:2f:61:c9:ba:72:91:e6:fe:42:dd:c7:
5a:70:20:cf:af:4a:8e:7b:11:4a:67:26:93:90:4e:
2d:73:06:16:6b:58:f7:d7:b7:0b:68:b4:21:29:8e:
b6:ba:29:4b:5e:35:98:62:b6:ff:8f:89:f5:f6:4d:
85:3d:dd:04:b2:21:ea:2e:00:bd:86:10:7d:e6:d4:
d6:87:7e:e8:86:7e:ba:c2:dd:81:bb:c6:2a:29:21:
21:60:44:85:f1:5a:0d:98:ee:6e:58:1b:83:7a:0e:
87:2e:2d:3f:2d:b8:e0:aa:29:9d:90:b5:78:64:13:
c4:96:31:e2:53:c2:8d:c5:d1:fa:1d:60:15:77:b5:
48:b3:8e:80:ee:61:64:50:6e:30:33:92:12:b9:49:
16:c6:43:aa:06:7b:f3:e4:ca:d6:0f:a0:da:f8:7f:
46:42:6d:77:62:46:3d:8f:59:8f:b1:6f:aa:07:ce:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:10:6A:E8:4A:70:B3:CE:D3:25:09:26:9A:C4:F4:A9:26:96:04:43
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b1:90:b1:65:57:50:24:f1:99:2d:d4:77:82:89:1c:1e:c9:
ae:fb:2e:66:6b:9c:70:7e:94:ea:f7:6d:47:38:ae:e9:6c:e1:
b9:5a:ca:5b:e3:c5:04:7e:ae:87:4f:2a:11:d2:11:93:16:0a:
c7:23:d0:e7:2b:a3:fb:ec:48:5d:08:fd:68:00:b7:c0:3f:02:
7c:f1:13:f2:66:50:22:49:bb:94:82:dd:d0:aa:d5:05:d3:ff:
41:36:76:db:15:e4:9f:a7:fa:3a:fb:d2:1d:60:b8:c2:e1:2b:
6c:5b:69:cd:79:b6:be:97:03:44:c4:84:69:cc:a9:b6:58:65:
75:f3:63:e6:af:7e:cb:18:57:9b:5c:ad:1b:9e:56:7a:34:e6:
3f:de:3d:a2:ed:02:36:81:12:96:29:76:a3:87:36:37:99:70:
6e:ce:1e:d9:2e:9e:fd:01:ab:9e:57:3c:14:15:af:b8:f6:e7:
1c:a5:3a:d7:0d:c8:61:f2:15:f2:fe:89:d8:ef:1c:ac:85:33:
2a:b7:bd:bb:0d:8c:61:a8:26:ba:6e:b3:0a:7f:59:41:55:37:
45:b2:98:3c:eb:78:d9:2d:79:f8:e2:4e:7a:12:25:4e:fb:f4:
73:e3:03:7c:73:49:90:44:e3:d0:ed:0e:1c:7e:12:02:20:ef:
a5:95:55:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZOPB9hhf4UxXIre3pjx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQwM2EzMGIzMTM3NTlhZjk2MjZhZmQ4ZDNkMjM4MDVm
Y2M4MGUwHhcNMjUwNzI3MDEwMDA1WhcNMjUwNzI4MDEwMDA1WjAzMTEwLwYDVQQD
EygyZjEwNmFlODRhNzBiM2NlZDMyNTA5MjY5YWM0ZjRhOTI2OTYwNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNBX9QdUHVosryIzaBJgacHcpCNS
J+qPNx/ag1367ZAbvT4+8AjpEvBS/c/FCRh21klCTkD2jrIq27bpCaCfA5ocaRjo
jL6aR0V3JN5RL2HJunKR5v5C3cdacCDPr0qOexFKZyaTkE4tcwYWa1j317cLaLQh
KY62uilLXjWYYrb/j4n19k2FPd0EsiHqLgC9hhB95tTWh37ohn66wt2Bu8YqKSEh
YESF8VoNmO5uWBuDeg6HLi0/LbjgqimdkLV4ZBPEljHiU8KNxdH6HWAVd7VIs46A
7mFkUG4wM5ISuUkWxkOqBnvz5MrWD6Da+H9GQm13YkY9j1mPsW+qB85A/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8QauhKcLPO0yUJJprE9KkmlgRDMB8GA1UdIwQY
MBaAFNNEA6MLMTdZr5Ymr9jT0jgF/MgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBRRG93c3hOMW12bGlhdjJOUFNPQVg4eUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My81Njc4Y2QtZDc3Yi00NTYzLWFmZTMt
YjQwNTI3ZGQ0M2ZjLzEvMDBRRG93c3hOMW12bGlhdjJOUFNPQVg4eUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My81Njc4Y2QtZDc3Yi00NTYzLWFmZTMtYjQwNTI3ZGQ0M2Zj
LzEvMDBRRG93c3hOMW12bGlhdjJOUFNPQVg4eUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrGQsWVX
UCTxmS3Ud4KJHB7JrvsuZmuccH6U6vdtRziu6WzhuVrKW+PFBH6uh08qEdIRkxYK
xyPQ5yuj++xIXQj9aAC3wD8CfPET8mZQIkm7lILd0KrVBdP/QTZ22xXkn6f6OvvS
HWC4wuErbFtpzXm2vpcDRMSEacyptlhldfNj5q9+yxhXm1ytG55WejTmP949ou0C
NoESlil2o4c2N5lwbs4e2S6e/QGrnlc8FBWvuPbnHKU61w3IYfIV8v6J2O8crIUz
Kre9uw2MYagmum6zCn9ZQVU3RbKYPOt42S15+OJOehIlTvv0c+MDfHNJkETj0O0O
HH4SAiDvpZVV+Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:18 2025 by rpki-client