Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json)
Hash identifier: pU19oaHfx6oh1QA7DvlHFGLRz3GspK6WTypYLqKZF9o=
Subject key identifier: D5:74:9F:80:E4:66:EC:6C:5C:25:AB:66:11:B4:FF:A8:BB:9A:3D:83
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Certificate issuer: /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial: 0198537BB486784FA1ECDD27A692C2A2304F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
Manifest number: 1001
Signing time: Tue 29 Jul 2025 00:01:12 +0000
Manifest this update: Tue 29 Jul 2025 00:01:12 +0000
Manifest next update: Wed 30 Jul 2025 00:01:12 +0000
Files and hashes: 1: 1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa (hash: oLjRdDjCa874D2Ohi+4lYwxZSVZ663VZAUA47G0Sbic=)
2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: bvN/QjgqhaJQx+5K1bQJMo5oqizwXf/nTGbP7g9YTvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:b4:86:78:4f:a1:ec:dd:27:a6:92:c2:a2:30:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Validity
Not Before: Jul 29 00:01:12 2025 GMT
Not After : Jul 30 00:01:12 2025 GMT
Subject: CN=d5749f80e466ec6c5c25ab6611b4ffa8bb9a3d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:c7:b5:60:74:3c:6e:1f:79:56:11:a9:a8:
30:27:69:50:56:9d:97:cb:29:7c:8b:7e:9d:1b:5f:
8b:19:98:cd:df:2d:7f:47:b9:d8:d0:79:bd:1d:12:
82:58:97:fc:12:04:23:52:52:5c:fe:95:ed:7f:8a:
ae:3e:fa:ec:a4:91:39:48:f1:95:c9:35:35:22:87:
b3:c3:03:d4:a6:b7:26:24:f9:d3:49:f6:e0:41:42:
1a:3b:7e:39:bc:28:cd:59:d7:67:7e:11:89:85:e6:
8a:f5:06:2f:67:d3:0f:03:5c:d1:1a:22:4d:5a:77:
d0:6e:67:d4:6d:e9:00:40:bc:25:9d:1d:16:fe:be:
d6:fb:46:ff:cd:96:e0:15:ff:2e:d8:c8:cf:43:58:
b0:ea:7c:17:ec:6f:99:08:18:fd:08:43:fc:9b:37:
a9:de:5e:1e:e3:80:b4:ba:90:c4:9b:93:d7:e3:da:
44:b0:8e:db:31:20:43:48:cd:7d:14:24:40:25:18:
a7:98:34:85:fc:74:ae:b5:6c:26:09:dd:61:e3:25:
e8:7d:02:3d:b2:83:4f:e0:a8:f8:46:18:05:b7:c7:
3e:9f:5f:72:db:a4:69:9b:5a:11:85:e8:56:d5:76:
5a:5b:00:83:f4:5f:8c:7d:b5:5c:89:ed:87:63:6b:
68:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:74:9F:80:E4:66:EC:6C:5C:25:AB:66:11:B4:FF:A8:BB:9A:3D:83
X509v3 Authority Key Identifier:
keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:bc:93:74:7f:fa:cc:76:b2:ac:2c:87:9f:06:92:b8:f9:7f:
00:c7:40:46:d1:ef:13:9f:d5:1b:a6:35:d9:03:44:d3:83:15:
8d:63:44:7b:68:e0:34:60:f4:fb:85:17:b0:8e:de:06:18:07:
29:dc:2d:bc:4d:11:12:11:8c:3a:15:78:c7:45:e9:73:a2:29:
8f:e2:a5:c2:b2:e1:1b:ac:a2:ba:8a:ba:8e:7d:2b:b4:dc:e6:
ef:d1:0b:88:cc:44:83:cf:13:ae:bb:b4:19:9e:bd:fa:fc:90:
8a:a1:58:ab:49:8a:43:35:74:9e:d9:70:98:6a:c9:33:fc:42:
be:e8:b2:fe:69:df:b2:0c:d6:02:0e:1c:cc:8b:cd:6c:bc:9d:
56:fd:95:6a:1c:a5:26:0e:9f:f8:67:62:70:3d:41:1c:7c:66:
cc:c1:1f:e1:d9:58:4a:cf:24:2e:cd:42:29:b6:bc:2e:be:11:
dc:ab:d8:5d:14:8e:bb:ae:ee:1a:a6:a1:ff:68:a9:b6:e9:94:
27:dd:54:d9:38:08:80:e3:8e:75:4b:2b:e0:ec:55:9f:23:dc:
25:7f:3d:96:08:75:e0:f4:34:a8:0a:ae:69:aa:a4:bf:40:a0:
13:52:99:a1:80:b9:d4:19:a5:12:f1:4d:35:be:82:fc:ad:f6:
9c:d2:40:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTe7SGeE+h7N0nppLCojBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTg0ZDdlNjRiYTNlODViNTcwMzZjNzMxOGY5M2NjM2Q5
NGQxODcwHhcNMjUwNzI5MDAwMTEyWhcNMjUwNzMwMDAwMTEyWjAzMTEwLwYDVQQD
EyhkNTc0OWY4MGU0NjZlYzZjNWMyNWFiNjYxMWI0ZmZhOGJiOWEzZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKnHtWB0PG4feVYRqagwJ2lQVp2X
yyl8i36dG1+LGZjN3y1/R7nY0Hm9HRKCWJf8EgQjUlJc/pXtf4quPvrspJE5SPGV
yTU1IoezwwPUprcmJPnTSfbgQUIaO345vCjNWddnfhGJheaK9QYvZ9MPA1zRGiJN
WnfQbmfUbekAQLwlnR0W/r7W+0b/zZbgFf8u2MjPQ1iw6nwX7G+ZCBj9CEP8mzep
3l4e44C0upDEm5PX49pEsI7bMSBDSM19FCRAJRinmDSF/HSutWwmCd1h4yXofQI9
soNP4Kj4RhgFt8c+n19y26Rpm1oRhehW1XZaWwCD9F+MfbVcie2HY2toZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV0n4DkZuxsXCWrZhG0/6i7mj2DMB8GA1UdIwQY
MBaAFK6oTX5kuj6FtXA2xzGPk8w9lNGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xNTdmMWUtN2NmOC00ZDk4LWE5MjQt
OTdjMzMyZjcyMzlkLzEvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xNTdmMWUtN2NmOC00ZDk4LWE5MjQtOTdjMzMyZjcyMzlk
LzEvcnFoTmZtUzZQb1cxY0RiSE1ZLVR6RDJVMFljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxryTdH/6
zHayrCyHnwaSuPl/AMdARtHvE5/VG6Y12QNE04MVjWNEe2jgNGD0+4UXsI7eBhgH
KdwtvE0REhGMOhV4x0Xpc6Ipj+KlwrLhG6yiuoq6jn0rtNzm79ELiMxEg88Trru0
GZ69+vyQiqFYq0mKQzV0ntlwmGrJM/xCvuiy/mnfsgzWAg4czIvNbLydVv2Vahyl
Jg6f+GdicD1BHHxmzMEf4dlYSs8kLs1CKba8Lr4R3KvYXRSOu67uGqah/2iptumU
J91U2TgIgOOOdUsr4OxVnyPcJX89lgh14PQ0qAquaaqkv0CgE1KZoYC51BmlEvFN
Nb6C/K32nNJAXQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:37:29 2025 by rpki-client