Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: +/0zf2HijSb9qku8iw46/BvcKt7/U5IpNOkTP+IOUhc=
Subject key identifier: E3:6E:DE:05:39:0A:0B:B2:D3:E2:1F:4B:DF:19:67:6A:57:24:6A:CC
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 01983FBDEB0521874B76F9599C540F2B631E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 15FE
Signing time: Fri 25 Jul 2025 04:01:07 +0000
Manifest this update: Fri 25 Jul 2025 04:01:07 +0000
Manifest next update: Sat 26 Jul 2025 04:01:07 +0000
Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: 26sEc5qMXfEtFmKM0h08FauCr8Qa7/O2qU3g+48gC4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:eb:05:21:87:4b:76:f9:59:9c:54:0f:2b:63:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Jul 25 04:01:07 2025 GMT
Not After : Jul 26 04:01:07 2025 GMT
Subject: CN=e36ede05390a0bb2d3e21f4bdf19676a57246acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:56:c9:ab:11:1f:ad:e9:83:5f:c0:3d:d9:
68:ac:c3:4d:34:8e:b1:95:e9:7b:47:94:1d:2e:13:
ca:e9:c1:43:39:72:6a:50:69:88:57:61:8c:36:54:
4b:4e:21:02:6e:94:d4:13:87:52:ff:fc:3b:67:e4:
98:45:64:69:1b:81:95:28:68:fe:fe:70:30:69:8d:
d3:20:fe:7a:17:ab:ad:6f:ee:4c:47:6f:4b:ee:7a:
5f:47:74:43:cb:c4:3c:22:ad:6d:26:10:2f:92:a5:
36:c4:be:27:b2:2d:d2:37:2a:05:87:96:d4:fa:35:
ed:4c:9d:34:89:6a:f0:30:7c:3d:5e:3e:63:6b:61:
8e:df:b7:f8:6f:3b:48:99:87:f8:f8:1e:11:7c:ec:
3d:a7:52:6b:c6:ab:82:de:dc:63:a8:ce:20:18:04:
10:1d:3d:e6:0b:83:fd:8c:3d:11:d4:7a:ac:5a:08:
42:82:58:76:89:81:d9:3c:65:c8:0f:62:06:fc:b3:
30:56:40:bb:18:54:f4:1a:59:52:c8:df:8e:85:e0:
3a:83:a2:1b:c8:4c:16:52:cf:80:57:2f:d4:3f:10:
5a:6e:c6:dc:70:b9:5c:8b:31:95:bf:81:68:37:ee:
85:1c:24:20:7e:4b:e3:29:30:b3:31:7f:4e:b8:88:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:DE:05:39:0A:0B:B2:D3:E2:1F:4B:DF:19:67:6A:57:24:6A:CC
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:57:e5:d6:1d:db:86:9d:04:a8:23:29:09:ed:fd:bb:30:31:
5b:b2:c1:5c:36:1f:38:0c:22:be:3f:04:ea:37:21:d4:97:16:
4f:47:7b:1f:f1:f4:0f:f8:45:34:4f:b8:aa:10:e4:65:fb:92:
99:56:60:45:48:b2:66:71:35:28:83:e9:21:a7:64:75:bd:8e:
b5:f1:4b:bf:41:5c:b1:8e:1d:b9:9b:95:3a:92:ff:78:c2:2e:
40:17:93:72:3b:d2:64:08:53:ba:c3:c0:c2:f5:a7:cb:42:c4:
b6:4d:5d:96:aa:4f:be:f3:61:0b:b0:07:05:b2:27:34:37:6c:
28:c6:b6:c3:20:ad:47:66:3d:f8:6c:70:d9:2f:a4:d6:28:c1:
5a:51:35:ab:75:93:97:31:44:df:be:6d:1e:55:76:38:c2:24:
ee:d0:2a:a1:d3:44:16:70:2c:6e:ba:10:95:d0:21:bf:70:ce:
5e:05:69:91:ef:61:27:dd:53:82:cc:40:87:91:d6:1e:92:96:
ee:72:13:f0:42:b0:56:f1:4c:e1:06:ae:da:59:07:cb:72:d2:
1b:66:c0:55:e9:d0:38:5d:d2:bc:49:49:c8:45:41:3b:b0:ab:
76:0a:9b:ff:e5:df:d3:67:88:6d:de:d4:23:dc:71:a6:32:0c:
24:bd:ea:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg/vesFIYdLdvlZnFQPK2MeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NmUyNTdjMzJkOWRiYjgxOWQ1MTdkNTUwNTRmNzY3ZDcx
NjFkMmMwHhcNMjUwNzI1MDQwMTA3WhcNMjUwNzI2MDQwMTA3WjAzMTEwLwYDVQQD
EyhlMzZlZGUwNTM5MGEwYmIyZDNlMjFmNGJkZjE5Njc2YTU3MjQ2YWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY9WyasRH63pg1/APdlorMNNNI6x
lel7R5QdLhPK6cFDOXJqUGmIV2GMNlRLTiECbpTUE4dS//w7Z+SYRWRpG4GVKGj+
/nAwaY3TIP56F6utb+5MR29L7npfR3RDy8Q8Iq1tJhAvkqU2xL4nsi3SNyoFh5bU
+jXtTJ00iWrwMHw9Xj5ja2GO37f4bztImYf4+B4RfOw9p1JrxquC3txjqM4gGAQQ
HT3mC4P9jD0R1HqsWghCglh2iYHZPGXID2IG/LMwVkC7GFT0GllSyN+OheA6g6Ib
yEwWUs+AVy/UPxBabsbccLlcizGVv4FoN+6FHCQgfkvjKTCzMX9OuIjwcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONu3gU5Cguy0+IfS98ZZ2pXJGrMMB8GA1UdIwQY
MBaAFKhuJXwy2du4GdUX1VBU92fXFh0sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzIt
NDg3ZjAzNGM0NzI3LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81OTZmZDUtNmU0NC00ODZlLTgyYzItNDg3ZjAzNGM0NzI3
LzEvcUc0bGZETFoyN2daMVJmVlVGVDNaOWNXSFN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVfl1h3b
hp0EqCMpCe39uzAxW7LBXDYfOAwivj8E6jch1JcWT0d7H/H0D/hFNE+4qhDkZfuS
mVZgRUiyZnE1KIPpIadkdb2OtfFLv0FcsY4duZuVOpL/eMIuQBeTcjvSZAhTusPA
wvWny0LEtk1dlqpPvvNhC7AHBbInNDdsKMa2wyCtR2Y9+Gxw2S+k1ijBWlE1q3WT
lzFE375tHlV2OMIk7tAqodNEFnAsbroQldAhv3DOXgVpke9hJ91TgsxAh5HWHpKW
7nIT8EKwVvFM4Qau2lkHy3LSG2bAVenQOF3SvElJyEVBO7Crdgqb/+Xf02eIbd7U
I9xxpjIMJL3qxw==
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:44:47 2025 by rpki-client