Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: QcXkaV+PoT+/f0UueLOByS0QMbPQJ4DbTz6Z1OB0N3s=
Subject key identifier: F5:F1:2B:95:FE:2B:F7:6B:2D:0E:13:C5:07:94:0B:14:C3:87:82:D0
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 01984A09D09C3A1862634AB82ADB8C68979F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: B6
Signing time: Sun 27 Jul 2025 04:00:13 +0000
Manifest this update: Sun 27 Jul 2025 04:00:13 +0000
Manifest next update: Mon 28 Jul 2025 04:00:13 +0000
Files and hashes: 1: JQJmD49tR8jandeFHJ1IkrOGoDQ.roa (hash: qBRt18tQW7myUfjqyk6Za7F1LghK7qoZn+vndFJYSpM=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: o8B6p6809FF6Wzq4eOY3RQVsLrdKoXTTRul7dAzk+PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d0:9c:3a:18:62:63:4a:b8:2a:db:8c:68:97:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Jul 27 04:00:13 2025 GMT
Not After : Jul 28 04:00:13 2025 GMT
Subject: CN=f5f12b95fe2bf76b2d0e13c507940b14c38782d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:c5:ac:1b:5e:54:af:91:9a:02:74:9d:d6:
7a:8e:89:95:f0:b9:e9:a0:32:4c:8d:c4:93:a4:a6:
ab:e6:37:41:58:e0:58:54:3a:a7:28:74:2d:b8:73:
e6:59:68:12:57:f6:1b:77:62:e3:34:99:35:ae:58:
8b:13:bc:3b:bc:31:f2:7d:c4:32:cf:11:9b:3f:ba:
6b:a1:08:b0:6c:73:55:c7:b9:42:6d:cd:e3:a6:30:
3b:fd:80:02:4e:a3:dc:5a:c8:86:c9:e4:fe:ae:be:
dd:bf:20:86:37:6c:96:fb:31:d8:7e:2e:f1:05:06:
8b:96:72:51:23:c6:29:29:59:db:a0:5c:1e:89:c3:
2e:db:04:4e:6d:cb:18:1c:24:bd:26:5f:43:fd:d5:
33:e1:54:89:b2:95:5b:3c:ae:bd:53:40:92:42:6d:
13:f7:a3:42:96:e1:40:58:6c:6c:02:33:75:d2:0f:
33:4d:ed:f8:c7:dc:8e:84:af:96:ad:39:a9:ca:31:
88:f7:19:e2:ac:74:41:44:32:23:54:7f:23:5e:46:
47:c8:29:62:ca:8e:e1:e1:3e:0d:4d:a1:4c:94:ec:
58:83:85:cb:b7:0a:3d:93:60:21:a3:00:e5:90:91:
b5:fc:2d:f6:85:a5:f8:e5:5e:1f:01:e1:29:50:3b:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:2B:95:FE:2B:F7:6B:2D:0E:13:C5:07:94:0B:14:C3:87:82:D0
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:36:a7:20:f3:4a:de:f9:d1:7e:72:58:93:38:59:f2:1a:71:
33:d2:43:3c:ef:a0:a0:5f:82:c9:21:cf:32:36:97:8d:c3:47:
a3:c3:c7:e0:b1:a3:e1:f1:88:30:07:dd:8f:01:4c:00:59:08:
46:0c:f3:61:23:fa:7c:45:2c:fd:3e:51:e3:fc:96:d8:82:ac:
51:be:12:0d:7d:fd:0a:f8:c7:f6:f2:67:2b:7a:fd:cc:fc:e5:
f8:e5:0f:0d:76:16:3d:a2:04:ea:10:d1:69:ce:f7:a8:b1:da:
0a:1e:8e:b8:84:ef:4f:2d:ff:60:f7:f1:47:e2:5f:06:4c:bb:
c6:cb:0a:02:7d:fe:da:2c:76:27:9b:32:91:53:6a:91:d6:99:
be:2a:1b:63:93:0c:8b:55:04:80:05:39:20:37:52:13:b5:9d:
5c:80:41:25:cd:15:82:16:85:46:c7:7f:63:20:c9:05:9f:c1:
4a:20:5c:94:7b:6f:ea:21:7b:bf:cb:f5:4b:ff:99:23:6d:45:
d8:8f:c1:6d:2f:e9:98:50:35:72:96:26:9d:1f:1b:b7:a8:4a:
ab:7d:44:12:71:70:13:fd:1a:66:f1:9e:29:18:3b:65:68:0a:
ad:b8:99:4a:74:54:66:1c:0d:57:ec:8c:d0:15:04:aa:f1:f8:
da:fd:93:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCdCcOhhiY0q4KtuMaJefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmU1ZDk3OWUwMzI1Mzk5OTQ2YjIzOTA4MjJkMzBmMWQy
ZjM1ZTEwHhcNMjUwNzI3MDQwMDEzWhcNMjUwNzI4MDQwMDEzWjAzMTEwLwYDVQQD
EyhmNWYxMmI5NWZlMmJmNzZiMmQwZTEzYzUwNzk0MGIxNGMzODc4MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsErFrBteVK+RmgJ0ndZ6jomV8Lnp
oDJMjcSTpKar5jdBWOBYVDqnKHQtuHPmWWgSV/Ybd2LjNJk1rliLE7w7vDHyfcQy
zxGbP7proQiwbHNVx7lCbc3jpjA7/YACTqPcWsiGyeT+rr7dvyCGN2yW+zHYfi7x
BQaLlnJRI8YpKVnboFweicMu2wRObcsYHCS9Jl9D/dUz4VSJspVbPK69U0CSQm0T
96NCluFAWGxsAjN10g8zTe34x9yOhK+WrTmpyjGI9xnirHRBRDIjVH8jXkZHyCli
yo7h4T4NTaFMlOxYg4XLtwo9k2AhowDlkJG1/C32haX45V4fAeEpUDvPRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXxK5X+K/drLQ4TxQeUCxTDh4LQMB8GA1UdIwQY
MBaAFKkuXZeeAyU5mUayOQgi0w8dLzXhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAt
YTQ3ZDE0MWNmYzVhLzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84MTExNWUtYmNhMS00Mzc1LTgxMDAtYTQ3ZDE0MWNmYzVh
LzEvcVM1ZGw1NERKVG1aUnJJNUNDTFREeDB2TmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDanIPNK
3vnRfnJYkzhZ8hpxM9JDPO+goF+CySHPMjaXjcNHo8PH4LGj4fGIMAfdjwFMAFkI
RgzzYSP6fEUs/T5R4/yW2IKsUb4SDX39CvjH9vJnK3r9zPzl+OUPDXYWPaIE6hDR
ac73qLHaCh6OuITvTy3/YPfxR+JfBky7xssKAn3+2ix2J5sykVNqkdaZviobY5MM
i1UEgAU5IDdSE7WdXIBBJc0VghaFRsd/YyDJBZ/BSiBclHtv6iF7v8v1S/+ZI21F
2I/BbS/pmFA1cpYmnR8bt6hKq31EEnFwE/0aZvGeKRg7ZWgKrbiZSnRUZhwNV+yM
0BUEqvH42v2TtA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:39 2025 by rpki-client