Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: 5TdG+xHSQi55gl6w/Huek5W8APIdiZ/bbKrxltoxO8E=
Subject key identifier: 78:02:C8:E7:D8:42:4A:55:D0:71:ED:4B:D8:12:34:87:24:EC:F5:20
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019846643629C795E05743B50E3C34F76E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 11:00:29 +0000
Manifest this update: Sat 26 Jul 2025 11:00:29 +0000
Manifest next update: Sun 27 Jul 2025 11:00:29 +0000
Files and hashes: 1: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: edJUQvmZs0ucfVRFvC2GzjJ/yHC+VpzXKrsV1Q9Dm4w=)
2: raYuD2-oWYFkHeIeR6LIUYgtbtM.roa (hash: JU+hidsjRHQowQdjLtlmSpodi1Pd90fMaRJU/QLsDsg=)
3: zY-mc8ottsO0mlX2DbncV_JVaGI.roa (hash: IXtxsfxn422nBKB3kQxte4GM01lfDRPi2WPTNL4v8HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:36:29:c7:95:e0:57:43:b5:0e:3c:34:f7:6e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jul 26 11:00:29 2025 GMT
Not After : Jul 27 11:00:29 2025 GMT
Subject: CN=7802c8e7d8424a55d071ed4bd812348724ecf520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:5a:37:71:71:80:7b:c8:d3:cc:00:a8:61:
af:38:ba:1c:aa:82:a3:30:e8:8b:c7:75:06:ed:a9:
3e:86:4a:6b:f0:d5:cf:8e:a9:03:f6:ec:35:8c:74:
53:36:0e:4c:bc:66:49:0f:30:7d:85:2c:ca:28:8c:
be:4a:ad:08:f0:fa:d5:dc:dc:00:9c:3b:47:f5:e3:
37:64:07:27:df:41:32:51:97:35:d2:e7:35:b8:72:
c0:f1:0d:fb:85:cb:5d:16:7f:88:94:de:e4:dd:5e:
7f:a1:f4:2b:0b:36:34:93:01:c4:cb:e9:fa:38:fc:
4a:d4:00:44:1f:ae:88:40:b5:af:e2:82:4b:cd:0b:
e6:43:9f:14:3f:ec:6f:df:4b:a6:33:61:d9:38:5c:
f4:60:d8:be:ec:35:6c:7b:a9:02:a4:51:06:76:06:
ea:b7:b2:46:93:1f:26:88:7b:be:85:3f:ad:b3:d2:
af:c7:24:4a:e4:0d:b2:21:8f:2d:60:c3:79:c1:48:
17:2e:81:5d:de:69:f4:3a:08:55:5d:e8:6f:7a:90:
78:1b:f8:71:73:30:a4:95:d2:18:6c:41:5c:45:53:
3a:e2:76:eb:69:43:c1:34:3a:d5:eb:b5:ec:f8:33:
83:5c:d9:b9:9b:67:f9:f2:59:af:76:fd:16:8f:b8:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:02:C8:E7:D8:42:4A:55:D0:71:ED:4B:D8:12:34:87:24:EC:F5:20
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:54:97:74:d2:23:f5:cd:6e:68:58:a4:9d:c0:8d:45:f2:8e:
1a:9d:6f:65:8b:ef:b9:69:b7:a9:5e:81:fc:45:9d:b0:38:22:
6f:bb:2d:1e:c4:2e:cc:72:1f:12:47:23:b9:fa:6e:f5:14:d9:
6e:cc:bf:26:23:6b:34:fd:72:2d:b3:cc:35:3a:38:36:af:14:
74:c7:b7:49:ed:f7:22:a2:c6:0c:e9:2b:d2:a1:9b:f6:81:73:
28:2f:8a:f7:db:3b:d0:77:17:8c:8f:b6:e1:d5:f2:1e:87:d4:
5d:55:50:46:3a:b4:23:4e:31:29:d1:95:55:c4:63:62:b0:e1:
49:d6:ef:e6:18:5f:d7:dc:42:24:e4:c3:f6:93:6d:6f:0a:cd:
92:a7:1f:8f:86:7e:5b:70:5d:df:cd:20:7d:57:5f:f9:f3:5c:
03:f6:9d:b2:12:1a:6c:6b:0e:e6:a7:ee:a7:9a:18:11:1b:75:
9e:c7:66:a8:96:d2:b1:e1:b2:ad:83:31:fc:5a:0b:fa:c8:48:
61:a9:5b:76:ff:7b:22:00:93:3a:be:a0:26:a9:c8:b0:6e:4f:
db:a8:c5:07:31:c8:5a:0a:27:63:e4:b6:6e:e8:5c:97:c3:82:
a6:41:f1:f9:41:67:a7:88:31:98:82:92:7e:49:5f:71:1f:c8:
11:17:80:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZDYpx5XgV0O1Djw0924rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl
YTU3MDIwHhcNMjUwNzI2MTEwMDI5WhcNMjUwNzI3MTEwMDI5WjAzMTEwLwYDVQQD
Eyg3ODAyYzhlN2Q4NDI0YTU1ZDA3MWVkNGJkODEyMzQ4NzI0ZWNmNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1ZaN3FxgHvI08wAqGGvOLocqoKj
MOiLx3UG7ak+hkpr8NXPjqkD9uw1jHRTNg5MvGZJDzB9hSzKKIy+Sq0I8PrV3NwA
nDtH9eM3ZAcn30EyUZc10uc1uHLA8Q37hctdFn+IlN7k3V5/ofQrCzY0kwHEy+n6
OPxK1ABEH66IQLWv4oJLzQvmQ58UP+xv30umM2HZOFz0YNi+7DVse6kCpFEGdgbq
t7JGkx8miHu+hT+ts9KvxyRK5A2yIY8tYMN5wUgXLoFd3mn0OghVXehvepB4G/hx
czCkldIYbEFcRVM64nbraUPBNDrV67Xs+DODXNm5m2f58lmvdv0Wj7j+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgCyOfYQkpV0HHtS9gSNIck7PUgMB8GA1UdIwQY
MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt
ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1
LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1FSXdNIj
9c1uaFikncCNRfKOGp1vZYvvuWm3qV6B/EWdsDgib7stHsQuzHIfEkcjufpu9RTZ
bsy/JiNrNP1yLbPMNTo4Nq8UdMe3Se33IqLGDOkr0qGb9oFzKC+K99s70HcXjI+2
4dXyHofUXVVQRjq0I04xKdGVVcRjYrDhSdbv5hhf19xCJOTD9pNtbwrNkqcfj4Z+
W3Bd380gfVdf+fNcA/adshIabGsO5qfup5oYERt1nsdmqJbSseGyrYMx/FoL+shI
Yalbdv97IgCTOr6gJqnIsG5P26jFBzHIWgonY+S2buhcl8OCpkHx+UFnp4gxmIKS
fklfcR/IEReAOQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:15:43 2025 by rpki-client