Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: CmVQ8C2Ue5No21QJiKEVFqi750WhdXXOSrCVSKam1wE=
Subject key identifier: A5:E6:98:07:83:1D:00:13:1D:F8:5C:CD:5D:55:E3:4A:E6:7E:C1:3C
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 0198439AD69970A3CF2C8F44E63AF566C5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 0741
Signing time: Fri 25 Jul 2025 22:01:17 +0000
Manifest this update: Fri 25 Jul 2025 22:01:17 +0000
Manifest next update: Sat 26 Jul 2025 22:01:17 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: zeoqnnCUf+IXRr/E9ZusNSwsf7Gybiq6w0pQamMAhAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:d6:99:70:a3:cf:2c:8f:44:e6:3a:f5:66:c5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Jul 25 22:01:17 2025 GMT
Not After : Jul 26 22:01:17 2025 GMT
Subject: CN=a5e69807831d00131df85ccd5d55e34ae67ec13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:7b:f4:b3:52:cc:9e:ca:84:b7:49:66:da:
88:61:79:c8:4b:20:3a:7d:81:af:87:3e:aa:b2:58:
9a:a1:46:d7:ba:12:f4:05:5d:7e:3b:4a:72:03:bb:
44:ce:68:02:11:d7:5c:da:3a:2f:12:1b:a3:d5:26:
b8:fc:0b:2a:de:d8:82:24:c0:af:2f:ab:8a:aa:d6:
a1:df:76:6b:27:d3:8b:29:1e:c1:3c:7f:38:2c:d1:
a3:26:3e:3f:6d:4e:88:03:15:a7:f5:69:7c:06:26:
b8:bd:34:8e:21:46:5d:fd:98:e6:20:7a:9a:24:64:
35:26:be:2b:ad:49:a1:87:45:eb:77:3e:f8:a7:b4:
29:7f:98:74:e7:ce:01:9b:46:6d:f6:19:89:c0:7e:
83:95:9a:4c:7b:98:0c:3f:81:c4:61:39:43:b6:dc:
64:81:cb:6f:39:a4:d6:7d:54:f4:33:e4:20:88:fa:
05:0a:be:89:13:12:7c:94:f7:a9:68:86:26:b4:40:
02:ad:54:e0:19:21:26:d7:c8:b5:0c:6d:d4:c8:57:
43:83:18:47:7a:f5:c1:cc:90:4a:78:b3:6f:95:19:
2f:00:c7:e0:95:a6:c1:69:40:03:4f:1b:ed:41:ab:
2f:9b:00:3a:0a:58:b6:de:9a:87:e2:e9:da:1f:e4:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E6:98:07:83:1D:00:13:1D:F8:5C:CD:5D:55:E3:4A:E6:7E:C1:3C
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8c:78:56:ea:c6:87:85:62:c5:bf:fb:e2:ff:8c:7e:1d:5b:
a6:6c:a0:a1:b3:db:07:f5:94:01:d1:a4:6c:0f:f5:6f:8a:0b:
9f:3c:78:ea:b8:34:00:df:11:4d:7b:b0:f3:7c:c7:d0:1f:4d:
4e:ad:9a:d3:5f:5f:34:3e:3a:c3:4a:5f:aa:40:fd:35:f3:78:
c1:18:66:02:41:4e:f0:b9:e3:dd:83:dc:8d:70:40:7b:2a:e1:
08:a7:2e:2b:26:11:93:ce:d8:13:fd:5c:62:7e:f7:6d:24:c4:
7a:ef:0b:af:26:9f:da:bc:40:3d:3a:63:c3:c4:71:3a:5e:c9:
b5:52:6a:4f:c3:e9:93:54:54:9d:5f:17:ec:ed:85:91:66:92:
71:e1:70:df:6b:08:6d:51:6b:14:fa:06:5a:bb:0b:7d:fe:ce:
4a:ec:25:d5:9a:b7:2e:86:5b:a5:eb:5f:41:82:40:92:42:35:
fc:1b:4d:4f:5f:70:a6:79:08:58:54:32:08:1a:5e:45:8f:83:
04:cc:84:75:b9:f4:be:fc:ab:11:ee:44:28:6d:c6:b6:d3:f5:
fa:c1:e5:7f:03:fe:06:53:bc:4b:a7:4d:83:12:cc:9d:5b:fe:
b0:39:d8:5d:f7:28:0d:16:0d:d8:97:fa:7a:9c:b7:79:f1:5f:
ac:f8:95:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmtaZcKPPLI9E5jr1ZsXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUzNGJhM2NiNDI0Y2Y1YzVlM2JhMjU0YmEyMzI1MDgw
NjU4YjAwHhcNMjUwNzI1MjIwMTE3WhcNMjUwNzI2MjIwMTE3WjAzMTEwLwYDVQQD
EyhhNWU2OTgwNzgzMWQwMDEzMWRmODVjY2Q1ZDU1ZTM0YWU2N2VjMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8V79LNSzJ7KhLdJZtqIYXnISyA6
fYGvhz6qsliaoUbXuhL0BV1+O0pyA7tEzmgCEddc2jovEhuj1Sa4/Asq3tiCJMCv
L6uKqtah33ZrJ9OLKR7BPH84LNGjJj4/bU6IAxWn9Wl8Bia4vTSOIUZd/ZjmIHqa
JGQ1Jr4rrUmhh0Xrdz74p7Qpf5h0584Bm0Zt9hmJwH6DlZpMe5gMP4HEYTlDttxk
gctvOaTWfVT0M+QgiPoFCr6JExJ8lPepaIYmtEACrVTgGSEm18i1DG3UyFdDgxhH
evXBzJBKeLNvlRkvAMfglabBaUADTxvtQasvmwA6Cli23pqH4unaH+S3nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXmmAeDHQATHfhczV1V40rmfsE8MB8GA1UdIwQY
MBaAFKjVNLo8tCTPXF47olS6IyUIBliwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83MzcyNGEtMWQwYS00OWMzLWFjNjct
ZTc3YWVkNmY2ZTNhLzEvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83MzcyNGEtMWQwYS00OWMzLWFjNjctZTc3YWVkNmY2ZTNh
LzEvcU5VMHVqeTBKTTljWGp1aVZMb2pKUWdHV0xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYx4VurG
h4Vixb/74v+Mfh1bpmygobPbB/WUAdGkbA/1b4oLnzx46rg0AN8RTXuw83zH0B9N
Tq2a019fND46w0pfqkD9NfN4wRhmAkFO8Lnj3YPcjXBAeyrhCKcuKyYRk87YE/1c
Yn73bSTEeu8Lryaf2rxAPTpjw8RxOl7JtVJqT8Ppk1RUnV8X7O2FkWaSceFw32sI
bVFrFPoGWrsLff7OSuwl1Zq3LoZbpetfQYJAkkI1/BtNT19wpnkIWFQyCBpeRY+D
BMyEdbn0vvyrEe5EKG3GttP1+sHlfwP+BlO8S6dNgxLMnVv+sDnYXfcoDRYN2Jf6
epy3efFfrPiVsg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:02:47 2025 by rpki-client