Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: 6rARuAEZGKEN+lTpsJsUqNW/R/ZNrTlsmliSvINeHe8=
Subject key identifier: DC:42:80:31:EA:5D:EB:95:92:B6:1E:D1:D8:48:0A:9A:AC:4C:B9:BA
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 01992BFDB5C5B8D2698D41746A06F0D2E4B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 0702
Signing time: Tue 09 Sep 2025 01:01:11 +0000
Manifest this update: Tue 09 Sep 2025 01:01:11 +0000
Manifest next update: Wed 10 Sep 2025 01:01:11 +0000
Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: x8Jas2LrxS9o5hFfnP6rMKOdweHdClK6OLNNx1YyTLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:fd:b5:c5:b8:d2:69:8d:41:74:6a:06:f0:d2:e4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Sep 9 01:01:11 2025 GMT
Not After : Sep 10 01:01:11 2025 GMT
Subject: CN=dc428031ea5deb9592b61ed1d8480a9aac4cb9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:db:51:5c:a9:be:ac:df:10:11:45:b6:6b:
f9:7a:c7:81:b7:1b:e3:59:08:29:f7:58:50:0a:cf:
62:a3:a0:b6:bf:1b:47:eb:55:69:d5:c4:79:31:e2:
b8:01:52:aa:50:fb:fc:2a:60:03:e7:8d:03:ae:6a:
c6:a3:1b:c6:3c:af:b1:d0:a8:2e:d8:d0:3e:59:3f:
8b:38:df:cb:2a:18:3c:20:1b:16:02:76:a0:16:ee:
c6:31:2a:08:91:4e:39:ae:ae:55:42:1f:c8:b0:bf:
e7:c8:04:b7:48:da:55:07:26:4d:09:92:90:44:24:
b1:de:87:80:6d:ed:7f:1a:d5:81:42:86:82:c4:11:
aa:29:4d:d1:12:b6:23:ba:dd:54:fb:59:5a:36:1b:
3a:9c:30:7d:9e:df:4c:9c:3b:f2:fe:0e:47:74:e4:
c0:53:7f:2e:1d:5c:54:6e:6d:74:1d:78:52:87:17:
45:ed:fe:ee:5e:92:eb:17:82:b0:68:e7:1c:26:8e:
4f:39:6c:5f:42:11:35:b8:47:f9:66:ac:8e:12:f9:
15:78:47:f1:80:48:1e:97:58:60:3a:a7:b8:20:01:
49:43:eb:84:3e:fd:91:57:3e:4a:22:87:14:08:ca:
93:ba:59:35:d0:8f:9f:64:13:8c:f7:d8:25:1c:bb:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:42:80:31:EA:5D:EB:95:92:B6:1E:D1:D8:48:0A:9A:AC:4C:B9:BA
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ed:6c:14:5e:83:7b:53:7c:69:1d:9a:07:30:af:92:34:10:
f1:7a:14:7d:6b:bd:37:65:44:61:fa:2a:54:ba:54:56:05:8e:
63:e3:59:9d:54:e0:0a:d6:4b:53:a9:25:fd:2c:82:ba:f5:32:
d0:36:f3:d4:eb:f1:3e:fe:61:01:f4:44:1a:65:5d:41:d4:ab:
7a:67:a1:a4:e4:8d:b2:91:a2:9e:28:72:15:ba:65:80:03:f8:
b7:e4:be:09:be:5f:bf:d1:9f:34:91:b1:c0:64:80:ee:46:7b:
03:d8:6e:05:2f:00:2c:f2:14:38:e6:3a:76:64:c4:c9:e7:ba:
78:df:ba:c6:6e:a9:ad:b4:56:b1:61:a3:55:dd:05:d1:d9:5c:
67:32:e2:2c:77:13:54:64:ea:07:6d:5e:90:94:88:f6:5c:f1:
63:a5:f4:2b:c6:40:8d:e8:d3:79:9c:b1:01:9e:5e:a9:f7:fd:
9f:ae:96:87:ee:7e:97:fd:2e:a8:49:b6:00:d1:cb:90:c3:55:
53:db:60:91:f3:64:4c:65:c8:f6:2c:6c:ce:a0:62:10:9c:72:
b6:ce:7a:26:26:dd:d4:df:00:c6:5d:90:6d:45:3b:7d:57:42:
40:3d:70:46:00:1a:64:30:90:7a:d1:3d:01:61:19:90:9b:e7:
94:e2:12:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkr/bXFuNJpjUF0agbw0uS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj
OGU1NTMwHhcNMjUwOTA5MDEwMTExWhcNMjUwOTEwMDEwMTExWjAzMTEwLwYDVQQD
EyhkYzQyODAzMWVhNWRlYjk1OTJiNjFlZDFkODQ4MGE5YWFjNGNiOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CjbUVypvqzfEBFFtmv5eseBtxvj
WQgp91hQCs9io6C2vxtH61Vp1cR5MeK4AVKqUPv8KmAD540DrmrGoxvGPK+x0Kgu
2NA+WT+LON/LKhg8IBsWAnagFu7GMSoIkU45rq5VQh/IsL/nyAS3SNpVByZNCZKQ
RCSx3oeAbe1/GtWBQoaCxBGqKU3RErYjut1U+1laNhs6nDB9nt9MnDvy/g5HdOTA
U38uHVxUbm10HXhShxdF7f7uXpLrF4KwaOccJo5POWxfQhE1uEf5ZqyOEvkVeEfx
gEgel1hgOqe4IAFJQ+uEPv2RVz5KIocUCMqTulk10I+fZBOM99glHLu5MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxCgDHqXeuVkrYe0dhICpqsTLm6MB8GA1UdIwQY
MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt
ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0
LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+1sFF6D
e1N8aR2aBzCvkjQQ8XoUfWu9N2VEYfoqVLpUVgWOY+NZnVTgCtZLU6kl/SyCuvUy
0Dbz1OvxPv5hAfREGmVdQdSremehpOSNspGinihyFbplgAP4t+S+Cb5fv9GfNJGx
wGSA7kZ7A9huBS8ALPIUOOY6dmTEyee6eN+6xm6prbRWsWGjVd0F0dlcZzLiLHcT
VGTqB21ekJSI9lzxY6X0K8ZAjejTeZyxAZ5eqff9n66Wh+5+l/0uqEm2ANHLkMNV
U9tgkfNkTGXI9ixszqBiEJxyts56Jibd1N8Axl2QbUU7fVdCQD1wRgAaZDCQetE9
AWEZkJvnlOISPg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:21:35 2025 by rpki-client