Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: 4OnBb4YFCo/qnH61/ryeh/jXV8VjWTbyGnhZuujoWOA=
Subject key identifier: A4:5E:EC:73:40:42:C2:E5:7D:D6:2F:CC:F4:A3:9A:21:66:BD:D6:5F
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 0199239ECFB54168EDA57346AC7D3D060342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:00:34 +0000
Manifest this update: Sun 07 Sep 2025 10:00:34 +0000
Manifest next update: Mon 08 Sep 2025 10:00:34 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: lIlbiQ5ExnrXgUFtcZ9CQyCKfrRIQIJTZjDPJWM/glk=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:cf:b5:41:68:ed:a5:73:46:ac:7d:3d:06:03:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Sep 7 10:00:34 2025 GMT
Not After : Sep 8 10:00:34 2025 GMT
Subject: CN=a45eec734042c2e57dd62fccf4a39a2166bdd65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:2a:be:70:30:21:3c:46:a3:9e:41:69:bb:
8d:df:29:e6:81:75:c2:af:90:1d:ec:55:62:36:03:
0c:85:89:f9:d6:64:20:b3:8b:52:95:6d:54:b7:ac:
dd:9c:1f:cf:7f:60:d7:ee:71:c6:7a:e5:a2:79:fb:
03:67:d9:98:e3:ac:78:12:70:85:ce:70:3b:21:55:
b8:58:bd:af:fb:bf:4a:b3:df:d6:c1:a2:eb:98:9b:
07:76:cd:b0:8b:23:81:c0:fd:52:75:54:32:f5:96:
f2:ba:64:d6:44:e1:99:ac:b2:87:7d:fa:af:ce:71:
a7:74:62:1d:ea:88:15:d9:76:8f:8f:7d:d8:79:2a:
46:4c:1d:54:7b:5d:a2:e3:8c:bf:c8:e1:5e:8a:9c:
4f:73:54:c3:82:e2:c7:ed:9d:be:fb:d1:88:03:c5:
9c:7c:9a:24:76:8e:ea:e7:cd:28:5f:f1:f0:3c:df:
25:35:bd:30:3c:02:5c:af:06:da:84:d6:bf:96:e9:
cf:9f:e1:a9:b6:19:80:17:85:26:f8:72:5b:33:5d:
05:6b:26:63:94:1e:12:61:8c:41:ef:2a:fe:f9:45:
43:02:63:04:ab:9a:71:5f:72:5a:9b:14:76:8e:1b:
e2:ca:8d:c9:ce:28:95:8a:fd:45:0a:f0:86:c5:96:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5E:EC:73:40:42:C2:E5:7D:D6:2F:CC:F4:A3:9A:21:66:BD:D6:5F
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ac:dc:db:c5:d0:07:94:ad:a4:4e:1e:15:9b:01:00:a5:bb:
24:9b:4d:5e:02:0f:38:a9:70:8f:90:42:e5:e4:5a:d0:3e:44:
91:37:5f:c5:4d:18:aa:2a:1a:c8:dc:ea:b0:7d:20:3c:76:61:
05:90:78:ac:65:9e:38:2d:d4:be:78:64:ca:ea:44:53:8a:7d:
c0:4e:5b:e3:40:cf:69:10:b2:43:7d:12:bc:60:f9:69:db:81:
3b:56:00:62:c8:18:51:a4:81:6d:f8:fe:41:6b:b0:44:2f:cb:
54:fb:ad:ed:07:1c:63:1e:f3:21:97:2f:ac:28:89:d1:5b:2a:
bf:2f:77:2a:a4:44:ad:6a:12:43:d0:f1:3c:b3:26:60:23:b5:
3c:52:ce:10:14:d1:60:3e:64:5f:80:28:9f:8d:7b:9f:59:fa:
bb:7a:40:ce:e8:39:83:a7:09:10:81:d8:ba:06:c4:44:1d:31:
35:a5:b1:73:4e:2a:46:57:19:a9:a9:d4:24:aa:5a:d2:8a:6b:
73:af:aa:14:91:08:e1:1a:32:82:e2:0d:75:f3:cc:a7:06:49:
e9:c0:06:ba:2a:9b:3b:f4:af:a2:e3:74:d3:1b:10:11:fb:aa:
57:e6:69:ac:0a:c9:d4:fa:90:04:69:9f:c0:f8:13:d8:db:4a:
2f:8c:05:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjns+1QWjtpXNGrH09BgNCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll
Y2IyZDYwHhcNMjUwOTA3MTAwMDM0WhcNMjUwOTA4MTAwMDM0WjAzMTEwLwYDVQQD
EyhhNDVlZWM3MzQwNDJjMmU1N2RkNjJmY2NmNGEzOWEyMTY2YmRkNjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0QqvnAwITxGo55BabuN3ynmgXXC
r5Ad7FViNgMMhYn51mQgs4tSlW1Ut6zdnB/Pf2DX7nHGeuWiefsDZ9mY46x4EnCF
znA7IVW4WL2v+79Ks9/WwaLrmJsHds2wiyOBwP1SdVQy9ZbyumTWROGZrLKHffqv
znGndGId6ogV2XaPj33YeSpGTB1Ue12i44y/yOFeipxPc1TDguLH7Z2++9GIA8Wc
fJokdo7q580oX/HwPN8lNb0wPAJcrwbahNa/lunPn+GpthmAF4Um+HJbM10FayZj
lB4SYYxB7yr++UVDAmMEq5pxX3JamxR2jhviyo3JziiViv1FCvCGxZZX8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRe7HNAQsLlfdYvzPSjmiFmvdZfMB8GA1UdIwQY
MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt
ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll
LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6zc28XQ
B5StpE4eFZsBAKW7JJtNXgIPOKlwj5BC5eRa0D5EkTdfxU0YqioayNzqsH0gPHZh
BZB4rGWeOC3UvnhkyupEU4p9wE5b40DPaRCyQ30SvGD5aduBO1YAYsgYUaSBbfj+
QWuwRC/LVPut7QccYx7zIZcvrCiJ0Vsqvy93KqRErWoSQ9DxPLMmYCO1PFLOEBTR
YD5kX4Aon417n1n6u3pAzug5g6cJEIHYugbERB0xNaWxc04qRlcZqanUJKpa0opr
c6+qFJEI4RoyguINdfPMpwZJ6cAGuiqbO/SvouN00xsQEfuqV+ZprArJ1PqQBGmf
wPgT2NtKL4wF0w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:42:00 2025 by rpki-client