Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier: vvt1yFIQq8QwXqkhN6Snhz7nDmeTnJFdj1JJU0+Ogcw=
Subject key identifier: EB:4C:86:86:ED:FA:73:40:DF:CD:4E:35:76:75:69:E4:58:4A:85:B2
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 01991EE6E555BB5E2DD3D8CEA4759CADCAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number: 12CC
Signing time: Sat 06 Sep 2025 12:01:12 +0000
Manifest this update: Sat 06 Sep 2025 12:01:12 +0000
Manifest next update: Sun 07 Sep 2025 12:01:12 +0000
Files and hashes: 1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=)
2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=)
3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=)
4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: nhbO6wPgVRGlOyuRO9/lQnsivS+L+072UF8dzw/BCJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:e6:e5:55:bb:5e:2d:d3:d8:ce:a4:75:9c:ad:ca:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Sep 6 12:01:12 2025 GMT
Not After : Sep 7 12:01:12 2025 GMT
Subject: CN=eb4c8686edfa7340dfcd4e35767569e4584a85b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:79:60:c0:f6:c3:f7:ee:ae:63:22:de:3e:
e0:92:4b:75:8a:db:0f:43:7f:bb:11:1e:a9:92:e2:
31:64:00:94:e4:bf:b7:3c:80:1c:e6:f7:e9:5a:34:
a7:bc:76:58:db:37:08:b4:39:31:e5:da:a4:54:06:
54:79:6e:99:52:d8:8e:72:ab:c6:04:95:7c:50:85:
d1:96:61:ee:a5:6c:60:4c:14:d9:0d:a4:32:49:ac:
b4:87:37:80:57:cd:5d:64:6d:64:d0:23:75:2c:f4:
06:40:40:f8:e0:65:a1:66:b6:43:88:92:d5:26:85:
96:3a:00:c6:5a:05:2a:fc:43:e5:08:e2:81:5f:33:
45:1d:7a:ff:62:f1:23:b9:b8:cd:39:18:cd:4a:9a:
f1:27:a7:3b:46:ad:39:a3:c7:d7:20:e0:6b:53:6d:
ea:54:bc:19:0e:7a:39:4c:a5:dd:7b:43:86:d0:c8:
2c:99:b7:42:82:6b:82:65:82:c5:60:99:c3:85:fa:
3e:cc:6f:6b:8a:b1:50:49:44:21:77:2b:24:b7:02:
d7:7e:a9:07:2c:e2:43:54:96:d8:a4:61:2c:dc:b5:
5f:9d:02:08:55:30:83:91:98:5b:24:fb:b4:91:54:
ab:40:65:e9:13:45:b4:79:d0:de:bf:91:c4:2f:9a:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:86:86:ED:FA:73:40:DF:CD:4E:35:76:75:69:E4:58:4A:85:B2
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:da:e6:58:6c:c8:fc:78:26:2c:2d:c0:53:06:2f:19:36:21:
72:26:bc:dd:07:9b:cf:e0:bd:d5:1a:ca:77:27:1c:78:f1:c6:
67:e9:fd:1d:eb:f9:01:22:17:0f:34:05:2b:97:d9:85:0a:c6:
c8:34:c3:68:1b:32:6d:7b:ae:f4:16:3c:9e:0c:36:7b:b7:7a:
94:d3:22:fd:41:35:61:1d:3d:fb:fa:61:cd:23:d0:b4:a5:78:
e9:40:53:36:a7:48:ee:10:c2:53:c4:0d:69:d7:f2:69:c0:59:
ce:66:13:dd:4c:c5:66:ee:d7:d3:f0:6f:b3:d3:9c:d6:f8:85:
60:a7:f8:1f:8f:ba:8f:26:26:1e:bc:24:27:8e:ad:09:9f:c3:
65:cc:92:74:1a:6b:91:ff:70:25:d0:d1:5c:b2:70:dd:df:e0:
6d:8f:b9:bf:70:ab:2f:ef:74:a6:79:17:16:52:6a:5b:75:25:
e3:36:0f:69:22:bc:fc:41:5f:95:d6:2e:c4:15:10:ba:f3:cb:
b3:bb:41:53:91:99:71:28:7e:ae:c9:ae:79:91:8c:57:cb:21:
be:5b:ef:e8:e6:23:07:63:3f:c5:c0:3f:5e:df:51:36:a0:be:
bc:9f:47:9c:ec:13:1e:21:0c:f4:a4:ec:d2:3e:ce:30:b1:0b:
93:8e:65:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZke5uVVu14t09jOpHWcrcr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh
NjVjYTMwHhcNMjUwOTA2MTIwMTEyWhcNMjUwOTA3MTIwMTEyWjAzMTEwLwYDVQQD
EyhlYjRjODY4NmVkZmE3MzQwZGZjZDRlMzU3Njc1NjllNDU4NGE4NWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIV5YMD2w/furmMi3j7gkkt1itsP
Q3+7ER6pkuIxZACU5L+3PIAc5vfpWjSnvHZY2zcItDkx5dqkVAZUeW6ZUtiOcqvG
BJV8UIXRlmHupWxgTBTZDaQySay0hzeAV81dZG1k0CN1LPQGQED44GWhZrZDiJLV
JoWWOgDGWgUq/EPlCOKBXzNFHXr/YvEjubjNORjNSprxJ6c7Rq05o8fXIOBrU23q
VLwZDno5TKXde0OG0MgsmbdCgmuCZYLFYJnDhfo+zG9rirFQSUQhdysktwLXfqkH
LOJDVJbYpGEs3LVfnQIIVTCDkZhbJPu0kVSrQGXpE0W0edDev5HEL5pODwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtMhobt+nNA381ONXZ1aeRYSoWyMB8GA1UdIwQY
MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt
ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2
LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftrmWGzI
/HgmLC3AUwYvGTYhcia83Qebz+C91RrKdyccePHGZ+n9Hev5ASIXDzQFK5fZhQrG
yDTDaBsybXuu9BY8ngw2e7d6lNMi/UE1YR09+/phzSPQtKV46UBTNqdI7hDCU8QN
adfyacBZzmYT3UzFZu7X0/Bvs9Oc1viFYKf4H4+6jyYmHrwkJ46tCZ/DZcySdBpr
kf9wJdDRXLJw3d/gbY+5v3CrL+90pnkXFlJqW3Ul4zYPaSK8/EFfldYuxBUQuvPL
s7tBU5GZcSh+rsmueZGMV8shvlvv6OYjB2M/xcA/Xt9RNqC+vJ9HnOwTHiEM9KTs
0j7OMLELk45ltQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 14:34:10 2025 by rpki-client