Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: Z+OsMP8DTfajFEOytA7p/SJ+xgjxQcBejNoY2IVQsic=
Subject key identifier: FA:A0:E7:6A:8D:98:02:C0:41:83:5C:1E:65:83:30:25:D0:F1:2A:46
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 0198C6499929E648E61868E24D843AA84E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 122A
Signing time: Wed 20 Aug 2025 07:02:48 +0000
Manifest this update: Wed 20 Aug 2025 07:02:48 +0000
Manifest next update: Thu 21 Aug 2025 07:02:48 +0000
Files and hashes: 1: BUih8qlxlM36nVLgODl8U2c6gUs.roa (hash: 12PYnDYm07AzmCTN8oiBmbq6Fu/Z7ysAToKr3Xj/N/k=)
2: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: R0BgQ+XVMcmUM0Jw03hmUSSRvbvn9Nhxdyk6HwMEeJo=)
3: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (hash: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:99:29:e6:48:e6:18:68:e2:4d:84:3a:a8:4e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Aug 20 07:02:48 2025 GMT
Not After : Aug 21 07:02:48 2025 GMT
Subject: CN=faa0e76a8d9802c041835c1e65833025d0f12a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:f7:5b:b3:91:ee:df:0e:b3:3f:46:3c:6c:
5c:af:98:db:d5:68:82:8c:d4:2c:58:d9:f2:0c:12:
e1:8e:4e:5f:a7:ab:07:58:6c:ae:36:16:98:af:97:
c1:3d:2f:f2:f6:00:2d:d0:50:64:c7:b6:95:89:e2:
37:e5:0a:26:8d:13:8d:f4:1c:44:7a:7a:35:4b:9b:
04:69:ea:69:c3:9f:0e:10:5f:37:84:17:ab:81:bd:
72:e1:ef:a2:57:02:7c:85:fd:55:12:a7:05:0e:7c:
2d:4a:a4:4c:bd:1f:3d:fd:77:bc:e4:58:37:28:89:
8a:12:86:f5:38:e9:15:fe:19:ef:61:5e:33:0b:17:
35:25:ca:cb:f3:55:dc:ad:e9:70:ba:9d:cf:c5:86:
cf:69:c7:0b:ac:b8:6e:8a:3f:f6:61:be:e1:85:1e:
4d:34:dd:32:2b:3b:00:8d:2f:f4:bf:e2:6c:15:98:
4b:4a:d5:c2:a9:f8:5f:bd:ce:21:d5:2a:66:da:c5:
b6:e7:c7:52:df:d3:ec:60:b1:35:a0:61:3a:43:42:
5a:83:60:db:90:16:19:04:dd:46:9c:02:bb:4d:8a:
9a:fe:49:ad:64:7f:34:e4:41:4b:ee:e8:e0:00:0c:
5d:55:dc:f9:f9:7e:62:4c:02:0a:6e:8d:fd:cf:26:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A0:E7:6A:8D:98:02:C0:41:83:5C:1E:65:83:30:25:D0:F1:2A:46
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:20:cf:eb:6b:82:ce:e5:22:38:53:58:8e:4f:1d:ec:b9:63:
ad:42:99:81:fa:26:b9:4c:52:ff:7b:72:c4:25:ab:37:91:f7:
d5:68:da:66:b5:ae:f2:8b:66:9b:0a:c6:58:03:d1:ca:04:9b:
61:6b:80:64:dc:af:5b:7d:bb:6f:3b:48:be:7e:bc:e6:0d:0b:
b3:33:2a:a7:76:ae:11:c6:66:f6:45:94:58:14:61:9e:ca:f7:
4c:d5:33:75:1c:f7:d3:b8:5f:c0:15:6e:65:7e:f7:bc:14:12:
46:01:ee:03:e1:3b:ec:09:16:97:7a:68:58:20:67:25:45:14:
fb:47:94:9f:d2:81:30:12:0d:1b:1f:b2:a6:1f:0c:18:3f:c6:
e0:95:38:94:24:48:cf:12:05:26:aa:c0:e1:28:ab:a6:cd:c3:
14:b8:ba:95:66:3b:49:e7:0a:2f:4c:58:ea:d7:39:13:c4:48:
1b:a7:ed:67:91:09:78:af:50:73:09:56:c3:05:4b:80:f8:d9:
dd:fc:f9:35:86:d9:cc:e7:6c:02:ce:0f:69:5a:c0:bb:98:67:
d9:7d:4b:b9:6f:2d:b5:3b:66:4e:0b:c0:fc:cc:d7:1a:43:cb:
e4:d6:f9:ca:60:45:5b:e0:a1:4d:f6:2a:c0:ae:da:77:68:02:
d5:56:2c:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjGSZkp5kjmGGjiTYQ6qE44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOWM5Yzk1YTU4YzM4MTFiZGE5NWRjODNjMmU0ODdhMjAw
YzRjMjUwHhcNMjUwODIwMDcwMjQ4WhcNMjUwODIxMDcwMjQ4WjAzMTEwLwYDVQQD
EyhmYWEwZTc2YThkOTgwMmMwNDE4MzVjMWU2NTgzMzAyNWQwZjEyYTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1v3W7OR7t8Osz9GPGxcr5jb1WiC
jNQsWNnyDBLhjk5fp6sHWGyuNhaYr5fBPS/y9gAt0FBkx7aVieI35QomjRON9BxE
eno1S5sEaeppw58OEF83hBergb1y4e+iVwJ8hf1VEqcFDnwtSqRMvR89/Xe85Fg3
KImKEob1OOkV/hnvYV4zCxc1JcrL81Xcrelwup3PxYbPaccLrLhuij/2Yb7hhR5N
NN0yKzsAjS/0v+JsFZhLStXCqfhfvc4h1Spm2sW258dS39PsYLE1oGE6Q0Jag2Db
kBYZBN1GnAK7TYqa/kmtZH805EFL7ujgAAxdVdz5+X5iTAIKbo39zyY8gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqg52qNmALAQYNcHmWDMCXQ8SpGMB8GA1UdIwQY
MBaAFKqcnJWljDgRvaldyDwuSHogDEwlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2Et
NDFhMDY3NmVkZDYxLzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83NWEyMmUtYWU5NS00ZTkzLTk0M2EtNDFhMDY3NmVkZDYx
LzEvcXB5Y2xhV01PQkc5cVYzSVBDNUllaUFNVENVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSDP62uC
zuUiOFNYjk8d7LljrUKZgfomuUxS/3tyxCWrN5H31WjaZrWu8otmmwrGWAPRygSb
YWuAZNyvW327bztIvn685g0LszMqp3auEcZm9kWUWBRhnsr3TNUzdRz307hfwBVu
ZX73vBQSRgHuA+E77AkWl3poWCBnJUUU+0eUn9KBMBINGx+yph8MGD/G4JU4lCRI
zxIFJqrA4Sirps3DFLi6lWY7SecKL0xY6tc5E8RIG6ftZ5EJeK9QcwlWwwVLgPjZ
3fz5NYbZzOdsAs4PaVrAu5hn2X1LuW8ttTtmTgvA/MzXGkPL5Nb5ymBFW+ChTfYq
wK7ad2gC1VYsGw==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:25:58 2025 by rpki-client