Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: 5XjN/fQB0CLMOixXWZ5iCXg/WgCoXUPMKMIs9WXsye4=
Subject key identifier: 33:83:24:9A:8E:9B:48:7C:E2:6A:BF:D8:36:F7:4A:48:82:15:1D:07
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019930B5BB341B4421940A259EAB0B541C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0D0F
Signing time: Tue 09 Sep 2025 23:00:40 +0000
Manifest this update: Tue 09 Sep 2025 23:00:40 +0000
Manifest next update: Wed 10 Sep 2025 23:00:40 +0000
Files and hashes: 1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: WUbYtNuZoBL7b0+lmH5ES1oJKp4uiqSA/7OdYPTswwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:bb:34:1b:44:21:94:0a:25:9e:ab:0b:54:1c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Sep 9 23:00:40 2025 GMT
Not After : Sep 10 23:00:40 2025 GMT
Subject: CN=3383249a8e9b487ce26abfd836f74a4882151d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:bd:0a:7e:6d:92:a6:83:31:61:3b:e0:55:
67:cb:88:46:7c:7a:b7:09:f9:3c:e0:33:46:fb:dc:
91:f9:f4:ac:7f:ad:e5:b3:1b:6c:0d:ec:60:28:f2:
39:1b:85:81:25:b0:47:21:b5:a2:5e:07:98:73:ac:
4c:27:e3:c2:15:9f:eb:13:7d:67:b3:39:63:c5:28:
13:d0:8e:a8:68:36:8b:1e:e2:ed:6b:ee:4b:19:f2:
02:30:a1:10:57:93:4e:ec:b0:11:ee:9c:28:ae:f9:
a8:17:3d:53:8b:bd:e9:18:7a:20:87:07:1e:72:0e:
d0:e2:6a:33:f3:d6:6d:85:d3:09:c5:5e:85:29:82:
6a:23:34:df:42:a0:9f:8d:22:02:5e:72:71:e4:e2:
6b:a4:32:0d:30:13:00:d0:16:31:76:7f:95:88:c0:
bb:21:27:37:d9:51:1e:e6:32:75:04:66:82:19:f8:
66:21:e1:92:1a:01:43:3d:a7:b3:d5:7d:d8:c5:45:
90:8d:17:9f:11:85:1a:44:0d:57:6a:6f:37:cf:e7:
28:81:c1:c2:56:e2:ad:19:ef:0a:f4:2a:1c:45:5e:
e5:1b:36:5d:a6:5d:af:03:b6:01:61:74:1b:19:1e:
01:4f:91:21:bc:8c:2b:57:a4:0c:e1:64:fd:f3:8c:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:83:24:9A:8E:9B:48:7C:E2:6A:BF:D8:36:F7:4A:48:82:15:1D:07
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:84:d7:9c:a0:ab:0b:45:27:5e:f2:12:57:ac:c4:63:65:ec:
8c:97:c8:15:5c:90:e1:b4:ae:f6:7a:2a:8e:00:25:6f:79:fe:
34:e8:91:1c:29:84:53:78:bd:26:eb:b4:39:d9:84:02:10:8b:
92:87:e9:dc:62:64:4b:36:9d:47:1a:c4:18:69:24:af:d3:0b:
a6:4e:67:24:78:8f:d6:eb:04:f3:ac:ad:ba:d4:0a:58:a0:31:
7b:f1:3e:6b:03:29:41:db:f5:9e:45:8f:e9:9a:e4:7d:a4:95:
f8:b9:c4:02:86:b4:31:74:4e:c9:9b:c0:fd:53:81:40:36:06:
d2:1d:ac:b1:fe:b4:89:25:59:98:df:d9:5c:cd:0a:74:5b:29:
89:e4:5e:6d:25:1f:53:64:0b:b5:79:9b:c2:87:7d:1b:b1:a1:
8e:ec:26:c1:5d:74:11:e8:75:5b:86:be:ae:26:86:02:05:9a:
fb:6c:a4:04:c4:cf:93:c4:c3:16:13:4b:7e:5e:2f:65:dc:46:
b0:c5:05:90:db:d3:90:23:36:93:bf:b8:57:44:dc:75:6e:37:
f2:16:4c:71:86:40:a2:25:ca:38:1c:aa:78:dd:e9:ae:bf:a6:
c3:37:b0:db:47:02:36:b9:55:7e:6b:0e:56:05:28:5f:66:24:
c3:21:b9:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwtbs0G0QhlAolnqsLVBxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGVmMDQwZmJhNDViY2U3YjA3MTYzNDk1Y2RmNWU4NTA3
NzkxOWQwHhcNMjUwOTA5MjMwMDQwWhcNMjUwOTEwMjMwMDQwWjAzMTEwLwYDVQQD
EygzMzgzMjQ5YThlOWI0ODdjZTI2YWJmZDgzNmY3NGE0ODgyMTUxZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4G9Cn5tkqaDMWE74FVny4hGfHq3
Cfk84DNG+9yR+fSsf63lsxtsDexgKPI5G4WBJbBHIbWiXgeYc6xMJ+PCFZ/rE31n
szljxSgT0I6oaDaLHuLta+5LGfICMKEQV5NO7LAR7pworvmoFz1Ti73pGHoghwce
cg7Q4moz89ZthdMJxV6FKYJqIzTfQqCfjSICXnJx5OJrpDINMBMA0BYxdn+ViMC7
ISc32VEe5jJ1BGaCGfhmIeGSGgFDPaez1X3YxUWQjRefEYUaRA1Xam83z+cogcHC
VuKtGe8K9CocRV7lGzZdpl2vA7YBYXQbGR4BT5EhvIwrV6QM4WT984yWVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDODJJqOm0h84mq/2Db3SkiCFR0HMB8GA1UdIwQY
MBaAFP0O8ED7pFvOewcWNJXN9ehQd5GdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQt
NTZjOTRmMzI2ZGMyLzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kNzcxNjgtMTMzZi00NTUzLWIxOWQtNTZjOTRmMzI2ZGMy
LzEvX1E3d1FQdWtXODU3QnhZMGxjMzE2RkIza1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4TXnKCr
C0UnXvISV6zEY2XsjJfIFVyQ4bSu9noqjgAlb3n+NOiRHCmEU3i9Juu0OdmEAhCL
kofp3GJkSzadRxrEGGkkr9MLpk5nJHiP1usE86ytutQKWKAxe/E+awMpQdv1nkWP
6ZrkfaSV+LnEAoa0MXROyZvA/VOBQDYG0h2ssf60iSVZmN/ZXM0KdFspieRebSUf
U2QLtXmbwod9G7GhjuwmwV10Eeh1W4a+riaGAgWa+2ykBMTPk8TDFhNLfl4vZdxG
sMUFkNvTkCM2k7+4V0TcdW438hZMcYZAoiXKOByqeN3prr+mwzew20cCNrlVfmsO
VgUoX2YkwyG5LA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:49 2025 by rpki-client