Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: DSdCkHUFxVHXm33czNGJo7UNil/1RESHeZEHGsUj7iI=
Subject key identifier: FE:2B:83:8C:28:28:1C:E2:F1:0C:C3:A9:59:8B:F5:D1:61:9F:C5:DA
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 019923A08B6A3B12C4A2D29E40A64BB8AA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0A80
Signing time: Sun 07 Sep 2025 10:02:27 +0000
Manifest this update: Sun 07 Sep 2025 10:02:27 +0000
Manifest next update: Mon 08 Sep 2025 10:02:27 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: LdvRo+cLDy2tANwwe/2s3yeGeobz9wRNVpstKMRNLns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:8b:6a:3b:12:c4:a2:d2:9e:40:a6:4b:b8:aa:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Sep 7 10:02:27 2025 GMT
Not After : Sep 8 10:02:27 2025 GMT
Subject: CN=fe2b838c28281ce2f10cc3a9598bf5d1619fc5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:1b:83:9b:f3:93:c7:86:e9:f5:4d:74:19:
f9:b7:5c:e8:b2:57:e7:da:f7:8a:4b:29:f7:31:2b:
02:ff:88:50:39:47:25:4d:39:f7:c1:2c:ca:f9:3e:
99:d5:f5:49:2a:13:a2:8c:9c:f7:b3:f2:63:aa:65:
35:53:57:a8:ea:22:b3:a8:84:99:37:53:38:55:55:
13:eb:30:74:ed:47:f0:5e:29:d5:81:20:3d:5d:4e:
0a:ff:fe:44:b3:50:c7:6e:0d:7b:e0:d8:3e:5d:c2:
91:ae:19:90:2d:e7:a1:97:59:48:5f:80:bb:e5:82:
5d:f5:60:4b:f4:60:92:5b:99:5a:85:a9:e7:a5:71:
5e:ff:4e:8f:be:69:ea:b8:ff:da:6a:ef:64:c3:90:
3c:e4:3e:26:09:5f:23:ca:8f:2e:21:15:2f:98:e1:
54:36:fc:74:af:f9:88:75:c7:30:a7:68:8b:be:14:
a7:6c:c3:fc:31:d1:d0:81:b1:bb:0c:3b:95:99:a7:
51:75:ba:d4:f8:72:70:96:3f:3b:0b:55:1b:08:74:
fd:7a:dc:3c:68:0e:08:db:7a:81:26:eb:f5:d2:39:
a8:2a:27:50:d7:ea:f1:a4:98:15:f1:5f:02:73:e9:
ae:35:6c:ed:05:b4:69:28:c9:00:c6:10:6c:ff:51:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2B:83:8C:28:28:1C:E2:F1:0C:C3:A9:59:8B:F5:D1:61:9F:C5:DA
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dd:70:31:b5:13:34:55:97:23:62:3d:49:0d:87:38:c6:88:
dd:38:64:ef:54:2d:5d:05:f8:5d:f2:73:ab:89:4a:ec:72:2c:
8f:a7:34:a6:f5:ef:cb:6e:a8:e8:ed:63:3a:60:e1:46:f0:ec:
03:dc:b0:00:9b:17:c5:0c:b6:50:27:98:ef:10:b6:c7:39:33:
4b:4f:37:ef:4b:d7:bc:98:22:c5:17:36:19:f4:ee:2a:7c:43:
5f:63:ff:9b:34:a0:b7:9f:53:bb:49:1a:0b:92:34:1d:c6:44:
a1:07:11:00:06:0d:32:08:08:e5:fe:c2:94:bb:1b:a8:8b:a8:
69:de:3f:c3:73:bf:cb:66:23:86:06:48:37:9f:f1:e9:2f:51:
7a:7b:42:ca:30:18:3f:1a:30:a0:ee:5d:74:55:55:f3:a0:c1:
44:9a:b8:09:c6:3a:3f:3d:91:8f:29:86:a2:58:1f:17:c4:45:
f4:8e:54:25:d3:88:31:37:f5:98:2d:fb:09:1c:5c:02:53:73:
99:03:e8:f0:b1:a9:de:0d:b8:0a:ce:43:78:04:b6:2b:02:46:
9f:fb:e6:04:94:64:dc:89:22:57:3f:4f:ae:e9:fe:85:02:db:
2a:69:14:01:bf:72:e4:89:c6:b4:ea:8f:c7:78:60:58:a8:17:
7e:67:c8:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoItqOxLEotKeQKZLuKpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRjMTA4YjYwZjQ3YjBkOTc3MjgwOGU1ZmNjMzgxZWFh
ODFjNzgwHhcNMjUwOTA3MTAwMjI3WhcNMjUwOTA4MTAwMjI3WjAzMTEwLwYDVQQD
EyhmZTJiODM4YzI4MjgxY2UyZjEwY2MzYTk1OThiZjVkMTYxOWZjNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXIbg5vzk8eG6fVNdBn5t1zoslfn
2veKSyn3MSsC/4hQOUclTTn3wSzK+T6Z1fVJKhOijJz3s/JjqmU1U1eo6iKzqISZ
N1M4VVUT6zB07UfwXinVgSA9XU4K//5Es1DHbg174Ng+XcKRrhmQLeehl1lIX4C7
5YJd9WBL9GCSW5lahannpXFe/06PvmnquP/aau9kw5A85D4mCV8jyo8uIRUvmOFU
Nvx0r/mIdccwp2iLvhSnbMP8MdHQgbG7DDuVmadRdbrU+HJwlj87C1UbCHT9etw8
aA4I23qBJuv10jmoKidQ1+rxpJgV8V8Cc+muNWztBbRpKMkAxhBs/1Ev2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4rg4woKBzi8QzDqVmL9dFhn8XaMB8GA1UdIwQY
MBaAFK0NwQi2D0ew2XcoCOX8w4HqqBx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wYjU4NjAtY2Q1Ny00MTgzLWI5YWUt
ZTg0Nzg1ODk0ODM4LzEvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wYjU4NjAtY2Q1Ny00MTgzLWI5YWUtZTg0Nzg1ODk0ODM4
LzEvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqt1wMbUT
NFWXI2I9SQ2HOMaI3Thk71QtXQX4XfJzq4lK7HIsj6c0pvXvy26o6O1jOmDhRvDs
A9ywAJsXxQy2UCeY7xC2xzkzS08370vXvJgixRc2GfTuKnxDX2P/mzSgt59Tu0ka
C5I0HcZEoQcRAAYNMggI5f7ClLsbqIuoad4/w3O/y2YjhgZIN5/x6S9RentCyjAY
PxowoO5ddFVV86DBRJq4CcY6Pz2RjymGolgfF8RF9I5UJdOIMTf1mC37CRxcAlNz
mQPo8LGp3g24Cs5DeAS2KwJGn/vmBJRk3IkiVz9Prun+hQLbKmkUAb9y5InGtOqP
x3hgWKgXfmfIRw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:18 2025 by rpki-client