Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json)
Hash identifier: gA/5U7j/ZR2BA5RzpflFIJ8bQHKcgtdzVVlmZy9zChc=
Subject key identifier: 28:39:F1:C6:47:1E:7E:73:29:37:0E:30:6E:C6:FA:E7:F4:AA:2C:C1
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial: 0199228C9D229632743CDF16C6FA1E18A66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
Manifest number: 0E9E
Signing time: Sun 07 Sep 2025 05:01:04 +0000
Manifest this update: Sun 07 Sep 2025 05:01:04 +0000
Manifest next update: Mon 08 Sep 2025 05:01:04 +0000
Files and hashes: 1: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: B1Sa/5mAAhwt5iXOdeBNbp/7Y+iUURNPu1HHixbtn0A=)
2: q8epYF3ITJmcTk7KzU9-ybVTiI8.roa (hash: ynf0gvvVwgf87WpAamEBJq2+/MA1NpfszumEHpnlxfU=)
3: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (hash: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:9d:22:96:32:74:3c:df:16:c6:fa:1e:18:a6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
Validity
Not Before: Sep 7 05:01:04 2025 GMT
Not After : Sep 8 05:01:04 2025 GMT
Subject: CN=2839f1c6471e7e7329370e306ec6fae7f4aa2cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:94:d0:bb:4f:3a:36:29:a6:84:14:c6:a8:
89:1c:68:41:57:ec:34:a3:68:65:a3:49:32:b8:c8:
c5:19:58:da:83:92:ef:da:63:b7:d4:bd:68:42:10:
04:8d:7f:07:00:46:89:da:a9:01:21:17:48:22:1f:
b1:18:8a:ca:5e:8b:1a:22:a7:c3:6f:d7:42:f3:ee:
d3:4e:54:56:33:59:8a:48:21:fe:2e:bc:e6:13:d5:
79:98:3f:35:6a:5b:eb:79:f7:65:90:f4:e9:ca:f8:
13:28:a8:8e:27:15:18:e5:71:dc:6e:06:e5:3d:6a:
23:3c:ad:36:9c:e6:ce:0c:18:60:a5:4e:73:17:f4:
f4:83:fe:db:59:73:db:ad:d3:03:d8:7b:21:27:8b:
7a:21:0f:6e:fc:fc:a1:48:b2:5e:15:6c:c5:dd:2b:
5c:3a:03:cb:15:78:0c:e1:e9:26:1b:95:57:1e:52:
66:e1:79:7b:34:e1:bb:4b:27:40:5a:c7:35:78:95:
7b:7d:3e:5c:4b:22:3c:3f:ee:8d:b6:88:89:50:5f:
0a:7b:d3:32:33:c9:5c:93:0d:1f:5b:b3:3f:44:8a:
df:07:a0:2b:3a:8e:eb:36:4a:a5:5b:2c:52:92:b6:
20:43:04:b8:88:c2:ee:f9:04:1f:2c:5d:0c:0d:6b:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:F1:C6:47:1E:7E:73:29:37:0E:30:6E:C6:FA:E7:F4:AA:2C:C1
X509v3 Authority Key Identifier:
keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:25:54:d6:f2:50:61:2f:c6:29:c8:e0:42:aa:89:e3:f8:b8:
60:d9:0a:56:5a:d2:45:c5:d2:d7:c1:d6:ea:0e:56:13:2f:ef:
95:26:65:8a:e3:d3:f5:f0:12:e7:1e:00:b3:bf:a6:f2:7c:ff:
6b:38:d0:2b:85:91:3f:92:f8:f9:66:71:6a:3d:9c:f3:48:d9:
e8:b0:d1:b4:e5:09:ce:ab:7f:9a:8f:55:6c:ff:95:74:21:77:
db:2e:1b:c5:be:51:4e:2e:0d:34:df:1c:b5:e0:31:d3:43:f8:
02:ee:08:a6:06:66:75:ee:97:a6:51:b6:4c:f3:21:ac:d8:42:
6f:e1:3c:e5:2f:23:91:ea:cd:ac:2f:5e:a3:96:2d:43:ce:c6:
3a:ea:ae:2e:b7:34:2f:42:30:ef:0d:30:7e:d9:5a:1d:05:cd:
6d:4f:e1:5a:41:d2:a8:41:80:f5:c0:56:54:55:95:9f:39:e3:
f5:74:78:00:81:70:1a:be:51:43:ae:98:aa:74:e9:21:89:b1:
fb:13:12:e8:91:43:ad:d9:37:b4:b9:39:22:8e:23:15:5b:8c:
e1:8e:fa:da:f0:79:0a:3a:bf:1c:f0:55:bf:2d:d8:f7:3d:d8:
7c:85:10:98:1b:e6:2a:51:aa:07:40:e9:ff:99:c4:39:ba:5a:
72:04:01:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijJ0iljJ0PN8WxvoeGKZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDA2OGQ1YmYxYmZmZDc5MTc0ZTM3NTAxYmZhMTdmOTE3
YjMxM2QwHhcNMjUwOTA3MDUwMTA0WhcNMjUwOTA4MDUwMTA0WjAzMTEwLwYDVQQD
EygyODM5ZjFjNjQ3MWU3ZTczMjkzNzBlMzA2ZWM2ZmFlN2Y0YWEyY2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HOU0LtPOjYppoQUxqiJHGhBV+w0
o2hlo0kyuMjFGVjag5Lv2mO31L1oQhAEjX8HAEaJ2qkBIRdIIh+xGIrKXosaIqfD
b9dC8+7TTlRWM1mKSCH+LrzmE9V5mD81alvrefdlkPTpyvgTKKiOJxUY5XHcbgbl
PWojPK02nObODBhgpU5zF/T0g/7bWXPbrdMD2HshJ4t6IQ9u/PyhSLJeFWzF3Stc
OgPLFXgM4ekmG5VXHlJm4Xl7NOG7SydAWsc1eJV7fT5cSyI8P+6NtoiJUF8Ke9My
M8lckw0fW7M/RIrfB6ArOo7rNkqlWyxSkrYgQwS4iMLu+QQfLF0MDWtdXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg58cZHHn5zKTcOMG7G+uf0qizBMB8GA1UdIwQY
MBaAFHEAaNW/G//XkXTjdQG/oX+RezE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDkt
ODIwNDNiOWU0ZjcxLzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDktODIwNDNiOWU0Zjcx
LzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiVU1vJQ
YS/GKcjgQqqJ4/i4YNkKVlrSRcXS18HW6g5WEy/vlSZliuPT9fAS5x4As7+m8nz/
azjQK4WRP5L4+WZxaj2c80jZ6LDRtOUJzqt/mo9VbP+VdCF32y4bxb5RTi4NNN8c
teAx00P4Au4IpgZmde6XplG2TPMhrNhCb+E85S8jkerNrC9eo5YtQ87GOuquLrc0
L0Iw7w0wftlaHQXNbU/hWkHSqEGA9cBWVFWVnznj9XR4AIFwGr5RQ66YqnTpIYmx
+xMS6JFDrdk3tLk5Io4jFVuM4Y762vB5Cjq/HPBVvy3Y9z3YfIUQmBvmKlGqB0Dp
/5nEObpacgQB6w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:08 2025 by rpki-client