Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File: qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier: bj2cgJcEStJoYh3BOrqW+o0Jk1HyfL1+zimMcKnCbZc=
Subject key identifier: D4:81:56:12:93:7D:15:CF:8C:7C:85:A7:69:ED:13:A2:95:68:C4:D0
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 0199228CED4AC395C3A8A553D1D4437B9AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number: 05E3
Signing time: Sun 07 Sep 2025 05:01:25 +0000
Manifest this update: Sun 07 Sep 2025 05:01:25 +0000
Manifest next update: Mon 08 Sep 2025 05:01:25 +0000
Files and hashes: 1: 7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa (hash: LJjg55n4xVGP9vBgMbP2ScHffsmfqIcNY661vZ01XEY=)
2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: 86GZp6Tf+vE+Zn4jJtOdPVafPdEun3p/pqYSymH1dQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ed:4a:c3:95:c3:a8:a5:53:d1:d4:43:7b:9a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Sep 7 05:01:25 2025 GMT
Not After : Sep 8 05:01:25 2025 GMT
Subject: CN=d4815612937d15cf8c7c85a769ed13a29568c4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:db:68:60:be:fa:9a:fa:21:80:b3:77:58:
2b:4e:b9:93:bc:16:f6:05:11:5b:88:7b:4a:de:24:
bc:e7:d2:36:65:95:d3:18:50:3c:7d:9c:0f:2c:de:
09:92:21:7a:4b:5e:ed:b6:20:6a:4f:fa:16:84:40:
77:01:ca:6d:f1:f1:2d:9d:55:05:cc:cf:fa:91:74:
39:c2:ce:c7:2e:4c:e4:f1:64:4d:7b:92:92:a9:5a:
d5:ac:53:fa:c0:6e:0d:07:5d:58:f8:74:da:a6:ef:
0c:7e:74:ef:1c:06:20:5d:d4:8b:fb:76:66:b2:16:
47:c3:a1:da:3c:ee:3f:c5:b2:b8:8e:28:a3:9d:b1:
a9:92:55:c4:3b:2d:5c:39:0a:6c:63:84:31:6d:0f:
22:1a:21:43:e2:04:36:06:3d:7a:31:72:f8:92:fa:
4e:21:8d:e5:02:97:80:84:87:d2:76:14:d3:77:c1:
0d:88:98:54:01:11:ef:03:89:cf:00:b8:d0:41:a7:
f7:53:26:8b:fd:56:4d:89:52:d0:be:0b:01:9e:64:
6f:56:8f:6a:4f:35:cc:68:b0:54:23:30:6f:ac:36:
a5:4f:70:1e:37:e3:34:e4:bf:48:12:fd:b6:b1:8f:
db:91:45:4a:70:ca:44:06:d5:5a:a3:38:8c:2e:e6:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:56:12:93:7D:15:CF:8C:7C:85:A7:69:ED:13:A2:95:68:C4:D0
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:88:fb:c0:91:93:88:6d:e9:36:33:9d:0b:44:58:fb:16:
26:16:37:a1:c9:bf:3d:50:81:75:f8:43:e2:79:41:bc:04:e5:
88:68:29:70:86:11:b5:7a:ef:fd:8e:2a:e7:8a:79:3e:a2:6e:
b5:5d:0b:cd:a7:70:86:82:ca:64:14:89:9a:4c:53:15:88:27:
4c:5e:08:dc:37:a8:73:ad:80:d2:69:44:d5:89:8c:f7:be:f6:
58:52:9d:ac:01:75:46:47:dc:4a:28:75:68:29:4c:74:c2:a2:
a3:18:6f:d8:51:0e:bb:43:0e:19:76:61:73:dd:5a:50:32:d8:
b0:c5:0e:20:19:45:32:b2:03:d9:6b:34:f1:5d:33:89:ec:dd:
f3:32:8b:98:8a:cc:f6:c1:9d:fc:78:f4:f6:f4:5d:6b:7c:28:
1a:ea:0e:29:af:29:b5:b6:09:a8:ce:cf:6e:80:0c:7a:8e:e5:
b2:04:29:4b:04:ea:93:37:21:3d:12:d5:56:41:83:b4:42:57:
c0:ea:a7:27:c7:06:bf:05:24:a5:62:c7:d3:ef:4f:7f:41:be:
dc:9b:21:94:c2:fd:9c:a8:d7:a9:af:9d:e3:88:42:74:b9:5a:
51:5f:ca:0d:f1:6d:62:e2:b0:b6:b0:ab:35:2a:c9:5f:bf:d8:
fb:a1:62:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijO1Kw5XDqKVT0dRDe5rjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc0NTUxOTMyM2Q4YzJkOTNjMWIxMDdiZjg1ZjYxOTMz
YzcxY2EwHhcNMjUwOTA3MDUwMTI1WhcNMjUwOTA4MDUwMTI1WjAzMTEwLwYDVQQD
EyhkNDgxNTYxMjkzN2QxNWNmOGM3Yzg1YTc2OWVkMTNhMjk1NjhjNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspvbaGC++pr6IYCzd1grTrmTvBb2
BRFbiHtK3iS859I2ZZXTGFA8fZwPLN4JkiF6S17ttiBqT/oWhEB3Acpt8fEtnVUF
zM/6kXQ5ws7HLkzk8WRNe5KSqVrVrFP6wG4NB11Y+HTapu8MfnTvHAYgXdSL+3Zm
shZHw6HaPO4/xbK4jiijnbGpklXEOy1cOQpsY4QxbQ8iGiFD4gQ2Bj16MXL4kvpO
IY3lApeAhIfSdhTTd8ENiJhUARHvA4nPALjQQaf3UyaL/VZNiVLQvgsBnmRvVo9q
TzXMaLBUIzBvrDalT3AeN+M05L9IEv22sY/bkUVKcMpEBtVaoziMLuZaEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSBVhKTfRXPjHyFp2ntE6KVaMTQMB8GA1UdIwQY
MBaAFKpnRVGTI9jC2TwbEHv4X2GTPHHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hZjE4YzQtYzA0NC00NDg1LThlZjAt
ZDc4MTJhMzM4MTgzLzEvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hZjE4YzQtYzA0NC00NDg1LThlZjAtZDc4MTJhMzM4MTgz
LzEvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+aI+8CR
k4ht6TYznQtEWPsWJhY3ocm/PVCBdfhD4nlBvATliGgpcIYRtXrv/Y4q54p5PqJu
tV0LzadwhoLKZBSJmkxTFYgnTF4I3Deoc62A0mlE1YmM9772WFKdrAF1RkfcSih1
aClMdMKioxhv2FEOu0MOGXZhc91aUDLYsMUOIBlFMrID2Ws08V0ziezd8zKLmIrM
9sGd/Hj09vRda3woGuoOKa8ptbYJqM7PboAMeo7lsgQpSwTqkzchPRLVVkGDtEJX
wOqnJ8cGvwUkpWLH0+9Pf0G+3JshlML9nKjXqa+d44hCdLlaUV/KDfFtYuKwtrCr
NSrJX7/Y+6FimA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:55 2025 by rpki-client