Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: UpeygxB/UdZFmWva/Rs9fdObdx8miEwUtLqHxyX/1N8=
Subject key identifier: AC:D6:2D:60:B5:A3:97:AC:22:D7:BE:9E:C3:93:38:65:AA:44:28:5E
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 019933B721B5B19E7B1B057C448310873E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0B97
Signing time: Wed 10 Sep 2025 13:01:03 +0000
Manifest this update: Wed 10 Sep 2025 13:01:03 +0000
Manifest next update: Thu 11 Sep 2025 13:01:03 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: IMC7h7pyTjB3X2TLhunVC3dQ/yMORyrYs6qnyfVSBR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:21:b5:b1:9e:7b:1b:05:7c:44:83:10:87:3e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Sep 10 13:01:03 2025 GMT
Not After : Sep 11 13:01:03 2025 GMT
Subject: CN=acd62d60b5a397ac22d7be9ec3933865aa44285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:c8:4f:d9:2e:a5:c0:33:5a:a4:b6:cb:f6:ca:
e7:de:81:e6:54:ee:26:de:ac:7a:8e:28:42:f0:17:
56:76:4c:0e:77:95:97:0c:29:50:7f:e8:30:46:27:
90:74:1c:13:1e:b0:d0:0f:48:41:ed:a6:73:f9:2b:
07:4f:83:2c:b8:b3:74:13:f3:49:19:1d:8d:79:48:
17:fa:6c:00:01:3c:b3:78:ef:a5:7f:9d:e7:e3:b6:
59:f1:54:6f:6c:4a:fc:8b:7c:cd:2c:25:d9:58:30:
2d:ac:fb:63:d6:36:8c:52:7c:fa:b9:2c:a8:9e:21:
39:f9:24:d2:73:c2:15:07:ba:94:ef:53:b9:a6:77:
aa:ef:36:d3:7c:6d:5e:cb:4f:ab:d5:23:59:6c:50:
0b:9a:e2:8e:69:f9:31:75:2d:09:40:3b:a7:fa:5c:
ca:6f:e6:6c:78:30:0f:90:e5:70:30:7f:f3:49:05:
27:bb:18:ac:43:15:ae:3a:d4:ae:bf:78:18:78:35:
6d:c0:a1:78:f4:42:0c:09:ca:82:49:28:90:79:84:
db:23:4b:52:6a:0d:b5:42:8b:f8:44:3f:58:ca:9f:
23:35:6a:fe:55:14:ec:9b:3c:f3:7c:c6:51:27:1f:
63:55:6b:49:bc:11:9f:97:01:16:ec:7d:89:63:78:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:2D:60:B5:A3:97:AC:22:D7:BE:9E:C3:93:38:65:AA:44:28:5E
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:43:b0:fb:86:f2:03:0c:8c:16:b6:42:5d:70:6e:15:16:9b:
ea:77:dc:d6:a3:43:c0:2b:23:93:e5:eb:65:6c:19:43:bd:b4:
b2:c2:2c:b4:60:e8:8e:b5:1f:52:85:e5:7f:51:9b:8f:03:8b:
36:ce:2c:3b:1d:c8:3b:7c:03:5c:bc:2f:ba:e0:36:1a:1f:c9:
07:3d:87:2c:8a:3f:8b:a3:0f:06:29:59:1c:c3:69:a5:bb:87:
c4:4b:91:5a:d6:4a:cd:dc:32:c4:59:95:d1:df:10:be:25:cc:
cc:c8:8a:ab:e6:92:50:13:4b:65:c8:fd:06:40:67:5b:36:31:
07:52:35:76:9c:25:91:0f:d0:ea:b4:12:ab:36:df:e4:d7:01:
33:b5:e6:14:1a:3d:ad:2a:69:7d:b7:90:98:4d:c3:75:45:f7:
fe:18:ae:03:b6:49:11:72:38:fb:43:3d:f8:de:99:96:5a:69:
39:42:e4:5f:be:3e:1f:f7:47:f5:85:b9:a5:eb:3d:f3:d0:97:
b8:0c:f1:84:7a:43:e0:52:5f:c8:c1:d4:1d:74:99:cd:58:f0:
44:04:b3:ee:da:d1:8f:b9:67:4a:56:8c:0f:e0:74:79:22:ff:
60:47:78:21:52:dc:ec:56:c6:51:91:ce:e1:b2:9f:30:81:8b:
ee:48:2c:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkztyG1sZ57GwV8RIMQhz6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm
N2U4MzIwHhcNMjUwOTEwMTMwMTAzWhcNMjUwOTExMTMwMTAzWjAzMTEwLwYDVQQD
EyhhY2Q2MmQ2MGI1YTM5N2FjMjJkN2JlOWVjMzkzMzg2NWFhNDQyODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/chP2S6lwDNapLbL9srn3oHmVO4m
3qx6jihC8BdWdkwOd5WXDClQf+gwRieQdBwTHrDQD0hB7aZz+SsHT4MsuLN0E/NJ
GR2NeUgX+mwAATyzeO+lf53n47ZZ8VRvbEr8i3zNLCXZWDAtrPtj1jaMUnz6uSyo
niE5+STSc8IVB7qU71O5pneq7zbTfG1ey0+r1SNZbFALmuKOafkxdS0JQDun+lzK
b+ZseDAPkOVwMH/zSQUnuxisQxWuOtSuv3gYeDVtwKF49EIMCcqCSSiQeYTbI0tS
ag21Qov4RD9Yyp8jNWr+VRTsmzzzfMZRJx9jVWtJvBGflwEW7H2JY3jItQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzWLWC1o5esIte+nsOTOGWqRCheMB8GA1UdIwQY
MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt
MjJmYzU4OGJjNjZmLzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm
LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUOw+4by
AwyMFrZCXXBuFRab6nfc1qNDwCsjk+XrZWwZQ720ssIstGDojrUfUoXlf1GbjwOL
Ns4sOx3IO3wDXLwvuuA2Gh/JBz2HLIo/i6MPBilZHMNppbuHxEuRWtZKzdwyxFmV
0d8QviXMzMiKq+aSUBNLZcj9BkBnWzYxB1I1dpwlkQ/Q6rQSqzbf5NcBM7XmFBo9
rSppfbeQmE3DdUX3/hiuA7ZJEXI4+0M9+N6ZllppOULkX74+H/dH9YW5pes989CX
uAzxhHpD4FJfyMHUHXSZzVjwRASz7trRj7lnSlaMD+B0eSL/YEd4IVLc7FbGUZHO
4bKfMIGL7kgsQw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 22:59:23 2025 by rpki-client