Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: /9ltg80njQJaEJOOfSF5z+9WxzxP5IBKzFU4G61LhWI=
Subject key identifier: 13:94:87:16:07:CB:A5:EE:E5:1F:EF:BD:C0:C4:F7:D1:8B:B6:4E:04
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 01991F542CCF74DD530E51CC5B915BD18875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 084A
Signing time: Sat 06 Sep 2025 14:00:34 +0000
Manifest this update: Sat 06 Sep 2025 14:00:34 +0000
Manifest next update: Sun 07 Sep 2025 14:00:34 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: JefsR4NXPrSTxP+4lftxu3q9I0Jqeqo4h02Hinyvq9I=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:54:2c:cf:74:dd:53:0e:51:cc:5b:91:5b:d1:88:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Sep 6 14:00:34 2025 GMT
Not After : Sep 7 14:00:34 2025 GMT
Subject: CN=1394871607cba5eee51fefbdc0c4f7d18bb64e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:18:2d:6e:8d:ab:b3:bf:1a:b0:08:4c:01:57:
96:7c:8a:ee:19:12:8b:1f:7e:e3:9f:bc:11:ac:a4:
9c:92:17:3a:7e:1a:5b:26:d2:ef:ac:bc:4c:64:e9:
97:9f:10:b0:0e:b5:e6:29:30:92:85:59:72:48:03:
b1:7d:11:86:95:ff:ad:95:61:e9:55:ca:09:f6:15:
98:0c:3b:a9:91:8f:15:dc:02:ed:14:e1:ab:d5:06:
e6:ff:29:ff:af:7d:5a:c2:ec:75:e5:bb:63:9c:b4:
fe:a7:01:a3:5c:0f:ad:ac:b3:67:b6:a5:f5:61:15:
4e:c4:c0:b7:fb:50:4a:01:26:87:62:3b:b0:47:40:
a9:97:f9:c7:89:8d:e0:e6:2f:c9:51:ad:0a:ec:45:
91:1f:5b:33:02:68:bc:59:74:4d:15:7a:f1:65:01:
64:32:f7:17:f5:a3:19:1b:bc:92:1d:19:f5:98:af:
c2:50:7b:c1:ec:4a:a6:31:62:75:33:e9:30:9d:84:
6a:ae:a5:98:02:79:44:f2:06:54:48:da:9d:82:b9:
d2:91:8a:f5:5a:db:d0:c1:5c:79:f6:95:31:88:22:
a1:07:f7:2d:90:75:fc:69:63:d6:62:1f:a4:0d:0a:
a7:fc:97:c1:e9:92:5c:c0:95:04:22:75:e4:13:86:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:94:87:16:07:CB:A5:EE:E5:1F:EF:BD:C0:C4:F7:D1:8B:B6:4E:04
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d6:a5:79:dd:e4:65:c0:20:27:12:10:ab:37:38:cc:8e:bd:
ee:32:1e:14:98:c7:fd:bf:16:df:2f:7d:a0:2d:9c:f2:ff:a1:
b5:d9:49:12:92:90:86:62:cb:af:25:f9:b0:c4:f7:1b:59:0d:
6d:6b:83:84:29:3b:3e:3f:af:48:61:16:d0:53:b3:c6:78:60:
cb:6b:5a:89:89:b7:a6:90:69:b6:3d:20:79:4e:a8:4d:6c:46:
03:3b:7c:4b:e8:30:cc:30:fa:0d:67:49:68:c7:76:cb:ba:81:
51:72:2e:e9:e0:e8:0b:0f:e7:a6:a8:b8:37:03:cd:11:1e:d7:
ca:cf:b8:1e:9b:61:00:11:bd:ec:a0:49:3a:bd:26:bb:75:b6:
c9:2f:d8:17:79:69:8a:67:7a:4b:0a:13:35:7e:77:41:6a:d3:
11:ab:f5:c4:d7:76:d4:f3:bc:c3:13:82:17:59:70:12:7c:85:
c4:00:b0:99:1d:15:b0:d1:83:81:d7:b4:71:a0:33:f5:cc:73:
cb:05:7e:01:9f:27:27:3b:7e:f5:50:47:df:23:e2:b2:6f:61:
7a:78:93:b8:f1:24:4f:cd:84:d5:a3:f3:8c:a6:40:b7:42:f2:
05:79:29:0f:8f:53:36:12:dd:47:5b:b5:34:5f:2b:ca:e9:4e:
4e:07:38:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkfVCzPdN1TDlHMW5Fb0Yh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw
NmMxNDUwHhcNMjUwOTA2MTQwMDM0WhcNMjUwOTA3MTQwMDM0WjAzMTEwLwYDVQQD
EygxMzk0ODcxNjA3Y2JhNWVlZTUxZmVmYmRjMGM0ZjdkMThiYjY0ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xgtbo2rs78asAhMAVeWfIruGRKL
H37jn7wRrKSckhc6fhpbJtLvrLxMZOmXnxCwDrXmKTCShVlySAOxfRGGlf+tlWHp
VcoJ9hWYDDupkY8V3ALtFOGr1Qbm/yn/r31awux15btjnLT+pwGjXA+trLNntqX1
YRVOxMC3+1BKASaHYjuwR0Cpl/nHiY3g5i/JUa0K7EWRH1szAmi8WXRNFXrxZQFk
MvcX9aMZG7ySHRn1mK/CUHvB7EqmMWJ1M+kwnYRqrqWYAnlE8gZUSNqdgrnSkYr1
WtvQwVx59pUxiCKhB/ctkHX8aWPWYh+kDQqn/JfB6ZJcwJUEInXkE4Y6ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOUhxYHy6Xu5R/vvcDE99GLtk4EMB8GA1UdIwQY
MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt
Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz
LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetaled3k
ZcAgJxIQqzc4zI697jIeFJjH/b8W3y99oC2c8v+htdlJEpKQhmLLryX5sMT3G1kN
bWuDhCk7Pj+vSGEW0FOzxnhgy2taiYm3ppBptj0geU6oTWxGAzt8S+gwzDD6DWdJ
aMd2y7qBUXIu6eDoCw/npqi4NwPNER7Xys+4HpthABG97KBJOr0mu3W2yS/YF3lp
imd6SwoTNX53QWrTEav1xNd21PO8wxOCF1lwEnyFxACwmR0VsNGDgde0caAz9cxz
ywV+AZ8nJzt+9VBH3yPism9heniTuPEkT82E1aPzjKZAt0LyBXkpD49TNhLdR1u1
NF8ryulOTgc4xQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 17:15:49 2025 by rpki-client