Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
File: C0U7QQ01hqYjepUe7zsD9MRBGPA.mft (raw, json)
Hash identifier: Jp6CON9iqzDfsQ8UhRlznu8mYZl8gHNq7sbgGPf+wXo=
Subject key identifier: A8:5A:85:2C:20:16:A1:83:3B:2D:16:93:42:41:3D:57:6B:9C:8C:DE
Authority key identifier: 0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
Certificate issuer: /CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Certificate serial: 0198C8DC44D62AC84DF2E7320223BF6B0E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
Manifest number: 0986
Signing time: Wed 20 Aug 2025 19:02:15 +0000
Manifest this update: Wed 20 Aug 2025 19:02:15 +0000
Manifest next update: Thu 21 Aug 2025 19:02:15 +0000
Files and hashes: 1: C0U7QQ01hqYjepUe7zsD9MRBGPA.crl (hash: toE3o6UcHeZkwLXlea4y6RbJ9hP+DVxuv0/En0zX7pE=)
2: UU6Ajbnzeazafi4l48g1tcKGRUI.roa (hash: KQmPC74H1FQ13P7UCyXAnVfU+3K0608TgOWrBgoQHJM=)
3: yulW-otMfkyGmJLnHI79DDPaQLw.roa (hash: WE2VgpQHWy+IPNQdlSJJR+Md9SJ/EE1J8coUpGG6dmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 19:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c8:dc:44:d6:2a:c8:4d:f2:e7:32:02:23:bf:6b:0e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b453b410d3586a6237a951eef3b03f4c44118f0
Validity
Not Before: Aug 20 19:02:15 2025 GMT
Not After : Aug 21 19:02:15 2025 GMT
Subject: CN=a85a852c2016a1833b2d169342413d576b9c8cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:37:5b:29:d9:e5:21:9b:ea:a0:aa:80:41:
bf:77:62:43:45:12:bd:eb:91:5c:db:d4:79:a6:9f:
3c:07:3a:77:1f:09:87:78:c4:76:c6:75:03:28:94:
86:c9:c0:72:6e:e0:52:a5:6d:1a:db:83:d3:b1:81:
1f:d9:ef:0a:1e:c4:80:be:d0:b5:ca:e4:31:eb:c2:
69:15:56:32:75:5a:2a:30:a9:71:0f:19:f3:54:9b:
af:89:21:e0:dc:df:86:8d:52:a6:94:c7:d1:91:8e:
68:cd:a3:c5:0b:e5:6f:85:d3:76:f8:d9:5d:13:9d:
43:cf:e1:ab:5c:62:cf:f1:e9:b5:a7:8d:51:c8:a9:
11:4a:81:81:21:78:c6:96:3a:b4:83:37:3a:91:40:
ff:ca:3d:76:33:1a:59:56:14:02:98:f1:71:5f:47:
dc:fc:cf:d9:a2:35:e3:3b:01:f9:04:3a:79:94:73:
75:0d:24:6d:ed:3b:49:3d:69:e8:0f:91:b5:13:c0:
8a:d7:8e:c9:f4:f5:24:d8:36:57:29:43:1a:8a:5f:
38:a3:24:48:28:8c:c3:e4:db:6b:4c:db:c0:6c:1d:
64:57:9c:88:ec:5e:96:43:8d:1f:06:a2:0d:61:61:
ed:b4:ed:c2:22:2b:17:d9:fb:ca:5c:0f:ba:e6:04:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5A:85:2C:20:16:A1:83:3B:2D:16:93:42:41:3D:57:6B:9C:8C:DE
X509v3 Authority Key Identifier:
keyid:0B:45:3B:41:0D:35:86:A6:23:7A:95:1E:EF:3B:03:F4:C4:41:18:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0U7QQ01hqYjepUe7zsD9MRBGPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d63f8e-4b1a-48bf-87eb-29fa47b68093/1/C0U7QQ01hqYjepUe7zsD9MRBGPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:c6:15:fd:05:79:5f:47:ec:3a:ce:71:d5:1f:a7:96:1f:6c:
08:2e:27:a6:04:f4:3a:79:08:e5:1e:85:99:09:5e:b9:b9:48:
47:1c:e0:59:f2:50:f5:82:58:a0:2c:d1:34:97:f6:59:9b:08:
4a:e6:25:d5:02:75:35:0d:39:96:e4:bd:96:a3:31:57:28:c7:
8c:1c:3e:b4:bc:5a:99:19:97:93:2e:22:71:c5:b9:55:9f:1d:
77:cf:66:c0:e7:a0:07:31:bc:11:aa:53:20:24:48:ba:a4:3f:
90:7d:88:a2:0a:9a:74:fb:a8:eb:e3:21:cc:ae:fd:b6:8b:c5:
ab:6d:63:3f:f9:a8:0b:11:a0:a7:53:ce:86:3a:91:4a:b1:eb:
09:0e:12:2d:b7:d6:26:6d:38:75:98:2e:81:d5:eb:5a:c7:b8:
1d:20:ee:df:06:fb:ca:d1:b0:b6:27:01:b5:66:1e:66:33:40:
6a:42:a5:42:ad:43:23:e0:df:26:f2:63:43:74:3e:6b:6d:ea:
6d:6f:01:92:97:07:35:30:05:c3:e4:02:e7:3e:5a:73:80:89:
da:7b:f1:99:34:db:11:97:ea:58:93:f3:93:4f:1a:fa:de:f8:
30:a3:95:6f:eb:72:3d:5b:ef:56:8c:80:ed:53:19:56:55:61:
bb:27:6c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjI3ETWKshN8ucyAiO/aw6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDUzYjQxMGQzNTg2YTYyMzdhOTUxZWVmM2IwM2Y0YzQ0
MTE4ZjAwHhcNMjUwODIwMTkwMjE1WhcNMjUwODIxMTkwMjE1WjAzMTEwLwYDVQQD
EyhhODVhODUyYzIwMTZhMTgzM2IyZDE2OTM0MjQxM2Q1NzZiOWM4Y2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG83WynZ5SGb6qCqgEG/d2JDRRK9
65Fc29R5pp88Bzp3HwmHeMR2xnUDKJSGycBybuBSpW0a24PTsYEf2e8KHsSAvtC1
yuQx68JpFVYydVoqMKlxDxnzVJuviSHg3N+GjVKmlMfRkY5ozaPFC+VvhdN2+Nld
E51Dz+GrXGLP8em1p41RyKkRSoGBIXjGljq0gzc6kUD/yj12MxpZVhQCmPFxX0fc
/M/ZojXjOwH5BDp5lHN1DSRt7TtJPWnoD5G1E8CK147J9PUk2DZXKUMail84oyRI
KIzD5NtrTNvAbB1kV5yI7F6WQ40fBqINYWHttO3CIisX2fvKXA+65gSCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhahSwgFqGDOy0Wk0JBPVdrnIzeMB8GA1UdIwQY
MBaAFAtFO0ENNYamI3qVHu87A/TEQRjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWIt
MjlmYTQ3YjY4MDkzLzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9kNjNmOGUtNGIxYS00OGJmLTg3ZWItMjlmYTQ3YjY4MDkz
LzEvQzBVN1FRMDFocVlqZXBVZTd6c0Q5TVJCR1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1cYV/QV5
X0fsOs5x1R+nlh9sCC4npgT0OnkI5R6FmQleublIRxzgWfJQ9YJYoCzRNJf2WZsI
SuYl1QJ1NQ05luS9lqMxVyjHjBw+tLxamRmXky4iccW5VZ8dd89mwOegBzG8EapT
ICRIuqQ/kH2IogqadPuo6+MhzK79tovFq21jP/moCxGgp1POhjqRSrHrCQ4SLbfW
Jm04dZgugdXrWse4HSDu3wb7ytGwticBtWYeZjNAakKlQq1DI+DfJvJjQ3Q+a23q
bW8BkpcHNTAFw+QC5z5ac4CJ2nvxmTTbEZfqWJPzk08a+t74MKOVb+tyPVvvVoyA
7VMZVlVhuydsMQ==
-----END CERTIFICATE-----
Generated at Thu Aug 21 03:10:57 2025 by rpki-client