Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: u4CgYAxauadtfMhIXUIQUsgpXQYXYfGxxe6EjYtan30=
Subject key identifier: EA:FC:EC:0B:17:72:AB:46:E2:43:79:1C:73:CF:D4:4D:F0:92:CC:A7
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0199269FC4C0A574A7DA8E48EAB666FD234B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 15A8
Signing time: Mon 08 Sep 2025 00:00:28 +0000
Manifest this update: Mon 08 Sep 2025 00:00:28 +0000
Manifest next update: Tue 09 Sep 2025 00:00:28 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: VxgUGc8yTcvcMKGbt9gqoU8vNbGhVyKPUkS6i3oKx0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:9f:c4:c0:a5:74:a7:da:8e:48:ea:b6:66:fd:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Sep 8 00:00:28 2025 GMT
Not After : Sep 9 00:00:28 2025 GMT
Subject: CN=eafcec0b1772ab46e243791c73cfd44df092cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:4a:09:da:30:de:c4:bb:b2:13:cf:3b:4e:
5c:9a:6f:19:49:d3:0c:78:bf:e5:1d:5b:f8:bb:bb:
b7:84:9e:3e:4e:6a:9a:6e:a2:ef:8c:dc:f1:bb:92:
a8:2e:67:56:e3:40:a9:b7:7a:af:c1:78:81:cc:60:
c4:0a:88:04:9f:76:94:71:6a:1b:8a:92:1f:80:a5:
55:cb:db:19:63:a7:de:84:53:21:00:75:22:c8:ce:
ab:91:76:c4:72:ed:cc:bf:3f:af:8d:0a:16:ad:0a:
0b:14:c7:d9:9b:fb:03:8b:b6:1f:6e:6f:a6:79:6f:
15:d9:78:a1:39:43:03:15:e6:4b:7f:b8:5b:b8:d6:
76:bf:3c:50:fa:a7:3b:8a:93:d3:c4:5f:d7:21:60:
e8:0b:46:03:e2:46:98:97:1d:42:a4:cf:d5:2c:00:
d6:80:5a:cb:d0:da:0b:de:f1:8d:31:50:a1:e5:42:
24:6c:6d:48:49:9b:a0:e5:fe:a9:76:42:2d:14:de:
b6:ff:2c:e3:3d:f6:a2:4e:d6:a9:47:fb:f7:60:78:
65:08:c8:1e:44:78:61:e1:5c:ab:3e:55:f2:e3:25:
e5:5c:a0:0c:4b:98:46:13:b9:7f:db:a1:db:f9:c8:
84:32:f6:7f:1e:c8:0a:f0:47:c1:b3:bc:96:c5:09:
af:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FC:EC:0B:17:72:AB:46:E2:43:79:1C:73:CF:D4:4D:F0:92:CC:A7
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:fc:da:b8:4a:23:2e:f8:c1:5f:a4:ef:ba:b6:8d:a6:2c:
09:8e:a5:88:15:23:dc:34:bf:f7:35:8a:a8:53:a0:6e:48:38:
d0:14:de:3a:7a:58:5b:b4:75:15:f8:ea:7c:e2:a3:98:60:82:
fb:e8:9a:24:6e:53:a1:52:cb:85:3c:52:69:00:ce:e2:b2:42:
14:18:57:ee:9f:a3:64:76:21:78:80:04:c8:53:f8:c5:54:6b:
ba:13:9a:9e:2f:6d:cf:f8:b3:2a:6b:40:02:69:f1:fd:5f:ab:
7e:33:8b:58:0f:a0:5f:23:81:7a:34:2e:5a:c4:15:8e:44:b9:
96:5b:78:d3:dd:96:91:56:06:78:52:8a:8d:ff:47:3d:3c:3a:
f6:e5:50:75:3d:10:aa:10:52:62:c2:8b:ad:d0:0f:cf:d8:68:
d4:d6:e2:a1:28:3e:f0:72:a5:25:55:eb:b6:b9:c1:8e:e3:f1:
b8:a0:85:c5:2e:3c:ac:d7:e5:37:6e:94:11:64:ef:38:56:56:
ab:a1:4b:13:89:1b:0c:a6:01:17:89:1b:2b:ef:47:53:83:75:
73:4a:53:de:a4:9f:e3:39:fa:70:25:21:90:e6:af:b5:d9:69:
0d:b8:34:cf:cd:45:87:f1:e3:96:04:45:d8:c4:af:42:4b:d9:
04:73:03:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkmn8TApXSn2o5I6rZm/SNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmZiOWIzNDE4YzQ1OGNkYmM2Y2ZkNjg0NTE0YmUyNGFk
MGMzYzkwHhcNMjUwOTA4MDAwMDI4WhcNMjUwOTA5MDAwMDI4WjAzMTEwLwYDVQQD
EyhlYWZjZWMwYjE3NzJhYjQ2ZTI0Mzc5MWM3M2NmZDQ0ZGYwOTJjY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EJKCdow3sS7shPPO05cmm8ZSdMM
eL/lHVv4u7u3hJ4+TmqabqLvjNzxu5KoLmdW40Cpt3qvwXiBzGDECogEn3aUcWob
ipIfgKVVy9sZY6fehFMhAHUiyM6rkXbEcu3Mvz+vjQoWrQoLFMfZm/sDi7Yfbm+m
eW8V2XihOUMDFeZLf7hbuNZ2vzxQ+qc7ipPTxF/XIWDoC0YD4kaYlx1CpM/VLADW
gFrL0NoL3vGNMVCh5UIkbG1ISZug5f6pdkItFN62/yzjPfaiTtapR/v3YHhlCMge
RHhh4VyrPlXy4yXlXKAMS5hGE7l/26Hb+ciEMvZ/HsgK8EfBs7yWxQmvGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr87AsXcqtG4kN5HHPP1E3wksynMB8GA1UdIwQY
MBaAFKgvubNBjEWM28bP1oRRS+JK0MPJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgt
YjI2MzQxZDM4YzNmLzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84YjdmZTktNWRmMi00NzNlLTgwMTgtYjI2MzQxZDM4YzNm
LzEvcUMtNXMwR01SWXpieHNfV2hGRkw0a3JRdzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkn82rhK
Iy74wV+k77q2jaYsCY6liBUj3DS/9zWKqFOgbkg40BTeOnpYW7R1FfjqfOKjmGCC
++iaJG5ToVLLhTxSaQDO4rJCFBhX7p+jZHYheIAEyFP4xVRruhOani9tz/izKmtA
Amnx/V+rfjOLWA+gXyOBejQuWsQVjkS5llt4092WkVYGeFKKjf9HPTw69uVQdT0Q
qhBSYsKLrdAPz9ho1NbioSg+8HKlJVXrtrnBjuPxuKCFxS48rNflN26UEWTvOFZW
q6FLE4kbDKYBF4kbK+9HU4N1c0pT3qSf4zn6cCUhkOavtdlpDbg0z81Fh/HjlgRF
2MSvQkvZBHMDCg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 04:16:54 2025 by rpki-client