Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: 9SWSBctJCWVbiZzXVRO18H0MiDMj8wiXg033i5SWIyM=
Subject key identifier: E1:EB:2D:8E:8B:77:B7:CB:E1:6E:AB:A6:F3:53:7D:34:5F:67:E3:E1
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 0198D583E1F76A1107DF4E3B2BAE71372C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1498
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: Rqj7gg2V3zxe54bFwB0AFsTKFRhNK4HgrNda398ku4g=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e1:f7:6a:11:07:df:4e:3b:2b:ae:71:37:2c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=e1eb2d8e8b77b7cbe16eaba6f3537d345f67e3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:1e:62:09:d6:fc:31:cf:de:1a:12:18:39:
50:08:58:1a:01:b7:7d:71:25:9f:40:b2:3c:b4:30:
d1:71:ec:94:30:af:f0:e9:b9:ee:5d:24:a3:0a:8d:
e7:21:d1:fe:69:8c:de:ab:18:42:32:6d:52:d8:39:
af:d5:c2:9a:df:39:8d:a8:f4:c3:3f:92:aa:77:0d:
6d:a0:90:72:ce:49:0f:b6:3e:e0:3d:ab:cb:28:aa:
29:e9:4f:04:f5:af:bd:3b:6e:b3:6c:00:50:ea:e2:
bc:74:35:3e:6f:bd:2d:c6:a9:f4:8c:76:57:09:7b:
88:c3:86:e3:5b:46:17:e7:6b:52:bc:2f:ff:48:66:
68:8f:c0:a6:a1:58:b4:a1:7e:6e:3a:fd:a0:2a:56:
02:09:5f:a7:cf:1b:ba:ca:6a:b1:35:be:15:3f:d9:
6f:fd:b6:43:72:28:28:13:0b:71:52:c3:62:e5:b6:
d4:eb:de:25:58:bb:7c:07:e0:99:27:c9:c6:2d:aa:
7d:fb:08:cc:b4:4a:e6:fe:86:6d:27:b7:ef:8c:8b:
cd:a7:4f:51:e1:82:e0:e8:8b:8c:d5:55:ce:2c:77:
0f:89:b8:e9:17:d5:b8:83:4c:8a:5b:bc:ef:8c:09:
95:4d:3e:06:dc:1c:df:0b:c5:dc:47:ef:d3:e8:22:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:2D:8E:8B:77:B7:CB:E1:6E:AB:A6:F3:53:7D:34:5F:67:E3:E1
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a1:54:ee:7d:14:34:3a:6a:83:b5:8b:92:68:66:17:b3:47:
51:40:5d:18:9d:32:26:07:69:04:33:3b:6e:df:e2:a0:8b:1f:
2c:1a:21:27:e1:1b:68:f5:74:95:27:9d:42:9e:02:c5:06:00:
bb:1b:4e:5d:ee:9c:18:f6:fe:51:67:88:f0:1c:83:18:5f:b3:
15:02:61:92:56:11:00:c9:de:44:6e:6f:64:61:bb:a0:a3:26:
4c:81:e5:39:cb:b9:9e:56:c7:c2:51:08:b9:f3:05:2d:60:5c:
12:76:d6:3b:b7:49:f8:0b:c2:67:67:96:05:8b:f9:e1:c1:d8:
af:a9:18:d3:4e:da:aa:5c:a7:1f:7b:27:62:42:a3:5b:f0:69:
91:7c:64:99:99:f5:f2:53:48:00:8f:d6:4f:ec:c0:c4:d0:ad:
03:31:f6:ec:3a:d1:f9:bf:22:c6:2d:69:a2:e2:3e:e7:69:1e:
fb:f8:34:ef:e4:d4:cb:e5:48:26:b8:bf:8e:bf:6b:3b:37:e6:
9a:27:e5:c9:d3:b8:41:a9:a5:cc:fe:95:61:67:e2:77:34:72:
98:5d:64:3c:7e:a1:b7:e4:31:2a:1f:94:ec:4e:85:0e:ac:7f:
8f:d1:c3:e8:2d:3f:78:3d:eb:ac:be:a9:57:75:e2:b6:66:c3:
63:c2:d0:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg+H3ahEH3047K65xNyySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4
NjkxMDgwHhcNMjUwODIzMDYwMDQ2WhcNMjUwODI0MDYwMDQ2WjAzMTEwLwYDVQQD
EyhlMWViMmQ4ZThiNzdiN2NiZTE2ZWFiYTZmMzUzN2QzNDVmNjdlM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsMeYgnW/DHP3hoSGDlQCFgaAbd9
cSWfQLI8tDDRceyUMK/w6bnuXSSjCo3nIdH+aYzeqxhCMm1S2Dmv1cKa3zmNqPTD
P5Kqdw1toJByzkkPtj7gPavLKKop6U8E9a+9O26zbABQ6uK8dDU+b70txqn0jHZX
CXuIw4bjW0YX52tSvC//SGZoj8CmoVi0oX5uOv2gKlYCCV+nzxu6ymqxNb4VP9lv
/bZDcigoEwtxUsNi5bbU694lWLt8B+CZJ8nGLap9+wjMtErm/oZtJ7fvjIvNp09R
4YLg6IuM1VXOLHcPibjpF9W4g0yKW7zvjAmVTT4G3BzfC8XcR+/T6CKR2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHrLY6Ld7fL4W6rpvNTfTRfZ+PhMB8GA1UdIwQY
MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt
NDk1NDI3MGUyNTA3LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3
LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6FU7n0U
NDpqg7WLkmhmF7NHUUBdGJ0yJgdpBDM7bt/ioIsfLBohJ+EbaPV0lSedQp4CxQYA
uxtOXe6cGPb+UWeI8ByDGF+zFQJhklYRAMneRG5vZGG7oKMmTIHlOcu5nlbHwlEI
ufMFLWBcEnbWO7dJ+AvCZ2eWBYv54cHYr6kY007aqlynH3snYkKjW/BpkXxkmZn1
8lNIAI/WT+zAxNCtAzH27DrR+b8ixi1pouI+52ke+/g07+TUy+VIJri/jr9rOzfm
miflydO4QamlzP6VYWfidzRymF1kPH6ht+QxKh+U7E6FDqx/j9HD6C0/eD3rrL6p
V3XitmbDY8LQlg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:07 2025 by rpki-client