Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: IsPGSLW611XWzAo3+IM7YGbYTcNiOmL8U16Fe25vdE4=
Subject key identifier: 39:A6:CE:00:53:EC:FD:04:7A:5B:A4:5D:9D:6F:F2:12:B0:E8:1A:B2
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 0198D5BB85B53A84D686A6EF8EF8FF704F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: Nsb7ehn3YUAZTJmbtbkTypcDpovY9XZ0krgHA6EC+DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:85:b5:3a:84:d6:86:a6:ef:8e:f8:ff:70:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=39a6ce0053ecfd047a5ba45d9d6ff212b0e81ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a7:1d:fc:fc:65:df:7e:aa:cc:47:42:9e:6a:
8d:08:41:b1:fb:91:91:f0:46:a7:a4:38:cf:a7:bf:
b8:e2:5d:39:4f:cd:96:31:a7:bb:d5:8a:9e:03:46:
6b:c7:48:8b:d6:f5:c8:65:5e:2b:f6:09:fc:ea:bb:
c1:0a:8d:3a:43:ac:bb:86:6b:4a:95:07:36:00:ea:
76:c7:ff:89:79:98:39:cc:1d:cf:83:c7:fd:40:82:
62:7e:6d:f8:90:c4:89:af:77:0b:9b:4f:5a:32:93:
86:71:de:7d:62:68:10:ff:7f:77:ec:01:64:2c:51:
2f:7c:86:75:32:f6:f5:f8:57:fd:9b:c3:ab:2d:65:
96:68:bb:de:42:69:54:ac:46:eb:23:79:c3:48:6c:
4f:eb:5d:f3:a4:e9:90:32:00:b6:be:71:b3:b3:bb:
ee:87:91:02:97:02:2f:4e:0a:f6:09:9b:8f:e8:fc:
6a:ef:8d:44:7d:01:15:6c:5f:b0:dc:0c:15:59:0f:
77:3d:e7:0d:b0:e2:d0:4f:c9:05:82:dc:c4:8d:eb:
ee:63:cc:e5:9c:71:ce:1d:4e:1d:f8:4a:b2:3e:7c:
f2:57:24:24:0d:8d:7a:dc:1e:3f:ff:be:d3:ab:09:
4c:3d:e6:17:82:26:a9:d6:37:69:89:6f:d1:d0:78:
3d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:CE:00:53:EC:FD:04:7A:5B:A4:5D:9D:6F:F2:12:B0:E8:1A:B2
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fd:f0:76:66:34:49:34:c8:8a:fd:94:c0:d7:f4:c8:9e:03:
94:b0:70:19:f2:a4:37:e8:e1:90:31:62:7d:61:04:97:2a:89:
60:eb:15:f0:66:41:98:f3:38:33:35:4f:ff:db:38:7d:21:d0:
87:5e:89:6f:49:02:f6:74:10:26:4e:bd:de:05:01:52:f7:f0:
6e:7b:42:63:95:54:a7:9e:66:f8:3e:f0:90:46:62:83:33:92:
14:c6:03:0d:50:bf:2c:de:2a:28:51:16:56:78:7f:96:21:13:
be:c1:27:c4:eb:e1:c4:17:8c:cb:88:e1:72:23:73:3e:e8:dc:
1a:24:be:16:1d:3a:31:87:35:2b:00:59:a3:11:e1:a3:0b:fd:
8b:6c:e6:d3:df:0e:7b:1a:e9:c5:cf:f0:1a:32:ca:df:64:68:
a9:23:be:92:fe:71:7a:4d:7c:6a:d8:83:a6:ca:55:a9:7f:66:
f1:14:18:0f:ef:77:ab:c5:8f:03:23:e2:04:f5:8f:32:b9:14:
23:ba:61:3f:e6:3f:ae:bd:4a:dc:16:e3:f7:d2:51:b6:bf:a6:
bb:11:2c:d6:ae:5b:fe:e5:6a:ac:39:66:35:54:2e:a6:6f:7f:
87:7c:5b:84:02:73:24:6c:a3:03:35:34:e8:e8:83:bb:56:08:
5a:13:ba:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4W1OoTWhqbvjvj/cE+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzc3M2FhMWM3MWEwMjI2NTE0NmJhMzM2Y2NjMmU1OGRl
YWRiODgwHhcNMjUwODIzMDcwMTMyWhcNMjUwODI0MDcwMTMyWjAzMTEwLwYDVQQD
EygzOWE2Y2UwMDUzZWNmZDA0N2E1YmE0NWQ5ZDZmZjIxMmIwZTgxYWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kcd/Pxl336qzEdCnmqNCEGx+5GR
8EanpDjPp7+44l05T82WMae71YqeA0Zrx0iL1vXIZV4r9gn86rvBCo06Q6y7hmtK
lQc2AOp2x/+JeZg5zB3Pg8f9QIJifm34kMSJr3cLm09aMpOGcd59YmgQ/3937AFk
LFEvfIZ1Mvb1+Ff9m8OrLWWWaLveQmlUrEbrI3nDSGxP613zpOmQMgC2vnGzs7vu
h5EClwIvTgr2CZuP6Pxq741EfQEVbF+w3AwVWQ93PecNsOLQT8kFgtzEjevuY8zl
nHHOHU4d+EqyPnzyVyQkDY163B4//77TqwlMPeYXgiap1jdpiW/R0Hg9DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmmzgBT7P0EelukXZ1v8hKw6BqyMB8GA1UdIwQY
MBaAFKt3c6occaAiZRRrozbMwuWN6tuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTIt
ZTZkZmJhMWRmMjMwLzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTItZTZkZmJhMWRmMjMw
LzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApf3wdmY0
STTIiv2UwNf0yJ4DlLBwGfKkN+jhkDFifWEElyqJYOsV8GZBmPM4MzVP/9s4fSHQ
h16Jb0kC9nQQJk693gUBUvfwbntCY5VUp55m+D7wkEZigzOSFMYDDVC/LN4qKFEW
Vnh/liETvsEnxOvhxBeMy4jhciNzPujcGiS+Fh06MYc1KwBZoxHhowv9i2zm098O
exrpxc/wGjLK32RoqSO+kv5xek18atiDpspVqX9m8RQYD+93q8WPAyPiBPWPMrkU
I7phP+Y/rr1K3Bbj99JRtr+muxEs1q5b/uVqrDlmNVQupm9/h3xbhAJzJGyjAzU0
6OiDu1YIWhO6Eg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:20 2025 by rpki-client