Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: 2PnxejzJnBWlul+gD7Ub/tpyh23I5oWgBo57q0OoGdU=
Subject key identifier: 06:1C:3F:EE:F6:2C:8F:FB:C6:F2:F4:9C:A9:71:1D:27:BC:6F:88:CB
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 0198D5157E182DD055DE0B76BBE921418525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0688
Signing time: Sat 23 Aug 2025 04:00:12 +0000
Manifest this update: Sat 23 Aug 2025 04:00:12 +0000
Manifest next update: Sun 24 Aug 2025 04:00:12 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: rSnoejgB5h2EEpsD2fVR9iPII2Rd2QNB9N11lQz0nNc=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7e:18:2d:d0:55:de:0b:76:bb:e9:21:41:85:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Aug 23 04:00:12 2025 GMT
Not After : Aug 24 04:00:12 2025 GMT
Subject: CN=061c3feef62c8ffbc6f2f49ca9711d27bc6f88cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:4a:99:50:2e:5b:82:44:da:2e:22:41:89:
5e:ff:9a:00:e7:f4:7b:a5:20:52:0e:b1:52:75:b5:
f1:ee:c3:f3:2a:5c:f2:70:79:9c:ae:45:5a:ba:61:
48:ae:cd:c0:28:4a:21:30:fd:cc:ca:9a:64:b5:7e:
ee:b7:49:55:8c:41:84:35:aa:0e:72:46:76:6e:39:
22:24:16:1c:34:47:95:4e:3e:ec:18:21:6f:f1:d0:
3f:5b:3c:fe:82:67:86:be:05:1a:3b:10:ba:fc:c7:
af:a2:44:11:53:a0:fa:69:da:ab:bf:21:19:34:61:
1c:f4:d9:53:7d:c5:c0:f9:67:a3:2e:52:eb:57:9a:
51:92:75:a2:36:5d:35:c4:b7:ea:0c:21:04:26:5b:
c8:c0:04:81:43:58:da:4c:16:4d:d7:22:dd:d7:52:
22:a5:5d:60:d7:02:3f:db:29:ea:74:63:3d:37:5a:
bd:cc:da:63:3c:06:8f:5d:84:92:55:ce:f8:e8:db:
08:a2:ee:48:ef:94:03:7d:28:cd:a3:0e:c9:e6:25:
70:4b:bd:e4:6d:d4:f6:d2:9d:29:73:dc:ff:cf:4d:
d2:32:88:6e:f3:67:6a:7c:57:29:e9:92:10:98:1c:
ea:3b:5f:7d:b2:e1:ea:55:58:e1:4c:4f:59:41:48:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1C:3F:EE:F6:2C:8F:FB:C6:F2:F4:9C:A9:71:1D:27:BC:6F:88:CB
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:46:dc:5c:9b:f9:9d:50:9a:06:e3:f9:7a:10:f6:76:ec:a5:
0f:35:18:25:08:b1:49:5c:cd:00:b2:13:42:eb:56:e8:90:b0:
56:8f:43:94:f4:ec:30:3e:b7:4d:c9:9d:95:77:bc:b1:d3:dc:
eb:26:56:01:88:5c:7b:c8:6f:c5:60:4d:b0:d7:72:70:fd:75:
0e:02:e2:6c:ec:41:e7:d0:fe:a0:9e:0d:bd:53:24:fd:e7:c0:
e9:c2:c3:6f:95:f5:25:3e:c1:8f:5d:34:a5:9f:f5:0e:8e:06:
0a:a9:cd:ad:7f:72:d0:b8:6d:35:9b:8d:1b:8e:9c:66:8f:e2:
12:1d:3e:29:fe:ce:ab:ee:c5:16:b8:08:f7:bc:aa:fb:7a:32:
0c:ea:7f:f7:0e:ff:e8:08:d2:19:46:52:0d:f8:e2:f9:bb:79:
c0:85:1e:48:4e:7f:0d:45:74:01:18:f4:14:35:ac:22:ef:68:
71:5e:65:ae:fc:4c:b6:db:41:07:d1:2d:56:1f:ca:cd:c5:0e:
2b:b2:7b:de:46:27:ff:c8:8c:d4:a2:ce:3c:45:3f:19:54:03:
63:1b:c1:36:8c:8e:4f:e4:0d:4c:c8:af:98:f8:e8:3e:10:f4:
e3:75:c5:fd:09:8d:63:29:46:24:97:40:6f:ad:8e:74:3f:b9:
80:6b:f4:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFX4YLdBV3gt2u+khQYUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MGNkYTQ4YzM1ZTU0ZWI4MDI1NzVhYWE0MDhjY2U1Nzk5
MjcyMTYwHhcNMjUwODIzMDQwMDEyWhcNMjUwODI0MDQwMDEyWjAzMTEwLwYDVQQD
EygwNjFjM2ZlZWY2MmM4ZmZiYzZmMmY0OWNhOTcxMWQyN2JjNmY4OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD1KmVAuW4JE2i4iQYle/5oA5/R7
pSBSDrFSdbXx7sPzKlzycHmcrkVaumFIrs3AKEohMP3MyppktX7ut0lVjEGENaoO
ckZ2bjkiJBYcNEeVTj7sGCFv8dA/Wzz+gmeGvgUaOxC6/MevokQRU6D6adqrvyEZ
NGEc9NlTfcXA+WejLlLrV5pRknWiNl01xLfqDCEEJlvIwASBQ1jaTBZN1yLd11Ii
pV1g1wI/2ynqdGM9N1q9zNpjPAaPXYSSVc746NsIou5I75QDfSjNow7J5iVwS73k
bdT20p0pc9z/z03SMohu82dqfFcp6ZIQmBzqO199suHqVVjhTE9ZQUgacQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYcP+72LI/7xvL0nKlxHSe8b4jLMB8GA1UdIwQY
MBaAFNUM2kjDXlTrgCV1qqQIzOV5knIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWIt
MjI5MjA1NjVjZGE0LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWItMjI5MjA1NjVjZGE0
LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEbcXJv5
nVCaBuP5ehD2duylDzUYJQixSVzNALITQutW6JCwVo9DlPTsMD63TcmdlXe8sdPc
6yZWAYhce8hvxWBNsNdycP11DgLibOxB59D+oJ4NvVMk/efA6cLDb5X1JT7Bj100
pZ/1Do4GCqnNrX9y0LhtNZuNG46cZo/iEh0+Kf7Oq+7FFrgI97yq+3oyDOp/9w7/
6AjSGUZSDfji+bt5wIUeSE5/DUV0ARj0FDWsIu9ocV5lrvxMtttBB9EtVh/KzcUO
K7J73kYn/8iM1KLOPEU/GVQDYxvBNoyOT+QNTMivmPjoPhD043XF/QmNYylGJJdA
b62OdD+5gGv00g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:35 2025 by rpki-client