Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: 2SWQYB8Tv66cbJysNQezPMJaKWNWmac3gzr59W97R4I=
Subject key identifier: 21:4F:43:42:61:B4:91:97:E9:6A:30:03:E0:39:2F:0A:FA:0D:50:75
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0199FFC83389CD98CD31CF2B6B46EA8C2DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 1704
Signing time: Mon 20 Oct 2025 04:02:14 +0000
Manifest this update: Mon 20 Oct 2025 04:02:14 +0000
Manifest next update: Tue 21 Oct 2025 04:02:14 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (hash: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=)
4: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
5: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
6: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
7: oFumiBsAWooyBU0TcSWUrXQVV0M.roa (hash: O0f3W53wpKnfJgwZpwBD1xXfrpSbNoYlbIB/lXeKPq8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: dpiuxmemJl6cDNYNFf8Kn9hXmyDzpLvXKq8HDcy9NeI=)
9: zJzk_tM6gq364ozeInI309dIrxA.roa (hash: Wk+SRLeVkkf92Q0xGlI36RRywoqFOdrDHHnD94zbdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:33:89:cd:98:cd:31:cf:2b:6b:46:ea:8c:2d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Oct 20 04:02:14 2025 GMT
Not After : Oct 21 04:02:14 2025 GMT
Subject: CN=214f434261b49197e96a3003e0392f0afa0d5075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:ce:15:1b:87:35:59:4a:a8:3e:e8:a8:89:
0e:74:12:12:b7:01:a2:0f:11:34:90:bb:7d:d8:77:
4e:0c:bd:b0:2a:0d:32:28:92:60:3a:01:83:a1:56:
3a:26:d7:aa:25:1d:b2:9d:79:50:d1:21:90:82:1d:
65:b5:cb:1b:bb:27:26:2b:94:f8:d3:57:53:3d:a1:
99:eb:61:e5:06:42:46:0e:b3:3b:30:64:e9:3a:3c:
09:48:75:58:e7:95:1a:6b:94:ce:20:70:1a:be:14:
c7:af:e8:d9:ae:6e:3c:8f:e2:d4:6d:93:18:77:b1:
99:81:70:18:0a:03:f3:6a:20:aa:93:7b:6a:73:d7:
c2:f2:60:af:ac:ef:4a:99:30:e5:10:11:87:16:e9:
ea:be:a4:c4:a3:f6:f8:ee:72:60:fc:4a:fa:6a:a0:
78:75:38:8a:ee:5e:b9:b9:14:e2:a0:dc:8a:39:c4:
73:6e:b2:43:8b:16:48:cc:ca:42:b5:98:f1:c4:a7:
60:f0:32:ff:c8:75:4c:c1:f4:90:f0:ca:aa:ec:7f:
d9:f1:c4:00:04:ed:e6:80:05:f3:d7:2a:d1:03:86:
bc:7b:49:98:7e:3d:f1:4d:4e:a9:2f:e1:5f:ea:a6:
79:10:50:bc:00:a5:f3:44:31:31:76:98:66:5e:e7:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:43:42:61:B4:91:97:E9:6A:30:03:E0:39:2F:0A:FA:0D:50:75
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9d:96:aa:f1:79:f5:83:f5:d2:10:c3:23:c5:5e:12:cd:bc:
0e:f0:70:a7:d4:de:2f:62:de:87:fd:33:66:0a:f3:b4:5c:08:
f3:8f:7e:5e:b2:56:ba:75:6c:7c:59:3e:3f:f5:81:d4:6d:3c:
8d:43:c2:db:67:02:38:7b:61:35:8f:5e:cf:af:43:f3:0a:18:
1e:b9:4c:4d:98:79:c8:e5:9f:1d:be:8c:e2:83:b6:21:01:5f:
db:44:b5:4d:5b:df:51:da:8e:a5:14:5e:38:1e:c2:a3:0c:73:
9f:b0:a6:53:37:8b:af:1f:61:36:cf:ec:40:c4:ee:d6:81:55:
df:b7:71:58:90:77:d2:7a:4c:60:40:67:b1:ee:96:24:9d:ba:
3d:ff:46:25:83:b5:32:37:4a:bb:3a:57:f5:f2:55:9d:58:7a:
1e:02:30:9c:ea:84:a0:d9:d0:70:12:f4:e0:f7:9d:1c:f1:cf:
fb:bf:ff:d4:73:45:89:35:4d:84:5d:2e:58:b7:a9:29:79:7b:
be:f9:69:db:d9:d4:7b:5f:d3:13:63:cd:28:9e:4b:dd:99:69:
83:0a:13:d3:87:5e:be:6a:1a:e1:c2:c1:a5:d3:fd:49:df:91:
57:03:56:61:75:6e:19:8b:96:30:17:f6:86:8e:4b:df:2e:7f:
55:b7:85:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yDOJzZjNMc8ra0bqjC3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl
NzYxZmIwHhcNMjUxMDIwMDQwMjE0WhcNMjUxMDIxMDQwMjE0WjAzMTEwLwYDVQQD
EygyMTRmNDM0MjYxYjQ5MTk3ZTk2YTMwMDNlMDM5MmYwYWZhMGQ1MDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21HOFRuHNVlKqD7oqIkOdBIStwGi
DxE0kLt92HdODL2wKg0yKJJgOgGDoVY6JteqJR2ynXlQ0SGQgh1ltcsbuycmK5T4
01dTPaGZ62HlBkJGDrM7MGTpOjwJSHVY55Uaa5TOIHAavhTHr+jZrm48j+LUbZMY
d7GZgXAYCgPzaiCqk3tqc9fC8mCvrO9KmTDlEBGHFunqvqTEo/b47nJg/Er6aqB4
dTiK7l65uRTioNyKOcRzbrJDixZIzMpCtZjxxKdg8DL/yHVMwfSQ8Mqq7H/Z8cQA
BO3mgAXz1yrRA4a8e0mYfj3xTU6pL+Ff6qZ5EFC8AKXzRDExdphmXud55QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFPQ0JhtJGX6WowA+A5Lwr6DVB1MB8GA1UdIwQY
MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt
NmZkOTc4OTIwNWJhLzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh
LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp2WqvF5
9YP10hDDI8VeEs28DvBwp9TeL2Leh/0zZgrztFwI849+XrJWunVsfFk+P/WB1G08
jUPC22cCOHthNY9ez69D8woYHrlMTZh5yOWfHb6M4oO2IQFf20S1TVvfUdqOpRRe
OB7Cowxzn7CmUzeLrx9hNs/sQMTu1oFV37dxWJB30npMYEBnse6WJJ26Pf9GJYO1
MjdKuzpX9fJVnVh6HgIwnOqEoNnQcBL04PedHPHP+7//1HNFiTVNhF0uWLepKXl7
vvlp29nUe1/TE2PNKJ5L3ZlpgwoT04devmoa4cLBpdP9Sd+RVwNWYXVuGYuWMBf2
ho5L3y5/VbeFSA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:18 2025 by rpki-client