Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: gOChaH7yw3Vx+d05qSpWhCKbpPIRlvwuwRseUyk4jNU=
Subject key identifier: 6F:5F:31:23:22:56:E3:23:0F:98:7B:34:B9:15:25:36:49:FB:17:0F
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 0198D47462D9866673EBF5F24BCD918C9377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 01:04:13 +0000
Manifest this update: Sat 23 Aug 2025 01:04:13 +0000
Manifest next update: Sun 24 Aug 2025 01:04:13 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: q/Exv1OaqhLrW9PL8EPCgdiy3ObL2ycc+fvYbfhRwDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:62:d9:86:66:73:eb:f5:f2:4b:cd:91:8c:93:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Aug 23 01:04:13 2025 GMT
Not After : Aug 24 01:04:13 2025 GMT
Subject: CN=6f5f31232256e3230f987b34b915253649fb170f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:aa:55:9b:e7:7a:ff:bd:fc:e9:8a:7e:a5:
e7:3a:8d:a8:69:d8:a3:5d:2c:f3:fe:8e:16:be:6c:
03:16:c4:b4:0d:2c:f4:54:7e:61:75:89:f1:ea:a2:
62:5a:23:84:12:05:98:36:bf:2c:b3:8e:35:4a:3a:
ca:b0:cb:b3:22:73:a8:c1:b7:6f:60:dc:30:07:5f:
bf:cc:ab:7f:4b:9c:10:18:d2:db:a3:0b:70:ea:3c:
6c:f6:c8:7f:92:ee:7d:43:4b:f4:61:64:8c:92:da:
89:a1:30:57:9b:42:85:37:49:58:a7:2e:30:1b:91:
a4:26:18:e7:3f:9b:4a:5d:2a:b6:fb:9b:5f:c7:ca:
6a:2a:2f:e4:04:71:7f:dc:8e:5c:2c:4d:f1:64:ae:
71:7d:24:89:58:24:14:28:9b:d4:b4:55:66:fe:cb:
02:40:90:ca:1f:e5:45:8a:2d:89:b7:30:87:6d:f8:
74:87:ef:e6:29:3c:41:eb:2d:99:07:4f:87:d6:3d:
4c:49:13:36:6d:2d:ed:94:06:1e:e2:e8:b2:ce:db:
0f:ae:82:76:46:6b:8c:5c:a9:3e:78:a1:27:b7:87:
cb:32:6b:5f:6c:df:cc:26:80:5e:04:ba:9e:31:7b:
04:48:c4:2c:45:a9:0f:bc:e1:6c:97:53:1f:bd:03:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5F:31:23:22:56:E3:23:0F:98:7B:34:B9:15:25:36:49:FB:17:0F
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:27:54:b5:7b:d9:a8:da:f1:6e:64:2a:8c:9b:06:25:16:36:
38:a3:4e:56:5f:1e:11:02:b8:37:04:2f:ac:54:76:be:28:9e:
79:15:8a:f9:e1:f4:07:e9:c0:38:09:e5:ea:50:ec:a5:9d:03:
a3:5a:9c:60:59:71:4d:ca:8f:e0:d5:7c:06:cb:ee:5e:18:ac:
25:5d:2d:e3:e4:3e:72:b5:16:65:fc:5d:b1:d2:7b:18:05:19:
64:95:e8:7f:9e:9d:94:0e:4f:b9:67:52:a9:ab:83:a5:05:e1:
ef:de:6d:d3:4f:80:cb:ea:99:98:01:d9:19:1f:98:f4:ea:bb:
08:ca:50:bc:d0:ce:0c:75:01:2c:4f:d7:9d:89:c6:1d:54:f4:
c4:db:5c:a7:83:8b:e2:d3:e1:67:15:15:74:82:2d:6f:a8:ef:
eb:d8:ae:f8:05:70:94:2e:c0:a8:01:36:7c:6d:7b:2f:d8:92:
95:a3:c0:2f:4e:02:37:b3:35:a0:8b:6e:6b:36:dc:b8:4b:4a:
a2:e4:71:6f:52:5d:ed:36:a6:44:8a:db:81:56:cc:e6:71:72:
ff:a5:af:4a:2a:7e:6f:b0:00:49:5f:dc:a7:a9:5d:3c:d4:46:
82:87:3b:86:01:d3:d7:4c:b8:e5:27:81:ce:8d:d7:71:de:12:
da:ac:c7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdGLZhmZz6/XyS82RjJN3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh
ZjljYTYwHhcNMjUwODIzMDEwNDEzWhcNMjUwODI0MDEwNDEzWjAzMTEwLwYDVQQD
Eyg2ZjVmMzEyMzIyNTZlMzIzMGY5ODdiMzRiOTE1MjUzNjQ5ZmIxNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYiqVZvnev+9/OmKfqXnOo2oadij
XSzz/o4WvmwDFsS0DSz0VH5hdYnx6qJiWiOEEgWYNr8ss441SjrKsMuzInOowbdv
YNwwB1+/zKt/S5wQGNLbowtw6jxs9sh/ku59Q0v0YWSMktqJoTBXm0KFN0lYpy4w
G5GkJhjnP5tKXSq2+5tfx8pqKi/kBHF/3I5cLE3xZK5xfSSJWCQUKJvUtFVm/ssC
QJDKH+VFii2JtzCHbfh0h+/mKTxB6y2ZB0+H1j1MSRM2bS3tlAYe4uiyztsProJ2
RmuMXKk+eKEnt4fLMmtfbN/MJoBeBLqeMXsESMQsRakPvOFsl1MfvQPkiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9fMSMiVuMjD5h7NLkVJTZJ+xcPMB8GA1UdIwQY
MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt
MTlhM2M1NjQ5YjU3LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMtMTlhM2M1NjQ5YjU3
LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCdUtXvZ
qNrxbmQqjJsGJRY2OKNOVl8eEQK4NwQvrFR2viieeRWK+eH0B+nAOAnl6lDspZ0D
o1qcYFlxTcqP4NV8BsvuXhisJV0t4+Q+crUWZfxdsdJ7GAUZZJXof56dlA5PuWdS
qauDpQXh795t00+Ay+qZmAHZGR+Y9Oq7CMpQvNDODHUBLE/XnYnGHVT0xNtcp4OL
4tPhZxUVdIItb6jv69iu+AVwlC7AqAE2fG17L9iSlaPAL04CN7M1oItuazbcuEtK
ouRxb1Jd7TamRIrbgVbM5nFy/6WvSip+b7AASV/cp6ldPNRGgoc7hgHT10y45SeB
zo3Xcd4S2qzHvQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:39 2025 by rpki-client