
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: nibqntf/QZFlrtGixsuklsDHFIZDc/QgRhLFUOa7WOg=
Subject key identifier: 06:D0:58:8D:6A:58:FA:88:80:B1:07:79:B1:02:9D:0A:F6:9B:22:EE
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 0198D660C0A07C6D8608C93F0FA6D7556261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 128C
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: C8ryMHmGVYl0TymQ/v/WLWQSh9bEGwfcBXOnKVpOlo0=)
3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c0:a0:7c:6d:86:08:c9:3f:0f:a6:d7:55:62:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=06d0588d6a58fa8880b10779b1029d0af69b22ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:44:8c:fa:e0:e0:77:25:fa:8b:f5:53:89:
9b:98:9c:f9:de:2c:ec:c0:be:b8:75:60:49:3d:c7:
5a:e0:a9:ef:6a:97:4f:ae:a5:ab:04:30:1c:ff:d7:
c4:02:22:cb:10:a8:48:00:6f:07:e9:33:c2:d2:1d:
3a:d6:3c:27:65:1a:1c:cb:27:60:2e:c0:bc:db:ca:
22:f3:6a:1a:4b:c9:1f:5f:0f:b9:ac:9d:f6:67:f5:
90:ac:07:43:1e:33:e9:e5:ed:c8:91:f4:da:54:09:
ac:db:30:eb:8b:0e:9f:18:b8:fd:02:9f:f1:4c:24:
1c:3a:4a:5c:6b:a3:d7:97:d7:e2:c6:c8:2c:f6:12:
c8:c8:84:50:cf:74:fb:8a:80:55:91:90:f3:a1:85:
2b:78:7e:3b:82:71:56:08:22:37:40:bb:46:22:df:
a3:47:b3:bd:16:3a:93:9a:cb:e2:2c:03:f9:4a:93:
65:e6:a0:7a:05:e0:88:2d:18:c0:30:e5:c6:23:98:
3c:fc:c7:5c:e5:79:da:cd:88:83:61:45:87:e7:c6:
a7:43:b4:0f:1e:5e:77:62:f9:4d:5f:e4:07:2c:0e:
6e:b3:a4:51:2d:87:85:a2:20:4e:ad:47:e2:3d:16:
3d:11:63:4b:ce:b4:2e:03:9b:42:82:bd:2b:0f:4d:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:58:8D:6A:58:FA:88:80:B1:07:79:B1:02:9D:0A:F6:9B:22:EE
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:40:0a:c1:5a:b5:0c:a4:f2:5a:8d:e8:6b:e9:5c:c0:89:04:
e5:48:f4:2b:61:11:21:a3:2f:d3:7b:4f:98:d9:cd:b5:ae:02:
13:f2:e1:d2:12:7c:46:8e:05:eb:a2:fa:10:e8:9b:3d:98:51:
15:2d:ea:5b:0e:5d:71:c9:bc:26:27:90:85:fd:2f:97:f3:04:
b6:53:20:82:f9:bf:16:f5:ff:c2:6d:51:cf:fc:81:63:ea:a4:
f8:8e:d9:ae:48:49:98:82:0c:cb:93:68:a9:73:29:ba:dc:9a:
cf:01:fc:ec:78:74:12:fe:b9:1d:30:a2:65:78:e9:fa:c8:42:
7a:c5:62:8f:5e:04:6a:b3:3e:ff:0c:7e:f3:ec:a2:66:22:74:
c9:31:e7:4f:9e:92:e8:b8:00:ca:02:d0:35:b3:51:29:2a:23:
b9:3d:9a:d2:0c:02:ad:a1:53:bb:4f:66:cf:46:c9:66:46:45:
33:4b:ce:f0:16:2b:db:e0:71:cd:09:75:d7:7d:c7:f9:49:17:
46:54:71:38:6b:0a:d5:90:d4:f0:28:03:73:4f:a5:ea:4a:41:
6c:a8:7f:f4:c5:14:39:e9:94:f2:2e:b7:e2:a9:fe:64:7a:13:
02:10:02:0e:3e:c9:60:8f:c8:d3:6a:9d:77:36:a9:e4:ef:93:
c7:9e:ab:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMCgfG2GCMk/D6bXVWJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz
MDBiMjAwHhcNMjUwODIzMTAwMjAxWhcNMjUwODI0MTAwMjAxWjAzMTEwLwYDVQQD
EygwNmQwNTg4ZDZhNThmYTg4ODBiMTA3NzliMTAyOWQwYWY2OWIyMmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW9EjPrg4Hcl+ov1U4mbmJz53izs
wL64dWBJPcda4KnvapdPrqWrBDAc/9fEAiLLEKhIAG8H6TPC0h061jwnZRocyydg
LsC828oi82oaS8kfXw+5rJ32Z/WQrAdDHjPp5e3IkfTaVAms2zDriw6fGLj9Ap/x
TCQcOkpca6PXl9fixsgs9hLIyIRQz3T7ioBVkZDzoYUreH47gnFWCCI3QLtGIt+j
R7O9FjqTmsviLAP5SpNl5qB6BeCILRjAMOXGI5g8/Mdc5XnazYiDYUWH58anQ7QP
Hl53YvlNX+QHLA5us6RRLYeFoiBOrUfiPRY9EWNLzrQuA5tCgr0rD01QkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbQWI1qWPqIgLEHebECnQr2myLuMB8GA1UdIwQY
MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt
MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk
LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkAKwVq1
DKTyWo3oa+lcwIkE5Uj0K2ERIaMv03tPmNnNta4CE/Lh0hJ8Ro4F66L6EOibPZhR
FS3qWw5dccm8JieQhf0vl/MEtlMggvm/FvX/wm1Rz/yBY+qk+I7ZrkhJmIIMy5No
qXMputyazwH87Hh0Ev65HTCiZXjp+shCesVij14EarM+/wx+8+yiZiJ0yTHnT56S
6LgAygLQNbNRKSojuT2a0gwCraFTu09mz0bJZkZFM0vO8BYr2+BxzQl1133H+UkX
RlRxOGsK1ZDU8CgDc0+l6kpBbKh/9MUUOemU8i634qn+ZHoTAhACDj7JYI/I02qd
dzap5O+Tx56rSw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:05 2025 by rpki-client