Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: rDnsQbciOqj2D9l+efr544AdXaRdk0RBLu/cG9r4dR8=
Subject key identifier: B3:71:9D:B2:DF:DD:EE:F7:1D:74:E4:AF:61:51:87:60:64:0A:51:9B
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 0198D5BC393A4451D6F2107B0E3A88C74952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: fc4brGlD2V9aXaMOkj_E0RZ_J08.roa (hash: OhUlbRmFgYOLeHLw8imL9BrjCyNfPZwGRzxzejrVjWo=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: WC+IeNf0yTv468BOVO3iK0q2IwInei6EP9+9aXXz9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:39:3a:44:51:d6:f2:10:7b:0e:3a:88:c7:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=b3719db2dfddeef71d74e4af61518760640a519b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:6b:df:97:7c:c2:cb:15:45:6c:73:e3:73:
c7:44:ac:46:c6:83:63:62:f4:5a:40:3a:1d:10:14:
79:97:e0:b4:bf:a4:df:13:4b:25:1c:19:db:51:19:
11:09:9a:33:71:da:ee:23:f7:04:f6:48:f3:f2:b6:
d0:0a:a7:33:bc:71:9a:45:4d:72:8c:4f:71:2b:03:
3c:b1:43:77:34:2e:84:c5:e2:b8:5c:ee:31:b4:0b:
35:4b:3c:1d:15:f8:3b:9a:8d:cd:35:18:c3:91:20:
04:b7:1f:e8:52:98:1b:54:c9:64:6a:38:82:02:fc:
b4:70:ab:d9:5a:d2:f7:15:b0:79:99:e4:0c:b1:31:
d1:d3:15:da:9f:7f:44:cd:d1:a9:2a:16:21:95:20:
2f:4a:9c:ce:79:b2:fe:ec:8a:db:5c:17:8f:da:ac:
cd:48:ab:d5:6c:c9:d8:cf:ad:dd:ba:19:82:8f:15:
83:ba:d8:80:9f:78:57:fa:95:d6:c6:4e:a0:39:a9:
29:72:fb:16:96:bb:60:09:8c:b0:ae:3c:f8:54:5d:
d3:2e:79:b4:1d:8c:38:66:84:86:46:e1:5f:3e:19:
8e:8f:49:9d:1b:11:67:30:0f:d6:ac:06:84:80:6d:
30:f6:49:3e:84:91:ba:d3:6d:c8:4f:f5:a7:ab:d3:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:71:9D:B2:DF:DD:EE:F7:1D:74:E4:AF:61:51:87:60:64:0A:51:9B
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f1:7f:f8:82:71:b4:36:a5:60:52:e5:e9:e2:c2:51:e7:a6:
39:67:d0:a4:04:75:4f:5f:67:f2:34:2f:35:2a:f5:82:1d:ed:
ea:e2:86:4a:ce:6c:38:28:2c:81:00:ff:4f:e2:24:13:18:20:
03:19:c8:0f:4c:10:cc:dc:b9:a1:4d:08:20:a4:d6:8f:c0:e0:
ed:e0:01:99:1b:61:7a:7e:bb:2f:e6:79:32:9d:ae:8f:d9:ed:
c7:11:5f:64:0c:ab:ba:e6:5c:7d:41:79:35:ec:ac:c9:f9:66:
40:8f:e0:27:26:a5:29:2a:3a:6f:03:c2:fb:43:c6:5a:cc:ca:
41:d0:1a:e4:d9:29:1c:7d:9a:24:53:5d:06:4a:84:14:5d:69:
26:88:7a:ec:87:72:15:85:2b:0f:27:39:83:91:6a:31:85:3f:
1c:31:38:9b:32:ba:ad:5a:e7:dc:0e:32:1d:5b:30:f4:d1:27:
2b:77:c9:a2:dc:38:01:58:a3:7c:6c:c3:80:b9:8c:70:b6:d1:
f5:cb:4a:79:c4:0c:c7:76:77:75:79:ce:b7:94:54:c3:46:b2:
e9:89:d4:f1:0b:b8:85:83:17:da:94:4e:6d:a2:01:2d:6b:81:
ce:8f:67:a9:85:b9:ee:86:4e:4b:35:e1:09:c4:cc:7b:34:c4:
e5:9c:9e:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDk6RFHW8hB7DjqIx0lSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTIzNTNkOWJkNWI4YzViNThjYzcxMDIxMzI0YmI5MGRk
MmRkOTEwHhcNMjUwODIzMDcwMjE4WhcNMjUwODI0MDcwMjE4WjAzMTEwLwYDVQQD
EyhiMzcxOWRiMmRmZGRlZWY3MWQ3NGU0YWY2MTUxODc2MDY0MGE1MTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSpr35d8wssVRWxz43PHRKxGxoNj
YvRaQDodEBR5l+C0v6TfE0slHBnbURkRCZozcdruI/cE9kjz8rbQCqczvHGaRU1y
jE9xKwM8sUN3NC6ExeK4XO4xtAs1SzwdFfg7mo3NNRjDkSAEtx/oUpgbVMlkajiC
Avy0cKvZWtL3FbB5meQMsTHR0xXan39EzdGpKhYhlSAvSpzOebL+7IrbXBeP2qzN
SKvVbMnYz63duhmCjxWDutiAn3hX+pXWxk6gOakpcvsWlrtgCYywrjz4VF3TLnm0
HYw4ZoSGRuFfPhmOj0mdGxFnMA/WrAaEgG0w9kk+hJG6023IT/Wnq9OseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNxnbLf3e73HXTkr2FRh2BkClGbMB8GA1UdIwQY
MBaAFKviNT2b1bjFtYzHECEyS7kN0t2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUt
ZWVjNDkwZDUwNmY3LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUtZWVjNDkwZDUwNmY3
LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivF/+IJx
tDalYFLl6eLCUeemOWfQpAR1T19n8jQvNSr1gh3t6uKGSs5sOCgsgQD/T+IkExgg
AxnID0wQzNy5oU0IIKTWj8Dg7eABmRthen67L+Z5Mp2uj9ntxxFfZAyruuZcfUF5
NeysyflmQI/gJyalKSo6bwPC+0PGWszKQdAa5NkpHH2aJFNdBkqEFF1pJoh67Idy
FYUrDyc5g5FqMYU/HDE4mzK6rVrn3A4yHVsw9NEnK3fJotw4AVijfGzDgLmMcLbR
9ctKecQMx3Z3dXnOt5RUw0ay6YnU8Qu4hYMX2pRObaIBLWuBzo9nqYW57oZOSzXh
CcTMezTE5ZyeJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:24 2025 by rpki-client