Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier: pJlvRx9JXeHsOfOlWVrLU4yKTrtnP0MzAWiH2jserhY=
Subject key identifier: 29:ED:47:3D:FC:2C:44:F8:14:09:12:0F:15:36:86:72:E0:FF:B4:BB
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial: 0198D583493D3D76B00869AC093E947E655B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number: 0F1E
Signing time: Sat 23 Aug 2025 06:00:07 +0000
Manifest this update: Sat 23 Aug 2025 06:00:07 +0000
Manifest next update: Sun 24 Aug 2025 06:00:07 +0000
Files and hashes: 1: Fy-RDVpoQYqhk9YIhC0_OXJ7Ngw.roa (hash: MSpbkpTae0BKWb0wW1Z5MLxX2eex/b1uULBuB1GrJoU=)
2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: potjBk9WSCDaoivTHzmXiGUOeX3Re1XrfJ0WMQjOKGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:49:3d:3d:76:b0:08:69:ac:09:3e:94:7e:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Validity
Not Before: Aug 23 06:00:07 2025 GMT
Not After : Aug 24 06:00:07 2025 GMT
Subject: CN=29ed473dfc2c44f81409120f15368672e0ffb4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:5e:7c:53:ca:da:fe:6c:28:eb:36:b5:ce:
ce:fa:22:bd:45:e8:e0:3b:9a:71:b9:c0:7a:69:a6:
e8:e6:b2:95:e9:8d:4b:9e:2d:c5:6c:7f:d5:e2:bb:
b6:03:c3:41:ae:86:f3:4d:9f:ba:51:18:80:81:39:
a7:48:f7:6f:c9:41:8d:9d:98:c1:c5:d2:68:f3:ed:
65:e3:9b:05:df:fa:a2:4e:63:9b:a5:5e:2b:49:7f:
0b:3c:ef:5c:86:60:da:61:be:b2:bb:6c:78:85:8e:
89:9c:94:e9:96:87:b6:99:b0:59:41:29:d6:51:07:
38:bc:fc:47:21:81:9b:0f:64:7e:43:ba:da:6f:df:
2a:0a:c0:e9:88:f2:88:fc:4a:39:4c:da:58:36:fd:
f7:3c:7d:e5:8b:c8:25:ce:22:fc:b9:05:c7:29:ed:
40:ba:68:13:20:18:f5:81:30:ea:83:a3:4e:5f:31:
a7:5e:72:2f:f0:a9:52:cb:0d:01:0a:bf:01:1c:ca:
92:53:e3:a5:4b:13:c0:75:65:af:eb:cf:7d:d8:bb:
04:8d:8c:05:73:b9:93:6a:22:52:ab:9e:91:51:d9:
ae:5f:dd:64:8e:70:5c:de:19:3f:5c:61:57:1c:c9:
26:ab:c0:d4:b1:66:7f:e6:2a:88:3a:b7:4d:45:37:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:ED:47:3D:FC:2C:44:F8:14:09:12:0F:15:36:86:72:E0:FF:B4:BB
X509v3 Authority Key Identifier:
keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c9:bb:84:d6:d6:90:a5:61:15:c6:6a:9a:af:7b:b2:98:ee:
62:e5:a3:3d:f5:e9:09:6c:cb:ca:86:70:95:2c:e1:e5:19:bb:
ca:03:11:c0:ee:70:bc:36:73:b4:54:5e:ed:dc:97:4c:7a:24:
ea:83:f3:28:08:86:5d:8d:73:84:65:bd:65:5a:49:36:de:5d:
2e:ed:1e:a1:b4:f9:00:bd:38:7a:b0:f7:35:ee:99:61:cc:86:
12:08:c2:70:ee:26:51:00:d4:8a:6f:0e:ee:8e:73:bb:b5:81:
c6:ee:bb:26:5b:7d:4e:f6:16:80:da:67:96:b4:ac:ae:af:06:
d9:eb:b4:48:d4:c5:83:16:17:21:2c:d6:2c:71:c0:89:fc:43:
ed:89:45:bb:5f:fa:69:31:89:c5:71:82:11:a0:c4:d0:99:fc:
d5:97:57:45:0f:09:86:93:2d:4e:21:48:40:9d:30:9d:0a:09:
b3:01:00:46:a0:aa:12:ac:8e:f4:a0:86:59:25:1f:8b:f1:22:
b5:12:73:61:a5:f0:00:c4:0d:ad:72:63:29:2c:a4:e0:d9:98:
4e:63:f8:b9:5d:70:5d:e9:91:7e:0b:aa:6a:79:7d:78:38:9b:
f9:bc:5f:64:ce:87:2b:99:a6:d7:43:71:24:6c:db:6b:ba:2c:
6e:07:7f:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg0k9PXawCGmsCT6UfmVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZmQ5MzYyZTgzYjg1MmYzZmQzMzExYjA5MDk2ZjYyODlh
NmEwZjgwHhcNMjUwODIzMDYwMDA3WhcNMjUwODI0MDYwMDA3WjAzMTEwLwYDVQQD
EygyOWVkNDczZGZjMmM0NGY4MTQwOTEyMGYxNTM2ODY3MmUwZmZiNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNNefFPK2v5sKOs2tc7O+iK9Rejg
O5pxucB6aabo5rKV6Y1Lni3FbH/V4ru2A8NBrobzTZ+6URiAgTmnSPdvyUGNnZjB
xdJo8+1l45sF3/qiTmObpV4rSX8LPO9chmDaYb6yu2x4hY6JnJTploe2mbBZQSnW
UQc4vPxHIYGbD2R+Q7rab98qCsDpiPKI/Eo5TNpYNv33PH3li8glziL8uQXHKe1A
umgTIBj1gTDqg6NOXzGnXnIv8KlSyw0BCr8BHMqSU+OlSxPAdWWv68992LsEjYwF
c7mTaiJSq56RUdmuX91kjnBc3hk/XGFXHMkmq8DUsWZ/5iqIOrdNRTcEXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCntRz38LET4FAkSDxU2hnLg/7S7MB8GA1UdIwQY
MBaAFEP9k2LoO4UvP9MxGwkJb2KJpqD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODkt
NjU0N2JiMWI4MGMyLzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODktNjU0N2JiMWI4MGMy
LzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8m7hNbW
kKVhFcZqmq97spjuYuWjPfXpCWzLyoZwlSzh5Rm7ygMRwO5wvDZztFRe7dyXTHok
6oPzKAiGXY1zhGW9ZVpJNt5dLu0eobT5AL04erD3Ne6ZYcyGEgjCcO4mUQDUim8O
7o5zu7WBxu67Jlt9TvYWgNpnlrSsrq8G2eu0SNTFgxYXISzWLHHAifxD7YlFu1/6
aTGJxXGCEaDE0Jn81ZdXRQ8JhpMtTiFIQJ0wnQoJswEARqCqEqyO9KCGWSUfi/Ei
tRJzYaXwAMQNrXJjKSyk4NmYTmP4uV1wXemRfguqanl9eDib+bxfZM6HK5mm10Nx
JGzba7osbgd/DQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:15 2025 by rpki-client