Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: 8FQ0wvThrjCJrPyiw9+vI0Czzi+CiItg6E0ihkTCi20=
Subject key identifier: F8:4C:BC:CF:9B:18:CA:51:86:F2:5E:E9:EA:11:85:53:6A:9E:19:04
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 0198D6985274D87D9B70EC3602E06378D09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 1625
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: /KX33XN8N6aUtk8xf/GgeWlt88EaRyYhv+ftuQdySks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:52:74:d8:7d:9b:70:ec:36:02:e0:63:78:d0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=f84cbccf9b18ca5186f25ee9ea1185536a9e1904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:a4:ae:bd:f8:f5:39:b9:e6:d0:1d:e4:57:
61:aa:f7:29:5d:49:15:d1:fa:a3:da:fa:23:d9:0d:
b5:b0:56:6d:6f:5d:75:a5:ad:d1:72:3c:a8:ec:b7:
8a:0c:f1:d4:c2:c2:c2:e9:ab:38:4f:0c:0e:f3:27:
48:43:39:ba:a2:64:da:11:9c:de:39:d2:79:f5:df:
3f:4b:1c:97:54:25:41:e6:9d:81:2f:0e:52:4c:45:
7e:24:41:18:3e:47:66:af:e9:0b:79:bd:0d:25:52:
78:d2:e5:83:b8:a5:11:29:77:fd:04:65:ef:cb:4c:
e4:72:ed:32:44:cf:96:d3:f9:fd:d7:8e:05:c2:84:
f7:c0:08:7b:1d:4c:1c:50:8c:b4:fa:0f:97:21:23:
8c:ba:c9:16:a4:9c:9b:4c:ee:8f:6c:41:6f:57:ce:
21:37:bd:9e:6c:2b:b6:6f:9d:ba:eb:10:db:3b:d1:
58:b5:30:af:db:c8:50:02:1a:2b:07:ad:4e:b0:e7:
cc:63:6e:4d:62:90:8c:94:b2:0a:83:db:20:68:45:
c3:35:72:83:4c:a5:2c:93:b2:4b:b6:02:93:25:4c:
eb:44:45:8a:be:74:41:93:d4:65:8b:aa:7b:df:ea:
4b:f7:9c:da:67:f3:b4:7b:b4:e2:a2:87:8e:2b:60:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:BC:CF:9B:18:CA:51:86:F2:5E:E9:EA:11:85:53:6A:9E:19:04
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4a:fe:05:aa:12:1c:00:5f:bc:6b:5f:9c:22:d6:55:f4:b6:
ca:24:6c:1e:81:93:b2:c5:ae:26:ca:6d:8e:9e:9d:7e:d4:88:
32:7b:06:ab:6d:0a:2b:51:13:d3:96:e9:25:6e:41:fd:be:12:
ec:7c:a9:e9:a7:5b:d0:57:26:69:99:db:2f:13:03:17:eb:9b:
25:f7:09:87:bf:6c:74:37:9d:23:16:54:b0:5a:4d:7c:34:63:
da:ac:d1:76:05:08:6b:40:9c:e6:31:19:22:d6:10:fd:8c:c3:
7d:5c:98:8f:af:c7:5b:23:f8:38:b4:57:fb:bc:94:b4:ae:f2:
93:35:79:99:2e:9b:50:65:86:a4:89:41:a9:4a:77:c2:1a:a8:
d3:d9:6b:ec:d1:e0:de:62:c8:8f:14:4a:a4:51:b7:bd:5c:b5:
b5:6a:8b:c3:dd:41:b3:54:56:2f:3d:72:d5:33:36:b1:85:2f:
18:65:f2:26:87:c0:cd:0d:1b:ca:e2:d7:23:15:55:73:2e:6b:
fa:c1:e9:7f:d2:8a:2e:2b:8e:23:70:9f:c0:bc:f4:fb:6c:66:
93:90:60:39:95:d9:ca:f2:df:59:42:71:09:be:18:ad:9e:c2:
7b:dc:34:39:72:64:8c:4b:92:f1:f1:06:85:36:47:84:b4:f8:
a3:31:10:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmFJ02H2bcOw2AuBjeNCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgxZjA3YTQ5M2EzZTY0Mzc1MmU2NmJkODE0NmY1Nzcx
YWRmODgwHhcNMjUwODIzMTEwMjQzWhcNMjUwODI0MTEwMjQzWjAzMTEwLwYDVQQD
EyhmODRjYmNjZjliMThjYTUxODZmMjVlZTllYTExODU1MzZhOWUxOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rKkrr349Tm55tAd5FdhqvcpXUkV
0fqj2voj2Q21sFZtb111pa3Rcjyo7LeKDPHUwsLC6as4TwwO8ydIQzm6omTaEZze
OdJ59d8/SxyXVCVB5p2BLw5STEV+JEEYPkdmr+kLeb0NJVJ40uWDuKURKXf9BGXv
y0zkcu0yRM+W0/n9144FwoT3wAh7HUwcUIy0+g+XISOMuskWpJybTO6PbEFvV84h
N72ebCu2b5266xDbO9FYtTCv28hQAhorB61OsOfMY25NYpCMlLIKg9sgaEXDNXKD
TKUsk7JLtgKTJUzrREWKvnRBk9Rli6p73+pL95zaZ/O0e7TiooeOK2By5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhMvM+bGMpRhvJe6eoRhVNqnhkEMB8GA1UdIwQY
MBaAFKuoHwekk6PmQ3UuZr2BRvV3Gt+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgt
NTFjM2NjY2U3MmRmLzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC84NGUyY2UtMWVhYy00ZTEyLWFjNTgtNTFjM2NjY2U3MmRm
LzEvcTZnZkI2U1RvLVpEZFM1bXZZRkc5WGNhMzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkr+BaoS
HABfvGtfnCLWVfS2yiRsHoGTssWuJsptjp6dftSIMnsGq20KK1ET05bpJW5B/b4S
7Hyp6adb0FcmaZnbLxMDF+ubJfcJh79sdDedIxZUsFpNfDRj2qzRdgUIa0Cc5jEZ
ItYQ/YzDfVyYj6/HWyP4OLRX+7yUtK7ykzV5mS6bUGWGpIlBqUp3whqo09lr7NHg
3mLIjxRKpFG3vVy1tWqLw91Bs1RWLz1y1TM2sYUvGGXyJofAzQ0byuLXIxVVcy5r
+sHpf9KKLiuOI3CfwLz0+2xmk5BgOZXZyvLfWUJxCb4YrZ7Ce9w0OXJkjEuS8fEG
hTZHhLT4ozEQyg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:45:52 2025 by rpki-client