Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: sZWZvVfT9lagrzmZEuKpLp0wu+Eh6SO8ThBgPpeEn/s=
Subject key identifier: 29:8B:D3:F3:E5:53:67:80:37:3A:69:BE:AC:31:FD:CE:40:B3:95:9C
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0198D66019936DA0AA458FD4391D5ED5D512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0C7C
Signing time: Sat 23 Aug 2025 10:01:18 +0000
Manifest this update: Sat 23 Aug 2025 10:01:18 +0000
Manifest next update: Sun 24 Aug 2025 10:01:18 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: hKknTpk/V7WKoC9+pBEm9utM3BXVD5YrYlYAt1HTIu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:19:93:6d:a0:aa:45:8f:d4:39:1d:5e:d5:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Aug 23 10:01:18 2025 GMT
Not After : Aug 24 10:01:18 2025 GMT
Subject: CN=298bd3f3e5536780373a69beac31fdce40b3959c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:f9:57:d8:33:23:8f:de:3c:80:a3:45:e8:
0e:31:fe:b6:78:09:14:08:45:de:9a:13:3d:15:a6:
98:94:3c:75:84:79:85:f9:41:d4:70:90:7e:e9:f7:
56:6a:b3:0d:2e:28:b4:83:03:a7:c5:1b:74:43:5b:
a2:7f:87:36:74:89:2a:0d:75:9c:06:13:39:dd:eb:
37:52:7e:28:bf:31:59:49:d2:ef:e2:d0:3c:6c:85:
05:dc:05:8f:82:31:83:b4:2f:12:73:1d:2b:bc:fd:
af:fc:a1:44:58:54:52:fe:09:af:50:20:f5:dc:94:
d7:f6:47:2f:ac:86:83:3a:2f:4b:c3:d4:50:60:8b:
eb:3e:76:cb:18:ad:66:40:59:3b:77:75:7a:76:c4:
0b:e4:c9:2e:ed:18:47:a3:e6:ba:07:64:61:60:22:
db:70:bb:ef:79:d7:4c:4a:93:e7:ec:1c:74:14:13:
b9:a3:15:c3:8d:3b:27:ed:5c:a8:86:93:eb:9a:40:
b8:5b:ed:48:dc:cd:1b:a9:cf:3c:ca:ad:b6:d3:94:
84:e0:c1:55:1c:34:7b:70:67:c3:82:55:23:30:f2:
77:5e:c0:a1:46:95:9f:dc:a6:56:91:ac:50:a8:d3:
5d:43:35:d6:98:9a:d9:ac:72:73:7d:ee:f8:bf:0e:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8B:D3:F3:E5:53:67:80:37:3A:69:BE:AC:31:FD:CE:40:B3:95:9C
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3c:53:6c:ef:b9:94:e9:86:a0:23:51:65:f9:0c:e6:a6:1c:
d9:78:a5:4b:de:3b:46:10:bd:a8:30:be:87:8b:34:cf:08:38:
ec:79:37:52:58:ec:c0:12:4a:b6:1f:39:e5:66:14:a0:c5:c5:
f5:51:b4:84:ac:a7:e5:0f:72:3b:37:29:3d:38:57:ab:88:29:
df:da:2a:31:88:6c:24:ef:85:93:3e:3f:75:a5:ac:73:7e:1f:
25:6d:20:f8:69:d5:ff:49:0f:3d:fb:71:bd:a2:51:6f:e5:53:
3b:3b:50:95:24:6d:9e:d7:f5:ba:82:b5:72:3f:f4:df:2f:50:
e0:2f:8e:93:ed:1b:5a:3d:7e:6b:1d:cf:62:e9:c9:7c:66:4c:
bc:c0:50:ba:3a:de:9b:ed:68:b0:ca:be:b3:a5:0f:c4:ac:46:
14:cd:91:bf:39:03:c0:cd:32:9f:f0:33:2d:ca:ab:12:c0:a0:
8e:84:e3:83:ac:7f:61:f5:d2:04:ba:d7:02:60:fc:25:d4:dc:
7f:bb:db:49:68:18:e6:a4:c2:17:2f:94:97:fb:5c:f4:ef:df:
c2:c8:58:b2:f0:5e:34:5b:ce:59:47:3d:61:29:c0:89:f3:a2:
c9:e0:df:2c:ee:01:61:f4:21:33:64:07:b5:5a:b2:ad:c6:05:
fe:ad:c2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYBmTbaCqRY/UOR1e1dUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiY2RmYzFhN2M1MjBjZjhkMTc3MjkyMDhlODVlOGIxOTdj
NGFkZmYwHhcNMjUwODIzMTAwMTE4WhcNMjUwODI0MTAwMTE4WjAzMTEwLwYDVQQD
EygyOThiZDNmM2U1NTM2NzgwMzczYTY5YmVhYzMxZmRjZTQwYjM5NTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10f5V9gzI4/ePICjRegOMf62eAkU
CEXemhM9FaaYlDx1hHmF+UHUcJB+6fdWarMNLii0gwOnxRt0Q1uif4c2dIkqDXWc
BhM53es3Un4ovzFZSdLv4tA8bIUF3AWPgjGDtC8Scx0rvP2v/KFEWFRS/gmvUCD1
3JTX9kcvrIaDOi9Lw9RQYIvrPnbLGK1mQFk7d3V6dsQL5Mku7RhHo+a6B2RhYCLb
cLvveddMSpPn7Bx0FBO5oxXDjTsn7VyohpPrmkC4W+1I3M0bqc88yq2205SE4MFV
HDR7cGfDglUjMPJ3XsChRpWf3KZWkaxQqNNdQzXWmJrZrHJzfe74vw5UsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmL0/PlU2eANzppvqwx/c5As5WcMB8GA1UdIwQY
MBaAFKvN/Bp8Ugz40XcpII6F6LGXxK3/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYt
MmJiODJhODM3YjdiLzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9lNTEyNGYtMTM2OS00OTAxLTlmNTYtMmJiODJhODM3Yjdi
LzEvcTgzOEdueFNEUGpSZHlrZ2pvWG9zWmZFcmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizxTbO+5
lOmGoCNRZfkM5qYc2XilS947RhC9qDC+h4s0zwg47Hk3UljswBJKth855WYUoMXF
9VG0hKyn5Q9yOzcpPThXq4gp39oqMYhsJO+Fkz4/daWsc34fJW0g+GnV/0kPPftx
vaJRb+VTOztQlSRtntf1uoK1cj/03y9Q4C+Ok+0bWj1+ax3PYunJfGZMvMBQujre
m+1osMq+s6UPxKxGFM2RvzkDwM0yn/AzLcqrEsCgjoTjg6x/YfXSBLrXAmD8JdTc
f7vbSWgY5qTCFy+Ul/tc9O/fwshYsvBeNFvOWUc9YSnAifOiyeDfLO4BYfQhM2QH
tVqyrcYF/q3Csg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:13 2025 by rpki-client