Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: fZIuUqEBNlIPHOJLm4g6JtXqzZ4xIjjZe3NGffAbC2g=
Subject key identifier: 1F:ED:D6:CC:33:61:08:3E:B7:77:5B:DA:8D:F2:16:72:82:45:3C:4E
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 0198D5F1434282D862AE8B0C60BAB5818480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 04A0
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: 2HTz8jpdx5jYkoeO1TcbcFY3vUJwdblfb4wNkoVL0F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:43:42:82:d8:62:ae:8b:0c:60:ba:b5:81:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=1fedd6cc3361083eb7775bda8df2167282453c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:53:e2:07:70:92:d9:61:cc:a6:34:8d:b0:50:
b3:b5:22:50:ad:d2:b1:6b:3d:f7:da:c2:38:df:19:
97:fb:dc:51:56:a0:e4:87:b4:78:02:1c:99:18:22:
b7:76:29:96:7f:c1:99:a3:21:f9:36:5d:63:ee:7c:
15:a9:d8:ff:8d:b1:80:2f:92:8b:af:2b:b4:6d:4a:
16:60:44:a2:9d:bf:03:69:ef:ef:c0:3f:18:0e:e6:
a7:f1:b5:69:7d:e7:ec:8f:b3:93:d8:1f:f0:6a:a3:
54:00:95:67:5b:83:2d:2a:66:53:4f:a6:8b:cc:ad:
38:01:cd:f6:be:2b:4c:2c:69:3e:e1:9f:28:00:9c:
f5:18:d5:94:47:c1:1a:0d:b3:e6:a9:cc:3e:82:7f:
48:9a:a9:87:01:9d:a1:e8:23:8d:f9:40:1b:4f:da:
22:20:bd:82:55:4b:9e:9a:56:ac:bf:13:4b:2a:27:
96:bb:d5:71:88:10:e8:85:b9:d6:b9:ba:75:05:44:
78:7c:19:2c:2d:d7:67:c1:38:d8:d8:41:e4:b2:f8:
68:f3:1f:3b:71:ab:f2:ae:2e:df:38:9c:f8:52:df:
4c:b6:84:e5:c3:1b:c8:69:98:44:df:0f:1f:73:d5:
e0:55:da:c2:ce:bb:3c:5c:ef:90:68:8d:56:f6:2b:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:ED:D6:CC:33:61:08:3E:B7:77:5B:DA:8D:F2:16:72:82:45:3C:4E
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a2:83:4a:62:f7:e9:98:9e:b4:92:10:32:9b:22:25:31:f1:
c4:e7:af:9b:47:61:39:17:62:bc:00:e4:cf:07:49:3b:94:12:
bf:a4:50:8e:be:61:b8:b0:a0:0e:3b:45:17:92:c6:37:70:60:
98:61:1d:fa:86:4c:1b:06:f6:11:0f:47:6b:38:4a:de:95:3c:
c6:60:23:91:c4:48:cf:e2:ea:90:89:44:b4:39:d1:fe:7b:87:
54:d7:20:ae:93:93:1e:44:a8:c5:2c:17:ef:d2:87:41:09:b2:
d6:43:9c:a0:68:e2:f9:02:5d:67:02:d1:5a:06:7c:da:cb:ed:
3f:02:dc:13:21:ed:8e:03:fc:23:92:4d:5e:7f:a3:c5:5e:b3:
7d:2e:30:1f:71:64:5c:ca:93:eb:08:57:68:44:41:f0:30:7b:
a3:5b:ca:25:69:1c:95:94:d8:ea:21:61:4d:d5:e5:44:33:c7:
57:d7:a8:c9:95:bd:28:37:91:1a:bd:1c:96:89:28:37:3c:24:
f5:53:c1:63:28:67:d2:bc:43:32:d4:d7:70:8b:3b:69:4c:71:
94:49:f7:d3:8e:4f:7b:c3:95:f0:28:a1:a1:a8:0f:13:75:2d:
a4:ed:fe:d6:ce:64:74:6f:a6:84:37:c9:fc:ba:61:3c:13:70:
e3:a6:b0:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8UNCgthirosMYLq1gYSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGUyOGYyZTUwOWZlMzdhYzVjMzQwMWEwYThjMTEwMjli
NjIxZTQwHhcNMjUwODIzMDgwMDE1WhcNMjUwODI0MDgwMDE1WjAzMTEwLwYDVQQD
EygxZmVkZDZjYzMzNjEwODNlYjc3NzViZGE4ZGYyMTY3MjgyNDUzYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1PiB3CS2WHMpjSNsFCztSJQrdKx
az332sI43xmX+9xRVqDkh7R4AhyZGCK3dimWf8GZoyH5Nl1j7nwVqdj/jbGAL5KL
ryu0bUoWYESinb8Dae/vwD8YDuan8bVpfefsj7OT2B/waqNUAJVnW4MtKmZTT6aL
zK04Ac32vitMLGk+4Z8oAJz1GNWUR8EaDbPmqcw+gn9ImqmHAZ2h6CON+UAbT9oi
IL2CVUuemlasvxNLKieWu9VxiBDohbnWubp1BUR4fBksLddnwTjY2EHksvho8x87
cavyri7fOJz4Ut9MtoTlwxvIaZhE3w8fc9XgVdrCzrs8XO+QaI1W9iu86QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/t1swzYQg+t3db2o3yFnKCRTxOMB8GA1UdIwQY
MBaAFKkOKPLlCf43rFw0AaCowRAptiHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEt
YTAwM2JmZGY0ZTQ1LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS85OWU1ODUtYTY1Mi00NGYzLWE1MzEtYTAwM2JmZGY0ZTQ1
LzEvcVE0bzh1VUpfamVzWERRQm9LakJFQ20ySWVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaKDSmL3
6ZietJIQMpsiJTHxxOevm0dhORdivADkzwdJO5QSv6RQjr5huLCgDjtFF5LGN3Bg
mGEd+oZMGwb2EQ9HazhK3pU8xmAjkcRIz+LqkIlEtDnR/nuHVNcgrpOTHkSoxSwX
79KHQQmy1kOcoGji+QJdZwLRWgZ82svtPwLcEyHtjgP8I5JNXn+jxV6zfS4wH3Fk
XMqT6whXaERB8DB7o1vKJWkclZTY6iFhTdXlRDPHV9eoyZW9KDeRGr0clokoNzwk
9VPBYyhn0rxDMtTXcIs7aUxxlEn3045Pe8OV8CihoagPE3UtpO3+1s5kdG+mhDfJ
/LphPBNw46awQQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:22 2025 by rpki-client