Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
File: QbjC83vY1-BOdphaTO1FWddlHEM.mft (raw, json)
Hash identifier: viai4HkMc5I+z3x44edt3pZlU/gIgomGLC6uy89GvUc=
Subject key identifier: DE:84:66:8E:E8:80:BA:F7:1D:EC:A1:1E:F7:EA:59:2F:2D:41:C4:2D
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 0198D73B830B1F704CF38D618929E29117E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 14:00:58 +0000
Manifest this update: Sat 23 Aug 2025 14:00:58 +0000
Manifest next update: Sun 24 Aug 2025 14:00:58 +0000
Files and hashes: 1: OYOpNeEVsu0T0BbvhmHIdNFIT_o.roa (hash: 5OjFPxxmaTIrwXXRizdKgOIFQoKouBwpJLlgwAhC1mU=)
2: QbjC83vY1-BOdphaTO1FWddlHEM.crl (hash: JUgUCns/Z5oGSKTPqkivvq9XQ1ijs6xpp9TGTu6Gp+M=)
3: YdfGaXHdTb-LYhTs_wz6s9gnwBM.roa (hash: gNJt9eBEIblRu0IFOMH1K6y+ICB3kC1BNK9Q6bATMgc=)
4: q9jElUrbhazQFMEmmCOsDeqbLJA.roa (hash: RedQ+QOQuI2x8mkKA1C82rnZg776YlWDZwTviJY79bo=)
5: sJO10EU5Nx8_dkPBaPnnB2dtYNM.roa (hash: XB5B7Wmp004sDj3pl5z8PdpWXfh6a+r4ST0GRlHwVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:83:0b:1f:70:4c:f3:8d:61:89:29:e2:91:17:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Aug 23 14:00:58 2025 GMT
Not After : Aug 24 14:00:58 2025 GMT
Subject: CN=de84668ee880baf71deca11ef7ea592f2d41c42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:94:d5:5c:b9:d9:6f:44:32:df:e4:bd:55:
e8:80:67:91:a4:03:11:40:ce:82:c5:13:40:f3:33:
67:11:a5:06:fa:9e:6a:c7:cf:4f:7d:c8:8e:3b:18:
32:35:88:a6:45:34:b4:30:9d:a6:18:58:e8:55:bc:
e9:81:73:53:55:99:d4:d6:f3:df:08:3d:bf:99:15:
b4:f7:c4:13:38:88:6e:1a:26:55:42:e1:c2:dc:90:
d5:db:c0:3e:eb:0f:c9:22:71:1b:0a:34:24:f5:3a:
d1:6e:30:db:3c:bb:d6:76:be:c1:69:f7:4b:3c:d9:
52:81:68:2e:d5:c4:9a:fc:0e:3e:b5:70:db:8c:2f:
35:b3:b0:43:bf:04:6d:51:d0:5e:28:c6:a4:ac:a5:
b2:3e:a0:f5:96:96:c1:ce:41:a9:e7:b0:6f:ea:0a:
54:af:a7:a7:d1:46:fd:3e:3f:38:1b:34:77:f7:8f:
b7:cd:99:b9:6b:02:4f:35:63:d6:d7:de:fa:7c:95:
71:93:c6:02:22:9f:03:cd:7d:a1:2d:47:b2:b0:f6:
fd:0d:71:3e:0e:0e:84:cb:e3:d2:37:5c:5d:2c:e7:
57:d5:d9:df:9c:29:a5:fd:6f:30:20:9f:43:5a:46:
66:10:b8:d4:2f:9d:7c:b9:43:54:7e:cd:05:10:ce:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:84:66:8E:E8:80:BA:F7:1D:EC:A1:1E:F7:EA:59:2F:2D:41:C4:2D
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e2:36:eb:14:df:29:3f:e7:42:2e:9f:08:23:59:29:a8:63:
c2:a0:5e:be:80:92:5a:d1:bc:8c:83:5a:dd:85:d9:3f:a6:fb:
0a:93:9b:8d:1b:c2:40:a0:d5:1a:e5:24:19:4a:37:c5:36:2e:
f3:d0:58:69:bb:ef:25:7b:07:cb:15:04:31:7a:b2:0e:4d:4e:
65:2b:86:f8:52:ba:ed:a3:be:f8:56:d3:31:df:49:9a:64:ee:
78:89:c9:09:cf:63:5e:0f:a7:5a:12:b5:1b:4d:fd:b4:ad:e6:
b7:b9:36:91:de:3f:3d:14:c3:e7:5b:75:ee:19:bd:31:74:0a:
d2:3c:b0:0c:fb:db:1d:20:88:8d:76:7f:61:e3:a7:97:60:52:
cf:21:d6:1b:eb:cd:59:63:44:c5:a1:1c:93:11:e7:92:81:f9:
05:91:e9:30:c4:2b:7c:43:9d:b9:f6:0e:97:01:a6:e6:ef:5c:
36:dc:6f:52:82:9f:44:ce:da:1c:4a:87:9f:38:e4:d2:80:cb:
09:76:b0:9e:0a:47:22:b3:8c:a6:31:6a:f0:da:9e:ac:9a:f2:
01:10:9d:2e:c2:c3:bc:cb:79:69:a3:74:40:cc:70:08:d8:b1:
1c:8c:79:f7:00:71:51:1e:2d:da:5b:e2:ec:d8:8e:06:bf:f7:
60:85:a7:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO4MLH3BM841hiSnikRfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjhjMmYzN2JkOGQ3ZTA0ZTc2OTg1YTRjZWQ0NTU5ZDc2
NTFjNDMwHhcNMjUwODIzMTQwMDU4WhcNMjUwODI0MTQwMDU4WjAzMTEwLwYDVQQD
EyhkZTg0NjY4ZWU4ODBiYWY3MWRlY2ExMWVmN2VhNTkyZjJkNDFjNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysiU1Vy52W9EMt/kvVXogGeRpAMR
QM6CxRNA8zNnEaUG+p5qx89PfciOOxgyNYimRTS0MJ2mGFjoVbzpgXNTVZnU1vPf
CD2/mRW098QTOIhuGiZVQuHC3JDV28A+6w/JInEbCjQk9TrRbjDbPLvWdr7BafdL
PNlSgWgu1cSa/A4+tXDbjC81s7BDvwRtUdBeKMakrKWyPqD1lpbBzkGp57Bv6gpU
r6en0Ub9Pj84GzR394+3zZm5awJPNWPW1976fJVxk8YCIp8DzX2hLUeysPb9DXE+
Dg6Ey+PSN1xdLOdX1dnfnCml/W8wIJ9DWkZmELjUL518uUNUfs0FEM5i5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6EZo7ogLr3HeyhHvfqWS8tQcQtMB8GA1UdIwQY
MBaAFEG4wvN72NfgTnaYWkztRVnXZRxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjIt
MjgxOGY2NTc4ZDFiLzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZTNiNGItZjgyNy00MzQ3LTkwMjItMjgxOGY2NTc4ZDFi
LzEvUWJqQzgzdlkxLUJPZHBoYVRPMUZXZGRsSEVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+I26xTf
KT/nQi6fCCNZKahjwqBevoCSWtG8jINa3YXZP6b7CpObjRvCQKDVGuUkGUo3xTYu
89BYabvvJXsHyxUEMXqyDk1OZSuG+FK67aO++FbTMd9JmmTueInJCc9jXg+nWhK1
G039tK3mt7k2kd4/PRTD51t17hm9MXQK0jywDPvbHSCIjXZ/YeOnl2BSzyHWG+vN
WWNExaEckxHnkoH5BZHpMMQrfEOdufYOlwGm5u9cNtxvUoKfRM7aHEqHnzjk0oDL
CXawngpHIrOMpjFq8NqerJryARCdLsLDvMt5aaN0QMxwCNixHIx59wBxUR4t2lvi
7NiOBr/3YIWn8w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:49:56 2025 by rpki-client