Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: UNp4L/p1FEDA5ryI7dASG671JR4IJqkLoJ/QeoqD6xQ=
Subject key identifier: 30:F6:BB:78:D4:02:04:A0:27:85:2A:41:6D:91:1C:5D:9A:51:C5:43
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 01988921F90C4D797B8A9183F94B94957C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 10:02:41 +0000
Manifest this update: Fri 08 Aug 2025 10:02:41 +0000
Manifest next update: Sat 09 Aug 2025 10:02:41 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: TEBaODlmDCqhNdveSNP6xcEtL-0.roa (hash: Ni+drEe1sF+jcV53LsQ0wrDEiq7Vue9pJpbJAT7gLcE=)
3: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: 8GG20Gi3cBGmROp70+bX+SuMjXKxscBs2mTMsZCFRJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:f9:0c:4d:79:7b:8a:91:83:f9:4b:94:95:7c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Aug 8 10:02:41 2025 GMT
Not After : Aug 9 10:02:41 2025 GMT
Subject: CN=30f6bb78d40204a027852a416d911c5d9a51c543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:ac:15:69:eb:f6:47:1f:13:b2:a1:ee:66:
cf:41:5b:d9:ab:5e:93:18:00:46:57:12:8f:5b:aa:
2a:b5:da:45:d5:b0:69:9b:88:e7:fc:74:30:9e:9d:
f5:18:f1:52:80:cb:87:02:a4:77:05:82:e1:5d:3a:
31:99:81:5f:01:31:ff:db:84:cb:18:01:d2:84:4a:
1b:f5:10:40:c2:7c:b5:40:08:75:d3:82:c4:70:85:
23:a3:53:80:d8:26:b1:d0:21:ea:0f:f7:cc:59:28:
c8:57:00:f6:db:02:61:8e:94:0d:b8:06:b5:9e:cc:
e6:5d:e4:a4:9d:9e:ba:d2:a1:36:bc:ba:db:6e:d4:
c9:0a:92:0f:a8:35:71:df:88:3a:e9:cb:d2:72:e2:
e6:1a:3e:af:b1:78:a2:f1:56:87:05:9b:90:3a:61:
09:46:93:79:2e:85:23:0f:35:69:16:47:97:fb:1e:
59:5c:b4:ef:4d:22:3c:47:0e:4d:5e:4a:d8:04:af:
5f:56:59:fa:a4:1c:74:dc:ba:25:43:f4:c6:e0:24:
8c:24:04:92:3f:ae:13:c1:97:91:e3:6f:b4:08:46:
34:48:84:54:a3:47:51:cd:7e:8c:20:4a:9f:15:05:
7f:9f:61:d5:fd:e9:ee:8f:fb:de:d2:0c:65:a9:0c:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F6:BB:78:D4:02:04:A0:27:85:2A:41:6D:91:1C:5D:9A:51:C5:43
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e3:70:76:71:0a:ee:be:64:34:52:e9:b7:3c:39:af:66:91:
71:c8:83:eb:e6:ff:6c:5d:a0:1e:28:fe:65:60:40:0c:eb:5c:
0d:a7:8d:0f:17:07:58:8d:91:77:5f:37:67:d8:06:e9:e3:3c:
47:5e:c3:fa:6b:9b:1d:89:20:66:1b:ae:a2:5f:40:9a:6d:40:
1b:bc:5c:b3:80:6d:e7:a1:c6:db:10:ef:60:12:82:b8:11:8e:
0c:70:11:4d:15:af:ef:f8:e7:2e:1e:82:37:3a:ef:0b:24:b2:
e6:c2:9d:5c:9f:29:7f:7c:b9:10:7d:23:09:65:af:4e:b8:e6:
65:c3:f8:88:f6:dd:c3:0e:45:95:5e:0f:bc:d1:f1:e9:df:0f:
77:04:8b:49:5b:68:3e:b1:f9:cd:4e:28:c8:c8:bc:7c:2b:c3:
e6:6b:3c:02:87:c7:b5:03:d2:48:47:52:52:4c:6e:89:8b:a1:
5e:64:47:80:99:3a:3b:2c:6f:ed:73:e2:a6:33:ca:e8:cc:79:
c3:72:36:f8:99:74:ea:5e:e4:a0:cc:1e:0c:07:69:92:5b:c8:
27:32:80:61:76:27:db:1c:61:11:9b:05:98:db:1a:78:c5:5a:
d7:0d:6a:d6:dd:d6:a0:ae:ed:f4:82:37:eb:94:62:53:19:45:
e2:9d:d6:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIfkMTXl7ipGD+UuUlXyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw
ZTk0MTgwHhcNMjUwODA4MTAwMjQxWhcNMjUwODA5MTAwMjQxWjAzMTEwLwYDVQQD
EygzMGY2YmI3OGQ0MDIwNGEwMjc4NTJhNDE2ZDkxMWM1ZDlhNTFjNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoOsFWnr9kcfE7Kh7mbPQVvZq16T
GABGVxKPW6oqtdpF1bBpm4jn/HQwnp31GPFSgMuHAqR3BYLhXToxmYFfATH/24TL
GAHShEob9RBAwny1QAh104LEcIUjo1OA2Cax0CHqD/fMWSjIVwD22wJhjpQNuAa1
nszmXeSknZ660qE2vLrbbtTJCpIPqDVx34g66cvScuLmGj6vsXii8VaHBZuQOmEJ
RpN5LoUjDzVpFkeX+x5ZXLTvTSI8Rw5NXkrYBK9fVln6pBx03LolQ/TG4CSMJASS
P64TwZeR42+0CEY0SIRUo0dRzX6MIEqfFQV/n2HV/enuj/ve0gxlqQzNSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD2u3jUAgSgJ4UqQW2RHF2aUcVDMB8GA1UdIwQY
MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt
NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx
LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvuNwdnEK
7r5kNFLptzw5r2aRcciD6+b/bF2gHij+ZWBADOtcDaeNDxcHWI2Rd183Z9gG6eM8
R17D+mubHYkgZhuuol9Amm1AG7xcs4Bt56HG2xDvYBKCuBGODHARTRWv7/jnLh6C
NzrvCySy5sKdXJ8pf3y5EH0jCWWvTrjmZcP4iPbdww5FlV4PvNHx6d8PdwSLSVto
PrH5zU4oyMi8fCvD5ms8AofHtQPSSEdSUkxuiYuhXmRHgJk6Oyxv7XPipjPK6Mx5
w3I2+Jl06l7koMweDAdpklvIJzKAYXYn2xxhEZsFmNsaeMVa1w1q1t3WoK7t9II3
65RiUxlF4p3W/w==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:45 2025 by rpki-client