Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: uZCBZuA3zQhEzSYgUwz9Oeyus4cGg4nKwrWRl2A8r+o=
Subject key identifier: 9C:5B:41:B9:1E:8B:4C:A9:F9:08:FB:4F:11:A6:21:8F:1D:04:4E:34
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 0198A0F1CFCA8F1C2A7D1E48116E8CC2DDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0BA3
Signing time: Wed 13 Aug 2025 01:00:58 +0000
Manifest this update: Wed 13 Aug 2025 01:00:58 +0000
Manifest next update: Thu 14 Aug 2025 01:00:58 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: PGBRqCNKcWn7fdEtgKXnS/TpWDsOPeCNz0SiDqF18cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:cf:ca:8f:1c:2a:7d:1e:48:11:6e:8c:c2:dd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Aug 13 01:00:58 2025 GMT
Not After : Aug 14 01:00:58 2025 GMT
Subject: CN=9c5b41b91e8b4ca9f908fb4f11a6218f1d044e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:8b:ae:83:36:e9:85:3f:a7:bf:2b:36:86:
a4:99:39:fa:a5:7f:84:0b:a4:e0:48:d6:66:9b:fa:
31:7e:e0:14:a6:54:9b:24:73:47:59:dc:8b:cf:fa:
94:88:b2:1b:44:74:5d:49:43:00:3b:d7:7d:11:6f:
51:dc:eb:e5:cd:04:d0:c7:54:8f:28:7f:9c:d5:08:
30:70:16:ad:35:73:d1:d3:1d:52:bc:ae:81:89:3b:
3a:35:53:41:b5:81:d1:e8:ed:f3:fe:a8:92:3e:2b:
2f:f9:f0:0b:43:90:ae:da:32:a2:2a:c5:30:56:3e:
84:da:12:4d:a1:ba:c0:10:df:e1:83:cf:1b:31:db:
84:57:fc:77:6c:17:6d:1b:78:b0:2c:a6:d2:3b:26:
8b:21:91:2b:e1:5a:16:1a:4a:50:9c:74:e5:64:c9:
99:92:1e:b4:da:f4:9b:63:59:49:3f:61:70:e8:0a:
a0:c7:0e:0b:bb:5f:03:eb:0f:e6:e7:77:73:73:8e:
56:6d:cf:e1:dd:f0:cc:37:b3:00:2d:37:26:1b:f6:
8c:8d:e8:ac:09:95:a9:c5:2b:28:e7:93:d6:d1:eb:
bf:57:cd:ed:c9:fc:0f:02:5e:ac:1f:9f:46:45:53:
0c:1f:90:87:c8:22:52:36:af:87:5e:e5:9f:f4:fc:
36:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5B:41:B9:1E:8B:4C:A9:F9:08:FB:4F:11:A6:21:8F:1D:04:4E:34
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8e:88:e1:cf:7e:74:7e:45:55:72:07:bd:61:4a:c3:7f:a1:
94:f4:a3:8e:0c:82:64:86:0b:c5:5c:ac:8f:7a:bd:7e:57:90:
61:2b:36:3d:d8:3d:31:01:1c:91:00:63:25:49:0d:3d:cd:68:
f8:d5:2f:8c:0a:77:24:d5:c4:44:9c:e6:ec:4c:e3:a7:2d:1c:
1d:56:ef:46:14:58:16:49:a2:e6:03:c7:6c:cb:e9:52:8d:cf:
0c:b6:70:9a:ae:e2:21:aa:6e:81:12:b1:33:40:48:70:83:ea:
0d:4c:ac:b7:5d:9a:f1:b4:12:e8:45:c8:e5:b8:db:6c:a8:84:
b2:6f:88:c3:6e:22:e6:d6:0b:f1:22:59:77:b3:bf:36:d0:c2:
db:60:1d:02:d6:3d:db:14:fd:b6:fe:a9:73:b3:44:9d:0b:29:
cd:f4:a7:d1:78:e5:70:04:6a:4e:90:14:50:02:88:64:fc:06:
8e:70:e4:d0:4e:6d:6b:c7:b1:f1:bc:69:ac:9d:4b:74:c1:b1:
51:45:7a:8f:54:c7:1a:b1:e2:f6:a0:48:b8:6c:67:ac:ee:d6:
89:f9:ee:1b:37:6e:c1:f6:d3:b2:8f:13:3a:e4:fe:e7:42:fc:
b8:35:b3:6f:ba:4f:78:cc:aa:bb:6c:57:dc:d8:b3:87:55:8f:
b4:10:0b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZig8c/KjxwqfR5IEW6Mwt2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTI5Y2IzNDNiZGYzY2YyMDRjNDA1YWYwYTU1MzNlYTRi
MDkzM2MwHhcNMjUwODEzMDEwMDU4WhcNMjUwODE0MDEwMDU4WjAzMTEwLwYDVQQD
Eyg5YzViNDFiOTFlOGI0Y2E5ZjkwOGZiNGYxMWE2MjE4ZjFkMDQ0ZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3KLroM26YU/p78rNoakmTn6pX+E
C6TgSNZmm/oxfuAUplSbJHNHWdyLz/qUiLIbRHRdSUMAO9d9EW9R3OvlzQTQx1SP
KH+c1QgwcBatNXPR0x1SvK6BiTs6NVNBtYHR6O3z/qiSPisv+fALQ5Cu2jKiKsUw
Vj6E2hJNobrAEN/hg88bMduEV/x3bBdtG3iwLKbSOyaLIZEr4VoWGkpQnHTlZMmZ
kh602vSbY1lJP2Fw6Aqgxw4Lu18D6w/m53dzc45Wbc/h3fDMN7MALTcmG/aMjeis
CZWpxSso55PW0eu/V83tyfwPAl6sH59GRVMMH5CHyCJSNq+HXuWf9Pw28QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxbQbkei0yp+Qj7TxGmIY8dBE40MB8GA1UdIwQY
MBaAFKiSnLNDvfPPIExAWvClUz6ksJM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjIt
NTlkNDRlZjdlNGZmLzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iN2NjMzYtNzc3ZS00NGI5LWFkNjItNTlkNDRlZjdlNGZm
LzEvcUpLY3MwTzk4ODhnVEVCYThLVlRQcVN3a3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPY6I4c9+
dH5FVXIHvWFKw3+hlPSjjgyCZIYLxVysj3q9fleQYSs2Pdg9MQEckQBjJUkNPc1o
+NUvjAp3JNXERJzm7Ezjpy0cHVbvRhRYFkmi5gPHbMvpUo3PDLZwmq7iIapugRKx
M0BIcIPqDUyst12a8bQS6EXI5bjbbKiEsm+Iw24i5tYL8SJZd7O/NtDC22AdAtY9
2xT9tv6pc7NEnQspzfSn0XjlcARqTpAUUAKIZPwGjnDk0E5ta8ex8bxprJ1LdMGx
UUV6j1THGrHi9qBIuGxnrO7WifnuGzduwfbTso8TOuT+50L8uDWzb7pPeMyqu2xX
3Nizh1WPtBAL2Q==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:59 2025 by rpki-client