Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: FgwwSgG3gmTbRoLHWszxqQ3vu5G4d+tb56fDJGbnhgM=
Subject key identifier: FD:F4:E8:59:61:EE:F4:40:5D:48:F0:0D:5D:F4:39:9E:CF:22:48:DF
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 0198903567E22016EABFA906B3A147714469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 15AE
Signing time: Sat 09 Aug 2025 19:01:15 +0000
Manifest this update: Sat 09 Aug 2025 19:01:15 +0000
Manifest next update: Sun 10 Aug 2025 19:01:15 +0000
Files and hashes: 1: Q2tZHxcnTfsijpne_PaEOT5dOKg.roa (hash: FVNO2p4hWZxlSs3+Rn7ouc28IBioq9Skdi74miEeHBs=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: BVUhYT9LPoTbXz/b/+QgRiw4djjp2V6C/uZUfl3mySY=)
3: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)
4: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (hash: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:67:e2:20:16:ea:bf:a9:06:b3:a1:47:71:44:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Aug 9 19:01:15 2025 GMT
Not After : Aug 10 19:01:15 2025 GMT
Subject: CN=fdf4e85961eef4405d48f00d5df4399ecf2248df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:8c:68:2a:bd:8d:f6:f0:12:a2:22:9e:5a:
5b:64:30:81:6d:81:5f:a5:f4:60:7e:ef:36:c4:7f:
3d:cc:79:db:8e:b4:35:e6:5e:b6:0d:88:5d:5f:f8:
71:1d:7f:47:26:d6:07:d4:c4:a7:94:3f:e1:2e:f8:
0c:6d:4c:88:65:33:56:d9:6d:e3:f6:6b:4a:13:29:
95:91:a8:d5:28:f0:9b:6d:4f:31:00:d8:9d:6f:04:
ce:ba:14:bf:40:8e:a4:a0:c8:ec:ec:68:41:1e:5a:
a5:13:68:26:1d:85:6a:90:c8:6a:17:6b:c7:a9:ef:
74:20:c7:42:d1:56:91:16:60:78:2c:be:a4:1e:28:
19:00:91:cf:2e:70:a4:d4:05:0d:21:e2:64:fc:58:
2d:9c:ce:76:a3:19:78:6b:5a:26:04:a3:6d:63:4b:
60:ac:39:0a:56:59:87:48:19:75:4e:2c:7a:0a:32:
90:f8:b2:3f:aa:77:57:f1:4c:20:a3:9f:49:c4:9c:
50:0e:a2:52:c5:f0:5f:95:f8:ea:92:98:4e:2e:d8:
1c:40:13:5c:01:47:5a:6e:17:09:6f:90:6e:95:7c:
a3:26:e0:bd:ad:89:77:d1:b1:ae:60:5e:0f:a4:10:
04:d3:b8:24:3f:3d:3f:49:b0:b3:79:26:13:9b:96:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F4:E8:59:61:EE:F4:40:5D:48:F0:0D:5D:F4:39:9E:CF:22:48:DF
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0f:3f:cf:de:fc:08:30:d3:dd:4c:b4:34:d6:66:8c:04:18:
50:a4:51:a9:6d:e7:c5:13:60:1c:a1:95:1c:f9:76:96:a9:3d:
2d:f0:6e:1b:13:90:c1:fa:b4:e1:da:02:10:6a:fa:40:40:7f:
aa:d9:24:10:04:9f:0e:1a:a6:74:4b:22:9c:94:0c:e4:bd:99:
8f:94:07:f3:40:15:57:ec:da:e6:61:b2:27:e8:4d:e7:2c:96:
19:b6:bf:53:f9:d6:b6:9d:f6:9d:15:97:38:cc:46:84:3f:89:
ea:d4:c9:3c:bb:d6:26:64:61:ae:a5:0b:b9:7f:e8:47:9b:e9:
07:1c:f2:3e:71:ec:90:3c:04:00:ce:4a:bf:7c:35:bb:7e:d8:
41:1a:f1:59:0a:f7:44:41:bd:8b:a5:b9:91:36:2a:4a:50:09:
cb:18:c3:54:80:57:e1:40:ce:28:7c:00:49:ab:a5:38:b6:cf:
b1:7a:32:d6:a7:55:69:ab:f7:88:85:13:2d:8c:c2:44:c9:fe:
4e:8a:ae:a9:da:c8:67:5a:69:dd:82:27:7e:a7:a2:16:cb:fe:
3c:3d:41:38:b6:60:1a:54:be:cb:f7:d9:b1:ea:32:01:c9:85:
2e:93:e9:17:47:f6:18:f2:f3:09:41:a7:34:c4:0b:c6:6c:c6:
1a:57:03:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNWfiIBbqv6kGs6FHcURpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2
OGRmM2MwHhcNMjUwODA5MTkwMTE1WhcNMjUwODEwMTkwMTE1WjAzMTEwLwYDVQQD
EyhmZGY0ZTg1OTYxZWVmNDQwNWQ0OGYwMGQ1ZGY0Mzk5ZWNmMjI0OGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcSMaCq9jfbwEqIinlpbZDCBbYFf
pfRgfu82xH89zHnbjrQ15l62DYhdX/hxHX9HJtYH1MSnlD/hLvgMbUyIZTNW2W3j
9mtKEymVkajVKPCbbU8xANidbwTOuhS/QI6koMjs7GhBHlqlE2gmHYVqkMhqF2vH
qe90IMdC0VaRFmB4LL6kHigZAJHPLnCk1AUNIeJk/FgtnM52oxl4a1omBKNtY0tg
rDkKVlmHSBl1Tix6CjKQ+LI/qndX8Uwgo59JxJxQDqJSxfBflfjqkphOLtgcQBNc
AUdabhcJb5BulXyjJuC9rYl30bGuYF4PpBAE07gkPz0/SbCzeSYTm5bnSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP306Flh7vRAXUjwDV30OZ7PIkjfMB8GA1UdIwQY
MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt
MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll
LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXA8/z978
CDDT3Uy0NNZmjAQYUKRRqW3nxRNgHKGVHPl2lqk9LfBuGxOQwfq04doCEGr6QEB/
qtkkEASfDhqmdEsinJQM5L2Zj5QH80AVV+za5mGyJ+hN5yyWGba/U/nWtp32nRWX
OMxGhD+J6tTJPLvWJmRhrqULuX/oR5vpBxzyPnHskDwEAM5Kv3w1u37YQRrxWQr3
REG9i6W5kTYqSlAJyxjDVIBX4UDOKHwASaulOLbPsXoy1qdVaav3iIUTLYzCRMn+
ToquqdrIZ1pp3YInfqeiFsv+PD1BOLZgGlS+y/fZseoyAcmFLpPpF0f2GPLzCUGn
NMQLxmzGGlcDYg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:45:26 2025 by rpki-client