Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: EWjPuuEBTa3r5FJFO5EBG1ma6gp17/nkQID2rc1CrNk=
Subject key identifier: F3:56:9F:CA:62:9E:29:65:3A:48:98:70:1A:79:E4:26:F1:18:B0:17
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 01988BB37D9E528D045949B32ABD7BF3625F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 22:00:52 +0000
Manifest this update: Fri 08 Aug 2025 22:00:52 +0000
Manifest next update: Sat 09 Aug 2025 22:00:52 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: KYip4+BfHepthXxa2ZPiJRSPkCqaOVfFAbnObrwbKHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:7d:9e:52:8d:04:59:49:b3:2a:bd:7b:f3:62:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Aug 8 22:00:52 2025 GMT
Not After : Aug 9 22:00:52 2025 GMT
Subject: CN=f3569fca629e29653a4898701a79e426f118b017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:71:6a:7d:87:53:65:a5:05:30:b9:a5:23:
1e:4c:16:70:c3:6d:f3:d8:f3:a6:b7:b3:74:f1:dc:
9e:41:56:d3:a8:92:69:cd:c8:3a:da:d4:f4:6a:31:
10:9a:ac:d9:b8:ea:f7:82:74:e6:34:62:29:4a:ba:
ed:f4:95:82:27:05:7c:99:4c:a5:bc:ca:4c:3e:39:
ef:b7:5e:10:96:ad:bb:0a:27:d5:f6:b6:10:e9:64:
80:f7:ee:44:43:23:be:c4:ae:2d:99:e3:07:00:ef:
c8:38:72:71:92:e4:2e:bc:cb:bb:75:ad:92:2b:db:
bc:bc:9c:a6:27:67:e9:5f:a7:a8:10:9a:33:f0:45:
80:1c:52:ce:db:18:a0:72:99:60:0c:5a:ab:7b:c3:
72:41:e6:aa:ca:4a:71:da:49:fd:0c:ca:07:ef:5a:
a0:6f:c3:4e:a1:5e:1a:12:03:13:3b:95:68:70:ea:
a3:97:08:e5:3a:d6:a6:cb:e6:7a:7e:fd:0d:20:19:
6a:dd:db:fc:dd:b9:42:5a:c7:e6:c7:4f:cc:8b:6b:
33:96:0b:cc:d9:e6:2b:77:3f:b9:1f:47:7c:c5:d6:
19:62:41:f7:1f:4d:fe:b4:bc:da:d0:9a:91:be:44:
b9:e4:ea:68:fe:e5:c9:0a:4b:c8:86:ec:d2:61:96:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:56:9F:CA:62:9E:29:65:3A:48:98:70:1A:79:E4:26:F1:18:B0:17
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2a:29:61:27:2c:f5:66:36:51:ee:f8:8c:c5:9a:a6:c2:67:
18:f8:91:b1:8a:03:a8:0f:a4:11:80:32:fd:16:eb:cd:8b:35:
ce:f8:1e:cf:93:f5:5f:86:1b:94:6b:20:5f:5b:84:2c:3e:4d:
59:38:6b:3a:87:fa:3f:44:d6:bb:07:e2:a0:15:f0:33:6d:05:
91:d3:4a:2e:fe:b3:a7:37:a6:ea:dd:c5:18:4e:67:da:19:93:
f2:73:d0:9b:5e:fb:19:37:42:b3:f4:97:bf:82:f4:36:9c:3a:
0c:0a:d3:91:f4:24:4e:38:d1:96:16:c0:01:c4:0c:3f:ba:99:
61:00:b2:b4:88:d5:d1:d8:9d:c0:fd:82:b8:a5:96:70:fb:fa:
85:a0:05:01:83:82:9f:84:66:32:2a:82:77:68:e2:64:00:c5:
c8:65:a4:2d:97:ec:2c:07:24:ec:f9:db:72:2b:7d:b5:41:dc:
72:36:94:9a:60:1e:2d:d2:42:e5:09:5d:f0:63:01:75:40:30:
cd:49:d4:8b:9e:d1:a6:6c:f6:3f:a1:ec:bd:8d:9a:a2:20:b4:
f4:38:fb:b2:f8:bf:53:27:20:25:f8:ae:d0:ed:61:55:6c:b5:
40:2f:ce:4b:c7:8f:77:e3:8d:d5:8f:79:0f:bc:66:f1:c9:6d:
be:1f:09:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs32eUo0EWUmzKr1782JfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OTZjMWUxNGM4NmU2ZWY1YjE2NzI0ZjcxMTc2NzZlYzcy
MTQ5NTcwHhcNMjUwODA4MjIwMDUyWhcNMjUwODA5MjIwMDUyWjAzMTEwLwYDVQQD
EyhmMzU2OWZjYTYyOWUyOTY1M2E0ODk4NzAxYTc5ZTQyNmYxMThiMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMdxan2HU2WlBTC5pSMeTBZww23z
2POmt7N08dyeQVbTqJJpzcg62tT0ajEQmqzZuOr3gnTmNGIpSrrt9JWCJwV8mUyl
vMpMPjnvt14Qlq27CifV9rYQ6WSA9+5EQyO+xK4tmeMHAO/IOHJxkuQuvMu7da2S
K9u8vJymJ2fpX6eoEJoz8EWAHFLO2xigcplgDFqre8NyQeaqykpx2kn9DMoH71qg
b8NOoV4aEgMTO5VocOqjlwjlOtamy+Z6fv0NIBlq3dv83blCWsfmx0/Mi2szlgvM
2eYrdz+5H0d8xdYZYkH3H03+tLza0JqRvkS55Opo/uXJCkvIhuzSYZYYVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNWn8pinillOkiYcBp55CbxGLAXMB8GA1UdIwQY
MBaAFKiWweFMhubvWxZyT3EXZ27HIUlXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQt
MTRhMDgyNWI1MjkxLzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8wODk2YjItZjgwOS00ZjFkLTliOTQtMTRhMDgyNWI1Mjkx
LzEvcUpiQjRVeUc1dTliRm5KUGNSZG5ic2NoU1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSopYScs
9WY2Ue74jMWapsJnGPiRsYoDqA+kEYAy/RbrzYs1zvgez5P1X4YblGsgX1uELD5N
WThrOof6P0TWuwfioBXwM20FkdNKLv6zpzem6t3FGE5n2hmT8nPQm177GTdCs/SX
v4L0Npw6DArTkfQkTjjRlhbAAcQMP7qZYQCytIjV0didwP2CuKWWcPv6haAFAYOC
n4RmMiqCd2jiZADFyGWkLZfsLAck7Pnbcit9tUHccjaUmmAeLdJC5Qld8GMBdUAw
zUnUi57Rpmz2P6HsvY2aoiC09Dj7svi/UycgJfiu0O1hVWy1QC/OS8ePd+ON1Y95
D7xm8cltvh8JZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:51:24 2025 by rpki-client