Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: BFYr7StS133wTyx0sKIGe3WIg60ok5a5bWjYNDBEmcA=
Subject key identifier: EC:13:A7:95:A9:C0:58:F5:36:BF:DA:88:27:C6:0F:14:14:B1:0F:40
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 01988BB3F7364E311B8AFAF3C0EE54A93AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1684
Signing time: Fri 08 Aug 2025 22:01:23 +0000
Manifest this update: Fri 08 Aug 2025 22:01:23 +0000
Manifest next update: Sat 09 Aug 2025 22:01:23 +0000
Files and hashes: 1: B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa (hash: towVudD3ZHXUrLOMltR/8PyVnF7v/kv+y5JbOeuwBgs=)
2: QIAcGzg1E-mkwGlMwIaZKUybW5U.roa (hash: vPFlVcoFxwCs0hnXKdVw9v7+IGUFGVEz3iANXdrxvec=)
3: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: 4TCwY1ZwOdCu07muxnX/PDenZxIIYtLA1Ch6pNsgHAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:f7:36:4e:31:1b:8a:fa:f3:c0:ee:54:a9:3a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Aug 8 22:01:23 2025 GMT
Not After : Aug 9 22:01:23 2025 GMT
Subject: CN=ec13a795a9c058f536bfda8827c60f1414b10f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:33:05:79:4c:b5:2b:c1:0b:1f:39:06:cb:
92:14:10:e3:14:59:08:e4:0f:e5:5e:4c:1d:40:dc:
ec:42:ea:8c:dd:cd:87:d0:e4:15:28:df:9a:7e:09:
bf:72:dd:d5:fc:f3:85:87:ea:f9:24:69:8d:d1:3d:
90:09:2b:f9:3d:5e:31:80:33:e1:ef:3d:ca:ba:23:
9b:2e:c6:1d:ac:61:a1:73:1a:90:23:a9:35:7b:e2:
01:5c:f0:0e:58:ad:48:13:3d:bc:97:2c:56:1a:7c:
55:c7:07:ca:dd:8a:10:ef:b8:59:37:f0:e7:eb:a3:
53:ba:28:d1:be:c1:be:0a:a4:d9:c9:c0:44:f5:06:
4e:be:f0:c5:c5:7b:fa:a1:93:3c:81:7c:fb:e8:b2:
90:80:7e:ce:1d:31:8d:47:ef:ea:59:4b:37:28:7c:
00:1e:c6:47:d4:c8:c2:af:12:69:a1:70:0f:28:c6:
1d:89:32:a3:44:d6:f6:d1:ba:63:60:1c:7c:7e:ee:
26:bc:d4:32:f6:93:d1:f9:f7:ab:54:48:f5:ca:8e:
28:eb:4e:3f:20:82:d8:1b:4a:e6:31:5d:17:9c:4e:
1c:a6:24:02:c4:b1:69:49:b2:45:de:1d:8a:8d:48:
03:a5:af:db:dc:7f:82:df:35:62:ed:c0:0c:bd:18:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:A7:95:A9:C0:58:F5:36:BF:DA:88:27:C6:0F:14:14:B1:0F:40
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:92:de:35:8e:3f:41:55:9f:6b:06:c5:ae:f3:bb:b5:26:76:
bd:7d:e9:e9:9a:78:96:f7:25:45:81:2d:c9:bd:00:e6:7c:b9:
1a:c1:25:36:e2:f8:fa:47:6c:b8:4c:21:aa:be:c4:31:a5:e6:
fe:a7:50:db:38:5e:9f:36:21:f2:db:fd:4d:f3:33:ab:63:59:
47:7f:04:da:fe:22:0c:5b:22:aa:61:6f:52:6e:a9:63:c8:52:
4d:7a:3c:2b:55:44:e8:42:d5:77:81:b4:1e:fc:5a:f8:f2:68:
48:a0:bf:c5:79:ff:85:e9:4a:fc:9c:81:00:be:b4:31:6f:f4:
f4:a6:f1:fd:2f:86:30:7a:b9:04:d9:e0:a8:8c:7f:6e:e7:9b:
60:22:31:eb:87:52:3a:ee:fb:05:f8:4c:b0:98:a5:54:07:dd:
e3:4c:1f:93:cd:d7:d9:f4:3d:ce:c1:77:a1:0e:93:a9:d0:6b:
c8:50:e2:10:1b:12:2b:64:9a:32:f9:2a:b2:86:3a:8f:50:b0:
87:3f:49:61:2b:f5:3a:eb:46:7c:0c:84:ea:93:53:ea:c3:b6:
db:bb:9e:21:c4:83:be:7d:b8:7e:f3:e3:b9:ad:7b:51:9a:e9:
c1:9a:5a:4f:8b:02:80:f6:6e:cf:34:50:c0:c6:63:7c:31:e6:
14:94:ae:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs/c2TjEbivrzwO5UqTr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjUwODA4MjIwMTIzWhcNMjUwODA5MjIwMTIzWjAzMTEwLwYDVQQD
EyhlYzEzYTc5NWE5YzA1OGY1MzZiZmRhODgyN2M2MGYxNDE0YjEwZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3YzBXlMtSvBCx85BsuSFBDjFFkI
5A/lXkwdQNzsQuqM3c2H0OQVKN+afgm/ct3V/POFh+r5JGmN0T2QCSv5PV4xgDPh
7z3KuiObLsYdrGGhcxqQI6k1e+IBXPAOWK1IEz28lyxWGnxVxwfK3YoQ77hZN/Dn
66NTuijRvsG+CqTZycBE9QZOvvDFxXv6oZM8gXz76LKQgH7OHTGNR+/qWUs3KHwA
HsZH1MjCrxJpoXAPKMYdiTKjRNb20bpjYBx8fu4mvNQy9pPR+ferVEj1yo4o604/
IILYG0rmMV0XnE4cpiQCxLFpSbJF3h2KjUgDpa/b3H+C3zVi7cAMvRi8+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwTp5WpwFj1Nr/aiCfGDxQUsQ9AMB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopLeNY4/
QVWfawbFrvO7tSZ2vX3p6Zp4lvclRYEtyb0A5ny5GsElNuL4+kdsuEwhqr7EMaXm
/qdQ2zhenzYh8tv9TfMzq2NZR38E2v4iDFsiqmFvUm6pY8hSTXo8K1VE6ELVd4G0
Hvxa+PJoSKC/xXn/helK/JyBAL60MW/09Kbx/S+GMHq5BNngqIx/buebYCIx64dS
Ou77BfhMsJilVAfd40wfk83X2fQ9zsF3oQ6TqdBryFDiEBsSK2SaMvkqsoY6j1Cw
hz9JYSv1OutGfAyE6pNT6sO227ueIcSDvn24fvPjua17UZrpwZpaT4sCgPZuzzRQ
wMZjfDHmFJSuDg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:21 2025 by rpki-client