Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: XoE+xAL0Yj5fhZ9OHApYvw3kBdloyv/LUc5p7Hm03Y0=
Subject key identifier: 9B:F1:9C:53:AD:EA:D2:A3:5E:6A:58:E5:BD:B2:78:45:05:91:D3:45
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 01988BB35B447645CF56E56B751CC72A56B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 130B
Signing time: Fri 08 Aug 2025 22:00:44 +0000
Manifest this update: Fri 08 Aug 2025 22:00:44 +0000
Manifest next update: Sat 09 Aug 2025 22:00:44 +0000
Files and hashes: 1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=)
2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: 8UM9vwYiGzkI4tkZaP5uvTEWNZr3daGpjcpSzK52Y1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:5b:44:76:45:cf:56:e5:6b:75:1c:c7:2a:56:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Aug 8 22:00:44 2025 GMT
Not After : Aug 9 22:00:44 2025 GMT
Subject: CN=9bf19c53adead2a35e6a58e5bdb278450591d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:7f:97:80:43:d7:91:e3:dc:81:bd:0c:2b:
94:57:30:f4:31:c7:63:0f:67:e1:99:ee:6c:37:ef:
78:a5:79:15:13:bd:8d:19:df:28:e1:1f:e3:49:bb:
0b:0a:36:79:42:46:b0:20:85:6c:ac:a2:36:55:e3:
be:42:cc:46:29:2c:41:f0:19:31:59:ef:0f:8d:03:
c8:32:5b:3e:59:19:4b:06:3e:2f:4f:12:e6:c6:4f:
a7:2e:f7:5e:3d:bc:0a:95:10:ab:43:91:55:ac:1f:
9f:1f:79:66:e3:2f:a5:81:3a:fe:7c:75:5a:30:24:
29:f5:05:59:75:e3:e7:53:b8:fd:f0:04:bc:95:51:
6e:c9:13:9c:83:f9:0b:fa:fb:65:ce:f2:b3:a2:4c:
32:ac:fb:b3:ee:44:27:b6:ff:5f:12:bf:36:b3:ad:
d0:2a:bf:5f:89:32:31:cf:e5:59:aa:2f:36:ea:18:
b6:a3:13:55:5e:28:01:84:8f:b0:aa:58:10:7c:16:
2f:d8:d1:6e:f6:f4:21:2d:34:0c:73:02:33:a7:1f:
79:54:15:89:b2:a1:14:6f:23:e4:5c:45:27:a5:0f:
62:1e:0d:06:76:d3:6f:8d:29:3a:da:01:19:aa:1e:
f5:46:50:53:2d:c1:2e:cc:65:ac:22:50:5d:4c:a5:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:9C:53:AD:EA:D2:A3:5E:6A:58:E5:BD:B2:78:45:05:91:D3:45
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b1:8f:61:41:a0:fc:c6:26:87:ae:9a:0a:72:17:1d:ad:60:
e7:90:b8:74:39:08:6a:44:23:76:f7:ae:8f:a4:bc:e4:d8:d8:
aa:f7:31:0e:25:fb:ba:93:43:e5:44:94:f5:e5:75:e7:05:ba:
58:f0:dc:33:c8:e0:6e:45:52:70:7e:2f:ef:0c:1f:f3:8b:30:
38:04:66:f6:f0:8a:99:29:28:a7:ac:6f:bc:24:08:42:c6:fc:
89:3a:d8:1b:cf:64:9b:4d:72:eb:90:1a:88:a0:27:52:65:0e:
2f:e0:90:01:3b:a6:6e:33:c4:bc:f4:18:7f:29:4b:e1:54:3f:
29:6b:fd:bf:78:8c:02:2b:0c:53:e1:08:15:4f:f8:00:29:d0:
ae:d6:77:e4:e9:9a:f1:07:a7:9f:a9:a5:93:e4:c8:71:a6:9a:
b2:6d:37:6b:56:09:b1:24:08:e9:b2:ff:24:b3:8e:87:16:02:
40:db:15:0e:ca:54:5b:07:8e:90:44:c8:a2:11:ef:6e:9e:48:
24:08:d9:71:b5:8d:72:02:0b:63:72:59:28:05:f3:d3:51:43:
1b:27:50:b9:38:53:a6:01:a9:70:e7:69:f7:0d:89:a2:3a:db:
33:f8:58:a4:6d:ff:58:53:6a:58:c4:84:5b:1f:a0:97:14:53:
d0:1a:6f:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs1tEdkXPVuVrdRzHKla3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOThiNTc3YjIyM2I1YTc2MzUxMjE5YTc0ZmRhNDQ2NzA0
ODkwZjcwHhcNMjUwODA4MjIwMDQ0WhcNMjUwODA5MjIwMDQ0WjAzMTEwLwYDVQQD
Eyg5YmYxOWM1M2FkZWFkMmEzNWU2YTU4ZTViZGIyNzg0NTA1OTFkMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibR/l4BD15Hj3IG9DCuUVzD0Mcdj
D2fhme5sN+94pXkVE72NGd8o4R/jSbsLCjZ5QkawIIVsrKI2VeO+QsxGKSxB8Bkx
We8PjQPIMls+WRlLBj4vTxLmxk+nLvdePbwKlRCrQ5FVrB+fH3lm4y+lgTr+fHVa
MCQp9QVZdePnU7j98AS8lVFuyROcg/kL+vtlzvKzokwyrPuz7kQntv9fEr82s63Q
Kr9fiTIxz+VZqi826hi2oxNVXigBhI+wqlgQfBYv2NFu9vQhLTQMcwIzpx95VBWJ
sqEUbyPkXEUnpQ9iHg0GdtNvjSk62gEZqh71RlBTLcEuzGWsIlBdTKVsrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvxnFOt6tKjXmpY5b2yeEUFkdNFMB8GA1UdIwQY
MBaAFEOYtXeyI7WnY1EhmnT9pEZwSJD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMt
N2JjNDUzNDBkZDI4LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS81ODI2OTUtNjFhMS00OGU3LWI2YWMtN2JjNDUzNDBkZDI4
LzEvUTVpMWQ3SWp0YWRqVVNHYWRQMmtSbkJJa1BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrGPYUGg
/MYmh66aCnIXHa1g55C4dDkIakQjdveuj6S85NjYqvcxDiX7upND5USU9eV15wW6
WPDcM8jgbkVScH4v7wwf84swOARm9vCKmSkop6xvvCQIQsb8iTrYG89km01y65Aa
iKAnUmUOL+CQATumbjPEvPQYfylL4VQ/KWv9v3iMAisMU+EIFU/4ACnQrtZ35Oma
8Qenn6mlk+TIcaaasm03a1YJsSQI6bL/JLOOhxYCQNsVDspUWweOkETIohHvbp5I
JAjZcbWNcgILY3JZKAXz01FDGydQuThTpgGpcOdp9w2JojrbM/hYpG3/WFNqWMSE
Wx+glxRT0Bpv5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:56 2025 by rpki-client