Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
File: qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft (raw, json)
Hash identifier: UHpe6dCNEoa/3gn/LL1WaloA8aXghMdU62M8DftoI0s=
Subject key identifier: 09:61:10:46:91:2C:86:B3:D4:2B:9C:D0:88:D4:8B:5A:FB:26:B2:FF
Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Certificate serial: 019896A4D422DE5B465F68B0201FD9BEF9E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
Manifest number: 15E9
Signing time: Mon 11 Aug 2025 01:00:41 +0000
Manifest this update: Mon 11 Aug 2025 01:00:41 +0000
Manifest next update: Tue 12 Aug 2025 01:00:41 +0000
Files and hashes: 1: HXTmIJpOXUBrZETa5KpoNsj5ios.roa (hash: wT1yK/NZUtAafpXAtOvFbXEAE831pb+X4Lo1DKNHxx4=)
2: qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl (hash: rV9bHEZ0Ah7uU/6LS0HK5Jquovj68jH0rLxv0zDRuyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:d4:22:de:5b:46:5f:68:b0:20:1f:d9:be:f9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4
Validity
Not Before: Aug 11 01:00:41 2025 GMT
Not After : Aug 12 01:00:41 2025 GMT
Subject: CN=09611046912c86b3d42b9cd088d48b5afb26b2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:35:97:47:14:31:cc:f0:23:91:f7:79:c1:
49:3e:88:ce:02:8b:dd:05:75:0a:22:32:61:9b:ac:
32:c8:fb:81:22:37:11:64:36:87:de:41:07:5c:90:
d3:55:2c:21:87:0d:1c:f5:c7:91:a8:ac:93:cf:75:
97:3a:7b:fa:59:34:20:06:d6:c3:a2:6f:13:ae:b6:
37:24:de:e0:8d:0f:18:42:72:f1:20:c9:44:7f:22:
14:99:eb:c3:cd:9a:9b:b0:9f:bf:99:e2:c2:b4:b5:
dd:e2:b3:99:f6:87:7b:24:15:9e:c3:da:27:07:35:
54:a4:5d:f2:43:9e:87:f9:ee:b4:ea:d2:f4:00:9a:
1e:f3:09:87:47:0b:a8:b8:03:15:98:99:82:5b:36:
f9:53:60:31:f7:df:d8:39:80:b6:2b:e7:e4:81:f7:
28:ce:3a:cd:fa:92:f3:dc:c8:ac:10:e7:1b:8d:ee:
c8:84:a3:e5:e2:af:b3:9c:bc:e8:3e:ad:33:4a:5a:
7f:e0:5c:a1:1c:ec:2a:e4:42:97:48:19:0c:f7:1f:
64:fa:c1:23:9f:17:66:d0:48:48:c7:fd:4c:9b:5b:
f2:0c:44:ac:33:da:f6:f6:c6:2e:f2:05:c5:ae:26:
4d:71:ce:95:66:b5:4f:8d:1d:91:dd:c5:6e:d7:08:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:10:46:91:2C:86:B3:D4:2B:9C:D0:88:D4:8B:5A:FB:26:B2:FF
X509v3 Authority Key Identifier:
keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:46:d3:25:3d:13:d6:6e:bb:f8:57:de:6d:40:8b:70:c8:24:
e6:63:08:84:f9:a7:48:e4:09:5e:39:c6:26:6f:2d:79:94:55:
cb:11:2f:d5:c2:3f:d8:ea:09:ee:2a:7a:8d:ac:f2:33:87:05:
e7:10:6c:8b:33:99:18:b9:0f:cb:43:31:bb:ce:f5:ee:fd:75:
d9:93:fb:e4:53:44:f0:6d:36:c7:74:ad:5d:81:6b:55:8a:5c:
23:4a:e7:7b:46:ba:57:97:d8:f4:48:6e:71:e3:54:d8:c8:40:
cf:7b:95:48:17:e3:35:25:c3:d9:5c:b1:e1:95:00:13:07:23:
c7:9c:e0:11:bc:d2:bb:c0:10:c2:d7:29:5e:52:55:7d:5f:41:
1a:24:a7:d9:e2:70:f0:11:63:84:19:74:2c:0b:98:25:8a:ae:
16:fb:bc:c2:8b:ef:5f:dd:6d:17:88:d8:e3:37:a6:c5:4e:ef:
90:76:4d:34:9d:e6:bc:29:88:67:c4:f8:34:87:a3:07:99:b0:
c2:c0:2f:3c:1e:3c:24:fe:ec:2e:50:a0:85:cc:d7:b2:b1:b4:
0e:8d:93:66:f0:59:ad:27:dc:f6:c9:6b:73:5a:a7:0f:51:dc:
35:7b:2f:d6:9d:bb:de:da:d1:de:6f:31:14:f4:d6:90:f8:d4:
30:0f:69:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpNQi3ltGX2iwIB/ZvvnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDBiYTYzOWU2NWRiZGNjNjkwZjU4YTVhNzQwNjQxYjRm
Zjg4ZDQwHhcNMjUwODExMDEwMDQxWhcNMjUwODEyMDEwMDQxWjAzMTEwLwYDVQQD
EygwOTYxMTA0NjkxMmM4NmIzZDQyYjljZDA4OGQ0OGI1YWZiMjZiMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFw1l0cUMczwI5H3ecFJPojOAovd
BXUKIjJhm6wyyPuBIjcRZDaH3kEHXJDTVSwhhw0c9ceRqKyTz3WXOnv6WTQgBtbD
om8TrrY3JN7gjQ8YQnLxIMlEfyIUmevDzZqbsJ+/meLCtLXd4rOZ9od7JBWew9on
BzVUpF3yQ56H+e606tL0AJoe8wmHRwuouAMVmJmCWzb5U2Ax99/YOYC2K+fkgfco
zjrN+pLz3MisEOcbje7IhKPl4q+znLzoPq0zSlp/4FyhHOwq5EKXSBkM9x9k+sEj
nxdm0EhIx/1Mm1vyDESsM9r29sYu8gXFriZNcc6VZrVPjR2R3cVu1wjPQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlhEEaRLIaz1Cuc0IjUi1r7JrL/MB8GA1UdIwQY
MBaAFKgAumOeZdvcxpD1ilp0BkG0/4jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAt
OGRiMGVmYjU2MjBhLzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAtOGRiMGVmYjU2MjBh
LzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0bTJT0T
1m67+FfebUCLcMgk5mMIhPmnSOQJXjnGJm8teZRVyxEv1cI/2OoJ7ip6jazyM4cF
5xBsizOZGLkPy0Mxu8717v112ZP75FNE8G02x3StXYFrVYpcI0rne0a6V5fY9Ehu
ceNU2MhAz3uVSBfjNSXD2Vyx4ZUAEwcjx5zgEbzSu8AQwtcpXlJVfV9BGiSn2eJw
8BFjhBl0LAuYJYquFvu8wovvX91tF4jY4zemxU7vkHZNNJ3mvCmIZ8T4NIejB5mw
wsAvPB48JP7sLlCghczXsrG0Do2TZvBZrSfc9slrc1qnD1HcNXsv1p273trR3m8x
FPTWkPjUMA9plA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:50 2025 by rpki-client