Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: gQZnOwWQae2BKlxP9akbPTj3iY8WPYmsWeaQ6k7m/7g=
Subject key identifier: 89:36:49:83:07:AB:C7:2D:24:07:C9:A8:ED:8D:96:EB:58:13:19:0D
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 0199571F8B95CCEB904B702DF3E4CE1AA739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0F90
Signing time: Wed 17 Sep 2025 10:01:49 +0000
Manifest this update: Wed 17 Sep 2025 10:01:49 +0000
Manifest next update: Thu 18 Sep 2025 10:01:49 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: U++WlNaHZeuNDCpdWdDfR1HFCU2t+5U0ijDtN4quFuc=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 10:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:1f:8b:95:cc:eb:90:4b:70:2d:f3:e4:ce:1a:a7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Sep 17 10:01:49 2025 GMT
Not After : Sep 18 10:01:49 2025 GMT
Subject: CN=8936498307abc72d2407c9a8ed8d96eb5813190d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:a6:76:ab:8e:a3:76:09:3a:a4:e3:c4:f3:
f6:31:1b:8c:dc:c0:ea:ba:09:b8:c9:b9:bb:b2:f9:
36:1c:98:1b:0e:e6:dd:0f:b6:dd:48:d2:84:46:da:
80:6d:8a:14:13:23:e5:6e:02:79:a8:dc:ea:18:c1:
fc:2f:c8:0c:1b:ce:0e:04:d5:d4:39:ae:30:0b:c4:
ba:a7:4e:e4:51:11:c4:e6:d4:18:34:5b:f2:13:e4:
5b:43:df:63:b0:1c:52:60:c6:18:4f:ed:6d:8b:93:
9d:ea:91:4e:fe:18:34:4e:79:bb:81:a3:e6:67:97:
9b:e6:8b:af:e3:a1:7f:e2:01:e9:5a:ab:52:99:8a:
a1:40:57:8d:48:b4:6c:77:32:6d:1c:1b:c0:7b:88:
11:c4:b5:04:aa:7c:5b:69:18:4e:70:6e:0f:19:85:
09:b3:47:da:cb:56:f9:98:c8:a8:d6:c0:3e:b2:91:
96:c8:cb:63:4a:50:41:09:23:11:ff:44:49:fd:3e:
4d:20:98:6c:0c:03:06:c5:dc:06:12:ff:36:58:ec:
cf:e8:74:16:6b:6b:24:de:43:9d:01:ce:ad:2f:97:
8a:d7:07:96:6c:92:54:3e:3e:5f:36:5a:06:b7:ce:
f2:ca:5a:2c:db:d9:f4:f3:f6:01:18:ee:62:21:e5:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:36:49:83:07:AB:C7:2D:24:07:C9:A8:ED:8D:96:EB:58:13:19:0D
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b8:5c:f4:c4:46:c0:8d:e0:67:d5:4d:4f:56:fc:dc:40:84:
fc:a4:dc:8c:be:a3:5f:9f:f1:be:82:96:14:14:a2:18:a6:78:
64:f6:a9:1f:2d:83:0f:77:70:44:34:fc:56:9d:c0:b4:f5:30:
43:4c:b4:70:d3:4f:fb:38:3a:5c:ff:85:c0:06:4f:2e:67:ee:
0e:d1:a2:f8:b6:39:94:63:61:0f:9c:64:6c:28:c2:b2:b4:c6:
b8:ed:bc:02:5f:2b:7c:34:97:26:3b:63:d3:86:db:db:7e:48:
ef:b4:16:d9:f9:f2:20:28:7e:2a:a6:0a:02:9b:b7:61:90:37:
e7:99:b3:f9:52:63:63:e8:54:59:06:2f:69:17:e6:e8:1f:77:
47:c3:f8:f5:24:00:93:6d:72:10:bf:8b:ce:94:23:12:05:77:
6a:c3:ba:d1:1f:fe:56:51:a3:f6:7e:3e:86:c1:60:30:80:9c:
dd:4f:58:25:e9:0e:07:3b:8d:aa:9c:1f:fd:89:23:45:f1:7e:
e6:49:7a:3c:3a:23:75:d5:57:c5:08:25:df:e1:83:dc:ab:26:
d1:a0:36:e1:cb:fd:92:1d:df:78:7b:d8:f0:64:85:48:e2:74:
d8:d0:1d:a7:ff:9c:7d:f2:e1:5c:b7:b7:53:40:f8:fe:46:9c:
f5:6e:a7:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlXH4uVzOuQS3At8+TOGqc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MDIwMGEwMDAwZGY1ZDg0NWI5ZGIyODRkMGEyZGJlZTY3
NmM1YTgwHhcNMjUwOTE3MTAwMTQ5WhcNMjUwOTE4MTAwMTQ5WjAzMTEwLwYDVQQD
Eyg4OTM2NDk4MzA3YWJjNzJkMjQwN2M5YThlZDhkOTZlYjU4MTMxOTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9KmdquOo3YJOqTjxPP2MRuM3MDq
ugm4ybm7svk2HJgbDubdD7bdSNKERtqAbYoUEyPlbgJ5qNzqGMH8L8gMG84OBNXU
Oa4wC8S6p07kURHE5tQYNFvyE+RbQ99jsBxSYMYYT+1ti5Od6pFO/hg0Tnm7gaPm
Z5eb5ouv46F/4gHpWqtSmYqhQFeNSLRsdzJtHBvAe4gRxLUEqnxbaRhOcG4PGYUJ
s0fay1b5mMio1sA+spGWyMtjSlBBCSMR/0RJ/T5NIJhsDAMGxdwGEv82WOzP6HQW
a2sk3kOdAc6tL5eK1weWbJJUPj5fNloGt87yylos29n08/YBGO5iIeUrYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk2SYMHq8ctJAfJqO2NlutYExkNMB8GA1UdIwQY
MBaAFKkCAKAADfXYRbnbKE0KLb7mdsWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMt
NThmNTc0NDk1YmI4LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMWUzZTEtOGI3ZC00ZTIyLTg3MGMtNThmNTc0NDk1YmI4
LzEvcVFJQW9BQU45ZGhGdWRzb1RRb3R2dVoyeGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLhc9MRG
wI3gZ9VNT1b83ECE/KTcjL6jX5/xvoKWFBSiGKZ4ZPapHy2DD3dwRDT8Vp3AtPUw
Q0y0cNNP+zg6XP+FwAZPLmfuDtGi+LY5lGNhD5xkbCjCsrTGuO28Al8rfDSXJjtj
04bb235I77QW2fnyICh+KqYKApu3YZA355mz+VJjY+hUWQYvaRfm6B93R8P49SQA
k21yEL+LzpQjEgV3asO60R/+VlGj9n4+hsFgMICc3U9YJekOBzuNqpwf/YkjRfF+
5kl6PDojddVXxQgl3+GD3Ksm0aA24cv9kh3feHvY8GSFSOJ02NAdp/+cffLhXLe3
U0D4/kac9W6nMw==
-----END CERTIFICATE-----
Generated at Wed Sep 17 19:16:33 2025 by rpki-client