Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: S1hkB8Gnt9/I28IK5VnyJExnhV/AjKJ4UDL6A1DRJJA=
Subject key identifier: 80:5B:92:BB:B2:97:8D:65:07:D9:24:1C:39:41:6F:7F:E0:FC:3C:55
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 019848C0591AAE420E9FC1E0B1E9FA4D050D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 0F29
Signing time: Sat 26 Jul 2025 22:00:21 +0000
Manifest this update: Sat 26 Jul 2025 22:00:21 +0000
Manifest next update: Sun 27 Jul 2025 22:00:21 +0000
Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: uSb0sP8CH+mq6dvQT1zkRxwgV5jHEWW/X+2zoRwUpRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:59:1a:ae:42:0e:9f:c1:e0:b1:e9:fa:4d:05:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Jul 26 22:00:21 2025 GMT
Not After : Jul 27 22:00:21 2025 GMT
Subject: CN=805b92bbb2978d6507d9241c39416f7fe0fc3c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:65:40:b5:5c:ef:be:21:66:40:db:fd:71:
30:09:b5:e6:86:80:a0:95:cd:4d:91:45:a1:26:e4:
d7:de:0f:dc:a9:15:a5:9d:36:71:6f:3c:31:82:8e:
51:25:71:e4:86:b0:09:8a:b9:31:18:f8:b5:76:5a:
b1:2a:b3:bc:70:bc:58:87:cb:81:1e:67:c2:d5:bb:
4f:90:38:ed:7c:04:ff:ae:60:ec:d9:96:77:82:08:
e2:de:bc:1c:8f:66:38:e1:8c:6e:2c:5f:d5:87:b6:
c4:b5:96:ad:b5:ae:61:76:97:c3:b3:18:8c:41:22:
74:3b:2e:a6:0c:b1:b6:e0:79:16:3f:be:39:0f:89:
a6:42:3f:47:14:09:d2:c0:68:4d:5f:6f:58:a1:8c:
10:ca:c1:ed:b1:68:c7:09:ff:25:15:39:02:06:24:
3b:41:ea:0e:00:ee:53:9e:de:56:31:5f:8f:f6:39:
97:da:5a:1f:f0:1f:36:b0:35:cc:fc:6f:5d:29:a1:
f3:27:be:ed:0d:20:06:6f:11:ec:9d:ed:d7:4d:39:
60:a0:07:fa:14:57:15:77:c5:64:b6:22:17:e2:be:
50:dc:84:4c:68:c1:5b:08:8b:e8:24:00:ef:a1:ca:
77:77:ef:81:88:ec:97:5f:1b:f8:65:5b:fa:81:07:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5B:92:BB:B2:97:8D:65:07:D9:24:1C:39:41:6F:7F:E0:FC:3C:55
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e7:31:06:66:6e:b2:6e:5b:07:07:66:b2:16:fd:5f:fd:71:
ba:17:df:62:77:63:06:39:b3:44:9d:8a:d0:63:83:46:f9:7a:
06:d0:00:2a:15:4a:f3:72:36:dc:db:57:bb:30:1a:90:98:76:
9b:66:08:17:66:da:48:6e:70:43:84:70:df:41:2d:21:8a:a5:
7c:9e:f5:79:d4:ce:a8:1d:47:33:44:76:2e:94:8d:a4:6a:49:
b4:50:c0:8f:7e:1e:02:8b:45:9e:67:59:17:33:9b:00:01:c5:
a7:82:ed:1d:2b:3e:10:6f:72:2d:60:16:a9:5b:98:2c:72:d0:
e8:75:b7:5f:76:f7:b5:54:ed:82:8a:7f:92:c5:b3:3e:ee:2b:
7c:65:3d:c4:f6:cf:95:9e:e2:fe:aa:db:35:e2:26:cf:aa:fc:
95:89:91:60:fe:6e:c1:44:b6:2b:de:f4:00:36:6f:fc:81:a8:
bf:cc:1b:94:80:32:ad:48:40:f5:af:ad:d4:3b:b3:82:7b:73:
9a:53:4e:91:49:d6:95:b2:a8:47:e4:a3:6a:e0:96:8c:f6:fb:
3f:cf:9c:60:bf:3b:34:af:8e:8a:82:4c:4e:58:0b:03:d2:21:
be:b2:31:a1:2a:21:17:db:35:f7:87:4f:d4:ef:a6:8d:fd:3f:
59:0b:a5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwFkarkIOn8Hgsen6TQUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNWMzZjFhOTc5MDNlNzk2MjkyYTJhYzdhNzhkNDFiMWMy
MWRiODUwHhcNMjUwNzI2MjIwMDIxWhcNMjUwNzI3MjIwMDIxWjAzMTEwLwYDVQQD
Eyg4MDViOTJiYmIyOTc4ZDY1MDdkOTI0MWMzOTQxNmY3ZmUwZmMzYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvllQLVc774hZkDb/XEwCbXmhoCg
lc1NkUWhJuTX3g/cqRWlnTZxbzwxgo5RJXHkhrAJirkxGPi1dlqxKrO8cLxYh8uB
HmfC1btPkDjtfAT/rmDs2ZZ3ggji3rwcj2Y44YxuLF/Vh7bEtZatta5hdpfDsxiM
QSJ0Oy6mDLG24HkWP745D4mmQj9HFAnSwGhNX29YoYwQysHtsWjHCf8lFTkCBiQ7
QeoOAO5Tnt5WMV+P9jmX2lof8B82sDXM/G9dKaHzJ77tDSAGbxHsne3XTTlgoAf6
FFcVd8VktiIX4r5Q3IRMaMFbCIvoJADvocp3d++BiOyXXxv4ZVv6gQdI2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBbkruyl41lB9kkHDlBb3/g/DxVMB8GA1UdIwQY
MBaAFENcPxqXkD55YpKirHp41BscIduFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEt
ZGJkZWIzZDUzNjBiLzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9kOGFkYmUtZGNiZS00YzI3LTk2NzEtZGJkZWIzZDUzNjBi
LzEvUTF3X0dwZVFQbmxpa3FLc2VualVHeHdoMjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+cxBmZu
sm5bBwdmshb9X/1xuhffYndjBjmzRJ2K0GODRvl6BtAAKhVK83I23NtXuzAakJh2
m2YIF2baSG5wQ4Rw30EtIYqlfJ71edTOqB1HM0R2LpSNpGpJtFDAj34eAotFnmdZ
FzObAAHFp4LtHSs+EG9yLWAWqVuYLHLQ6HW3X3b3tVTtgop/ksWzPu4rfGU9xPbP
lZ7i/qrbNeImz6r8lYmRYP5uwUS2K970ADZv/IGov8wblIAyrUhA9a+t1Duzgntz
mlNOkUnWlbKoR+SjauCWjPb7P8+cYL87NK+OioJMTlgLA9IhvrIxoSohF9s194dP
1O+mjf0/WQuldQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:06 2025 by rpki-client