Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: LdaeISdCwqJuGHhYyqAEarkHR7OnCPw9VFMCAvUmsSM=
Subject key identifier: 06:AD:E5:08:0A:65:BA:27:9B:51:08:F5:1E:5C:60:65:5C:BB:3A:B9
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 019848C09DC4B03AF1BF310584DD435667BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 22:00:39 +0000
Manifest this update: Sat 26 Jul 2025 22:00:39 +0000
Manifest next update: Sun 27 Jul 2025 22:00:39 +0000
Files and hashes: 1: fc4brGlD2V9aXaMOkj_E0RZ_J08.roa (hash: OhUlbRmFgYOLeHLw8imL9BrjCyNfPZwGRzxzejrVjWo=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: yRqsFoOLjqaGm3PXZi+PzRV87nDUGjYSPrD8Y/fyPA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:9d:c4:b0:3a:f1:bf:31:05:84:dd:43:56:67:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Jul 26 22:00:39 2025 GMT
Not After : Jul 27 22:00:39 2025 GMT
Subject: CN=06ade5080a65ba279b5108f51e5c60655cbb3ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a1:ef:0e:d8:2a:fe:68:c7:3f:2c:03:67:c3:
e9:d5:11:4f:ea:fd:48:7d:50:26:eb:19:53:08:7e:
da:1f:e7:5e:72:68:6b:d6:7c:8e:79:c3:25:69:da:
61:f7:0b:2f:eb:30:6c:88:24:48:49:26:31:b2:fc:
75:e1:c7:f5:b1:b8:f4:4f:a5:d9:30:7e:47:1a:6d:
b8:c0:ea:e0:cd:2d:5f:1e:98:52:7a:0a:c9:9f:17:
4c:67:55:8a:aa:34:17:27:a6:5a:c6:db:1d:d4:b2:
78:5f:81:f7:05:80:a6:94:6e:b4:97:14:4b:4c:49:
1d:a3:f7:af:70:f7:ed:d4:2d:07:93:5e:72:95:61:
f5:cf:ca:9a:d0:e0:42:2e:c7:ca:cf:d6:cf:7a:51:
1a:5d:84:4b:8d:33:bf:e0:fc:9e:2f:1c:97:c4:b9:
e4:64:32:2e:f7:5d:0a:0a:4c:9c:20:b5:ad:39:3a:
7f:2c:05:0a:01:56:0a:12:c2:ef:d3:73:9c:96:8f:
36:ef:23:b1:d8:08:9f:14:f0:d5:53:bf:f9:70:8d:
79:ce:92:27:b6:16:11:6d:58:dc:83:1a:c0:cc:30:
f6:88:f4:d6:0d:0d:f9:8f:29:10:e3:92:7b:e8:fa:
69:0b:b4:69:b6:36:c1:83:26:b2:a8:50:4b:62:9f:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AD:E5:08:0A:65:BA:27:9B:51:08:F5:1E:5C:60:65:5C:BB:3A:B9
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:91:9e:c8:e8:d8:55:32:f4:31:25:3b:13:15:12:de:68:f4:
20:29:f6:e5:85:9b:ca:c1:a1:f6:de:46:56:cd:d4:ed:8c:78:
6c:0a:06:13:0e:d6:1a:0f:9e:6b:d7:ac:a0:cf:9e:6a:51:9f:
a6:27:a0:1a:82:5e:3c:2e:db:eb:2d:39:fa:e7:3a:46:ad:b1:
75:e5:b4:1c:3e:89:22:7f:37:d5:00:2d:74:23:a8:33:fb:3c:
bc:7c:6b:1d:d3:56:fe:a3:b8:13:96:80:e1:c1:90:05:f7:73:
2a:cd:2d:af:39:41:bb:a2:df:53:98:01:e4:05:04:c9:e1:07:
bd:91:cb:9f:80:ec:1d:90:10:75:39:4a:db:6c:b7:f8:ac:ab:
89:62:d2:b1:8b:38:e0:b8:0c:6e:d0:29:6f:b8:87:d5:18:da:
c9:a9:58:ac:49:2b:b6:53:20:8f:40:aa:99:d4:d3:58:8c:46:
12:13:fe:66:75:0a:1d:55:9f:8b:13:c1:35:58:0e:99:e3:0a:
48:fd:01:b8:ba:32:4c:3a:a0:2a:0b:27:33:22:fd:69:d3:19:
6c:9f:cb:22:ce:84:e9:d2:7d:6b:75:90:38:33:83:ad:0b:a9:
48:5f:08:c5:46:ce:d7:69:9a:9a:e3:76:2d:cb:2e:32:da:da:
83:7f:e6:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwJ3EsDrxvzEFhN1DVme+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTIzNTNkOWJkNWI4YzViNThjYzcxMDIxMzI0YmI5MGRk
MmRkOTEwHhcNMjUwNzI2MjIwMDM5WhcNMjUwNzI3MjIwMDM5WjAzMTEwLwYDVQQD
EygwNmFkZTUwODBhNjViYTI3OWI1MTA4ZjUxZTVjNjA2NTVjYmIzYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qHvDtgq/mjHPywDZ8Pp1RFP6v1I
fVAm6xlTCH7aH+decmhr1nyOecMladph9wsv6zBsiCRISSYxsvx14cf1sbj0T6XZ
MH5HGm24wOrgzS1fHphSegrJnxdMZ1WKqjQXJ6Zaxtsd1LJ4X4H3BYCmlG60lxRL
TEkdo/evcPft1C0Hk15ylWH1z8qa0OBCLsfKz9bPelEaXYRLjTO/4PyeLxyXxLnk
ZDIu910KCkycILWtOTp/LAUKAVYKEsLv03Oclo827yOx2AifFPDVU7/5cI15zpIn
thYRbVjcgxrAzDD2iPTWDQ35jykQ45J76PppC7RptjbBgyayqFBLYp+7LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAat5QgKZbonm1EI9R5cYGVcuzq5MB8GA1UdIwQY
MBaAFKviNT2b1bjFtYzHECEyS7kN0t2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUt
ZWVjNDkwZDUwNmY3LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jYTYyYTEtNGM3Mi00ODFiLTlmMjUtZWVjNDkwZDUwNmY3
LzEvcS1JMVBadlZ1TVcxak1jUUlUSkx1UTNTM1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA25GeyOjY
VTL0MSU7ExUS3mj0ICn25YWbysGh9t5GVs3U7Yx4bAoGEw7WGg+ea9esoM+ealGf
piegGoJePC7b6y05+uc6Rq2xdeW0HD6JIn831QAtdCOoM/s8vHxrHdNW/qO4E5aA
4cGQBfdzKs0trzlBu6LfU5gB5AUEyeEHvZHLn4DsHZAQdTlK22y3+KyriWLSsYs4
4LgMbtApb7iH1RjayalYrEkrtlMgj0CqmdTTWIxGEhP+ZnUKHVWfixPBNVgOmeMK
SP0BuLoyTDqgKgsnMyL9adMZbJ/LIs6E6dJ9a3WQODODrQupSF8IxUbO12mamuN2
LcsuMtrag3/mbQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:49:10 2025 by rpki-client