Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: owaLmH6ykZ4gqXaTe/ZcEkELzHgK0dUAPgsYexkvGoU=
Subject key identifier: 2A:4D:57:8D:0A:3F:E1:19:69:C7:98:1D:2D:93:F4:29:0D:5F:05:43
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 019963FEB438FD6A90F16D7FA219BA84F416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 0844
Signing time: Fri 19 Sep 2025 22:01:00 +0000
Manifest this update: Fri 19 Sep 2025 22:01:00 +0000
Manifest next update: Sat 20 Sep 2025 22:01:00 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: vPOTo8BY9IKLfFBa94ySflo2q5DUMVswqe3sMO0gcNA=)
2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=)
3: YiC719RdgSFZ3ft_dlKu9o3i3pA.roa (hash: Yo7K99mDy+e+tmI8kgteWK6dTlsGJMqoxxHo0QV2Flg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:63:fe:b4:38:fd:6a:90:f1:6d:7f:a2:19:ba:84:f4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Sep 19 22:01:00 2025 GMT
Not After : Sep 20 22:01:00 2025 GMT
Subject: CN=2a4d578d0a3fe11969c7981d2d93f4290d5f0543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:b6:01:24:9c:44:b3:0e:51:03:13:56:c5:
1f:ba:6f:27:34:f2:c1:45:61:f5:22:f0:88:ef:3d:
ed:1d:33:9a:d2:2b:d9:41:74:17:24:a1:a7:00:3b:
e7:48:c3:2a:26:bf:2e:70:25:e1:db:4a:bd:65:5f:
05:73:ac:9b:b2:f6:5f:67:0b:e2:c5:f4:18:fc:5d:
60:3c:53:7a:ea:3d:9c:a2:2b:c9:c0:a7:01:eb:b3:
3d:55:b7:bb:a7:85:d8:c9:f9:24:fe:94:4c:10:2e:
e8:bf:38:da:d9:7c:6f:f1:cd:ff:0e:26:f3:2a:48:
e6:34:2e:f1:4b:33:de:ee:85:5c:f0:ea:ac:04:6c:
4e:00:89:db:b8:8a:28:ea:66:bf:f8:1a:a0:f2:6a:
7a:43:76:a3:cb:ab:2f:1a:19:6c:4e:94:82:c2:3d:
91:fa:6f:44:52:79:51:47:89:08:7a:22:08:fd:fd:
d3:ae:d4:a8:ed:a5:8e:ec:7c:82:87:fa:a2:41:74:
5f:28:39:2c:d5:40:46:41:d4:c4:19:55:e2:f7:04:
97:14:6e:00:a4:1a:f7:db:ed:98:1b:29:12:ca:4c:
78:52:6c:72:25:02:95:36:99:df:48:3a:1b:b8:81:
8d:6b:8d:ab:e6:de:d9:2b:87:14:f7:74:e4:e1:3e:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4D:57:8D:0A:3F:E1:19:69:C7:98:1D:2D:93:F4:29:0D:5F:05:43
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:5a:58:fc:bd:f3:fd:dc:bf:b3:13:b1:9b:32:12:5c:b5:e3:
aa:d3:e0:10:75:d3:d9:f0:16:98:cd:dd:8e:4a:43:21:a2:9c:
5a:39:b2:08:e9:48:79:e9:ce:92:7e:dd:17:65:61:fc:95:b1:
ab:b2:a4:3e:f9:1d:f1:fe:7d:e7:41:83:e1:5b:f7:86:3c:57:
63:9b:4d:a3:39:f2:eb:ec:9e:58:63:b6:88:5d:25:aa:6c:dc:
cf:5d:52:60:fa:b2:2a:7a:47:79:0a:5c:c4:57:c6:9d:33:3e:
03:4e:84:83:fd:72:bf:7f:54:60:de:05:57:35:e1:d5:71:c0:
8d:da:d4:02:17:80:5c:41:06:25:04:a1:0f:dd:8c:9f:d4:f8:
d7:92:9d:3a:26:90:c4:d2:5e:e7:23:a5:8b:5d:fa:b6:d5:58:
23:64:65:f0:f4:f0:80:31:d4:88:03:ea:dc:83:f3:84:fd:38:
31:bb:80:53:ad:36:11:dc:55:12:82:88:9a:1d:f1:b0:94:ba:
ca:7f:69:0f:28:6a:f7:41:e1:a2:47:f5:9f:1d:79:45:01:55:
e7:ca:32:ae:37:d4:4a:33:59:5e:b3:7f:04:3c:b9:1b:26:14:
3b:84:bf:a8:a3:d6:39:9c:ce:46:54:fb:80:49:ea:a4:1c:ca:
4c:69:f3:c4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZlj/rQ4/WqQ8W1/ohm6hPQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTZlNWU4NjAyM2M5YjMxNGVlNjUxMjkxZmFmZThjNmRk
NjlhODMwHhcNMjUwOTE5MjIwMTAwWhcNMjUwOTIwMjIwMTAwWjAzMTEwLwYDVQQD
EygyYTRkNTc4ZDBhM2ZlMTE5NjljNzk4MWQyZDkzZjQyOTBkNWYwNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1+2ASScRLMOUQMTVsUfum8nNPLB
RWH1IvCI7z3tHTOa0ivZQXQXJKGnADvnSMMqJr8ucCXh20q9ZV8Fc6ybsvZfZwvi
xfQY/F1gPFN66j2coivJwKcB67M9Vbe7p4XYyfkk/pRMEC7ovzja2Xxv8c3/Dibz
KkjmNC7xSzPe7oVc8OqsBGxOAInbuIoo6ma/+Bqg8mp6Q3ajy6svGhlsTpSCwj2R
+m9EUnlRR4kIeiII/f3TrtSo7aWO7HyCh/qiQXRfKDks1UBGQdTEGVXi9wSXFG4A
pBr32+2YGykSykx4UmxyJQKVNpnfSDobuIGNa42r5t7ZK4cU93Tk4T5wLQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCpNV40KP+EZaceYHS2T9CkNXwVDMB8GA1UdIwQY
MBaAFPqm5ehgI8mzFO5lEpH6/oxt1pqDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xYmw2R0FqeWJNVTdtVVNrZnItakczV21vTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMw
LTA4Mjc5NDU1Zjk0MS8xLzEtcWJsNkdBanliTVU3bVVTa2ZyLWpHM1dtb00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAwL2MwNGQ5OS1kZTQ0LTQwYWItYTJjMC0wODI3OTQ1NWY5
NDEvMS8xLXFibDZHQWp5Yk1VN21VU2tmci1qRzNXbW9NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2FpY
/L3z/dy/sxOxmzISXLXjqtPgEHXT2fAWmM3djkpDIaKcWjmyCOlIeenOkn7dF2Vh
/JWxq7KkPvkd8f5950GD4Vv3hjxXY5tNozny6+yeWGO2iF0lqmzcz11SYPqyKnpH
eQpcxFfGnTM+A06Eg/1yv39UYN4FVzXh1XHAjdrUAheAXEEGJQShD92Mn9T415Kd
OiaQxNJe5yOli136ttVYI2Rl8PTwgDHUiAPq3IPzhP04MbuAU602EdxVEoKImh3x
sJS6yn9pDyhq90Hhokf1nx15RQFV58oyrjfUSjNZXrN/BDy5GyYUO4S/qKPWOZzO
RlT7gEnqpBzKTGnzxA==
-----END CERTIFICATE-----
Generated at Sat Sep 20 02:10:47 2025 by rpki-client